Cybergen Insightshttps://www.cybergensecurity.com/blog Threat intelligence, expert analysis and practical security guidance from Cybergen. Norway Raises Its National Cyber Risk Level to HIGH: What It Means and What to Do Nowhttps://www.cybergensecurity.com/norway-raises-national-cyber-risk-level-to-highhttps://www.cybergensecurity.com/norway-raises-national-cyber-risk-level-to-high Wed, 28 Oct 2026 07:30:00 GMTCyber Security NewsNorway's NSM has raised the national cyber risk level to HIGH. What it means, who is most exposed and how to act on NSM's 21 baseline security measures. From Patchwork to Platform: Why SASE Beats a Stack of Point Solutionshttps://www.cybergensecurity.com/from-patchwork-to-platform-why-sase-beats-a-stack-of-point-solutionshttps://www.cybergensecurity.com/from-patchwork-to-platform-why-sase-beats-a-stack-of-point-solutions Fri, 23 Oct 2026 05:25:10 GMTCloud & Network SecuritySASE vs point solutions: swapping a patchwork of security boxes for one platform gives you one policy and one console. Learn what SASE is and how to migrate. Two Critical PHP Flaws: What Every Website Owner Needs to Knowhttps://www.cybergensecurity.com/two-critical-php-flaws-what-every-website-owner-needs-to-knowhttps://www.cybergensecurity.com/two-critical-php-flaws-what-every-website-owner-needs-to-know Thu, 22 Oct 2026 12:19:50 GMTApplication SecurityTwo critical PHP vulnerabilities let attackers take over web servers without a password. Learn which patched versions to install and what to ask your host. Zero Trust Security: Why It Is Time to Retire the VPN and Rethink Accesshttps://www.cybergensecurity.com/zero-trust-security-why-it-is-time-to-retire-the-vpn-and-rethink-accesshttps://www.cybergensecurity.com/zero-trust-security-why-it-is-time-to-retire-the-vpn-and-rethink-access Fri, 16 Oct 2026 19:25:36 GMTCloud & Network SecurityZero trust vs VPN: VPNs grant broad network access, while zero trust network access verifies every request. Learn the benefits and how to start your move. Beyond the Questionnaire: Evidence-Based Vendor Security Assessment for Security Leadershttps://www.cybergensecurity.com/beyond-the-questionnaire-evidence-based-vendor-security-assessment-for-security-leadershttps://www.cybergensecurity.com/beyond-the-questionnaire-evidence-based-vendor-security-assessment-for-security-leaders Tue, 13 Oct 2026 10:37:23 GMTComplianceHow to assess vendor security with evidence: tier suppliers by impact, validate controls and move to continuous third-party risk management. Approved, Warned or Blocked: A 90-Day Plan to Bring Shadow AI Under Controlhttps://www.cybergensecurity.com/approved-warned-or-blocked-a-90-day-plan-to-bring-shadow-ai-under-controlhttps://www.cybergensecurity.com/approved-warned-or-blocked-a-90-day-plan-to-bring-shadow-ai-under-control Fri, 09 Oct 2026 16:56:05 GMTAI SecurityHow to manage shadow AI without blanket bans: a 90-day plan to find AI tools, sort them into approved, warned or blocked lanes and build lasting governance. Can You Actually Restore? A Cyber Recovery Testing Playbook for Security Leadershttps://www.cybergensecurity.com/cyber-recovery-testing-playbookhttps://www.cybergensecurity.com/cyber-recovery-testing-playbook Tue, 06 Oct 2026 11:26:24 GMTMDR & SOCHow to test cyber recovery properly: set impact thresholds, rehearse realistic ransomware recovery scenarios, cover cloud and SaaS, and prove backups restore. STIX and TAXII Explained: Sharing Threat Intel at Speedhttps://www.cybergensecurity.com/stix-and-taxii-explainedhttps://www.cybergensecurity.com/stix-and-taxii-explained Sat, 03 Oct 2026 07:47:11 GMTThreat IntelligenceSTIX and TAXII are open standards for sharing threat intelligence at machine speed. Learn how they