The Blog
Perspectives on Zero Trust, MDR, and managed cybersecurity from the team defending it every day. No fluff, no vendor pitch, just what we’re seeing in the field.
Stay up to date
Get the latest news, publications, threat research and Zero Trust guidance from ON2IT, straight to your inbox. No spam, unsubscribe anytime.
Latest blogs
PHP2Shell: what kept our customers safe before the patch?
PHP2Shell hit before a patch existed. How Zero Trust choices made years earlier, and AI, kept our customers safe while others took everything offline.
Zero Trust Maturity: a security score you cannot argue with
How the Zero Trust fitness score is built: CMMI as the basis, binary criteria, no weighting, and why a score that can go down is the only one worth having.
NetScaler Zero-Day: How SSL Decryption Blocked the Exploits
Two NetScaler zero-days were exploited before a patch existed. Customers with inbound SSL decryption were not compromised. See Inwood Bank's 60-day data.
Who is watching the AI agents on your endpoints?
Your EDR is quiet, but AI agents run with real user privileges. What Palo Alto Networks' Cortex XDR One does about that, and what ON2IT does.
Critical PHP Vulnerabilities CVE-2026-109618 and -109619
Two critical remote code execution vulnerabilities in PHP, CVSS 9.2. A patch is out, unpatched systems are being targeted fast. What to do, and ON2IT status.
Zero Trust is a verb
Zero Trust has a problem. One of its earliest practitioners says so. ON2IT CTO Lieuwe Jan Koning on why Zero Trust is the work, not a product.
Supermarket fridge hack: third-party remote access in OT
Hackers heated fridges in hundreds of French supermarkets to 50°C. Why third-party remote access is the weak spot in OT, and how to stop one breach spreading.
Patching was never the solution, even as AI outpaces it
AI exploits vulnerabilities faster than you can patch, but no one was ever fully patched. Rob Maas on shifting from detect and respond to Prevent and Adapt.
Measuring security is hard. Measuring Zero Trust isn't.
Most security metrics report activity, not protection. Measuring Zero Trust takes two dimensions, readiness and fitness. How they work and why you need both.
AI did not break Zero Trust, it exposed who never did it
Four common claims say Zero Trust fails for AI agents. ON2IT Field CTO Rob Maas explains why each one points to missing basics, and what is genuinely new.
Zero Trust Governance: 7 Questions Every Board Must Ask
Zero Trust is not a technology decision, it is a governance decision. The four principles, five implementation steps and seven questions every board must ask.
The 22-Day Patch Gap: How Frontier AI Changes Zero Trust
Twenty-two days passed between public exploit code and a vendor fix. Learn what frontier AI changes about the patch gap and why Zero Trust matters there.
The Framework the White House Chose
A presidential advisory committee cited one Zero Trust framework by name in its report to the White House. It's the same one ON2IT still runs today.
The AUXO Platform: Zero Trust Built In, Not Bolted On
Every SIEM, SOAR, and MDR platform tags Zero Trust onto its event pipeline after the fact. AUXO builds the Protect Surface into the schema itself.
How Zero Trust Stops Threats It Has Never Seen
How can Zero Trust stop attacks with no CVE or malware? Learn its three core mechanisms and what the SalesLoft Drift token case reveals.
Your Firewall Protects Data, Not Patients: Zero Trust
Your firewall protects data, not patients. Learn why hospital attacks target HVAC and water systems, the five failures we find, and what Zero Trust needs.
Your Protect Surface Is Already Out of Date
Protect Surface metadata drifts continuously in cloud environments. The five-stage maturity model to keep it current, and what breaks when it doesn't.
Patching cannot be your primary OT control
Attacker speed has outpaced the OT patch cycle. Segmentation is no longer compensating - it must become the primary control, with its own owner and budget.
