enterprise-risk

Security Below the OS: Why Device Integrity Is Becoming a Boardroom Topic

John Z Black Mar 21, 2026

Security Operations & Resilience #firmware #supply-chain #eclypsium #device-security #hardware #iot #enterprise-risk

Eclypsium raised $25M for firmware security. A compromised security scanner and ongoing IoT campaigns add context. Enterprise security that stops at the OS is leaving a meaningful gap below it.

Ransomware Is Getting Less Profitable and More Prolific

John Z Black Mar 17, 2026

Threat Intelligence #ransomware #mandiant #threat-intelligence #qilin #akira #wef #enterprise-risk

Mandiant's latest report shows ransomware payments declining while victim counts hit record highs. The ecosystem isn't dying. It's fragmenting faster than defenders can track.

Four Major Companies Still Won't Talk About the Oracle EBS Breach

John Z Black Mar 17, 2026

Policy, Law & Governance #oracle #cl0p #breach #disclosure #governance #sec #enterprise-risk

Broadcom, Bechtel, Estee Lauder, and Abbott Technologies got named in the Cl0p Oracle EBS breach. None have said a word. The silence is becoming its own problem.

Telus Digital Got Breached and Nobody's Talking About What They Actually Handle

John Z Black Mar 13, 2026

Data Breach #telus #breach #outsourcing #ai-training-data #enterprise-risk #canada #third-party

Telus Digital confirmed a data breach after a hacker claimed one petabyte of stolen data. The petabyte number is probably inflated. The real story is what Telus Digital handles on behalf of major enterprise clients.