Cybersecurity
One of our seven practice areas — every brief we’ve published in this coverage area, newest first.
-
Zscaler + Red Canary: SSE Vendor Moves Into the SOC
Zscaler closed its ~$675M Red Canary acquisition to build an agentic AI SOC. Our analysis of whether an SSE vendor can compete with CrowdStrike, Palo Alto, and Microsoft in security operations — and what MDR customers should renegotiate.
-
Google Closes Wiz: What CNAPP Consolidation Means
Google’s $32B Wiz acquisition closed March 11, 2026. What CNAPP consolidation means for AWS- and Azure-hosted Wiz customers, and the 12–24 month checklist for renewals, roadmap independence, and alternatives.
-
Retiring VPN for ZTNA in 2026: A Phased Migration Playbook
A phased VPN to ZTNA migration playbook: inventory apps, run parallel, migrate app-by-app, and decommission at 80% coverage. Honest mechanics for Zscaler Private Access, Prisma Access, and Microsoft Entra Private Access.
-
Data Breach Costs in 2026: The Benchmarks That Matter
The average cost of a data breach fell 9% globally to $4.44M while the US hit a record $10.22M. The benchmarks that matter, the $670K shadow-AI premium, and how to turn the numbers into defensible budget line items.
-
From Awareness Training to Human Risk Management
Security awareness training is giving way to human risk management. What changed, where KnowBe4 sits after its AI-agent rebuild, and the checklist that separates real HRM platforms from rebadged SAT tools.
-
Zscaler vs. Palo Alto SASE in 2026: How to Pick
Zscaler and Palo Alto now represent genuinely different SASE bets — pure cloud-proxy zero trust vs. single-vendor platform consolidation. A neutral decision framework with pricing, downsides, and thresholds.
-
Phishing Click Rate Benchmarks 2026: KnowBe4 Data by Industry
KnowBe4’s 2026 benchmarks put the untrained phishing click rate at 33.2%, with healthcare at 42.7%. Here are the numbers by industry — and the thresholds that tell you whether your program is working.