Zero Trust MCP Server: AUXO for Claude & Copilot
ON2IT's open source Zero Trust MCP server (AUXO) turns Protect Surfaces, flows, measures, and cases into natural language operations in Claude and Copilot.
Quantum is an asset problem. Not a math problem.
Executive Order 14412 sets PQC deadlines for U.S. agencies and contractors. Harvest-now-decrypt-later makes this a risk today, not in 2030.
3 Things Your Firewall Already Blocks in GenAI Traffic
See how to secure GenAI traffic with the Palo Alto firewall you already own: what’s free, what needs AI Access Security, and what Prisma AIRS adds.
Your security culture will fail. That's not the problem
Every control existed, yet a SaaS company lost $1 million. Learn why fixing security culture is the wrong intervention and what to do instead.
What Every CEO Asks Their CISO Before Vacation
Frontier AI models like Mythos are landing during vacation season. See the 11 Mythos-Ready actions, how MDR Prevent™ helps and Zero Trust in five steps.
Your Security Culture Will Fail. That's Not the Problem.
Your security culture will fail, and that is not the real problem. Learn why exemption lists and hero culture backfire and how to close the trust gap.
Cyber Risk: Everyone Thinks Someone Else Is Handling It
Your board cares about cyber risk, but who owns it? Only 6% of organizations have all key data risk controls in place. Learn why ownership closes the gap.
Zero Trust and Compliance Frameworks: One Implementation
One Zero Trust implementation can produce audit evidence for ISO 27001, NIST 800-53, SWIFT CSP, PCI DSS, NIS2 and DORA. See how, with a worked SWIFT example.
AI just found the bugs. We just patched yours.
Palo Alto Networks, one of the most respected security engineering teams on the planet, pointed an AI agent at their own source code.
Agentic AI Is a Breach Vector: Zero Trust Was Built for It
AI agents in production are a new breach vector. Learn why Zero Trust, built for actors with legitimate credentials, is how you govern agentic AI.
You don't need additional AI security tooling | ON2IT Blog
AI vendors are pitching a new generation of security tools. Most organizations don't need them. They need to execute Zero Trust on the stack they already own.
Critical Infrastructure Cyber Laws Change Who You Buy From
New EU and US cyber laws like NIS2, DORA and the CRA can make some vendors illegal to use. Learn what the rules require and why acting early costs less.
You can't outrun bad infrastructure | ON2IT Blog
Cortex XDR and Zero Trust work better together. See why your detection capability is only as strong as the infrastructure it runs on.
Zero Trust for AI Agents
AI agents expand the attack surface. Learn how Zero Trust for AI agents strengthens agentic AI security and protects non-human identities in modern enterprises.
MDR vs XDR - why the difference costs you time
MDR gives you coverage. XDR gives you clarity. Most organizations need both. Here's how to tell which problem you're actually trying to solve.
Why Your SOC Is Drowning. And What XDR Changes (and Doesn't)
Still buried in false positives after investing in SIEM, SOAR and XDR? See what XDR changes in SOC operations, what it does not, and four questions to ask.
Five Real Challenges to Zero Trust Implementation
Zero Trust implementation fails when access control isn't enforced. Learn the real blockers and how to operationalize Zero Trust effectively.
The EU Cybersecurity Act Redefines Vendor Risk
Vendor risk is evolving under the EU Cybersecurity Act. Learn how supply chain security is becoming regulatory exposure for CISOs and CIOs.
The Modern SOC Was Not Built for AI-Speed Threats
Is your SOC ready for AI-speed attacks? Learn the four symptoms that slow SOCs down and how correlation and continuous monitoring help you keep pace.
Why Hospital Cybersecurity Fails on Paper (and in Practice)
Passing audits does not mean your hospital can contain an attack. Learn why OT systems and vendor access stay exposed and how Zero Trust helps.
A Practical Guide to Cryptographic Agility Before Q-Day
Post-quantum cryptography is already underway. Build cryptographic agility now to replace algorithms without operational disruption when quantum threats arrive.