work together and how your SOC can start using them. How to Build a Cyber Threat Intelligence Program Your SOC Will Actually Usehttps://www.cybergensecurity.com/how-to-build-a-cyber-threat-intelligence-program-your-soc-will-actually-usehttps://www.cybergensecurity.com/how-to-build-a-cyber-threat-intelligence-program-your-soc-will-actually-use Fri, 02 Oct 2026 14:14:41 GMTThreat IntelligenceHow to build a cyber threat intelligence program your SOC will use: start with intelligence requirements, not feeds, and follow a phased CTI maturity roadmap. Your Supplier List Is Not a Resilience Plan: A Global Guide to Third-Party Cyber Riskhttps://www.cybergensecurity.com/your-supplier-list-is-not-a-resilience-plan-a-global-guide-to-third-party-cyber-riskhttps://www.cybergensecurity.com/your-supplier-list-is-not-a-resilience-plan-a-global-guide-to-third-party-cyber-risk Tue, 29 Sep 2026 13:41:12 GMTComplianceThird-party cyber risk management means mapping shared dependencies, not just listing suppliers. Learn how to assess, contain and exercise supplier risk. Law Firms Are Under Attack: Inside the Silent Ransom Group Threathttps://www.cybergensecurity.com/law-firm-cyber-attacks-silent-ransom-grouphttps://www.cybergensecurity.com/law-firm-cyber-attacks-silent-ransom-group Mon, 28 Sep 2026 05:04:19 GMTThreat IntelligenceSilent Ransom Group targets law firms with callback phishing and data theft extortion. Learn how its attacks work and how to protect your firm today. Non-Human Identities: The Security Blind Spot Outnumbering Your Employees 50 to 1https://www.cybergensecurity.com/non-human-identities-the-security-blind-spot-outnumbering-your-employees-50-to-1https://www.cybergensecurity.com/non-human-identities-the-security-blind-spot-outnumbering-your-employees-50-to-1 Thu, 24 Sep 2026 13:16:17 GMTAI SecurityWhat are non-human identities? Service accounts, API keys and tokens now outnumber staff 50 to 1. Learn the risks and how to secure machine identities. The UK Ransomware Payment Ban Is Coming: What Public Sector and CNI Organisations Must Do Before It Becomes Lawhttps://www.cybergensecurity.com/uk-ransomware-payment-ban-public-sector-cnihttps://www.cybergensecurity.com/uk-ransomware-payment-ban-public-sector-cni Tue, 22 Sep 2026 18:16:43 GMTMDR & SOCThe UK ransomware payment ban will stop public sector and CNI bodies paying ransoms. Learn what is confirmed, the reporting regime and steps to take now. The CISO's Guide to Automated Domain Takedown: How Predictive Cybersecurity Ends the Manual Grindhttps://www.cybergensecurity.com/the-ciso-s-guide-to-automated-domain-takedown-how-predictive-cybersecurity-ends-the-manual-grindhttps://www.cybergensecurity.com/the-ciso-s-guide-to-automated-domain-takedown-how-predictive-cybersecurity-ends-the-manual-grind Fri, 18 Sep 2026 05:21:46 GMTCyber Security NewsAutomated domain takedown removes lookalike and phishing domains without manual effort. See how predictive cybersecurity stops impersonation early. The 40% Problem: How the Thales Stack Closes the Gap Between API Discovery and Data Protectionhttps://www.cybergensecurity.com/the-40-problem-how-the-thales-stack-closes-the-gap-between-api-discovery-and-data-protectionhttps://www.cybergensecurity.com/the-40-problem-how-the-thales-stack-closes-the-gap-between-api-discovery-and-data-protection Wed, 16 Sep 2026 13:37:29 GMTApplication SecurityAPI discovery alone leaves sensitive data exposed. See how the Thales stack layers API, data and machine identity security to close the gap end to end. AI-Powered Threat Detection: How Cybergen and TrendAI Secure Modern Enterpriseshttps://www.cybergensecurity.com/ai-powered-threat-detection-how-cybergen-and-trendai-secure-modern-enterpriseshttps://www.cybergensecurity.com/ai-powered-threat-detection-how-cybergen-and-trendai-secure-modern-enterprises