Latest Post and Insights

Our founder Michael Kennedy joined the IT in the D podcast for a conversation on what cybersecurity should look like for real-world organizations, especially small and mid-market teams that do not have a full security department on staff.

A Fortinet vulnerability appears to remain under active exploitation by threat actors. Multiple reports indicate that while applying the available patches is necessary, additional mitigation actions may still be required. The flaw enables attackers to bypass single sign-on (SSO) authentication through maliciously crafted SAML messages when FortiCloud SSO functionality is enabled.

Everywhere you look, vendors are promising “AI-powered detection,” “autonomous response,” and “next-generation SOC automation.” But beneath the marketing noise, cybersecurity professionals are left asking a more practical question: What works in a modern SOC, and what’s still hype?

Across 2025 Hacks & Hops sessions that Ostra team members were a part of, one message was clear: Modern security is about strengthening fundamentals, sharpening collaboration, and applying new technologies with intention.

Not all threats come from malware—some hide in everyday business software. Ostra uncovered how ZoomInfo’s plugin collects far more data than most companies realize.

Backed by General Catalyst and Rally Ventures, Ostra extends its Series A to $9.5M to scale its platform, grow its team, and integrate Blackwell Security.