MDR vs EDR vs XDR: Making Sense of the Acronym Soup
EDR, XDR, and MDR are not interchangeable. One is a tool. One is a service. One is an outcome. Learn which fits your security operations.
OT needs Zero Trust 2.0
IT and OT are no longer separate worlds. Learn why the Purdue Model falls short for converged networks and how Zero Trust 2.0 secures OT environments.
Cybersecurity awareness in 2026 meets NIS2
Cybersecurity awareness in 2026 goes beyond training. See how CISOs should address AI risk, NIS2 compliance, and supply chain threats.
Modern MDR: Threat Detection That Starts at Ingestion
Is sub-second detection just marketing? Learn why modern MDR detects threats at log ingestion, cutting attacker dwell time and lateral movement.
The Norwegian Dam Cyberattack: OT Security Wake-Up Call
In 2025, attackers used exposed remote access to manipulate a Norwegian dam valve. Learn what this OT incident teaches and how the SANS ICS controls apply.
Cybersecurity Predictions 2026: From Reaction to Prevention
Reacting faster is no longer enough. Read our 2026 cybersecurity predictions, from preemptive security to AI-powered malware and human AI errors.
In Cybersecurity, Choosing to Stay Is the Signal
In fast-moving cybersecurity, long tenure is rare. Meet the ON2IT teammates who reached 5, 10 and 15 years, and hear why people choose to stay.
Cybersecurity in 2025: AI Attacks, Ransomware, Board Risk
What really changed in cybersecurity in 2025? A recap of AI-driven attacks, ransomware at scale and board-level risk, plus what to prioritize for 2026.
Future of Cyber Insurance: From Reimbursement to Resilience
Cyber insurance is shifting to real-time risk measurement. Zero Trust, telemetry, and maturity scoring define Cyber Insurance 3.0.
Post-Quantum Cryptography: The Risk of Rushing In
Should you replace all your cryptography now because quantum is coming? Learn why rushing into post-quantum cryptography sells panic, not reality.
The Hidden Tax of Data Lakes: Detection as a Storage Problem
Data lakes turn detection into a storage problem. See how they drive hidden costs, retention creep and sovereignty risk, and how MDR Detect™ avoids this.
Threat Talks Revisited: What We Got Right and Wrong in 2025
How did the Threat Talks predictions for 2025 hold up? See what we got right and wrong on AI, Zero Trust in supply chains, the skills gap and regulation.
Your Logs, Their Cloud: Data Ownership in Detection
Discover why modern MDR must keep your logs in your cloud. Learn how data sovereignty, cloud waste, and vendor data lakes impact cost, control, and detection.
Internet of Weapons: How Everyday Devices Power Botnets
Billions of everyday connected devices - routers, cameras, and even smart home gadgets - are being hijacked into massive IoT botnets.
Zero Trust Is Transforming Cyber Insurance in Finance
Zero Trust is changing how insurers price cyber risk - see how financial leaders are turning security maturity into lower premiums.
AI SOC Agents Need Managed Expertise to Deliver Real Value
AI is transforming SOC operations - but not replacing them. Learn why managed expertise is key to turning AI agents into measurable, trusted outcomes.
Trust, Power and the Politics of Cryptographic Standards
Cryptographic standards define digital trust, but they also reflect policy, power, and risk. Learn how transparency and agility create verifiable trust.
Resilience by Design: Future-Proof Security With MDR Detect™
Resilience is the new measure of cybersecurity. Discover how ON2IT’s MDR Detect™ turns detection into recovery - fast, smart, and built to last.
New Texas Agency Builds a Lone Star Shield for Cyber Defense
With HB 150, Texas created the Texas Cyber Command. Davis Hake and Demetra Koelling explain how it can shield infrastructure with real-time early warning.
When Machines Detect, Humans Decide
In the AI race, speed is the goal. Security is the collateral. When a real attack lands, machines can detect. Only humans can decide what happens next.
