Threat analysis, guidance and product news
Practical reads on cyber risk, compliance and threat intelligence from the FortaRisks team.
RSS feed- Guidance
The Canadian leader in integrated 360 risk management, built here
In what sense FortaRisks is the Canadian leader in integrated 360 risk management: every module brought together in one platform and integrated with the others, data sovereignty and regulatory fit, built and hosted in Canada.
July 21, 2026 · 5 min read - Guidance
Agentic ransomware is here: what JadePuffer means and how to defend
JadePuffer is the first ransomware campaign run end to end by an AI agent. What happened, why it changes the risk equation, and the controls that actually cut your exposure.
July 14, 2026 · 7 min read - Third-Party Risk
How to get an SBOM from your third-party software vendors
A practical guide to getting an SBOM from your third-party software vendors: what to request, contract wording, red flags, and what to do once it arrives.
July 7, 2026 · 6 min read - Guidance
The poison of complexity in IT
Complexity is not a side effect of modern IT. It is its first vulnerability. Why it costs you so much, how it opens the door to attackers, and the practices that pull it back.
July 3, 2026 · 6 min read - Guidance
BCP and cyber risk: business continuity planning that survives a cyberattack
What a BCP is, why cyber risk breaks classic business continuity planning assumptions, and how to build and test a plan that survives ransomware.
June 30, 2026 · 6 min read - AI
Frontier AI and cyber security: 'hours, not weeks'
The Canadian Centre for Cyber Security is urging organizations to act now on frontier AI models. What changes for defenders, and the measures to take today.
June 26, 2026 · 4 min read - Threat Intelligence
IOC security and monitoring: turning indicators of compromise into action
What IOC security and IOC monitoring actually mean, why raw feeds disappoint, and how to turn indicators of compromise into prioritized actions.
June 23, 2026 · 6 min read - Compliance
CPCSC Level 1: the guide for Canadian defence suppliers
The Canadian Program for Cyber Security Certification is becoming mandatory for defence contracts. What Level 1 covers, the 13 ITSP.10.171 requirements, and where to start.
June 19, 2026 · 4 min read - Guidance
SD-WAN security issues and concerns: what they are and how to address them
A practical guide to SD-WAN security issues and concerns: controller exposure, internet-facing edge devices, misconfiguration, and how to fix them.
June 16, 2026 · 6 min read
Get AI Thursday
One signal, our take, one method to apply: adopt AI without losing control, every Thursday in your inbox.
30 minutes to know what to fix first.
A member of our team walks you through FortaRisks on threats relevant to your sector, and you leave with your priorities.