SecuSolutions Blog

In September, the FBI confirmed it was investigating claims that its FBIJobs.gov portal had been compromised, with attackers alleging that employee personally identifiable information had been exposed. At the time, the FBI said it was still investigating how the incident occurred and whether a third-party provider may have been involved.  The FBI has significant resources, experienced personnel, and some of the strongest security capabilities available. Even so, it can still

Q.) What is the number one reason companies are spending money on cyber security? A.) It is, to keep the bad guys out. Q.) How do most companies go about trying to prevent the bad guys from getting in? A.) They spend money on defensive security technologies designed to keep the bad guys out. Q.) How many companies know that the technologies they deployed are effective? A.) Very few. These simple questions and their answers categorize how most companies approach cyber security

AI Attacks Are a Coverage Problem AI-assisted attacks are getting attention: agents that scan, exploit, and pivot with little human direction. Strip away the hype and they succeed for the reason attackers always have. The environment gave them a path. An exposed service, a reused password, an over-permissioned cloud role. AI did not create those paths. It just makes it more accessible to previously under-skilled adversaries. AI, unfortunately, does not care what it breaks. An

Did you know that you can hire the best information technology team, equip them with all the resources they need to keep your business operation and your systems running, provide them with healthy budgets and empower them to make great technology decisions, and you could still have a serious cybersecurity problem? Organizations invest significant time and money into firewalls, endpoint protection, multi-factor authentication (MFA), vulnerability management, security awareness

Gone are the years where cybersecurity is seen as a responsibility isolated to the IT team, or a boring but necessary box to check for compliance. Cyber threats (and their perpetrators are growing in sophistication every day, so organizations need to move quickly and transform their approach beyond the bare minimum (cybersecurity policy sign offs and annual training) towards a culture where security is part of how people work every day. Let’s rewind. Old-school compliance-dri

Attack resources, once limited to skilled researchers, organized crime, and nation states are now widely accessible, while building and maintaining secure systems remains difficult and expensive. Security is no longer free. For years, security was something many teams postponed until after shipping. Many systems survived not because they were secure, but because no one was actively looking for weaknesses. Hidden endpoints, obscure workflows, and edge-case bugs often went undi

There's a pattern we keep running into on engagements, and it's worth naming directly: employees increasingly trust AI output over professional expertise sitting right next to them. This expertise may be internal resources or colleagues, or external subject matter experts. Increasingly, oversight occur not because the AI is right more often, but because it comes across as so confident (often incorrectly), fast, and frictionless. This is a combination that is dangerous - in wa