Blog Tag
Vulnerability Management
Bank of America Brought In 1,000 Contractors to Fix What AI Found. Scotiabank Named Mythos in Its Filings in May. Bank of America Still Hasn't.
Bank of America added 1,000 contractors to fix flaws an AI found. Its filings never mention it. What the remediation gap means for smaller banks, boards and sponsors.
Executive Risk & Board Advisory
.png)
April's 167 CVEs Were a Governance Failure
April Patch Tuesday shipped 167 CVEs with 14 critical exploitable bugs. The problem isn't patching capacity — it's the governance framework deciding priority.
Threat Intelligence
Patch Tuesday Is a Governance Test
Patch Tuesday is not an IT task — it is a governance test. The 30-day patching SLA, board reporting, and named-officer accountability framework boards now own.
Threat Intelligence
When the Security Tool Becomes the Attack Surface
When the security tool becomes the attack surface: the Microsoft Defender exploit chain, the SentinelOne kernel CVE, and the pattern now common across EDR.
Best Practices