ColorTokens
Security made simple. Everywhere
- Website
- colortokens.com · all feeds from this site
- Feed URL
https://colortokens.com/feed/
Read it in your FeedListing reader
Or add to: Feedly Inoreader Raw feed
Latest posts
-
The Quantum Era Is Approaching. Are You Ready for the Next Breach Yet?
I was at an event last week, and a CISO questioned my approach to breach readiness and asked whether it would still help organizations once quantum arrives. Luckily, I did not have to answer, and others chipped in, saying that no matter the tech, the basics hold up. Any…
-
I Survived the PHP Vulnerability, and All I Got Was This T-Shirt.
PHP is widely used in web applications, many of which connect to sensitive databases, internal applications, and critical business systems. The recently disclosed PHP vulnerability can let an attacker gain an initial foothold on the edge device. But that’s not a high-value…
-
PHP2Shell: AI Is Changing the Economics of Exploitation. What to Do Now
By today, PHP2Shell has made headlines in almost every nation. Governments deliberately switched off their own websites. In the UK, 32 government services went dark, and four more were partially down. Germany, France, Belgium, Finland, the Netherlands, and Australia pulled sites…
-
When Trusted AI Agents Become a Security Risk
AI is moving deeper into the enterprise. AI agents increasingly interact with applications, retrieve data, write code, and carry out tasks across connected systems. That raises a question for security leaders. If an AI agent is compromised or begins acting unexpectedly, how far…
-
A $2.3 Million Settlement and the Long Cost of Stolen Data
A 2019 breach at American Medical Collection Agency, Labcorp’s debt collection vendor, affected more than 10.2 million Labcorp patients. Years later, Labcorp has agreed to a $2.3 million multistate settlement over the incident. Over the past few weeks, the ColorTokens Threat…
-
Policy Latency Is the New Attack Surface. Breach Readiness Must Begin at the Top.
Japan faced an unprecedented cyberattack. Every one of you knows that while the attacker is automated, the defender is not. The fastest eCrime breakout time, i.e., the interval between initial access and the first lateral move, was 27 seconds, and one intrusion exfiltrated data…
-
Contain OT Risk While Remediation Moves Forward
For operational technology teams, patching is rarely just a technical decision. Maintenance windows, vendor requirements, legacy systems, safety considerations, and operational dependencies can all affect when remediation can occur. That creates an important security question…
-
What Firefighting Drills Taught Me About Breach Readiness
On Friday, I was in the office planning to write a new blog on breach readiness. It was a nice day. Comfortable weather, blue skies, the hills at a distance, the hum of dense discussions in conference rooms, and two hours at hand. I was sipping a hot cup of single-origin…
-
When Attackers Exploit Trust, Zero Trust Must Limit What Comes Next
Cybersecurity Awareness Month 2026 puts renewed focus on recognizing and reporting scams, including phishing and impersonation attempts. Impersonation attacks do not necessarily require an attacker to exploit a software vulnerability. A convincing identity, a familiar…
-
Boards Need to Change the Question from “Are We Secure?” to “Are We Ready?”
Cybersecurity Awareness Month 2026 comes with a long-term challenge. CISA’s theme, “Securing the Next 250,” marks America’s 250th anniversary by asking how we secure the digital systems and critical infrastructure the next era will depend on. For boards, that challenge goes…
-
Deploying Defensible Compensating Controls for Critical Infrastructure
On July 30, the FBI and EPA warned that, since July 27, water and wastewater utilities in at least seven states had reported incidents involving cyberattacks against internet-facing programmable logic controllers. Some incidents degraded operations, including loss of water…