ciso guide
NYDFS Part 500 in 2026: What Covered Firms Must Show
NYDFS Part 500 now requires MFA, an asset inventory and a yearly notice by April 15. Here is what covered firms must show and where outside data helps.
Read Article →Tag · 119 Articles
ciso guide. Tagged Articles.
Articles
Page 1 of 12
ciso guide
Vendor Risk Assessment From the Outside In
A vendor risk assessment should not stop at a questionnaire. Here is how to add outside-in evidence, tier vendors and keep the review current.
Read Article →
ciso guide
From Shadow IT to Shadow AI: Clawdbot (Moltbot/Openclaw) and the Rise of Unmanaged Agent Gateways
Shadow AI explained: how unmanaged agents like Clawdbot, Moltbot and OpenClaw hold API keys behind unhardened gateways, with attack scenarios and fixes.
Read Article →
ciso guide
Operation ForumTroll: What Is Confirmed About the Chrome Zero-Day (CVE-2025-2783)
Operation ForumTroll is a name from one vendor report for a 2025 phishing campaign using a Chrome zero-day. See what NVD, Google and CISA confirm.
Read Article →
ciso guide
OldGremlin: A Stealthy Russian-Speaking Ransomware and Espionage Threat Group Evolving Into a Precision Striking APT
OldGremlin is a Russian-speaking, financially motivated group that mixes ransomware with slow APT-style intrusions. See how it attacks and how to defend.
Read Article →
ciso guide
Callisto APT: Russia’s Persistent Espionage Operator
Callisto (COLDRIVER, SEABORGIUM, TA446) profile: espionage active since at least 2015, with credential harvesting, spear-phishing and cloud persistence.
Read Article →
ciso guide
Angry Likho: Inside a Rapidly Growing Espionage Threat Targeting Eastern Europe
Angry Likho is a spear-phishing espionage group also tracked as Sticky Werewolf. See its aliases, tactics, targets and 2025 trends, plus defence tips.
Read Article →
ciso guide
GALLIUM APT: What MITRE ATT&CK Says
GALLIUM is a cyberespionage group MITRE ATT&CK says has been active since at least 2012. See what MITRE confirms, what is unproven and how to defend.
Read Article →
ciso guide
React2Shell — The Day 5 Reality Check
React2Shell (CVE-2025-55182) is a critical React Server Components flaw. See how exploitation grew in the five days after disclosure and what to do.
Read Article →
ciso guide
TraderTraitor: North Korea’s Crypto Heist Machine
TraderTraitor profile (Jade Sleet, UNC4899): North Korea-aligned, part of Lazarus, with crypto theft, trojanized developer tools and supply chain abuse.
Read Article →Brandefense