Welcome to the CommSec Blog

Passkeys explained: why they are more secure than SMS and voice MFA

SMS and voice codes can be phished, intercepted or relayed in seconds, and Microsoft is [...]

07
Oct

Security Quick Wins to Finish the Year Strong

It has been a big year for IT teams. If there is any fuel left [...]

05
Oct

Cyber Resilience Act: What Irish Software Firms Must Do

The Cyber Resilience Act now covers software sold in Europe. Reporting rules started on 11 [...]

30
Sep

Not Every Security Check Needs a Full Penetration Test

CVE volume keeps breaking records, yet the flaws that actually get exploited are old, patchable, [...]

23
Sep

Do You Still Need Active Directory? AD vs Entra ID

Many organisations are quietly running two identity systems at once, legacy on-premises Active Directory and [...]

26
Aug

OWASP LLM Top 10: What It Means Alongside the Web App Top 10

OWASP has released its Top 10 for LLM Applications 2026, led by Steve Wilson and [...]

07
Aug

Penetration Testing and Compliance: What DORA, NIS2, CyFun, NIST and ISO 27001 Actually Require

Every major framework asks the same question in different words: can you prove your controls [...]

14
Jul

NIS2 in Ireland: What the Update Means for Your Organisation

NIS2 is set to transform cyber security governance in Ireland, bringing thousands of organisations into [...]

23
Jun

How to Implement AI Safely in Your Business

AI is already inside your organisation. The question is not whether your staff are using [...]

12
Jun

How to Choose a Managed SOC in 2026

The case for outsourcing security operations is compelling. Building a fully staffed in-house SOC is [...]

29
May

Shadow AI Is Becoming the Biggest Data Leak Most Companies Cannot See

AI adoption is outpacing every technological shift in history. But speed of access is not [...]

28
May

How Cybercriminals Bypass MFA: The Reality of Modern Identity Attacks

MFA is one of the most effective cybersecurity controls available today, but it is not [...]

22
May

BYOD Security in Ireland: Why MDM Alone Is No Longer Enough

Most organisations have no visibility into what's actually happening when those personal devices touch company [...]

23
Apr

Microsoft Security Gaps Are Being Exploited: Are You Exposed?

The Stryker cyber-attack shows a hard truth: Microsoft security tools are powerful, but not secure [...]

31
Mar

Central Bank of Ireland Thematic Review: A Practical Roadmap to Resilience for Credit Unions

Credit unions face growing pressure to meet the Central Bank of Ireland’s Thematic Review requirements. [...]

30
Mar

NIS2 and Board Accountability: What Directors Must Now Do

Cyber security is no longer just an IT issue. Under NIS2, directors must actively approve [...]

24
Feb

Gaming Consoles Are Internet Devices Too

A PlayStation, Xbox, or Nintendo Switch is not just a box under the television. It [...]

09
Feb

Why Free Antivirus Is Risky Business

Free antivirus software is often seen as a sensible cost-saving measure. For businesses, it can [...]

23
Jan

The Role of CISO as a Service in 2026

CISO as a Service has moved beyond being a cost-saving alternative to a full-time hire. [...]

15
Jan

2025 Cyber Security Year in Review: The Risks That Changed Everything

Change defined cyber security in 2025. Long-held assumptions about safety, resilience, and control were challenged [...]

15
Dec

5 Questions You Must Ask Before Choosing a Penetration-Testing Vendor

Learn the five essential questions to ask before choosing a penetration-testing vendor. Understand how methodology, [...]

05
Dec

A Wake-Up Call on Cloud Resilience

We shine a light on the growing conversation around business continuity and cloud reliance. CommSec [...]

27
Nov

Penetration Testing vs TLPT vs BAS: Closing the Detection Gap

The cyber threat landscape is changing fast, and traditional point-in-time testing is no longer enough. [...]

29
Oct

Securing the Future: Why AI Security is Now a Board-Level Priority

AI is transforming how organisations operate, but it is also reshaping the threat landscape. As [...]

28
Oct

The Growing Cybersecurity Threats Facing Higher Education

Universities have become prime targets for ransomware and credential theft. Recent breaches reveal lessons in [...]

29
Sep

When The Browser Becomes a Security Blindspot

Browser extensions are a hidden enterprise risk. Learn how attackers exploit this blindspot and why [...]

03
Sep

Why SaaS Security Needs to Be a Top Priority for IT Leaders

SaaS adoption is rising fast, but so are risks. Misconfigurations, unsecured APIs, and outdated security [...]

19
Aug

NIS2 Directive Update: Timeline, New Guidance, and What Irish Organisations Must Do

Ireland will enact NIS2 in Q4 2025, with penalties from 2026. About 4,000 organisations must [...]

08
Jul

Our favourite threat intelligence blogs, news sites and resources

The Best Cyber Security Blogs, News Sites and Threat Intelligence Resources Cyber security threats are [...]

27
Jun

Quantum Computing and the Future of Cybersecurity: Practical Implications for CISOs

Quantum computing is poised to be a game-changer for cybersecurity – for better and for [...]