Blogs

7 Questions Security Leaders Should Ask After a Penetration Test

March 11, 2026
Brad Causey

Learn the 7 critical questions security leaders must ask after a penetration test to turn findings into action and strengthen cyber defenses.

Read More

MSP vs. MSSP: What’s the Difference, and Why It Matters

January 6, 2026
Daryl Irby

Discover the key differences between MSPs and MSSPs, their roles in cybersecurity, and how to choose the right one for your business needs.

Read More

Why AI Won’t Replace Your SOC

November 12, 2025
Mark Brophy

AI is a powerful tool for security operations, but it can't replace the human judgment a SOC depends on when the unexpected happens.

Read More

Finding: DNSSEC Not Enabled on Azure DNS Zones

October 27, 2025
Jordan Natter

Secure your domains by learning how to enable DNSSEC on Azure DNS Zones. Step-by-step guide to boost DNS integrity.

Read More

Remediation Plan: Strict Transport Security Not Enforced (RFC 6797 – CWE-523)

August 13, 2025
Jordan Natter

Learn how to create a remediation plan for CWE-523 by enforcing HTTP Strict Transport Security (HSTS) per RFC 6797.

Read More

The Rise of Ransomware-as-a-Service: A Roadmap For Executives

June 25, 2025
Tony Mosley

Ransomware-as-a-Service operates like a traditional SaaS. Affiliates pay a subscription fee or share a percentage of the ransom profits.

Read More

Understanding CMMC

June 16, 2025
Robert McElroy

Explore the essentials of CMMC, its cybersecurity impact, compliance levels, and how it protects defense contractors.

Read More

Do I Pay the Ransom? Insights from an Incident Responder

May 20, 2024
Mark Brophy

"Should I pay the ransom if I am attacked?" Insights gathered while working with companies that faced these questions.

Read More

Ransomware Resilient Backups

July 20, 2021
Daniel Perkins

SecurIT360 shows you how to avoid being a victim of ransomware attacks by creating proper backups.

Read More