Mon, 14 Sep 2026 12:56:06 GMTMDR & SOCAI-powered threat detection unites visibility, detection and response in one platform. See how Cybergen integrates TrendAI into managed security operations. Employees Are Using AI at Work: What Company Data Are They Sharing?https://www.cybergensecurity.com/employees-are-using-ai-at-work-what-company-data-are-they-sharinghttps://www.cybergensecurity.com/employees-are-using-ai-at-work-what-company-data-are-they-sharing Thu, 10 Sep 2026 06:55:11 GMTAI SecurityWhat data are employees sharing with AI at work? Learn the everyday situations behind AI data leakage, where visibility gaps sit and how to reduce exposure. OT & SCADA Penetration Testing: Why Standard Methods Fail (And What Safe Testing Looks Like)https://www.cybergensecurity.com/ot-scada-penetration-testing-why-standard-methods-fail-and-what-safe-testing-looks-likehttps://www.cybergensecurity.com/ot-scada-penetration-testing-why-standard-methods-fail-and-what-safe-testing-looks-like Mon, 07 Sep 2026 10:03:53 GMTPenetration TestingSafe OT penetration testing explained: why standard IT methods can disrupt SCADA systems, which standards such as IEC 62443 apply and how safe testing works. AI Phishing and Deepfake Fraud: The 2026 Threat Briefing Every CISO Needs to Readhttps://www.cybergensecurity.com/ai-phishing-and-deepfake-fraud-the-2026-threat-briefing-every-ciso-needs-to-readhttps://www.cybergensecurity.com/ai-phishing-and-deepfake-fraud-the-2026-threat-briefing-every-ciso-needs-to-read Thu, 03 Sep 2026 08:45:31 GMTAI SecurityAI phishing and deepfake fraud in 2026 are beating MFA and dated awareness training. See what a credible defence looks like and why 24/7 monitoring matters. The UK Cyber Security and Resilience Bill Just Reached Parliament: What Boards Need to Know Before the 24-Hour Reporting Clock Startshttps://www.cybergensecurity.com/the-uk-cyber-security-and-resilience-bill-just-reached-parliament-what-boards-need-to-know-before-the-24-hour-reporting-clock-startshttps://www.cybergensecurity.com/the-uk-cyber-security-and-resilience-bill-just-reached-parliament-what-boards-need-to-know-before-the-24-hour-reporting-clock-starts Wed, 02 Sep 2026 18:34:31 GMTCyber Security NewsThe Cyber Security and Resilience Bill brings 24 hour incident reporting, then a 72 hour full report. Learn who is in scope and how boards should prepare. Closing the Detection Gap: How SMEs Can Access Enterprise-Grade SOC Protection Without an Enterprise Budgethttps://www.cybergensecurity.com/closing-the-detection-gap-how-smes-can-access-enterprise-grade-soc-protection-without-an-enterprise-budgethttps://www.cybergensecurity.com/closing-the-detection-gap-how-smes-can-access-enterprise-grade-soc-protection-without-an-enterprise-budget Wed, 26 Aug 2026 13:44:53 GMTMDR & SOCAn affordable SOC for SMEs is possible without building one in-house. Learn what enterprise-grade detection needs and how a managed SOC closes the gap. Cybersecurity for Critical Infrastructure: Why Resilience Matters More Than Everhttps://www.cybergensecurity.com/cybersecurity-for-critical-infrastructure-why-resilience-matters-more-than-everhttps://www.cybergensecurity.com/cybersecurity-for-critical-infrastructure-why-resilience-matters-more-than-ever Sat, 15 Aug 2026 08:06:31 GMTCyber Security NewsCritical infrastructure cyber resilience matters more than ever as attackers target power, water and transport across IT and OT. Learn how to build it. Why Web Application Penetration Testing Is Essential for Modern Businesseshttps://www.cybergensecurity.com/why-web-application-penetration-testing-is-essential-for-modern-businesseshttps://www.cybergensecurity.com/why-web-application-penetration-testing-is-essential-for-modern-businesses