BlueRadius

10/08/2026

The patch is not the end of the incident. It's the start of verification.

New guest piece on the BlueRadius blog from Naseem Khan (UnpanicTech): a first-24-hours playbook for lean teams facing an edge appliance zero-day with no patch yet.

The pattern from FortiGate and Ivanti intrusions, 2024 through 2026: the box gets patched, but the logs already rotated off, the stolen LDAP service account still works in AD, and the rogue workstation is still on the domain.

What to do before the fix lands:
→ Pull admin, config export, VPN, and DC auth logs before you reboot or patch
→ Check for modified CGI files, unknown admin accounts, and remote tools you didn't install
→ Rotate wider than VPN creds. The service account in the appliance config is the real target

The teams that got ahead of this asked "what if we're already compromised?" instead of "when do we have to patch by?"

Full playbook with log IDs and event IDs:

FortiGate and Ivanti intrusions show the same pattern: logs rotate, credentials persist, the patch is not the end. A defender's playbook for the first 24 hours after an appliance zero-day advisory.

09/27/2026

For thirty years, enterprise security has sorted identities into two boxes: people, who make decisions but move at human speed, and machines, which move fast but only do what their code says.

AI agents fit neither box.

An original dataset and analysis: what happens to enterprise security when AI agents become privileged digital identities.

09/10/2026

Blueradius shares its perspective with InformationWeek on what true cyberattack recovery looks like, and why restoring systems is only the beginning

Getting systems back online isn't business recovery. Here's how CIOs measure whether critical operations and revenue have actually been restored.

07/22/2026

Join our founder July 31st for Al-Driven Risk Assessment: From Static Audits to Continuous Intelligence, hosted by EC-Council. We'll dig into how AI, ML, and automation move risk management from periodic snapshots to a continuous, prioritized signal.

Register here:
https://register.gotowebinar.com/register/1323371551454427990?source=ECCU+LinkedIn+SM

07/22/2026

Not a dashboard. Not a point tool.

An operating system for security.

Radius360 harnesses AI to turn your security signals into decisions, with the evidence attached. You make the call, and every call lands in the audit trail.

We built it for the growth-stage team that inherited security, and for the security leaders who run it for them.

This month we added MITRE ATT&CK coverage. Every attacker tactic, scored through two lenses: what your tools can detect, and what your posture prevents. The Prevent lens needs no EDR. It's computed from your CIS v8 configuration state, so it works with the stack you already have.

It doesn't stop at a heatmap. It ranks which control families to close next, by how much attack exposure each one removes. Alongside it: a vulnerability queue grouped by what you'd actually fix, CISA KEV flagging, and remediation you approve, not babysit.

Compliance tells you what's documented. Coverage tells you what's defensible

03/22/2026

Some people understand security.

Some have lived it.

Excited to have Matthew Hedger join the BlueRadius Advisory Board.

The bar just went up.

02/22/2026

AI didn't kill cybersecurity. It just exposed how unprepared most product security programs are.

When Anthropic launched Claude Code Security last week, cyber stocks sold off hard. CrowdStrike down 8%. JFrog down 25%. The narrative wrote itself.

The reality is more uncomfortable.

Most enterprise product security programs were built for a world where code ships slowly, humans do the reasoning, and remediation lives in a backlog. That world is gone.

Three forces are colliding right now:
- Software velocity has outpaced security review cadence
- AI is accelerating attacks as fast as it accelerates defense
- Security data is exploding across sources no team can manually correlate

CISOs aren't being replaced. They're being handed a harder mandate: run product security at machine speed, with board-level accountability, across more systems than ever before.

I broke down exactly what changed, what it means for enterprise product security programs, and what a 90-day response looks like.

Full post linked in comments. Would love to hear how your organization is thinking about this shift. 👇