<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[Dab Tech Solutions]]></title><description><![CDATA[Dab Tech Solutions helps ambitious businesses manage cyber risk, strengthen security, and achieve compliance through expert-led cybersecurity consulti]]></description><link>https://www.dab.solutions/blog</link><generator>RSS for Node</generator><lastBuildDate>Mon, 26 Oct 2026 23:20:47 GMT</lastBuildDate><atom:link href="https://www.dab.solutions/blog-feed.xml" rel="self" type="application/rss+xml"/><item><title><![CDATA[Why You Must Red Team AI Agents Before Attackers Do]]></title><description><![CDATA[AI agents change the security question from “What can the model say?” to “What can the model do?” That shift matters. A chatbot that gives a poor answer may create confusion. An agent with access to email, tickets, customer records, code repositories, payment tools, cloud consoles, or workflow automation can take action. If an attacker can influence those actions, the risk moves from bad output to real operational damage. This post follows post #7 on LLM features, where we looked at the...]]></description><link>https://www.dab.solutions/post/ai-agent-security-red-teaming</link><guid isPermaLink="false">6ad930ec41ead205bc95e8e1</guid><pubDate>Tue, 22 Sep 2026 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_c21d40e055a646f0b397329c6c24a902~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Cyber Resilience Act Obligations]]></title><description><![CDATA[The Cyber Resilience Act is no longer a distant policy file. It is now a dated compliance programme with fixed milestones, and the first operational obligation lands before the wider regime fully applies. The regulation, formally Regulation (EU) 2024/2847, sets cybersecurity requirements for many connected hardware and software products placed on the EU market. For manufacturers, importers and distributors, the most urgent work is not only product design. It is also the ability to detect,...]]></description><link>https://www.dab.solutions/post/cyber-resilience-act-obligations</link><guid isPermaLink="false">6ad9409a6f7d22c57e0f0ee5</guid><pubDate>Tue, 21 Jul 2026 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_b28ec8cb120b461f91b4016f1efb05f0~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Exploitation Leads as Patch Backlogs Grow: Why Fix Everything Fails]]></title><description><![CDATA[Exploitation is now the leading route into many organisations, and the gap between discovery and remediation is widening. Verizon’s Data Breach Investigations Report 2026 reports exploitation at 31%, making it a dominant method in cyber incidents. At the same time, only 26% of CISA Known Exploited Vulnerabilities are fully fixed, with a median fix time of 43 days. That combination should concern both technical and financial leaders. Attackers are not waiting for perfect conditions. They look...]]></description><link>https://www.dab.solutions/post/risk-based-vulnerability-management</link><guid isPermaLink="false">6ad92ec341ead205bc95e44a</guid><pubDate>Tue, 16 Jun 2026 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_0f138bd71a514b7f8ea6ee896d2a6885~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Compliance Gaps Cost Deals: Why Sales Teams Need a Compliance Review]]></title><description><![CDATA[A deal can pass budget approval, win technical support, and still stall because one document is missing, outdated, or out of scope. Security and compliance are no longer back-office concerns that appear after contract review. They are now part of sales qualification. For many buyers, proof of certification is a filter. If a supplier cannot show the right audit report, the right scope, or a credible remediation plan, the conversation slows down or stops. That makes compliance readiness a...]]></description><link>https://www.dab.solutions/post/compliance-gaps-cost-deals-why-sales-teams-need-a-compliance-review</link><guid isPermaLink="false">6abbbc4f6bdf3a2cf26a02f8</guid><pubDate>Tue, 19 May 2026 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_a747ca9488fa43e2a81e1ca9a0afbc81~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[The CISO Gap Is a Leadership Gap: Why Businesses Need Security Leadership Now]]></title><description><![CDATA[Most companies do not fail at security because no one bought another tool. They fail because no one owns the hard decisions. Security work touches product design, customer trust, legal duties, vendor risk, hiring, budgets, and board reporting. Yet in many companies, it still sits between overloaded technology teams, part-time compliance owners, and founders who only see the risk clearly after something goes wrong. That is the CISO gap. A Chief Information Security Officer is the person...]]