The Corvus Brief

Technical intelligence, compliance insights, and security leadership perspectives from the practitioners at Corvus.

All Posts Compliance podcast Production Security Program Design Threat Intelligence vCISO
September 30, 2026 · 3 min read
The Leverage is the Data

Ransomware Without Downtime: The Shift to Data Exfiltration and Exposure David Shaw explains that ransomware leverage is shifting from encrypting systems…

Read More →
September 24, 2026 · 4 min read
The $200,000 Gap

There are roughly 35,000 CISOs worldwide serving an estimated 359 million businesses. That 10,000-to-1 ratio is not a hiring problem.

Read More →
September 8, 2026 · 5 min read
Notice Is the New Negligence

Most executives think the Known Exploited Vulnerabilities catalog is an IT problem.

Read More →
May 18, 2026 · 3 min read
Your Compliance Program Is Not a Security Program

A clean audit doesn’t tell you whether your company is secure. It tells you something much narrower, and the gap between what the audit answers and what…

Read More →
May 5, 2026 · 6 min read
Your Cyber Insurance Might Not Pay When You Need It To

A small electronics manufacturer in Illinois submitted a cyber insurance application in April 2022. They checked yes on MFA. Their CEO signed it.

Read More →
April 27, 2026 · 2 min read
The Deal You Didn’t Know You Made

David Shaw examines the most consistently overlooked risk in M&A transactions: inherited cyber exposure. From Yahoo-Verizon to Marriott-Starwood, the pattern is the same — cybersecurity due diligence gets a questionnaire while financial and legal diligence gets exhaustive scrutiny.

Read More →
March 20, 2026 · 11 min read
Why a Fractional CISO Beats a Full‑Time Hire for Growing Companies

Most growing companies already know they “should be doing more” about cybersecurity—but the leap from that realization to hiring a full‑time Chief…

Read More →