Latest Post and Insights

Following US-Israel military operations in Iran, organizations face heightened cyber risk from state-sponsored Iranian threat actors. Here's what's happening, who's targeting your industry, what Ostra is doing to protect you, and what you need to do on your side.

Our founder Michael Kennedy joined the IT in the D podcast for a conversation on what cybersecurity should look like for real-world organizations, especially small and mid-market teams that do not have a full security department on staff.

A Fortinet vulnerability appears to remain under active exploitation by threat actors. Multiple reports indicate that while applying the available patches is necessary, additional mitigation actions may still be required. The flaw enables attackers to bypass single sign-on (SSO) authentication through maliciously crafted SAML messages when FortiCloud SSO functionality is enabled.

Everywhere you look, vendors are promising “AI-powered detection,” “autonomous response,” and “next-generation SOC automation.” But beneath the marketing noise, cybersecurity professionals are left asking a more practical question: What works in a modern SOC, and what’s still hype?

Across 2025 Hacks & Hops sessions that Ostra team members were a part of, one message was clear: Modern security is about strengthening fundamentals, sharpening collaboration, and applying new technologies with intention.

Not all threats come from malware—some hide in everyday business software. Ostra uncovered how ZoomInfo’s plugin collects far more data than most companies realize.