When cybersecurity equals national security
Hybrid warfare is no longer theoretical. GPS jamming, DDoS attacks, and disinformation at the NATO Summit show why cybersecurity now equals national security.
The Forgotten Protect Surface: Securing SaaS in Zero Trust
SaaS runs your business but is often your security blind spot. Learn how to treat SaaS as a Protect Surface in a Zero Trust world and control your data.
The End of Alert Fatigue: Clarity Is the New Speed
Alert fatigue has quietly become one of cybersecurity’s biggest risks. It drains focus, wastes time, and erodes trust in the very systems meant to protect us.
XDR Guide for CISOs: What to Do Now and When to Add XDR
This is a hands‑on guide on what to do now - and when to add extended detection and response (XDR).
Cybersecurity and the so-called 'weakest link'
Are people really the weakest link in cybersecurity? Learn why resilience beats awareness, and how to design security for the way people think.
How a single breach froze Jaguar’s global network
How did one breach halt Jaguar Land Rover's production across four continents? Yuri Bobbert explains how Zero Trust could have limited the blast radius.
SIEM vs XDR: From Noise to Clarity in Security Analytics
For years, SIEMs formed the backbone of security operations. But the threat landscape has changed. The same systems that once gave control now create noise.
Hack the Hospital: Cybersecurity requires Critical Care
Hospital cybersecurity protects lives, not just data. See how the Hack the Hospital demo hijacked OT, and why Zero Trust is the cure CISOs need.
Fog of War: See First, Win First
You can't defend what you can't see. Learn what the military 'fog of war' teaches you about visibility in cybersecurity, and why seeing first wins.
Understanding PQC Algorithms
Quantum computers could break today’s cryptography. Discover five PQC approaches, NIST standards, and how agility keeps cybersecurity future-proof.
Banking CISOs: 10 Insights on Smarter Security Investments
What are banking CISOs learning about smarter cybersecurity investments? Get 10 insights on tool sprawl, SOC economics, staffing and board expectations.
Zero Trust isn't "hard" - it's unfocused.
Zero Trust is not hard, it is unfocused. Learn how a 3-week Zero Trust sprint helps you secure one Protect Surface at a time with tools you already own.
Zero Trust security: what it is and why it matters
A comprehensive guide that explains Zero Trust, a cybersecurity strategy built on the principle of "never trust, always verify".
OT Security: Lessons from a train hack
A decades-old train brake flaw lets attackers trigger emergency stops by radio. Learn why OT vulnerabilities linger and how you can make OT more secure.
Precision Over Perimeter: War and Cybersecurity Strategy
Why total coverage is not total control. See what military history teaches you about moving cybersecurity from perimeter defense to precision.
OT Cybersecurity 101: An Essential Guide for Security Teams
OT and IT security aren't the same game. A practical, step-by-step guide to securing operational technology, from protect surfaces to policy enforcement.
Harvest Now, Decrypt Later: Prepare for Quantum Threats
Attackers can steal encrypted data today and decrypt it once quantum computing matures. Learn how 'harvest now, decrypt later' works and what is at risk.
Cybersecurity starts with people
At ON2IT, cybersecurity starts with people, not tools. See how a culture of open challenge and questioning defaults builds smarter, stronger security.
Cryptographic Agility: Design for Change, Plan for Failure
Indecision is the basis of flexibility. WHAT IS CRYPTOGRAPHIC AGILITY? Cryptographic agility is the principle of designing systems in a way that allows
Rethinking Log Management
Drowning in logs with no clear signal? See why traditional SIEM falls short and how EventFlow helps you interpret, enrich and act on your log data.
What are we doing here? Cryptography pre-and post-quantum
How secure is the cryptography you rely on today, and what happens on Q Day? Explore the state of cryptography before and after quantum computing.
Is our definition of 'an act of war' outdated?
