Kevin Surace
2 minute read
Recommended Posts
Navigating the New SEC Cybersecurity Rules
Cyber incidents and losses escalate every year and the impact on every organization can range from significant to crippling. With the average cost from a data breach in the U.S. now approaching $10 million and losses in market value for victim companies sometimes exceeding $100 million, it was time for the U.S. Securities and Exchange Commission (SEC) to introduce robust cybersecurity rules for public companies. This was an obvious necessity to protect investors and the integrity of U.S. securities markets. As a C-level executive or person with responsibility for cybersecurity, understanding these rules is crucial for remining in compliance with the new regulations, maintaining a strong security posture, and the financial health of your organization.
John Gunn, CEO, Token
2 minute read
The Vercel Incident Shows the New Shape of Identity Attacks
The most important lesson in Vercel’s April 2026 security bulletin is not simply that internal systems were accessed. It is the likely path the attacker took to get there. According to Vercel, the incident originated with a compromise of Context.ai, a third-party AI tool used by a Vercel employee. The attacker then used that access to take over the employee’s Vercel Google Workspace account, which in turn enabled access to some Vercel environments and non sensitive environment variables.
Kevin Surace
2 minute read
The Grafana GitHub Token Breach: The Front Door Was Identity
Grafana recently disclosed that an unauthorized party obtained a token granting access to the company’s GitHub environment and used it to download portions of its codebase. Grafana confirmed that no customer data or personal information was accessed, invalidated the compromised credentials, and applied additional controls. The response was fast, and the containment was effective.
Kevin Surace
2 minute read