Galactic Research: Articles & Insights
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
AI Security
Part 2: The Security Controls Behind a Safe AI Deployment
From the Map to the Hike: The Four Controls and the Client Conversations Behind Them This is Part 2 in a series that covers your AI enablement plan. Part 1 is here if you want the full map. The Little ...
Ten of Eleven AI Coding Agents Failed a Decades-Old Attack
What GuardFall Tells Us About Where AI Security Controls Need to Live Picture a security guard stationed at the entrance of a building. Their job is to check IDs. They're good at it, fast and consistent, and the building's occupants ...
Perfect AI Guardrails Are Impossible. That's Not an Excuse for Ignoring Them.
What a NIST Mathematician Proved, Why the Internet Got it Wrong, and What Your AI Security Program Should Look Like Years ago, running an MSSP, I had a vendor pitch us a next-gen firewall on a single promise: one hundred ...
Threat Intelligence
Threat Thursday: August 20th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 13th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Threat Thursday: August 6th, 2026
Welcome to Threat Thursday, Galactic’s weekly threat intelligence roundup. Every Thursday, we cover the cybersecurity stories that matter most for protecting organizations from emerging threats, and we break each one down into what happened, what it could mean for your ...
Security Education
The Browser Became the Endpoint. Your Security Stack Didn’t Notice.
An employee clicks a box that says “verify you’re human.” A prompt tells them to press a couple of keys, so they do. What they have actually done is paste and run a command that a script slipped onto their clipboard the moment they ...
Vulnerabilities Are Now the #1 Way In. The Window to Fix Them Is Closing.
Most of the time, I didn't break into a network so much as let myself in through something with a fix already out (just not installed yet): the VPN concentrator three versions behind, the firewall with a known vulnerability fixed ...
Your OSINT Reality Check: Here’s What an Attacker Is Finding in 30 Minutes or Less
Today’s connected, AI-driven digital ecosystem has made it easier than ever to build a professional brand, network with peers, and share ideas with a wider audience. It’s opened doors for businesses that simply didn't exist before: new customers, new partnerships, ...
Strategy & Leadership
An Open Letter From Your Cyber Risk Advisors
After the Water Attacks Last month, attackers reached into water treatment plants across a dozen states and started moving the controls. Some of them found out what happens when you do. I've been thinking about what to say to the ...
Building Trust in Executive Relationships: Lessons from King Lear
A Framework for Establishing the Kind of Trust that Survives Budget Season Imagine the curtain going up and a group of players act out the opening scenes of Shakespeare's King Lear, just for you. An aging king sits in his ...
Your Jokes Were Funny. They Still Didn't Renew.
How MSPs Build the Kind of Client Rapport That Survives a Budget Review You walked out of the meeting feeling good. The handshake was firm, the small talk landed, and you even got a laugh with the printer joke. You ...
All Articles
Think Your IT Team Has You Covered? Let’s Find Out.
Are your IT people taking the right steps to protect your business? Here’s a simple test. One question. No tech degree required: When’s the last time you reviewed an Incident Response Plan they wrote for you? If your answer is ...
The Breach Is Bad. The Response Is Worse.
You’ve been breached. Your inbox is offline. Your phones are ringing. Your team is scrambling. Clients are calling. The board wants answers. And you? You’re staring at the ceiling, trying to remember who’s supposed to talk to the press. This ...
Is Your IT Guy About to Lose You Your Business? Your Career? Your House?
If you’re a CEO, CFO, or business owner, your IT guy might be the weakest link in your liability chain. Yeah, I said it. This is the person who couldn’t get your email to sync on your phone last week. ...
Joy’s $300K Ice Cream Disaster: Why CEOs Should Fear Sugar Cones and Section 5
Last week, I had an ice cream cone. The old-school sugar kind. Delicious, nostalgic—and apparently a hacker favorite. Because back in February 2023, the folks at Joy, the ice cream cone company, got breached. That’s right—cone makers. And not just ...
You Trained the Interns. But Who Trained the Guy With the Keys?
You’ve probably sat through user awareness training at some point. “Don’t click links from Nigerian princes.” “Don’t send wire transfers to people you’ve never met.” You’ve checked that box. You’ve probably made your employees do it too. Maybe even once ...
You Can Do Everything Right—And Still Get Sued
His team scrambled. Worked all hours. Pulled the company back online. They did it fast. They did it clean. Then they did what responsible companies are supposed to do. They sent out breach notifications. They offered identity protection to the ...
Your Security Software Can Be Bypassed—Will Your Evidence Hold Up in Court?
Let’s start with a question: Have you ever inspected your IT team’s work? Not asked them how things are going. Not nodded while they mentioned “zero trust” and “EDR.” Actually inspected their work. Because you do it everywhere else. You ...
Sued Yet? You Will Be.
I was talking to a lawyer the other day—one of the good ones. The kind who’s seen too many “it’ll never happen to me” business owners get chewed up in court. I asked him a simple question: “How do you ...
Your Gate Is Locked. But Is It Doing Anything?
Last week, I had a conversation with a CEO who just crossed a billion dollars in revenue. Yes, billion with a “B.” Big milestone. Big operations. Big targets. So why was he on the phone with me? Because his security ...
You Thought You Were Safe. You Weren’t. Now the Clock Is Ticking.
For years, small business leaders have operated under a dangerous assumption: “We’re not big enough to be a target.” That illusion? It’s gone. Just ask the British retailers—Harrods, Marks & Spencer, and the Co-op—who’ve been dragged into the spotlight after ...
The Thank You Tour: The Simple Habit That Transformed My Leadership (and My Friday Afternoons)
Let me guess: you make time to follow up when things go wrong. You spot the mistake. You catch the error. You bring the heat. And yes, you do it because you care—about the business, the clients, the mission. But ...
Change Your Password? No. Change Your Strategy Before It’s Too Late
Let me guess—you’ve been meaning to change your password. Great. But here’s the problem: if that’s your whole plan, you’ve already lost the game. We’ve seen inside the networks of companies just like yours. We’ve watched how your team behaves ...