></description><link>https://www.dab.solutions/post/virtual-ciso-leadership-gap</link><guid isPermaLink="false">6ad92cacd17b29f72a8c7426</guid><pubDate>Tue, 07 Apr 2026 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_f855e83cb65d4fb8950934cc7c2b80a4~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[AI Shift Left in Cybersecurity: Local Skills Coding Agents and AI Code Reviews]]></title><description><![CDATA[Software teams used to treat security as a late-stage gate. Build the feature, ship it to testing, send it through a scanner, then fix what security found. That model was already strained by cloud delivery and short release cycles. AI has made it harder to defend. Coding agents can now draft functions, migrate code, write tests, explain logs, and refactor entire modules. That speed is useful, but it also changes the risk profile. A flawed prompt, weak agent rule, or unchecked generated change...]]></description><link>https://www.dab.solutions/post/ai-shift-left-in-cybersecurity-local-skills-coding-agents-and-ai-code-reviews</link><guid isPermaLink="false">6ab94a98374a74a681c46f22</guid><pubDate>Mon, 19 Jan 2026 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_f7a652cd5eda42b5a0ca108852133329~mv2.png/v1/fit/w_1000,h_768,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Why Certify Your AI Management System Now]]></title><description><![CDATA[AI compliance is moving from “we should document this” to “can we prove we control this?” That shift matters because many organisations already use AI in security tools, customer support, software development, hiring, analytics, fraud detection, and internal automation. The hard part is not only choosing safe tools. It is showing customers, auditors, regulators, and boards that AI risks are managed in a repeatable way. That is where ISO 42001 comes in. It gives organisations a practical...]]></description><link>https://www.dab.solutions/post/iso-42001-certification-ai-act</link><guid isPermaLink="false">6ad92a65d17b29f72a8c6e70</guid><pubDate>Tue, 13 Jan 2026 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_ae1fe6e68bc44915bc5d6b3973510a7c~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Identity Attacks Surge in 2025 What Lean Teams Must Monitor Monthly]]></title><description><![CDATA[Attackers do not need to break the firewall if they can sign in with a valid account. That is why identity attacks have become one of the most practical threats for small and mid-sized organisations in 2025. The target is not only a server or an application. It is the sign-in process, the password reset flow, the administrator account, and the tired person approving prompts at the end of a long day. Microsoft’s Digital Defense Report 2025 points to the same direction many security teams...]]></description><link>https://www.dab.solutions/post/identity-threat-detection-small-teams</link><guid isPermaLink="false">6ad91cbde9112b3c206c51b9</guid><pubDate>Tue, 09 Dec 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_2f20eb6e78c24af69be9610b0c718c85~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[When You Cannot Hire a CISO: Why Fractional Leadership Wins]]></title><description><![CDATA[Security ownership used to be treated as a technical question. In 2025, that no longer works. Regulation has moved the centre of gravity from the IT function to management accountability. DORA and NIS2 raise the bar for resilience, risk oversight, incident handling, and governance. The EU AI Act adds another layer, with obligations starting in February 2025 that force organisations to ask a new question: who owns AI risk when there is no AI governance leader? For many midmarket organisations,...]]></description><link>https://www.dab.solutions/post/when-you-cannot-hire-a-ciso-why-fractional-leadership-wins</link><guid isPermaLink="false">6abbba65796879daf856801c</guid><pubDate>Wed, 19 Nov 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_bfa4bb9a5ba04b1a9c4545318b735cae~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Post Quantum Planning Without Panic]]></title><description><![CDATA[Quantum risk is not an emergency for every system today, but it is already a planning issue for data that must remain confidential for years. The practical goal for 2025 is clear: know where cryptography is used, decide what data is most exposed, and make systems easier to change before deadlines arrive. The anchor facts are now solid. The US National Institute of Standards and Technology (NIST) finalised FIPS 203, FIPS 204, and FIPS 205 in August 2024. These standards cover the first...]]