48 Experts on Small Business Cybersecurity Blind Spots
“First, if an employee's email password is stolen today, what stops an attacker from logging in?”
MFA on email as the first fix
Read the full story →Coverage, expert commentary and announcements featuring ioSENTRIX and its founder, Omair Manzoor. Journalists quote our testers on AI security, ransomware, supply-chain attacks and compliance, based on what we see in real engagements.
What makes agents different from human attackers is speed and exhaustiveness.Omair Manzoor in CSO Online, August 2026
The most recent first. Every link goes to the original article on the publisher's site.
“First, if an employee's email password is stolen today, what stops an attacker from logging in?”
MFA on email as the first fix
Read the full story →“The most common and costly mistake I see small businesses make is assuming they're too small to be targeted.”
Small-business security
Read the full story →Software supply-chain attacks
Read the full story →Live prompt-injection demo; aired on Local 3 News, KTBS 3 and WAKA 8
Watch the segment →What can go wrong when AI assistants get access to your accounts
Watch the segment →AI-powered phishing and the EvilTokens takedown
Read the full story →AI-generated vulnerability findings and triage
Read the full story →AI-powered cybercrime
Read the full story →EU Cyber Resilience Act reporting rules
Read the full story →“SMBs do not buy SOC 2 because they understand controls.”
Compliance services for MSPs
Read the full story →“What makes agents different from human attackers is speed and exhaustiveness.”
AI agents and cloud security
Read the full story →Smart glasses and workplace network security
Read the full story →“When organizations started maintaining recoverable backups, the pure encryption model stopped working reliably.”
Ransomware extortion
Read the full story →How ransomware gets in, from red team engagements
Read the full story →“Audit your own technicians' MFA configurations before auditing your clients.”
MFA fatigue attacks
Read the full story →“The biggest mistake MSPs make is treating acquisitions as IT projects instead of security events.”
Security risk in MSP acquisitions
Read the full story →Why retailers are targeted, and best practices
Read the full story →“Every organization I penetration test gets breached.”
Assume-breach strategy
Read the full story →“They define minimum controls—but they're updated slowly, while threats evolve constantly.”
Compliance versus security
Read the full story →“Seven thousand forks of a single Microsoft repository sounds bad. The real number is worse.”
Open-source supply-chain risk
Read the full story →Prompt injection in AI assistants
Read the full story →AI and global security
Read the full story →Written by Omair Manzoor
Read the full story →Award announcement via GlobeNewswire
Read the full story →Omair Manzoor listed
Read the full story →PTaaS, Application Security as a Service and vCISO launch
Read the full story →“Achieving CREST accreditation is a pivotal milestone for us.”
CREST accreditation
Read the full story →Distributed to more than 300 news and finance sites
Read the full story →Omair Manzoor and the ioSENTRIX team comment on new attacks, AI security and compliance, drawing on penetration tests and red team work we run for clients.
ioSENTRIX is a CREST-accredited offensive security firm founded in 2017 and based in Herndon, Virginia. It provides penetration testing, AI red teaming, application security and compliance readiness, and is ISO/IEC 27001 certified and SOC 2 Type 2 attested.