NotPetya and Stuxnet caused billions in damage without a soldier fired or an explosion. Why international law's definition of 'act of war' can't keep up.
Cybersecurity for AI: Protect the AI Systems You Use or Own
Using or building AI? Learn the risks AI systems bring, from data leaks to tampered models, and how you can protect the AI systems you use or own.
Zero Trust from conviction, not fear
Security isn’t about locking doors after intruders have come and gone. It’s about designing a world where they never get in. Imagine waking up to find someone’s
Signed, Sealed, Subverted: What Broken Cryptography Teaches
The Trusted Signature You’re alone in a quiet gallery of the Rijksmuseum, the soft hum of security systems barely audible beneath the air conditioning. A dim
How Zero Trust is Reshaping Cyber Insurance
How is Zero Trust reshaping cyber insurance? Get key takeaways from a 2025 New York roundtable of insurers on coverage, pricing and managing risk.
Dr. Yuri Bobbert Wins ISACA Inspirational Leadership Award
ON2IT's Global CISO Dr. Yuri Bobbert received the ISACA Inspirational Leadership Award in 2025 for advancing cybersecurity leadership and Zero Trust.
Cybersecurity Assessments: Interview with Tim Timmermans
How does an ON2IT cybersecurity assessment work, and why does it matter? Tim Timmermans explains the process, what sets it apart and lessons learned.
ON2IT Launches AUXO Curator™, Enhancing ON2IT MDR Services
ON2IT launches AUXO Curator™ for its MDR services: ingest security log data from any source across IT, OT and cloud, with no SIEM required.
International Adoption of Zero Trust
How is Zero Trust adopted across borders? Experts discuss regional challenges, regulations, guidance and best practices for organizations worldwide.
Zero Trust in Action: Lessons from the Shipyard
ON2IT Zero Trust implementation case study for the CSA ZT workgroup about protecting critical infrastructure in a European Shipyard.
Purdue vs Zero Trust in OT security
Is the Purdue Model still enough for OT security? Compare it with Zero Trust and learn how Protect Surfaces help you segment critical industrial assets.
How Zero Trust Strengthens U.S. Community Bank Security
Why are U.S. community banks vulnerable to cyberattacks? Learn how Zero Trust helps you tackle limited resources, legacy tech and third-party FinTech risk.
Trust people, not packets
Should Zero Trust be renamed because it sounds like distrust of employees? Learn why Zero Trust is about packets, not people, and how it protects people.
CISO responsibilities: Too much to handle?
Are CISO responsibilities becoming too much? See how the role shifted from technical security to business risk, and how you can support your CISO.
ON2IT Joins Texas DIR Cybersecurity Contract
ON2IT joins the Texas DIR Cybersecurity contract DIR-CPO-4843 through its partnership with immixTechnology. Read what this milestone means.
Cybersecurity Predictions 2025: AI, Quantum and Compliance
What will 2025 bring in cybersecurity? Read our predictions on AI as friend and foe, quantum computing getting closer and compliance as a culture shift.
Zero Trust: A New Year’s resolution worth keeping
Make Zero Trust your New Year's resolution. Learn why the best time to strengthen your security posture is before an incident and how to make progress.
ON2IT's Holistic Approach to Security and Compliance
How ON2IT measures and improves its own cybersecurity posture while strengthening compliance with local and European regulations, per Palo Alto Networks.
Bridging the gap: Security & Compliance
Fear auditors more than hackers? Transdev CISO Pieter de Lange on merging security and compliance, with deep dives on Accellion, Okta and Capital One.
The secret sauce for boardroom trust
Cybersecurity assessments are not about judgment. Learn how an objective baseline of your security status builds boardroom trust and guides next steps.
Hack the Boat: Maritime Cybersecurity Threats
Ships are easy cyber targets. See AIS spoofing and a live ballast-system hack expose real maritime cybersecurity threats in ON2IT Threat Talks: Hack the Boat.
