Editor profile
Managing Editor, Threat Intelligence
Marcus Thorne investigates global cyberattacks, ransomware trends, and major data breaches. He provides real-time analysis of the evolving threat landscape for enterprise leaders.
marcus.thorne@securitypost.orgAnalyze the JadePuffer ransomware attack case driven by AI Agents, explore the disruptive impact of autonomous attacks on enterprise security architecture, identity verification, and threat intelligence, and provide defensive strategies for CISO to counter complex attacks in the AI era.
Analysis of the physical security, geopolitical conflicts, energy consumption, and emerging regulatory risks faced by data centers as a key technological infrastructure pillar of the modern internet amidst the progress of AI and digitalization. To provide strategic reference for enterprise security decisions.
In-depth analysis of trends in AI governance, data privacy, and cybersecurity regulations globally for 2026, exploring the practical impact of these changes on business operations, compliance, and risk management, and providing forward-looking defense recommendations.
Verisk announces the completion of risk analysis maps for more than 2,500 data centers in the United States. This article interprets the implications of this event for CISOs, infrastructure managers, and business continuity planners from the perspective of cybersecurity media, and explores the trend toward integrated management of physical and cyber risks.
CYFIRMA report reveals emerging Vect ransomware, which adopts a cross-platform RaaS model and employs dual extortion through data theft and encryption, posing a serious threat to global enterprises.
RSAC 2026 Conference Deep Dive: How Agentic AI, Shadow AI, Identity Security, and Community Collaboration Impact Enterprise Security Strategy, with Actionable Defense Recommendations.
In December 2024, multiple Chrome extensions were maliciously acquired and backdoored, affecting millions of users. SecurityPost analyzes this new type of supply chain attack pattern and its deep implications for enterprise security.
The US federal and state governments have intensively issued new cybersecurity and privacy regulations, significantly increasing corporate compliance burdens. This article, based on a Morgan Lewis report, analyzes 2026 regulatory trends and corporate response strategies.
With the explosion of AI and cloud computing, data centers have become the core infrastructure of the global digital economy. Based on the latest policy report from the Goldwater Institute, this article analyzes the expansion trends of data centers in the United States and Arizona, and examines the security risks, compliance challenges, and response strategies they bring from a corporate perspective, helping enterprises build future-oriented security resilience.
This article provides an in-depth analysis of multiple malicious Chrome extension acquisition incidents that occurred between late 2024 and 2025, revealing how browser extensions have become the latest blind spot in enterprise security, and offering systematic defense recommendations for enterprises.
Based on the Bitsight report, analyze the key capabilities and trends of enterprise threat intelligence platforms in 2026 in dark web monitoring, risk quantification, and AI integration.
CYFIRMA's latest report reveals Vect ransomware's cross-platform capabilities and RaaS model. This article analyzes its attack methods, impact on enterprises, and defense recommendations.
Generative AI code generation improves efficiency while introducing risks such as injection attacks and unsafe code templates. A new study proposes a hybrid ANN-ISM framework that combines predictive analysis with structured risk management, helping enterprises systematically mitigate these security challenges.
This article references Appinventiv's "Cybersecurity Implementation Plan For Enterprises" to analyze enterprise cybersecurity strategic planning, technical implementation, and governance paths, providing actionable framework recommendations for CISOs and security teams.
The number of security conferences has exceeded 4,700. How can enterprise decision-makers extract strategic value from them? This article analyzes conference theme trends and participation strategies for 2026-2027.
According to a recent Sophos report, 79% of ransomware attacks begin with stolen credentials and abuse of legitimate logins. Identity-based attacks have replaced exploit-based attacks as the most common initial intrusion method, and enterprises need to rethink their identity security strategies.
This threat briefing analyzes the dual impact of structured content in generative AI and ChatGPT GEO, exploring its security risks and defense strategies in SEO semantic poisoning, information manipulation, and AI understanding bias.
Ten years after the implementation of GDPR, data protection awareness has significantly improved, but enterprises are facing new challenges such as increased compliance burdens and limitations on AI development. This article analyzes the impact of GDPR on enterprises and future trends.
Apple releases Beats firmware update to fix unauthorized microphone access vulnerability; U.S. Department of Transportation concludes investigation into Delta Air Lines' service disruption caused by CrowdStrike incident; AWS launches AI-driven vulnerability management tool Continuum. Meanwhile, the Popa botnet is linked to an Israeli company, and Google Cloud Config Connector has an unpatched privilege escalation vulnerability.
A recent report by the UK National Cyber Security Centre (NCSC) shows that 75% of cyber attacks against UK critical infrastructure over the past year were linked to hostile state actors. In his annual speech, NCSC Chief Executive Richard Horne warned that cyber security should be seen as a continuous contest rather than a static risk, and emphasized that AI will accelerate the exploitation of legacy vulnerabilities. This article provides an in-depth analysis of the incident background, attack methods, corporate impact, and defense recommendations.