></description><link>https://www.dab.solutions/post/post-quantum-cryptography-planning</link><guid isPermaLink="false">6ad93ed1b103d9f12aa66b93</guid><pubDate>Tue, 18 Nov 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_ae50f9880fbd41f9b86210c243510b59~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Why IT OT Segmentation Is Critical to Stop Breaches and Protect Production]]></title><description><![CDATA[A breach that starts with an email in the office can end with stopped conveyors, locked operator screens, or a plant running in manual mode. That path is common because many production environments now depend on business systems for reporting, scheduling, remote support, file transfer, and software updates. Information technology (IT) covers office systems such as email, laptops, file shares, and enterprise software. Operational technology (OT) covers the systems that monitor and control...]]></description><link>https://www.dab.solutions/post/ot-network-segmentation</link><guid isPermaLink="false">6ad93d636f7d22c57e0f07d4</guid><pubDate>Tue, 16 Sep 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_df72a8504ce64d7c8178a39e0d1c0964~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Shadow AI The New Baseline Gap How to Close It Before It Costs 670K]]></title><description><![CDATA[A team does not need to approve an AI tool for it to enter the company. One employee can paste a customer email into a public chatbot. Another can upload a contract to summarise it. A developer can test code in a coding assistant using a personal account. None of this needs a purchase order, a security review, or a formal rollout. That is why shadow AI has become a baseline control problem. The issue is not that employees are careless. In most cases, they are trying to work faster, write...]]></description><link>https://www.dab.solutions/post/shadow-ai-risks-baseline-controls</link><guid isPermaLink="false">6ad918ef6f7d22c57e0eb9d5</guid><pubDate>Tue, 19 Aug 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_778fb304c9bf4339b174dc3ff36b11bb~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Stay Secure Without a Security Team: Beat Cyber Risks With a Monthly Routine]]></title><description><![CDATA[A company does not need a large security team to be a realistic target. It only needs exposed systems, weak identity controls, unpatched software, or alerts nobody has time to review. That is the hard part for lean organisations. Cyber risk keeps rising, but hiring security talent is getting harder. The ISC2 Workforce Study 2024 found that 67% of organisations are short-staffed in cybersecurity. For many businesses, waiting to hire a full team is not a plan. It is a delay attackers can use....]]></description><link>https://www.dab.solutions/post/stay-secure-without-a-security-team-beat-cyber-risks-with-a-monthly-routine</link><guid isPermaLink="false">6abbb83e714e4cdf4f740093</guid><pubDate>Thu, 17 Jul 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_7c553e51f0934675803d74370894af87~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[AI and OT Security: How Faster Exploits Are Reshaping Industrial Defense]]></title><description><![CDATA[The old security model gave industrial teams a small cushion of time. A flaw was published, attackers studied it, exploit code appeared later, and defenders raced to patch. That cushion is shrinking. Artificial intelligence can help attackers summarize advisories, find likely targets, write convincing messages, and adapt public code faster than a human working alone. For operational technology (OT), where patching can mean stopping a plant, delaying a shipment, or risking safety, faster...]]></description><link>https://www.dab.solutions/post/ai-and-ot-security-how-faster-exploits-are-reshaping-industrial-defense</link><guid isPermaLink="false">6ab94462e3d6523193085cf7</guid><pubDate>Tue, 10 Jun 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_23b36551037a4a538d0b73203d41f226~mv2.png/v1/fit/w_1000,h_768,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Third Party Risk Is Your Attack Surface Are You Reviewing Vendors Effectively]]></title><description><![CDATA[A company can patch its own systems, harden its cloud, train staff, and still be exposed through a supplier it barely reviews. That is no longer an edge case. It is one of the main ways attackers reach business data and critical services. Verizon’s 2025 Data Breach Investigations Report (DBIR) reported that breaches involving a third party doubled to 30%. That figure matters because it turns supplier risk from a procurement concern into a core security issue. If almost one in three breaches...]]