Cybersecurity funding held near $10.6B in H1 2026 while deal count fell. That gap is the whole story: the market is consolidating around a few AI-native winners, not broadly recovering. Here is how to read it.
A beautiful deck that argues the seller's case still loses to a plain one that argues the buyer's. The 12 mistakes that lose enterprise security deals, and how to fix each.
Cold email, fear decks, and feature demos disqualify you with CISOs. Here is how security buyers actually decide, and how to be on the shortlist before the cycle starts.
The agency playbook burns seed budgets because it was built for markets that trust marketing. Security buyers do not. Here is what to do instead, from someone who sat in the buyer's chair.
The CISO buying process runs on trust and peer reputation, and most of it happens before your first call. Here is how security shortlists form, who is really in the room, and where vendors get cut.
Fortinet patches second critical zero-day in days, TeamPCP steals 340 GB from the European Commission via Trivy, and LinkedIn secretly scans for 6,000+ browser extensions on every page load.
TeamPCP compromised the Telnyx Python SDK on PyPI using audio steganography, partnered with LAPSUS$ and a ransomware group, and turned developer tools into entry points for extortion campaigns.
Happy Sunday! In this week's brief: * Trivy CanisterWorm Supply Chain Attack: A self-spreading worm infected 47 npm packages using blockchain-based C2, harvesting developer tokens to automatically compromise entire package ecosystems. Time to audit those postinstall hooks. * Stryker Wiper Attack: Iran-linked Handala group destroyed thousands of devices across 79 country offices, exfiltrating 50TB before detonation. When geopolitics meets inadequate segmentation, the result is total environme
Happy Thursday! In this week's brief: * CrackArmor Linux Apocalypse: Nine vulnerabilities in AppArmor, hiding since 2017, let any unprivileged user escalate to root on 12.6 million enterprise Linux servers. Patch now. * AI Malware Is Real: IBM X-Force caught ransomware group Hive0163 deploying AI-generated malware in a live attack, while CrowdStrike reports 82% of detections are now malware-free. * Google's $32B Wiz Bet: The largest deal in Google's history closed this week, alongside $500M
Join security leaders who receive knowledge and resources on becoming a more effective security leader. One actionable newsletter every week.
Browse The Mandos Brief