Cyber warfare
How do nation-states fight in cyberspace? Martijn Peijer breaks down the Barracuda hack, the GRU Viasat hack and Operation Triangulation.
The cybersecurity paradox
Cyber incidents top every risk list, yet cybersecurity rarely makes the board agenda. Explore the cybersecurity paradox and where you can start solving it.
How to face the ‘ever-evolving cyber threat landscape’
'Ever-evolving threat landscape' sounds like a cliche, but it is real. Learn how to handle cybersecurity complexity, where to start and how to prepare.
A Cybersecurity Assessment Is Not a Vote of No Confidence
Board wants a cybersecurity assessment? It's not a vote of no confidence in IT. Learn why board involvement and an outside view work in your favor.
Breaking the bank
Why are banks such a prime target? Jayson E. Street breaks down the Bangladesh Bank SWIFT attack and the Vultur Android malware on Threat Talks.
The crucial role of business alignment in cybersecurity
Why does business alignment make or break Zero Trust? Rob Maas covers 'Not Invented Here' syndrome, budget and time limits, and where you can begin.
Healthcare: Responsibilities, regulations and legacies
Why is healthcare so exposed? Sina Yazdanmehr on responsibilities, regulations and legacy systems, from DICOM to the HSE ransomware attack in Ireland.
Resilience in the face of adversity
There was a time when today’s tech-giant Apple faced bankruptcy. What happened, and how did Apple get to where it is now despite facing adversity?
The Authentication Apocalypse
Weak authentication puts your data within reach of attackers. Learn from the Outlook, Google OAuth and Ivanti EPM cases why strong authentication matters.
Supply chain - Business as usual?
Every third-party and open-source dependency is another key under the mat. Learn from SolarWinds, Log4j and MOVEit how supply chain attacks reach you.
False sense of cybersecurity
Gartner projects Zero Trust adoption in large enterprises will grow from 1% to 10% by 2026. Is that realistic? See what holds organizations back.
Can't deny DDoS in 2024?
How do DDoS attacks work, and why can't you ignore them in 2024? Learn the basics, from the Mirai botnet to reflection, the simplest DoS attack.
Optimism bias won’t save you
Think your company is immune to a breach? See the three faces of optimism bias in cybersecurity and why prevention and resilience beat wishful thinking.
VPN-Firewall Integration: A Strategic Analysis
Should VPN and firewall run on the same device? Weigh the benefits of consolidation against the risks raised by recent critical vulnerabilities.
CVE-2024-3400 Exploits: Forensic Tips to Decode the Attack
What is CVE-2024-3400 in PAN-OS GlobalProtect and how is it exploited? Get forensic tips to understand the attack and what it teaches your security team.
CVE-2024-3400 PAN-OS: GlobalProtect Command Injection FAQ
Is your firewall vulnerable to CVE-2024-3400? Get answers to common questions on the Palo Alto Networks PAN-OS GlobalProtect command injection flaw.
Navigate the challenges of remote work
Remote access is no longer a luxury, and it blurs the line between work and home. Learn the security risks of remote work and the Citrix NetScaler case.
Ransomware: To pay or not to pay
Your files are encrypted and the clock is ticking. Should you pay the ransom? Explore why no one can make that call for you and how a CSIRT helps.
Three NIS2 pitfalls that the government should avoid
NIS2 legislation is on its way in the Netherlands. Learn three pitfalls the government should avoid and why your organization should not wait to prepare.
What Hollywood gets wrong about cybersecurity
Movie hackers type fast and shout 'I'm in!' Real incident response looks very different. See what Hollywood gets wrong and who the real heroes are.
Why critical incident response is the ER of cybersecurity
A CSIRT is the ER of cybersecurity: you hope you never need it. Learn six ways Zero Trust keeps critical incident response rare, and why it still matters.
