Corey Thomas

This past week Axio announced an incredible partnership with the Nasdaq Center for Board Excellence.  In many respects, this is the culmination of everything that we’ve been building at Axio, designed to take the uncertainty and unknown out of cybersecurity for Boards. Simply put, we’re aiming to put cyber on the exact same plane as every other issue or risk that Boards of Directors and senior executives contend with.  Meaning, that the Board can understand what the risk of cyber means to the company and effectively collaborate with the company as to what is being done to manage the risk.  And just as importantly, have a clear vantage point on how the business can be impacted if something bad does happen, so that response and mitigation can be effective.  That’s how the challenge of cybersecurity is ultimately solved.  Not, as so many have thought throughout the years, by creating an impenetrable fortress, which always has and always will be impossible.  After all, thousands of years of human ingenuity still has not solved the risk of fire!  The inevitability of cyber events is no different than buildings burning down from time to time. 🔥       Instead, the challenge is solved by consistently having a clear understanding of the risk, making reasonable decisions to keep the risk managed, and by having a response plan should the risk still arise.  Plain and simple this logic fulfills the “duty of care” test that underpins the core responsibility of Boards of Directors.  In terms of what this partnership entails, Axio the Nasdaq Center for Board Excellence will be arming Boards with two key capabilities: 👉 Boardroom Cyber Talks: A monthly, on-demand video series featuring top cybersecurity experts unpacking essential topics and emerging threats. This series empowers board members to confidently participate in cyber discussions. 👉 Axio BoD Cyber Insights: A quarterly, Axio subscription-based report providing company-specific cyber exposure analysis. It translates technical risk into financial terms, helping boards align cyber strategy with overall enterprise risk priorities. Ultimately, we can’t and won’t guarantee that a company and Board that utilizes these resources won’t have an event.  What we are confident about is that a company and Board that utilizes these resources will more easily understand and more effectively manage cyber than ever before, without the fear or uncertainty of what could come tomorrow.    Duty of Care fulfilled for Cyber? ✅    

227

27 Comments

Earlier this week, I had the opportunity to represent Palo Alto Networks at the Fordham Gabelli School of Business Annual ICCS conference, where I was honored to be on a panel on the "Typhoons" alongside the rockstars protecting our nation - the FBI’s Brett Leatherman and NSA’s Kristina Walter. Silverado Policy Accelerator’s Marc Raimondi was the moderator. Here are some highlights from my commentary: 🔸Untangling the Typhoon Web: Our industry is constantly working to clarify and formalize information around these complex threat actors. We all have our own visibility and attribution frameworks. It's a collaborative effort and one that is critical for driving consensus and clarity. We must and will get better here. 🔸 Rethink the SOC: Effective detection and response against these actors, and even financially motivated groups like Muddled Libra, requires a shift in the SOC to comprehensive telemetry, holistic, AI-powered detection, and end-to-end automation. They aren't using malware so many of the traditional ways of doing things doesn't work. You need to connect the dots fast. 🔸Beware of the IT Supply Chain: With the increasing trend of outsourcing IT support, helpdesks, and even more with AI, the IT supply chain presents a massive opportunity for the Typhoons. IT support organizations, while cost-effective for businesses, often have fewer security resources, higher risk for insider threats and are becoming the "keys to the kingdom" for many. My key takeaways? We need to evolve beyond just IOC sharing and focus on specific and measurable outcomes. After all, the Typhoons and even cybercriminal groups like Muddled Libra don't have malware hashes to share at all. Collaboration, especially when it comes to the Typhoons, is crucial in defending against these persistent and evolving threats. No one organization – public or private – has full and complete visibility. We are stronger when we work together. We must keep pushing on this front together. Palo Alto Networks Unit 42 Eva Dudzik Mehlert Wendi Whitmore Sam Rubin Jason Healey Cyber Threat Alliance

210

9 Comments

Today marks a significant milestone in our journey toward building a truly AI-native threat intelligence ecosystem with the launch of the Cyware Model Context Protocol (MCP) Server. This open-source capability securely connects LLMs with Cyware’s platform, allowing security analysts to use natural language to automate investigations, orchestrate complex workflows, and take decisive actions directly and securely through the LLMs. 🔗 Learn more: https://buff.ly/J4KDAbX The #MCPServer supports Cyware’s goal of enabling smarter, #AI-powered threat intelligence operationalization. As a key component of Cyware Quarterback AI, it helps power contextual, end-to-end threat intelligence-driven response workflows across the threat lifecycle. Our focus remains on applying practical and responsible AI to improve how organizations manage and act on cyber threat intelligence in real time. We will be showcasing the MCP Server this week at #BlackHat USA 2025, Booth 5819. If you are attending, connect with our team and explore the latest advancements in #cyberthreatintelligence.

114

7 Comments