https://cyberriskguru.com/blog.html Weekly notes on cyber risk from CyberRiskGuru. en Mon, 10 Aug 2026 12:05:59 GMT https://cyberriskguru.com/blog/yesterday-you-had-ample-time-to-fix-vulnerabilities.html https://cyberriskguru.com/blog/yesterday-you-had-ample-time-to-fix-vulnerabilities.html Thu, 06 Aug 2026 00:00:00 GMT AI is compressing exploit timelines from weeks to hours. Why CVSS scores alone won't save you — and what the 'golden triangle' of vulnerability, path, and access actually means for prioritisation. https://cyberriskguru.com/blog/six-skills-cyber-risk-guru.html https://cyberriskguru.com/blog/six-skills-cyber-risk-guru.html Wed, 29 Jul 2026 00:00:00 GMT Six domains worth mastering if you want to be the person your organisation turns to on cyber risk — from application design to user behaviour. https://cyberriskguru.com/blog/cyber-security-vs-cyber-risk.html https://cyberriskguru.com/blog/cyber-security-vs-cyber-risk.html Wed, 22 Jul 2026 00:00:00 GMT Cyber security and cyber risk get used interchangeably, but they're not the same thing. Here's the distinction — and why it matters for how you prioritise controls. https://cyberriskguru.com/blog/talking-about-cyber-risk.html https://cyberriskguru.com/blog/talking-about-cyber-risk.html Wed, 15 Jul 2026 00:00:00 GMT We're quick to talk about reducing the probability of an incident, and slow to talk about what happens when it hits anyway — why consequences deserve equal attention.