FedRAMP Just Deleted the 300-Page SSP. What Replaces It Is Code.
The System Security Plan is dead. FedRAMP’s Consolidated Rules for 2026 (CR26), published June 24, r...
What Every Executive Needs to Know About LLM Security
Article 2: Training-Phase Attacks Welcome to Article 2. If you missed the introduction in Article 1,...
Microsoft FastTrack: The Most Underused Lever in Your Microsoft Investment
Most organizations think they’re paying for Microsoft licenses.
Agent 365: What Happens When an AI Agent Goes Rogue? The Missing Control Layer for AI Agents
A few months ago, most conversations about AI in the enterprise were about productivity. Today, they...
Your Deployment Pipeline Ends at a Firewall Ticket
Your team automated the build, the test, and the deploy. Then the whole thing stalled waiting on a f...
Project Glasswing and the Cyber Frontier
Author: Gerard Onorato, CISO, RKON On the cyber frontier, the fastest gun has become the fastest mod...
Platforms or Bust: Notes from Google Next '26
Author: Aaron Rea, Principal Consultant, Cloud Security
E3 to E5 to E7: How RKON Is Helping Clients Navigate Microsoft’s Next Era of Work
Evolving Microsoft 365 Investments from E3 to E5 to E7 Microsoft’s latest announcement, Microsoft 36...
CMMC Reality Check: What Assessments Really Look Like and How to Prepare
Cybersecurity Maturity Model Certification (CMMC) assessments are no longer theoretical. For defense...
AI Cost Anomalies Are Security Events: Why FinOps and SecOps Need a Shared Signal
A Bedrock spend spike and an unauthorized InvokeModel call are the same event. One shows up in AWS C...
When FinOps and Security Stop Talking, AI Spend Becomes Unmanaged Risk
Here’s a scenario that’s becoming more common than most teams want to admit. A cost anomaly alert fi...
ARC-AMPE's First Deadline Passed. Why Most Organizations Aren’t Ready for the Second.
ARC-AMPE’s Second Deadline The Centers for Medicare & Medicaid Services (CMS) published ARC-AMPE...