The Corvus Brief

That cybersecurity budget request about to land on the CFO’s desk is full of acronyms and tool names, and the number probably went up again.

A company can follow its own security procedures and still inherit a breach from the vendor that handles its payroll data.

Ransomware Without Downtime: The Shift to Data Exfiltration and Exposure David Shaw explains that ransomware leverage is shifting from encrypting systems…

There are roughly 35,000 CISOs worldwide serving an estimated 359 million businesses. That 10,000-to-1 ratio is not a hiring problem.

Most executives think the Known Exploited Vulnerabilities catalog is an IT problem.

Your Cloud Counts: Regulators Now Expect It in Inventory and SLAs Key takeaway: If it runs your business, on-prem or cloud or hosted by a vendor, it now…

A clean audit doesn’t tell you whether your company is secure. It tells you something much narrower, and the gap between what the audit answers and what…

A small electronics manufacturer in Illinois submitted a cyber insurance application in April 2022. They checked yes on MFA. Their CEO signed it.

David Shaw examines the most consistently overlooked risk in M&A transactions: inherited cyber exposure. From Yahoo-Verizon to Marriott-Starwood, the pattern is the same — cybersecurity due diligence gets a questionnaire while financial and legal diligence gets exhaustive scrutiny.

Major studios are raising the bar on content security. Smaller production companies now face stricter requirements around access, storage, transfer, and vendor risk management.