Download the guide to understand the two-part process for preparing for an Initial SOC 1 Audit and the 5 phases of a SOC 1 Type II audit. All processes are in accordance with the AICPA standards based on Statement on Standards for Attestation Engagements (SSAE) #16.
Download the Guide
Reporting window: September 28 – October 12, 2026 (trailing 14 days) This period had one defining pattern. Attackers came in through access someone else had already approved: a vendor’s login to a national register, an employee’s cloud credentials, a customer portal, and the consoles that manage whole networks. One ransomware attack on a cloud provider…
Reporting window: September 14 – September 28, 2026 (trailing 14 days) What Actually Matters This Cycle Executive Snapshot This cycle in one line: Attackers are going straight at the systems that hold people data, from HR and recruiting platforms to court records and a Pentagon personnel server, and many of the worst exposures trace back…
Cyber threats have changed significantly in just a few years. Attackers are increasingly using legitimate credentials rather than trying to break through traditional security controls. Cloud platforms, third-party relationships and expanding digital ecosystems have created more ways to access an organization’s systems and data. Artificial intelligence is making social engineering faster and more convincing. At…
