• If you assumed your security controls were working in 2025, you weren’t alone. So did 99% of defense contractors who failed CMMC compliance. So did organizations running on AWS when a 15-hour DNS error took down their operations.

  • Pen testing shows vulnerabilities at a moment in time. It is an important part of any security program, but threats do not wait for annual assessments. Attackers move continuously, often quietly, and increasingly through identities and endpoints rather than traditional…

  • Over the past several days, the TorchLight Security Operations Center has observed a rapid escalation in payment remittance phishing attacks targeting end users across multiple industries. While these phishing techniques aren’t new, the scale and frequency of this week’s activity…

Stay in the loop on Cyber Security and other important thoughts from TorchLight