></description><link>https://www.dab.solutions/post/third-party-cyber-risk-supply-chain</link><guid isPermaLink="false">6ad9166d13c51a93805dc8ff</guid><pubDate>Tue, 06 May 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_945b1fc38a014433a7c37ff5acc2b864~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[How Leaked API Keys and Passwords Put Your Attack Surface at Risk]]></title><description><![CDATA[A single API key in a public repository can do the same damage as an unlocked admin panel. It may give an attacker access to cloud storage, source code, payment systems, email platforms, monitoring tools, or production data. The risk grows when teams assume the secret is old, unused, or already rotated. That assumption is often wrong. Secrets sprawl happens when API keys, tokens, passwords, certificates, and other credentials spread beyond controlled systems. They appear in Git commits,...]]></description><link>https://www.dab.solutions/post/exposed-secrets-attack-surface</link><guid isPermaLink="false">6ad93b6ab103d9f12aa66404</guid><pubDate>Tue, 08 Apr 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_048414058b694ea4bb7842e737ac04da~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[AI Challenges for CISOs: Balancing Innovation, Security, and Privacy]]></title><description><![CDATA[Artificial Intelligence (AI) is revolutionizing industries, and its impact on cybersecurity is no exception. Much of the conversation around AI and cybersecurity focuses on leveraging AI to automate tasks such as threat detection, incident response, and vulnerability management, just to name a few. These advancements are critical, but they’re only part of the story. Few discussions address the broader challenges CISOs face when AI is integrated into every corner of an organization—beyond the...]]></description><link>https://www.dab.solutions/post/ai-challenges-for-cisos-balancing-innovation-security-and-privacy</link><guid isPermaLink="false">6ab9428ce3d65231930858fe</guid><pubDate>Thu, 13 Mar 2025 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_e4d2d73dcbc54911a90efc7f88ac9a6a~mv2.png/v1/fit/w_1000,h_1000,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Exploited Edge Devices: An Attack Surface Guide]]></title><description><![CDATA[The breach stories are not only about phishing or stolen passwords. A growing share of real-world intrusions now starts with vulnerable internet-facing systems, especially VPNs, firewalls, secure gateways, and file transfer services. The 2024 Data Breach Investigations Report (DBIR) called this out clearly. It reported a sharp rise in attacks that began with vulnerability exploitation, with the MOVEit incident playing a major role in that increase. For security leaders, the lesson is direct:...]]></description><link>https://www.dab.solutions/post/exploited-edge-devices-an-attack-surface-guide</link><guid isPermaLink="false">6abaf69714eeeb87d4d19ec6</guid><pubDate>Mon, 16 Dec 2024 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_43e1b551432e4be0833d8eaccc51bb3b~mv2.png/v1/fit/w_1000,h_768,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Stolen Credentials, No MFA: How Cloud Breaches Really Happen]]></title><description><![CDATA[The clearest cloud breach lesson from 2024 is also one of the least glamorous: stolen passwords still work far too often. When cloud accounts lack multi-factor authentication, attackers do not need advanced malware, zero-day exploits, or noisy network scans. They can simply log in. That pattern shows up strongly in two major sources security leaders watch closely: the CrowdStrike Global Threat Report 2024 and the Verizon Data Breach Investigations Report 2024. Read together, they point to the...]]></description><link>https://www.dab.solutions/post/stolen-credentials-no-mfa-how-cloud-breaches-really-happen</link><guid isPermaLink="false">6abaee574927cc2edf12391b</guid><pubDate>Tue, 12 Nov 2024 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_a9312a046a344ecca16cb7cc2fedcb31~mv2.png/v1/fit/w_1000,h_768,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item><item><title><![CDATA[Ransomware Readiness: Why Incident Plans Fail and How to Test Recovery Before Attack]]></title><description><![CDATA[Ransomware readiness often looks solid on paper until the first real incident exposes the gaps. The contact list is out of date. The backup cannot be restored quickly. No one knows who can approve shutting down a system. Legal, operations, and technology teams all make reasonable decisions, but not always the same decision. That gap is expensive. The Sophos State of Ransomware 2024 report found that 59 % of organisations surveyed were hit by ransomware in the previous year. Sophos also...]]></description><link>https://www.dab.solutions/post/ransomware-tabletop-exercise</link><guid isPermaLink="false">6ad939036f7d22c57e0efe1b</guid><pubDate>Tue, 22 Oct 2024 00:00:00 GMT</pubDate><enclosure url="https://static.wixstatic.com/media/02d3a3_ca1d2914a9d445cda6289378ba5d22d8~mv2.png/v1/fit/w_1000,h_896,al_c,q_80/file.png" length="0" type="image/png"/><dc:creator></dc:creator></item></channel></rss>