Information Security
Essential questions that CEOs should be asking their CISOs. Wil explores the importance of effective communication between technical and business perspectives, the need for investment in cybersecurity with clear ROI, and the significance of understanding risks and setting priorities.
Subscribe for more episodes of Cybersecurity Vault!
Success of cybersecurity is often hidden and ROI in healthcare is challenging to address! Jason Elrod, the CISO of MultiCare Health Systems, ties the investment in security to the core healthcare mission and showcases how resilience is key.
Check out the full podcast, where Jason discusses the impact of cyber threats on patient safety, the role of AI in healthcare, and the importance of resilience.
https://www.youtube.com/watch?v=oL5YwFOaO0A
Ransomware Attack Ends a 150 Year Company.
A 150-year-old UK company is gone – due to a cyberattack! It is an example of how #cybersecurity matters to every company that depends on digital technology. Failures in cybersecurity can cause catastrophic impacts, including the total loss of a business.
Take a look at this diagram. It is like many that float about, which provide a great technical view of cybersecurity, but fully ignoring the behavioral/cognitive aspects. That makes this very shortsighted. Even if you had perfect technology controls for everything listed, an admin making a mistake or purposeful attack, would bypass everything.
Apple and Intel formally reconcile to once again produce chips. As 2027 nears and the likelihood of a Chinese invasion of Taiwan rising, the risks to serious global chip disruption is something that cannot be ignored. Apple is smart to diversify their supply chain partners and Intel is in a prime position to continue to manufacture and ship products, even if the South Pacific or China Sea is in chaos.
https://open.substack.com/pub/matthewrosenquist/p/apple-pivots-to-intel-for-a-secure
Teramind's Top 30 2025 Future of Security Awards
I am honored to be listed among this great group of cybersecurity leaders!
“2025 USA Top 30 Winners didn’t just protect their organizations; they transformed them. These leaders proved that reactive security is dead. What matters now is proactive resilience: the ability to anticipate threats, adapt in real time, and keep your organization thriving through whatever comes next."
Thank you for the recognition Teramind!
2026 Cybersecurity Predictions are Coming!
Two months in the making and I am almost finished with my 2026 Cybersecurity Predictions! Just wrapping up the final version of both predictions and anti-predictions for the next year in #cybersecurity!
In the meantime, review what I had to say in my 2025 predictions and see if I actually have some worthwhile insights - or perhaps a cracked crystal ball. https://open.substack.com/pub/matthewrosenquist/p/10-cybersecurity-predictions-for
The latest ransomware trends highlight good news, but more risk.
The Verizon DBIR 2026 report shows 69% of organizations refusing to pay extortionists, which is up from last year!
This is great news as the more victims deny attackers their goals, it creates a long-term deterrence effect. However, in the short term, it will drive criminals to be more extreme in their actions to compel victims to pay.
We must stay strong and be prepared when ransomware strikes.
7 Cybersecurity tips to avoid being scammed and losing crypto
1. Telegram and other social sites are not trustworthy...
2. Just because they know a lot about you, it is NOT proof of their legitimacy...
3. Meet people in person (if it is safe) or via video meeting...
4. Never click a link or go to an untrusted webpage URL...
5. Never open programs or attachments from untrusted persons...
6...
Full article: https://open.substack.com/pub/matthewrosenquist/p/tips-to-avoid-online-fraud-and-crypto
Former cybersecurity ransomware negotiator turns to the dark side and into a ransomware cybercriminal.
Here is another ugly lesson in “be careful who you trust, even in cybersecurity”. We have seen malicious individuals, deceitful vendors, and products which were poorly managed create victims across the globe.
Trust is the backbone of cybersecurity.
Conduct due diligence and don’t engage or do business with organizations, products, or people that are not trustworthy.