The Cloud Has Changed — Our Security Model Hasn’t
Cloud security is shifting from protecting assets to governing relationships, identities and autonomous actors. This eight-part CISOsCISO series explores what the CSA Top Threats 2026 mean for CISOs — and why the next frontier is digital agency.
Part 11 — When Cyber Attacks Leave the Computer
When software controls physical reality, a cyberattack no longer ends at the computer. DEF CON 34 showed how attacks can traverse IT, industrial protocols and controllers to reach physical processes—forcing CISOs to think beyond compromise toward consequence and safety.
Part 10 — Below the EDR: The Security Layers We Forgot
What if reimaging a compromised server does not restore trust? DEF CON 34 hardware research exposes the layers below EDR—from firmware and BMCs to SMM, security processors and memory—forcing CISOs to rethink what cyber recovery actually means.
