“I am large, I contain multitudes.” Walt Whitman This post will be a bit of a deep dive into some of the technical considerations that go into analyses that we provide to our Risk Retina subscribers. Fair warning, things might get at least mildly statistical! We’ll start with a standard question that we have addressed…
In case you’re joining mid-series: here’s the assistant announcement, Office Hours #1 on “I don’t know”-as-a-Service, and Office Hours #2 on what to do when a question doesn’t ground. “Trust, but verify.” The last two posts were about the assistant’s restraint: when it won’t answer, and what you do next. Now let’s explore when the…
The research assistant spent seven and a half million years computing the Answer to the Ultimate Question of Risk, the Threat Landscape, and Everything. The answer was 42. The trouble, it turned out, was that nobody knew what the question had been. — with apologies to Douglas Adams In case you missed them: here’s the…
In case you haven’t heard, we recently released an AI research assistant for our members; check out the announcement here. Cyentia has always been in the business of clearing the brush—trying to cut through the noise in cybersecurity to share insights that actually hold up. So when we started designing our AI research assistant, it…
There I was, uploading all of our IRIS reports to NotebookLM, wishing it would do a better job of extracting facts and figures. Then I thought, “I wonder if anyone else is doing this… why don’t we just do it for them?” As we tossed the idea around, we realized the timing was right given…
“That’s the news from Lake Wobegon, where all the women are strong, all the men are good-looking, and all the children are above average.” – A Prairie Home Companion We have harped on the inadequacy of a single “average cost per record” value (and averages more generally) when analyzing cybersecurity event losses several times before,…
Our analysis of probability in the IRIS 2025 focused on the likelihood of experiencing at least one security incident within a year. It’s possible, of course, for organizations to suffer more than one loss event in that timeframe, and veteran IRIS readers may recall that prior studies included a table of probabilities for at least one, two, and three incidents in a 12-month period. Those readers may be disappointed upon realizing updated tables are missing from the latest IRIS. If that describes you, this should ease your disappointment.
Gov-Sponsored Study: Cost of Cyber Attacks Climbs 15X Higher–Analysis of 15 years of historical data reveals that cybersecurity incidents are more common and costly than ever
Ransomware presents big problems for small businesses, with incidents comprising 30% to 40% of all security breaches in companies earning less than $100M annually. This striking statistic from the IRIS Ransomware highlights a critical reality: small and mid-sized businesses (SMBs) are disproportionately affected by ransomware. Meanwhile, large enterprises face distinct challenges as they navigate vast networks…
A Year in Review As we wrap up 2024, we’re excited to share highlights from an incredible year of insights, innovation, and collaboration at Cyentia. This year brought a wealth of new reports, engaging webinars, and thought-provoking discussions across our community. We couldn’t have done it without your continued support and curiosity. Below, you’ll find…