"Far and away the best prize that life offers is the chance to work hard at work worth doing." — Theodore Roosevelt, 1903 That's the American promise at its best: the freedom to build something worth building, and the opportunity to earn your place by doing the work. May America continue to be a beacon of freedom, opportunity, and the belief that hard work still means something. Happy 250th America! Happy Independence Day. 🇺🇸 🎉 #FourthofJuly #IndependenceDay

CVE-2026-20245 is the seventh Cisco SD-WAN vulnerability exploited in 2026. It was used for months prior to its disclosure and patching. BitcoinEthereumNews.com Seven exploited SD-WAN vulnerabilities. In one year. From one vendor. And this latest one was actively used against organizations for months while nobody knew it existed. This is the timeline problem that makes point-in-time testing functionally useless against this category of threat. The vulnerability was real on day one. The CVE didn't exist until months later. The patch came after that. Organizations running annual pen tests or quarterly scans had no mechanism to detect this exposure during the months it was being actively exploited. The only posture that catches a zero-day in active use before disclosure is one that continuously tests what is actually accessible in your environment today. Not what was accessible last quarter. Today. @Cisco @CISAgov @Mandiant @DarkReading #CyberSecurity #InfoSec #PenTesting #CISO

One of the hardest things to manufacture in a sales process is urgency. You can create it artificially with discount deadlines and quarter-end pressure. That works once. Or you can find the real urgency that already exists in your prospect's world. Right now the real urgency in cybersecurity is sitting in the news every week. Intelligence agencies warning about AI-enabled attacks. 30,000 working Fortinet credentials in a hacker database. Cisco SD-WAN exploited for months before disclosure. The compelling event isn't something you invented. It is already happening to companies that look exactly like your prospect. The rep who connects those dots to their prospect's specific exposure is having a different conversation than the rep pitching features. That conversation doesn't need a manufactured deadline. The world is providing one. @HubSpot @Salesforce @CISAgov #EnterpriseSales #B2BSales #CyberSecurity #GTM

Here is something I didn't fully appreciate before joining an early-stage company. Hiring is not just a time problem. It is an attention problem. At a large company, you have HR, a recruiting team, a hiring manager playbook, and a structured process. The machine runs mostly without you. At a startup, every hire is a founder or senior leader problem. You write the job description, you source, you screen, you sell the candidate on joining a company they've never heard of, and you onboard them once they arrive. All while doing the job you hired them to eventually take off your plate. The result is that most early-stage companies hire too slowly when they should move fast, and too fast when they should slow down. Usually because the process is exhausting and the timing is never right. The only fix I've found is treating hiring like a sales pipeline. Always be sourcing. Build relationships before you have a role open. Know who you want before you need them. It doesn't make it easy. It makes it less reactive. #StartupLife #Founder #GTM #B2BSales

Here's a take I don't see enough. The most dangerous unguarded doors in most organizations right now are not in their applications or their cloud infrastructure. They are in their security tools. @Fortinet : 30,000 working credentials in a hacker database this week. @CiscoSecure @Cisco SD-WAN: seventh exploited vulnerability of 2026, active for months before disclosure. @msftsecurity @Microsoft Defender: zero-days patched after active exploitation earlier this month. Check Point VPN: exploited since May before most organizations knew it existed. These are not obscure legacy systems nobody cares about. These are the platforms organizations deploy specifically to protect themselves. Attackers know this. They study the deployment patterns of security vendors. They know that a compromised firewall admin portal gives them a view of the entire network architecture. That a compromised VPN gateway gives them clean credentials into the environment. Security tools are high-value targets precisely because they are trusted. Test them like it. @Fortinet @Cisco @CISAgov @Mandiant #CyberSecurity #InfoSec #PenTesting #CISO

The JLR breach last year made one point more vividly than any report could. Five weeks of halted production. £1.9 billion in damages. 5,000 supply chain companies impacted. The entry point was a third-party supplier's software vulnerability. Not a nation-state attack. Not a zero-day exploit requiring elite skills. A known vulnerability in a trusted supplier's software that nobody had tested recently. Manufacturing environments are complex, connected, and growing more so every year as Industry 4.0 integrations multiply the attack surface. They are also almost entirely dependent on IT generalists who are managing operational technology without specialized security support. Continuous security testing built for IT generalists — that covers the full surface including third-party access paths, OT integrations, and connected infrastructure — is what this sector actually needs. Not enterprise tools that require a dedicated security team to operate. Something that works for the people actually in the building. @Parabellyx @Dragos @CISAgov #CyberSecurity #Manufacturing #ContinuousTesting #OTSecurity

Dragos published a report this week on something that should be required reading for every OT security team. AI-assisted intrusion targeting a Mexican water utility was documented, with Claude and OpenAI models used to pursue OT access. MedicalITG AI models used to pursue access to operational technology running critical infrastructure. Not a theoretical scenario. A documented, attributed attack. The convergence of IT and OT networks was supposed to bring efficiency. It brought a new category of risk instead. When the same AI tools available to security researchers are being used to map industrial control systems, the attack surface of a water utility or a manufacturing facility is no longer just physical. It's digital, connected, and being probed by machine-speed intelligence. Most OT environments were not designed with this threat model in mind. That's the gap we're all living in right now. @Dragos @CISAgov @AnthropicAI @OpenAI #CyberSecurity #OTSecurity #AISecurity #Manufacturing