Tue, 11 Aug 2026 19:06:50 GMTPenetration TestingWhen do you need a web application penetration test? Learn the most common web app vulnerabilities, why scanning is not enough and when to commission one. AI Is Changing Cybersecurity: Why Organisations Must Protect Their Data Nowhttps://www.cybergensecurity.com/ai-is-changing-cybersecurity-why-organisations-must-protect-their-data-nowhttps://www.cybergensecurity.com/ai-is-changing-cybersecurity-why-organisations-must-protect-their-data-now Mon, 03 Aug 2026 19:20:36 GMTAI SecurityHow to protect company data when using AI: understand AI data exposure, new insider risks and leakage routes, and the controls that restore visibility. Why Data Security Is Now the Foundation of Cyber Resiliencehttps://www.cybergensecurity.com/why-data-security-is-now-the-foundation-of-cyber-resiliencehttps://www.cybergensecurity.com/why-data-security-is-now-the-foundation-of-cyber-resilience Tue, 28 Jul 2026 14:56:57 GMTCyber Security NewsData centric security is now the foundation of cyber resilience, as attackers target data first. Learn why encryption, access control and visibility matter. Why Cyber Threat Intelligence Should Drive Your Security Strategy in 2026https://www.cybergensecurity.com/why-cyber-threat-intelligence-should-drive-your-security-strategy-in-2026https://www.cybergensecurity.com/why-cyber-threat-intelligence-should-drive-your-security-strategy-in-2026 Sun, 21 Jun 2026 13:05:18 GMTThreat IntelligenceA threat intelligence driven security strategy helps CISOs cut alert fatigue and prioritise real risk. Learn how CTI strengthens vulnerability management. The AI Compliance Gap: How Organisations Are Losing Visibility Over Sensitive Datahttps://www.cybergensecurity.com/the-ai-compliance-gap-how-organisations-are-losing-visibility-over-sensitive-datahttps://www.cybergensecurity.com/the-ai-compliance-gap-how-organisations-are-losing-visibility-over-sensitive-data Thu, 11 Jun 2026 18:05:35 GMTAI SecurityAI compliance risks grow when staff paste sensitive data into unapproved tools. Learn how shadow AI creates GDPR exposure and how to build AI governance. Shadow AI Is Already Inside Your Organisation: Here's How to Regain Controlhttps://www.cybergensecurity.com/shadow-ai-is-already-inside-your-organisation-here-s-how-to-regain-controlhttps://www.cybergensecurity.com/shadow-ai-is-already-inside-your-organisation-here-s-how-to-regain-control Wed, 03 Jun 2026 16:26:33 GMTAI SecurityHow to control shadow AI: understand why unapproved AI tools slip past security controls and how to regain visibility with modern AI governance that works. Why Traditional Threat Intelligence Is No Longer Enough: The Evolution of Intelligence-Led Cybersecurityhttps://www.cybergensecurity.com/why-traditional-threat-intelligence-is-no-longer-enough-the-evolution-of-intelligence-led-cybersecurityhttps://www.cybergensecurity.com/why-traditional-threat-intelligence-is-no-longer-enough-the-evolution-of-intelligence-led-cybersecurity Tue, 19 May 2026 16:48:15 GMTThreat IntelligenceIntelligence-led cyber security moves beyond feeds and dark web monitoring to track attacker TTPs. Learn why traditional threat intelligence falls short. Network Security in 2026: What CISOs Should Prioritisehttps://www.cybergensecurity.com/network-security-in-2026-what-cisos-should-prioritisehttps://www.cybergensecurity.com/network-security-in-2026-what-cisos-should-prioritise Fri, 15 May 2026 13:22:37 GMTCloud & Network SecurityNetwork security priorities for 2026: exposure management, identity, AI risk, zero trust and SASE. A practical guide to what CISOs should focus on this year.