In mid-2025, an AI system called XBOW reached the number one position on HackerOne’s global bug bounty leaderboard, submitting over a thousand validated vulnerabilities. It completed 104 web security challenges in 28 minutes, a task that took a veteran human tester 40 hours. Around the same time,...
Something interesting happened around RSAC this year. A chorus of voices across the AI cybersecurity space started pushing the same narrative: human-in-the-loop validation is slowing AI down. The LinkedIn posts rolled out with similar graphics, similar talking points, and a similar conclusion....
Every time a geopolitical crisis flares up and cyberwarfare comes into play, there is one consistent victim that takes most of the collateral damage. Cyberattacks on small and medium-sized organizations rarely make headlines, yet those organizations are the vast majority of victims of so-called...
Ever since the SolarWinds breach, application security has been experiencing an unprecedented renaissance with multiple new solutions being released for every phase of the application lifecycle. This is largely fueled by significant investments, aggressive government...
According to the 2021 Edelman Trust Barometer, 65% of Canadians said they were worried about cyberattacks. The survey also indicates that Canadians are struggling to trust industry leaders and experts. Investment Executive explores this topic in their recent article, How to reassure clients about...
Financial advisory firms are under more pressure than ever to ensure their operations are protected from cyberattacks and prepared for the worst as cybersecurity risks rise. The Globe and Mail explores recent data regarding financial institutions’ preparedness and the impact of the conflict in...
Parabellyx is a vendor-agnostic, cybersecurity company that understands the new threats that modern business enterprises face as they move toward mobile and web applications in the cloud. This movement has created a new security perimeter that requires different cyber strategies than those used in...
The idea of cybersecurity risk being a part of the business operational subset was around since the early days of IT security. BS7799 which subsequently evolved into ISO27001, as well as CObIT and COSO ERM, have all included IT security risks as a part of the technology risks subset. The intention...
As businesses recognize that the data security perimeter of their environments is frequently within their applications, they begin to understand that there needs to be more security around the development of those applications.
The security perimeters have changed due to cloud computing and the increased usage of web applications, both internally and externally.