Channel partners focused on healthcare and financial services are missing a sector that may be the single largest untapped security opportunity in the mid-market: Manufacturing. Manufacturing has been the most attacked sector globally for four consecutive years. Ransomware incidents surged 61% in 2025. And yet the security conversation in most mid-market manufacturing companies is still being driven by IT generalists who are also managing the production network, the ERP system, and the corporate Wi-Fi. These organizations know they have a problem. They don't have a trusted partner helping them solve it. The partner who shows up with vertical-specific knowledge of OT/IT convergence risk, who understands what a production shutdown actually costs, and who can deliver continuous coverage at mid-market economics — that partner owns the conversation. Nobody else is having it. @ConnectWise @Pax8 @Dragos #CyberSecurity #Manufacturing #CISO #InfoSec

Healthcare CISOs have a compliance deadline and a visibility problem at the same time. HIPAA's new Security Rule mandates annual pen testing. Enforcement begins in 2027. But here's the thing that compliance doesn't solve: Response times in healthcare average 241 days to identify and contain breaches. 241 days. An annual pen test run in January gives you a snapshot of your posture as of January. If a vulnerability opens in February — a new integration, a misconfigured device, a contractor account left active — you won't find it until next January. That's 11 months of exposure in an environment where the average breach takes 241 days to even detect. The math on point-in-time testing in healthcare doesn't work anymore. Continuous security testing isn't a premium upgrade on top of compliance. It's the only model that actually closes the gap the compliance mandate is trying to address. @CISAgov @HHSgov @Parabellyx #CyberSecurity #Healthcare #ContinuousTesting #HIPAA

There's something clarifying about building a cybersecurity company right now. Every week the news cycle validates the problem you're solving. Manufacturing: most attacked sector in the world four years running. Healthcare: $7.42 million average breach cost. 67% hit by ransomware last year. AI-generated phishing at industrial scale. Zero-days exploited within hours. When you're early stage, you spend a lot of time convincing people the problem is real and urgent. We don't have that problem. The challenge is different. It's cutting through a market full of vendors all claiming to solve the same thing, and proving that your approach actually works for the organizations being left behind by everyone else. That's the work. Every day. #StartupLife #CyberSecurity #Founder #GTM

Google filed a lawsuit this week against a Chinese cybercrime network for weaponizing Gemini AI to run industrial-scale phishing operations. The network used Google's Gemini AI agent to generate fraudulent phishing pages and deploy massive SMS phishing attacks, often impersonating legitimate brands, alerting recipients of brokerage account issues or insisting they were eligible for rewards. Think about what this means. The same AI tool built to help people write emails and build products was repurposed to build convincing fraud infrastructure at machine scale. This is not a future scenario. It happened. It's in litigation right now. The attackers didn't need to build their own AI. They used yours. Every major AI platform — Gemini, ChatGPT, Claude — is actively working to prevent this kind of abuse. But the cat-and-mouse game between AI safety controls and attackers finding workarounds is real and ongoing. For security teams: AI-generated phishing is now indistinguishable from legitimate communications at scale. Your email filter doesn't know the difference. Train your people like it. @Google @CISAgov @AnthropicAI @OpenAI #CyberSecurity #AISecurity #Phishing #InfoSec

Something is changing in healthcare cybersecurity that doesn't get enough coverage. It's no longer an IT problem. It's a governance problem. In 2026, a ransomware attack forced the University of Mississippi Medical Center to close 35 outpatient clinics, cancel appointments, and delay procedures during system restoration. 35 clinics. Closed. Because of a cyberattack. 67% of healthcare organizations experienced ransomware attacks in 2024. The average cost of a breach in healthcare is $7.42 million — the highest of any sector. And yet most healthcare boards are still treating cybersecurity as a line item in the IT budget rather than a patient safety and operational continuity issue. The organizations that get this right in 2026 are the ones where the CEO and board have taken ownership of cyber risk. Not delegated it. Owned it. That shift is happening. Not fast enough. @CISAgov @HHSgov @AHAhospitals #CyberSecurity #Healthcare #CISO #InfoSec

One of the sharpest ways to differentiate in enterprise security sales right now is to stop selling horizontal and start selling vertical. Every industry has specific threat actors, specific regulatory requirements, specific attack surfaces that general security messaging doesn't address. A manufacturing CISO cares about OT/IT convergence and production continuity. A healthcare CISO cares about patient data, HIPAA, and connected medical devices. A financial services CISO cares about NYDFS compliance and supply chain risk. The rep who walks in and demonstrates they understand that specific world — not just security in general — earns trust faster than any product demo. Know the vertical. Speak its language. That's what separates a vendor from a partner. @HubSpot @Salesforce #EnterpriseSales #B2BSales #CyberSecurity #CISO