The Corvus Brief

Technical intelligence, compliance insights, and security leadership perspectives from the practitioners at Corvus.

All Posts Compliance podcast Production Security Program Design Threat Intelligence vCISO
October 15, 2026 · 2 min read
Before You Approve the 2027 Security Budget

That cybersecurity budget request about to land on the CFO’s desk is full of acronyms and tool names, and the number probably went up again.

Read More →
September 30, 2026 · 3 min read
The Leverage is the Data

Ransomware Without Downtime: The Shift to Data Exfiltration and Exposure David Shaw explains that ransomware leverage is shifting from encrypting systems…

Read More →
September 24, 2026 · 4 min read
The $200,000 Gap

There are roughly 35,000 CISOs worldwide serving an estimated 359 million businesses. That 10,000-to-1 ratio is not a hiring problem.

Read More →
September 8, 2026 · 5 min read
Notice Is the New Negligence

Most executives think the Known Exploited Vulnerabilities catalog is an IT problem.

Read More →
May 18, 2026 · 3 min read
Your Compliance Program Is Not a Security Program

A clean audit doesn’t tell you whether your company is secure. It tells you something much narrower, and the gap between what the audit answers and what…

Read More →
April 27, 2026 · 2 min read
The Deal You Didn’t Know You Made

David Shaw examines the most consistently overlooked risk in M&A transactions: inherited cyber exposure. From Yahoo-Verizon to Marriott-Starwood, the pattern is the same — cybersecurity due diligence gets a questionnaire while financial and legal diligence gets exhaustive scrutiny.

Read More →