Author: Bao Ha

Reading Time: 2 minutesLet’s play out a scenario. Say ransomware hits one of your dev laptops today.What could it touch? How far could it actually go? Now most folks will say: “Well, we’ve got MFA on AWS, our IAM users are cleaned up, roles are in place…” Cool. But that’s usually where the IAM story…

Reading Time: 2 minutesOkay, quick gut check:If someone left your company six months ago… do they still have access to GitHub? If you hesitated—even for a second—let’s talk. Because here’s the thing: in most scaleups, access management is kind of like flossing. Everyone knows it’s important. Nobody does it as often as they should. The…

Reading Time: 2 minutes“We trust our team.” That’s how most scaleups start. And honestly, trust is a good thing.You’re moving fast, trying to ship, and the last thing anyone wants is to slow down for access requests. So everyone gets full access—AWS, GitHub, staging, prod. It works… until it doesn’t. Because the more access you…

Reading Time: 2 minutesIt’s easy to focus on your internal systems when thinking about risk.But increasingly, the real exposure comes from what’s outside—and connected. Most mid-sized manufacturing companies depend on a growing ecosystem of vendors: IT service providers, cloud platforms, dev tools, third-party integrations, and contractors. This is normal. It’s how companies scale. But with…

Reading Time: 2 minutesWe tend to think that once we have the right tools—EDR, XDR, SIEM—we’re safe. That detection is protection. That visibility equals control. But here’s the catch: when ransomware hits, it doesn’t test your tools first.It tests your people.And more specifically, your team’s ability to work through chaos with clarity. Because detection is…

Reading Time: 2 minutesFor a long time, we operated under a simple assumption:“If you’ve got good backups, you’re safe.” But that idea doesn’t hold up anymore. Today’s attackers don’t just encrypt your production data—they go looking for the lifeboats.And if your cloud environment isn’t built to protect those lifeboats, your resilience is an illusion. Ransomware…

Reading Time: 2 minutesWhen we talk about cybersecurity, we tend to focus on the perimeter—what’s outside, trying to get in. But these days, that’s not really how attacks work anymore. In many of the ransomware cases we’ve seen recently, attackers didn’t “hack” in. They just logged in—with real credentials. No alarms. No brute force. Just…

Reading Time: 2 minutesThere’s a pattern we’ve seen across a lot of companies. They run a risk assessment—maybe tied to an audit, maybe after an incident. They put time and energy into modeling their systems, identifying weak points, mapping out threats. And then… they archive the results and move on. Six months later, the architecture…

Reading Time: 2 minutesThere’s a shift happening—not just in how we defend against ransomware, but in how we define the boundaries of responsibility. A few weeks ago, Sensata Technologies, a global leader in industrial sensors and electronics, got hit with ransomware. It took down systems. Interrupted operations. The factory, quite literally, went dark. This wasn’t…

Reading Time: 2 minutesWhen people talk about risk assessments, they usually jump straight to findings—vulnerabilities, exposure, misconfigurations. And sure, those things matter. But that’s not the part I keep coming back to. What really sticks—the thing I’ve seen help teams the most—is actually clarity. Not just about the tech. About the whole system.How it’s built,…

Reading Time: 2 minutesTailored or Toasted: Why One-Size Risk Frameworks Break in Fast-Moving Teams Most teams move fast. But the frameworks we use to assess risk? They’re stuck in a different era. You might be shipping a product every day, maybe even multiple times a day. Your infrastructure is dynamic. APIs spin up and down,…

Reading Time: 2 minutesEvery security team eventually hits this wall: you run a scan, or you get an assessment back, and now you’ve got hundreds—sometimes thousands—of findings. Most of them labeled “medium severity.” None of them clearly wrong. But also? None of them all that useful. You’re not getting insight. You’re getting entropy. And the…

Reading Time: 3 minutesLet’s be real—most risk assessments aren’t that helpful. They feel like they should be. You invest time, run a process, check some boxes, and produce a report. But what happens after? Not much. That’s a problem. Because when you step back and think about what security is actually trying to do—it’s not…

Reading Time: < 1 minuteThis Isn’t a Trend. It’s a Transformation. When we look back, this shift to AI in security is going to feel obvious. Just like continuous integration, cloud compute, or even search did. We’re not there yet—but the trajectory is clear. AI That Doesn’t Just Detect—It Advises Security Copilot is already answering…

Reading Time: < 1 minuteSecurity ROI Is Measured in Attention, Not Licenses Here’s the thing: most security teams aren’t short on tools. They’re short on time. What Security Copilot buys you isn’t just automation—it’s time to think. That’s where the ROI is. Fewer Alerts. Faster Containment. Fewer Escalations. With Copilot, junior analysts escalate fewer tickets…

Reading Time: < 1 minuteSecurity Copilot Is Smart. But It Needs Context. One thing we’ve learned again and again: AI tools are only as useful as the environment they’re dropped into. Copilot has incredible potential, but it’s not magic out of the box. That’s where RemoteMore fits in—we help companies actually make use of it…

Reading Time: < 1 minuteProduct and Infra Security Aren’t Getting Simpler Anyone building software at scale knows the attack surface keeps growing—containers, APIs, service meshes, ephemeral workloads. If you’re trying to secure your infrastructure the same way you did three years ago, you’re probably already behind. Security Copilot helps shift the way we deal with…

Reading Time: 2 minutesLet’s be honest: most risk assessments are treated like checkboxes. But when done right, they’re one of the few things that actually make your security better—not just look better on paper. A proper cybersecurity risk assessment maps out the weak spots in your infrastructure, your workflows, and your team’s assumptions. It’s less…

Reading Time: 2 minutesTraditional Tools Give Us Signals. But We Need Systems That Can Reason. One of the interesting things about scaling technology companies is how quickly complexity outpaces your ability to manage it. In security, we’re still relying too much on human pattern recognition and tools that are fundamentally reactive. Logs are abundant. Alerts…