The Guiding Point | GuidePoint Security

RansomSnub: RansomHub’s Affiliate Confusion
Executive Summary Since RansomHub’s emergence in early 2024, the group has become the most prolific Ransomware-as-a-Service group operating today. In […] ...

This Caller Does Not Exist: Using AI to Conduct Vishing Attacks
As technology advances, attackers are quick to adapt, using cutting-edge innovations to craft social engineering attacks that exploit the one […] ...

Identities and IAM Trends: Q&A With a Saviynt Identity Expert
Ben MartinMooney | | Blog, Cybersecurity, Identity & Access Management, identity and access management, trends, vendor
Author: Ehud Amiri, SVP Product Management, Savyint How will the threat to identities change over the coming year? AI will […] ...

Supporting Continuous Learning in AI Governance and Security
Ed Dunnahoe | | AI, AI Governance, AI Security, Blog, Cybersecurity, education, Resources, Security Awareness & Education
I’d like to begin this post with a heartfelt thank you to everyone who joined our recent Brick House webinar […] ...

A New Standard for SaaS Security: Reducing Risk and Complexity
SaaS platforms have become essential for organizations of all sizes, delivering flexibility and innovative solutions. But with this evolution comes […] ...

Aligning Cybersecurity and Third-Party Risk Management with Business Goals
Will Klotz | | Blog, Cybersecurity, Governance, Risk & Compliance, GRC, risk management, Security Awareness & Education
In the cybersecurity risk world, we often encounter the issue of not speaking the same language as the business. This […] ...

Rethinking Risk: ICS & OT Security with Purdue 2.0 and GRC
OT Practice | | Blog, Cybersecurity, Governance, Risk & Compliance, GRC, ICS, OT, OT Security Services, Security Awareness & Education
The rise of the extended Internet of Things (XIoT) across industrial (IIoT), healthcare (IoMT), commercial (OT, BMS/EMS/ACS/iBAS/FMS), and other sectors […] ...

Fortifying OT/ICS: Building Resilience and Business Continuity in a Cyber Threat Era
Without solid governance, organizations cannot effectively manage compliance or mitigate risks. Strong governance establishes the foundation for successful processes, procedures, […] ...

Breaking Basta: Insights from Black Basta’s Leaked Ransomware Chats
Jason Baker | | Cybersecurity, GRIT, GRIT Blog, Ransomware, SBN News, Security Awareness & Education, vulnerability
Key Takeaways During the period covered by the Black Basta leaked chat logs (18 September 2023 – 28 September 2024), […] ...

Snail Mail Fail: Fake Ransom Note Campaign Preys on Fear
Grayson North | | Cybersecurity, GRIT, GRIT Blog, Ransomware, SBN News, Security Awareness & Education
In early March 2025, GRIT received reports from multiple organizations regarding suspicious physical letters delivered by mail from US addresses […] ...