Insights - articles, guides and reports - Pro CISO®

cybersecurity Hackers pull off $133 million French bank heist via service provider - BleepingComputer cybersecurity CTM360 Exposes Fake Gift Card Scams Exploiting Trusted Brands - BleepingComputer cybersecurity The Fridge-Hacking Spree Is an Internet-of-Things Wake-Up Call - Wired Security cybersecurity British soldier ignored order to pull his SIM card, then got blackmailed - Ars Technica Security cybersecurity SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins - SecurityWeek cybersecurity Claude Code’s “Yes, and Don’t Ask Again” Feature Exposes Passwords and API Keys on GitHub - CyberPress threat-intel Claude Code’s “Don’t Ask Again” Feature Exposes 2,539 Secrets Across 1,994 GitHub Repositories - GBHackers threat-intel Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts - GBHackers cybersecurity Hackers Launch Over 240,000 Attacks Targeting WordPress Core Remote Code Execution Flaw - CyberPress cybersecurity Fake GitHub Security Tools Spread AsyncRAT Malware and Steal Sensitive Data From Developers - CyberPress threat-intel Hackers Use Fake GitHub Security Tools to Spread Malware, Infecting Over 2,000 Computers - GBHackers threat-intel Hackers Exploit SonicWall SSL-VPN Vulnerability to Bypass Multi-Factor Authentication in Active Attacks - GBHackers threat-intel WorkOS Confirms Data Breach After ARTEX AI Agent Escapes Security Researcher’s Sandbox - GBHackers cybersecurity Hackers Exploit SonicWall SSL VPN Flaw to Bypass SAML Authentication and MFA - CyberPress cybersecurity ARTEX AI Agent Escapes Security Sandbox and Breaches WorkOS, Exposing Customer Data - CyberPress

PHP2Shell timeline of events, from early warning to patching

Methodology · Latest PHP2Shell timeline of events, from early warning to patching PHP2Shell: five days of scambling, but always in control Remote code execution in PHP (CVE-2026-109618, CVE-2026-109619). What happened in the wild, and what Pro CISO did for its customers. Mario Procopio, Pro CISO · 25 October 2026 · 1 minute read

Microsoft 365: let an app send mail from chosen mailboxes only

Mail.Send granted to an app in Entra ID lets it send as anyone in your organisation. A step-by-step guide to register the app and scope it with Exchange RBAC for Applications, with...

BDO: Pro CISO® in the European Cybersecurity Industry report

BDO Deal Advisory's Global and European Cybersecurity Industry report (September 2026) lists Pro CISO® among Dutch cybersecurity companies, with a portfolio covering managed securi...

AI Security: Microsoft Copilot Enterprise Risk Assessment

Risk evaluation for Copilot Studio and Business deployment across enterprise environments.

AI Security: Claude Desktop Enterprise Risk Assessment

Assessment covering Claude Chat, Cowork, and Code on corporate devices.

Cyber Resilience in a Remote Work Era

Strengthening digital security in distributed and hybrid work settings.

Cyber Sustainability: Securing Our Digital Future

Integrating cybersecurity with economic and environmental sustainability objectives.

Cybersecurity Mindset: Awareness Empowers Everyone

Building a safer digital world, one action at a time — for every employee.

Inside Ethical Hacking

Exploring ethical hacking methods, responsible disclosure, and bug bounty programmes.

Simplified Cybersecurity Management

Introduction to the CA/CR™ cybersecurity management framework and methodology.

Guide to Risk Management

Integrated risk management techniques, frameworks, and practical implementation guidance.

Transform Risks Into Opportunities

Proper assessment methods for turning risk management initiatives into business value.

Hack-Proof Your Team

Customised cybersecurity training that defends against modern social engineering attacks.

The Mind Behind the Screen

Psychological perspectives on cybersecurity challenges and human behaviour in security.