
Why Nonprofits Are Missing From the Responsible Disclosure Ecosystem
Nonprofits lack structured responsible disclosure programs, leaving vulnerabilities unaddressed. Researchers often have no clear channel to report findings, while the sector faces a surge in cyberattacks—Okta ranks it second most targeted globally with an 18% malicious login attempt rate. Existing disclosure platforms assume legal, security, and engineering resources that most nonprofits don’t have. Simple measures like publishing a security.txt file and assigning internal ownership can close the gap.

Innovative Phishing Simulations to Build Cyber-Resilience
Phishing simulations are evolving from generic, click‑rate tests to hyper‑personalized, technically sophisticated exercises that mirror modern threat vectors such as AI‑driven BEC and MFA‑bypass attacks. Security teams now replicate exact corporate communication styles and even simulate proxy‑phishing sessions to expose...