Loading story…
Nicolas Werner of Enoflag highlights how Capture the Flag (CTF) competitions serve as effective training grounds for cybersecurity professionals. These events test a range of offensive security skills and use dynamic scoring to ensure fairness and discourage flag sharing. Werner emphasizes the importance of blending physical and digital challenges and building a talent pipeline through university and global competitions.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybersecurity education and professional development saw significant evolution in 2025, with platforms like TheCyberThrone shifting their editorial focus toward certification-driven content and structured learning for practitioners. TheCyberThrone emphasized the importance of certifications as frameworks for thinking, providing in-depth resources and exam-relevant material to support career advancement and executive-level decision-making. The platform expanded its global reach, engaging readers from 181 countries and fostering a community of over 1,200 subscribers, while reinforcing the connection between certification knowledge and real-world risk management. Simultaneously, the open-source intelligence (OSINT) community experienced a surge in training resources, best practices, and technical guides. Notable developments included reviews of OPSEC trainings, new methodologies for monitoring military activity via social media, and advanced digital forensics techniques such as browser fingerprinting. Curated articles and webinars highlighted the growing importance of decentralized OSINT, AI-driven fraud detection, and passive investigation techniques, reflecting a broader trend toward specialized, skills-based learning in the cybersecurity field.
Jun 29, 2026
Security leaders are increasingly recognizing that traditional approaches to cybersecurity training and incident response are insufficient in the face of rapidly evolving threats. According to the Cytactic 2025 State of Cyber Incident Response Management (CIRM) Report, 57% of significant cyber incidents involve attack scenarios that organizations have never rehearsed, highlighting a critical gap in preparedness. Many organizations focus their tabletop exercises on well-known threats such as ransomware, but the real challenge often comes from novel and unexpected attack vectors. Security experts argue that tabletop exercises are frequently either too specific or too grandiose, failing to address the nuanced and likely scenarios that teams are more apt to encounter. For example, some enterprises have gone to great lengths, such as purchasing burner phones for secure communications during exercises, only to discover practical issues during the simulation. Analysts and consultants point out that these exercises often lack realism and do not align with the actual risk and threat profiles of the organization. Meanwhile, a global survey by DarkTrace found that 74% of cybersecurity professionals view AI-powered threats as a major challenge, and 90% expect these threats to significantly impact their organizations within the next one to two years. The increasing use of AI-generated malware and autonomous reconnaissance by adversaries means that threats are evolving in real time, outpacing the static, compliance-driven training models many organizations still use. Legacy approaches, such as annual penetration tests and semi-annual tabletop exercises, are no longer adequate, as they provide limited visibility and fail to build lasting strategic capabilities. These outdated models also assume that adversaries are predictable, which is no longer the case in the current threat landscape. Experts advocate for a shift toward Continuous Threat Exposure Management (CTEM), a discipline that emphasizes ongoing, threat-informed practice rather than occasional, fragmented exercises. This approach requires organizations to move from reactive defense to operational resilience, fostering cross-functional collaboration and daily engagement with emerging threats. By making training exercises more relevant, realistic, and tailored to the organization's specific context, security teams can better align with business objectives and improve their ability to respond to unforeseen incidents. The consensus among industry leaders is that a transformation in both mindset and practice is essential to keep pace with the dynamic nature of cyber threats. Organizations that fail to adapt risk being unprepared for the next wave of sophisticated attacks, particularly those leveraging artificial intelligence and automation. Ultimately, the future of cybersecurity training lies in continuous, adaptive, and business-aligned preparation that mirrors the complexity and speed of modern adversaries.
Jun 29, 2026
The cybersecurity industry continues to grapple with a persistent talent gap, with organizations struggling to fill critical roles due to a combination of hiring practices and perceived skills shortages. Carol Lee Hobson, CISO at PayNearMe, highlights that the issue is not solely a lack of qualified candidates but also stems from misaligned compensation structures and limited entry-level opportunities. She emphasizes the importance of creating clear pathways for newcomers, including internships and junior roles, to help bridge the gap between education and employment. Retention is another significant challenge, with many professionals leaving due to inadequate professional development, inflexible work environments, and insufficient support from leadership. Hobson notes that fostering a culture of mentorship and continuous learning is essential for building a robust pipeline of future security leaders. Diversity in the cybersecurity workforce is gradually improving, and this trend is seen as a positive force for innovation and resilience within teams. In parallel, industry experts argue that the most effective entry into cybersecurity is not through specialized roles like red teaming but by developing a strong understanding of risk management and business fundamentals. Security Operations Center (SOC) roles and foundational security positions are often more accessible and provide a broader perspective on organizational security needs. The misconception that red teaming is the primary or most prestigious entry point can deter candidates from pursuing other valuable career paths. Understanding how businesses operate and what assets need protection is considered more critical than technical prowess in offensive security for those starting out. Podcasts and industry discussions reinforce the message that a well-rounded skill set, including communication and risk assessment, is highly sought after by employers. The evolving landscape of cyber threats requires professionals who can adapt and think strategically, not just technically. Organizations are encouraged to rethink their hiring criteria, focusing on potential and aptitude rather than rigid experience requirements. By aligning compensation, offering flexible work arrangements, and investing in employee growth, companies can better attract and retain top talent. The collective insights from industry leaders and practitioners underscore the need for a holistic approach to cybersecurity career development, balancing technical skills with business acumen and people-centric strategies. As the field matures, the emphasis is shifting toward building sustainable, diverse, and adaptable teams capable of meeting the complex challenges of modern cyber risk.
Jun 29, 2026