Forum Widgets
Recent Discussions
10152026 - TechTalk Recap: Awareness Won’t Save You, Recovery Will
We closed out Cyber Awareness Month with a direct message: awareness matters, but recovery is what keeps the business running when an attack lands. I was joined by Rick Orloff, CISO at Everpure, and Chris Brandt, Consulting Field Solutions Architect for Cybersecurity and Resilience, to discuss how AI is changing the threat landscape, why traditional disaster recovery plans fall short during cyber extortion, and what a resilient recovery architecture looks like in practice. What you missed: AI is shrinking the response window. The time between detection and damage can now be measured in seconds. Teams need controls and recovery processes that can move at machine speed. Disaster recovery is not the same as cyber recovery. In a cyberattack, the facility may be fine—but the compromised data can replicate from production to the DR site. A second copy is not enough if it is also infected. Build an isolated recovery environment. A protected copy needs separate identity and access controls, no path from production, and immutable snapshots that cannot be easily deleted by an attacker. Define your minimum viable business. If every workload is a priority, none of them is. Start by identifying tier-zero infrastructure, tier-one applications, and the business processes that must be restored first. Test the plan before the incident. Recovering one application in 15 minutes proves very little if hundreds need to come back and the network is unavailable. Practice at scale, reduce dependencies on a small group of people, and plan communications for an outage. The practical takeaway: a recovery strategy is only credible when it is isolated, prioritized, and proven through testing. The goal is not just to restore data—it is to restore the business. Watch the full webinar HERELayered Resilience
Accelerate 2026 is approaching, and I’ve been preparing to speak on a cyber resilience panel. It’s prompted me to reflect on how prepared my organization really is—and I’m curious where others stand. This topic is never far from the headlines and feels like a great discussion point for this community or even a future meet-up. Here’s a snapshot of the layers we currently have in place: Immutable local Snapshots Immutable replication to a secondary site SRM Local WORM copy backups Auxiliary long-term WORM backups Air-gapped replication copy Investigating Cloud snap and Pure Protect This doesn't even include other tools like Varonis, Defender, Cortex...etc. What layers are you implementing today, and what are you working on to better protect your data? Sharing our successes and failures makes us all stronger! -Charlie
MFA Downgrade Attacks: Good to know.
Short article on MFA downgrade attacks; provides the basics on what it is and how to defend. Good to know for considering your own policies and processes when folks lose devices. https://www.scworld.com/perspective/why-mfa-downgrade-attacks-could-be-the-next-ai-security-crisis
Community Resources
Community Feedback
If you are having trouble in the community or need assistance, post here!
Account Info & Registration
Check out these articles for user account and registration information.