Threat analysis, guidance and product news
Practical reads on cyber risk, compliance and threat intelligence from the FortaRisks team.
RSS feed- Third-Party Risk
Accenture breached: when your consultant becomes your attack surface
A threat actor claims 35GB of source code, SSH keys and Azure tokens stolen from Accenture. What the incident reveals about concentration risk in large service providers, and what a client should do right now.
July 27, 2026 · 4 min read - Compliance
Canada accelerates: C-8, CPCSC, C-36, the end of voluntary cybersecurity
In a few months, Canada passed Bill C-8, made the CPCSC mandatory for defence contracts and introduced Bill C-36 on privacy. What this regulatory acceleration means for executives, and how to prepare without multiplying projects.
July 24, 2026 · 4 min read - Guidance
The Canadian leader in integrated 360 risk management, built here
Why FortaRisks is the Canadian leader in integrated 360 risk management: unified coverage, data sovereignty and regulatory fit, built and hosted in Canada.
July 21, 2026 · 5 min read - Guidance
Agentic ransomware is here: what JadePuffer means and how to defend
JadePuffer is the first ransomware campaign run end to end by an AI agent. What happened, why it changes the risk equation, and the controls that actually cut your exposure.
July 14, 2026 · 7 min read - Third-Party Risk
How to get an SBOM from your third-party software vendors
A practical guide to getting an SBOM from your third-party software vendors: what to request, contract wording, red flags, and what to do once it arrives.
July 7, 2026 · 6 min read - Guidance
The poison of complexity in IT
Complexity is not a side effect of modern IT. It is its first vulnerability. Why it costs you so much, how it opens the door to attackers, and the practices that pull it back.
July 3, 2026 · 6 min read - Guidance
BCP and cyber risk: business continuity planning that survives a cyberattack
What a BCP is, why cyber risk breaks classic business continuity planning assumptions, and how to build and test a plan that survives ransomware.
June 30, 2026 · 6 min read - AI
Frontier AI and cyber security: 'hours, not weeks'
The Canadian Centre for Cyber Security is urging organizations to act now on frontier AI models. What changes for defenders, and the measures to take today.
June 26, 2026 · 4 min read - Threat Intelligence
IOC security and monitoring: turning indicators of compromise into action
What IOC security and IOC monitoring actually mean, why raw feeds disappoint, and how to turn indicators of compromise into prioritized actions.
June 23, 2026 · 6 min read
30 minutes to know what to fix first.
A member of our team walks you through FortaRisks on threats relevant to your sector, and you leave with your priorities. No chatbot.