What We're Seeing

The critical FortiOS authentication bypass used by Volt Typhoon is still live at roughly one in eight organizations in our dataset. Here's what it looks like, how to check if you're exposed, and why patching alone isn't enough.

DoD contractors have until November 10, 2026 to achieve CMMC Level 2 certification or lose contract eligibility. Passive scanning across 2,600+ contractors shows what the most common gaps are — and they're fixable without major capex.

NIS2 enforcement began October 2024. 18 critical sectors are in scope. The most common misconception we encounter from EU organizations: existing ISO 27001 certification does not satisfy NIS2 — the controls are different and the obligations are stricter.