ON2IT CSIRT in Action: A Customer Incident Playback
What happens when a serious threat is detected? Follow a real customer incident as the ON2IT CSIRT moves from identification to containment and recovery.
NIS2 compliance may prevent 7-million-euro fines
Written in 2023: NIS2 can bring fines and personal liability for executives. Learn what NIS2 means, how you can prepare and why to focus on prevention.
How Zero Trust as a Service Cuts the Cost of a Data Breach
Published in 2023: how Zero Trust as a Service lowers the cost of a data breach. Learn the five pillars and why a 75% cost reduction is feasible.
The MGM Resorts attack and its impact on the supply chain
The MGM Resorts Attack led to a ripple effect of consequences that affected not just them, but also their supply chain.
Navigating Zero Trust - Part 1
Zero Trust only works when business and IT team up from the start. In part 1 of his series, Rob Maas covers the role of business, architects and IT ops.
The Dynamic Update of Protect Surface Metadata
Your Protect Surface is only as good as what you know about it. Learn the role of metadata in Zero Trust and why dynamic metadata updates matter.
Zero Trust and the network transformation
Remote work forced a fast network transformation. Learn why you should move from reactive to proactive security and why Zero Trust focuses on prevention.
The silver lining of cyber resilience
Targeted cyberattacks threaten enterprise architectures at their core. Explore why cyber resilience is urgent and what silver lining it offers you.
Ladies and gentlemen of the board
Cybersecurity remains a top priority of businesses, but the harsh reality of cybersecurity is that the investment can be hard to sell. The costs are easy to
ON2IT Launches New Services for Zero Trust Implementation
In 2023, ON2IT launched Zero Trust Readiness, Zero Trust Fast Track and Zero Trust Coaching to help organizations implement Zero Trust successfully.
Samantha is leaving
When your security architect leaves, their network knowledge goes too. Explore the reality of the IT staff shortage and how a partner can fill the gap.
The cybersecurity industry’s ‘dirty little secret’
Does your SOC provider just forward alerts, or does it solve them? Uncover the industry's dirty little secret and why a '24/7 SOC' label says little.
Hackers Need One Unguarded Minute. You Offer 60-150 Days.
Hackers need one unguarded minute, but in 2023 organizations offered 60 to 150 days on average. Learn how unpatched flaws let attackers roam freely.
The impact of cybersecurity on your organization’s profit
Can you measure ROI on cybersecurity? Explore why security is more than a cost with no return and how better security helps your business run faster.
Cybersecurity on Pager Duty: What Should Keep CEOs Up
Would you run a 24/7 operation on pager duty? Learn why cybersecurity deserves a 24/7 Security Operations Center and what to require from a SOC provider.
ON2IT Zero Trust as a Service Supports CISA Maturity Model
In 2023, ON2IT added the CISA Zero Trust Maturity Model to AUXO, its Zero Trust as a Service platform, to help organizations embrace Zero Trust.
API Security - What you need to know
The 2022 Year-End API ThreatStatsTM Report provides some very interesting insights into the rise of attacks against API endpoints. They have set themselves the
John Kindervag on Zero Trust with VentureBeat: Part II
The NSTAC and compliance are the big topics in part II of this interview with John Kindervag, done by VentureBeat. In part I of this interview , he touched upon
John Kindervag on Zero Trust with VentureBeat: Part I
How do the organizations you work with overcome barriers to adopting and implementing zero trust? John Kindervag: Zero trust, because it’s a strategy
ON2IT Expands ZTaaS Platform With Compliance Support
In 2023, ON2IT expanded AUXO, its Zero Trust as a Service platform, with compliance features to help you meet rules such as the NIS2 Directive.
Reduce the Blast Radius of Zero-Days With Zero Trust and XDR
The clock starts ticking as soon as a zero-day vulnerability is disclosed. Cybersecurity teams scramble to shore up their defenses and search for signs of
No More Sucking Chest Wounds
We are too passive. Too afraid of action. Too intimidated to do the right thing for our organization. Let's look at the excuses for this...
