Tony Morbin

Executive News Editor, EU

Morbin is a veteran cybersecurity and tech journalist, editor, publisher and presenter working exclusively in cybersecurity for the past decade – at ISMG, SC Magazine and IT Sec Guru. He previously covered computing, finance, risk, electronic payments, telecoms, broadband and computing, including at the Financial Times. Morbin spent seven years as an editor in the Middle East and worked on ventures covering Hong Kong and Ukraine.

Identity Is the New Battleground in Cloud-Era Cyberattacks

Tony Morbin • October 1, 2024

As cloud adoption soars, cybercriminals pivot to exploiting identities over networks. This paradigm shift demands a new approach to security, focusing on privilege management and identity protection across complex digital ecosystems, said James Maude, field chief technology officer at BeyondTrust.

Cyber Incident Preparedness and Collaboration in Crisis

Tony Morbin • September 26, 2024

Organizations face growing challenges from cyber incidents. Former CISOs Heather Lowrie and Jon Staniforth share insights on enhancing preparedness through cyber exercises, proactively communicating with law enforcement and ensuring consistent messaging during incidents.

ISC2/CIISec Tips on Recruitment, Retention in Cybersecurity

Tony Morbin • June 19, 2024

The cybersecurity skills gap has reached 4 million globally and only by taking a more innovative approach to identifying, recruiting and retaining candidates from the widest pools of talent can we meet the growing demand for cybersecurity professionals, says a new guide from ISC2 and CIISec.

Human-centric data security for SaaS and Gen AI

Tony Morbin • January 25, 2024

Organizations need to respond now to the increased threat of data loss when sharing data in SaaS applications and when using Generative AI.

Flaws in Mobile Password Manager: Auto-Fill to AutoSpill

Tony Morbin • January 4, 2024

Mobile password managers are different from computer-based password managers due to different constraints found in the mobile operating system, said Ankit Gangwal, assistant professor at the International Institute of Information Technology. He shed light on the risks introduced by AutoSpill.

Surging Supply Chain Attacks: Risks and Defenses

Tony Morbin • January 3, 2024

Sharan Hiremath, senior product manager at JFrog, delved into the escalating challenge of supply chain attacks. With a focus on the surge in open-source vulnerabilities, he outlined key factors contributing to the rise of attacks and offered insights into threat mitigation strategies.

The TsuKing Threat: New DNS Vulnerability Explained

Tony Morbin • January 2, 2024

Domain name system or DNS attacks have persisted as a popular method for carrying out DDoS attacks. Haixin Duan, professor at Tsinghua University's Institute for Network Sciences and Cyberspace, describes TsuKing as a new form of DNS attack that does not require IP address spoofing.

Open-Source Linux Distribution for Blue Teaming

Tony Morbin • December 21, 2023

The DFIR landscape is constantly evolving, driven by technological advancements and new cyberthreats. "Tsurugi," developed by Giovanni Rattaro, senior cybersecurity expert, and Marco Giorgi, senior DFIR analyst, is an open-source Linux distribution project designed for blue teams.

Automation 2.0: Measuring Security Decisions in the SOC

Tony Morbin • December 20, 2023

Automating decision-making in the security operations center strengthens an organization's ability to detect, respond to and mitigate security threats effectively. But the focus has shifted from micro-automation to a unified platform, according to Michael Lyborg, CISO of Swimlane.

Closing the Cybersecurity Talent Gap: Challenge vs. Optimism

Tony Morbin • December 19, 2023

The recently released ISC2 workforce study highlights a staggering deficit of 4 million professionals needed in the cybersecurity industry. Despite the challenges, CISO Jon France sees room for optimism. "It's a great profession to come into - never a dull moment," he said.

Open-Source Security: Shining the Spotlight on Development

Tony Morbin • December 19, 2023

Marta Rybczyńska, technical program manager at Eclipse Foundation, discussed best practices for reporting vulnerabilities, adopting AI and bridging the gap between developers and security researchers to adhere to cybersecurity best practices for open-source software.

Joe Sullivan on CISO Imperatives: Responsibility, Authority

Tony Morbin • December 12, 2023

Joe Sullivan, CEO of Ukraine Friends, delves into the complexities of cybersecurity, drawing from his experience as the former CSO of Uber. He shares lessons learned from the high-profile Uber breach case and personal experiences to address broader issues in the cybersecurity landscape.

Unlocking Cybersecurity With Crowdsourced Ethical Hacking

Tony Morbin • December 11, 2023

Bugcrowd CEO Dave Gerry and Emily Ferdinando, vice president, marketing, highlighted the significance of tapping into the creativity of the ethical hacker community, combined with the expertise of internal security teams, to enable organizations to stay one step ahead of cyberthreats.

The State of Enterprise Mobile App Security 2023: Results Analysis

Tony Morbin • November 17, 2023

Compromised mobile apps can be an open door to critical enterprise app servers and other back-end systems, and this survey aims to shine a light on a potential hole in most enterprise security walls – exposing potential gaps in CISO awareness.

AI and the Imperative to Take Cybersecurity Precautions

Tony Morbin • October 16, 2023

The use of artificial intelligence can profoundly improve operations and services across many industries, but the multifaceted relationship between AI and cybersecurity calls for new measures to address security, privacy and regulatory concerns through the right protocols and procedures.