The war situation in Ukraine and cyber threats
A 2022 ON2IT bulletin on cyber threats linked to Russia's invasion of Ukraine, with the SOC/CERT view and advice from national cybersecurity centers.
Log4j Lessons: What Is Vulnerability Management Anyway?
Written in 2022 after Log4j: what is vulnerability management, can a perfect tool exist, and how should your organization handle unknown threats?
Zero Trust Implementation: Lessons From Fifty Years Combined
In this blog series, we take a look at what lessons we have learned from many years of Zero Trust implementation gathered from six experts.
The war situation in Ukraine and cyber threats
A 2022 ON2IT update on cyber threats tied to the war in Ukraine: the SOC/CERT view, advice from national centers and what ON2IT did for managed clients.
The Log4j lessons: what IS vulnerability management?
In 2022, after Log4j, we asked: what is vulnerability management? Learn why patching must be a routine and how to handle unknown threats.
The Log4j lessons: If it ain’t broke, fix it now!
The lessons you can learn from Log4j and how to protect yourself better against these vulnerabilities in the future.
Log4j: Frequently Asked Questions
Answers to common Log4j questions from December 2021: how to approach the exploit, why to patch, and how to block attacks with IOCs and IPS.
More Security Products Won't Solve Your Security Problem
As we start using more and more products, we also need to implement more security measures. Find out what you can do!
Avoid Alarm Fatigue With Continuous Validation
One-off pentests and scans can cause alarm fatigue. Learn the three purposes of continuous security validation and how it keeps your security improving.
John Kindervag, creator of Zero Trust, joins MSSP ON2IT
ON2IT is proud to announce that Zero Trust creator John Kindervag will join ON2IT as Senior VP Cybersecurity Strategy and Group Fellow.
The broken DMZ model
The traditional DMZ model isolates by network zone, not by what's worth protecting. Here's why a compromised web server ends up one hop from your data.
Network segmentation is not Zero Trust
Is network segmentation the same as Zero Trust? No. Learn why segmentation is one enforcement tool, while Zero Trust starts with protecting your data.
Zero Trust: a means and not an end in itself
What is Zero Trust all about? Is it a realistic securitymodel? Is it a means or an end in itself? In this article we discuss the essence of Zero Trust.
Context is key: the data challenge of cybersecurity
One of the biggest challenges within cybersecurity is how to handle the sheer amount of data. Everyone in the field is familiar with the stories of failed SIEM
Security Chief Yuri Bobbert Moves From NN Group to ON2IT
In 2019, ON2IT appointed Prof. Dr. Yuri Bobbert, former Global CISO at NN Group, as its Global Chief Information Security Officer. Read the announcement.
ON2IT Adds Instant Support for Palo Alto Networks Cortex XDR
In 2019, ON2IT announced managed services for Palo Alto Networks Cortex, starting with Cortex XDR. Read the original press release.
Data Breach: Can You Empower Your CEO in Thirty Minutes?
In 2019 we asked: after a breach, can you tell your CEO within 30 minutes what happened? Learn how data collection, visualization and XDR help.
The global mission of Zero Trust innovator ON2IT
The limited service model is bound to become extinct. Discover what is in the future for cybersecurity with ON2IT.
ON2IT appoints Ron Myers as CRO
ON2IT announces that Ron Myers has been appointed as CRO. This announcement follows the recent opening of ON2IT’s first US office last October.
How a fitness app became a matter of international security
In 2018, Polar's fitness map exposed sensitive locations of military personnel. Learn how innocent data can be misused, even without a hack or breach.
ON2IT opens first US office and appoints Kristie Bell CEO
ON2IT opened its first US office in Plano, Texas, strengthening ties with corporate clients, partners and resellers in North America.
No articles match your filters right now. Try resetting.