CMD+CTRL Security Blog

Turning Skills Gap Data into Role Based Cybersecurity Training Strategies

CMD+CTRL Security — Tue, 15 Sep 2026 13:00:05 GMT

Skills gap data becomes useful when an organization connects missing capabilities to job responsibilities, technology exposure, business risk, and measurable learning outcomes. A strong training strategy segments learners by role, assigns focused learning content, reinforces knowledge through hands-on practice, and uses performance data to improve learning paths over time.

Dark Money: CMD+CTRL's Newest Cyber Range Just Won a DEF CON Black Badge

CMD+CTRL Security — Tue, 25 Aug 2026 13:15:01 GMT

At DEF CON 34, CMD+CTRL launched Dark Money, our newest vulnerable digital banking cyber range. By the end of the event, one of the players who had been competing in CMD+CTRL ranges for eight years walked across the DEF CON main stage to receive the coveted Black Badge.

Beyond Your Code: Managing Third-Party and Infrastructure Security Risks

CMD+CTRL Security — Mon, 17 Aug 2026 13:00:00 GMT

Secure software development requires more than writing secure code. Modern applications depend on third-party libraries, open-source components, development tools, CI/CD pipelines, code repositories, and infrastructure that can introduce security risks outside the application itself.

Securing the Digital Connective Tissue: Best Practices for API Security

CMD+CTRL Security — Tue, 12 May 2026 13:30:00 GMT

What Is API Security?

API security is the practice of protecting Application Programming Interfaces from unauthorized access, data exposure, misuse, and exploitation.

Building a Secure Foundation: Core Cybersecurity Practices for Developers

CMD+CTRL Security — Tue, 07 Apr 2026 13:00:05 GMT

Security is not a final checklist item. It is a mindset that must be integrated into every step of the development process.

Turning MITRE ATT&CK v18 into Behavior-Driven Defense

CMD+CTRL Security — Mon, 09 Mar 2026 12:30:00 GMT

The MITRE ATT&CK^® framework remains one of the most influential tools for understanding real-world adversary behavior. With the release of ATT&CK v18, MITRE has introduced some of the most consequential changes in the framework’s history—changes that directly impact how organizations design detections, instrument applications, and align security strategy across teams.

For AppSec leaders, developers, and CISOs, this update is less about learning a new matrix and more about adapting to a behavior-driven security model that better reflects modern attack paths.

Agentic AI and the Next Wave of Security Risk

CMD+CTRL Security — Tue, 06 Jan 2026 13:00:00 GMT

As organizations race to integrate agentic AI into their development and operations workflows, a critical pattern is emerging. AI autonomy is outpacing security maturity. While agentic systems promise productivity and speed, they also introduce entirely new pathways for misuse and exploitation.

But here’s the real story: agentic AI isn’t just “new.” It mirrors an old challenge in a more dangerous form.

Securing the Cloud: Tame the Chaos of Cloud Misconfigurations

Jose Lazu — Mon, 29 Dec 2025 13:00:03 GMT

If this year has taught us anything, it’s that cloud security isn’t just an infrastructure problem. It’s a human one.

Organizations are rapidly migrating to multi-cloud environments, but security teams are still playing catch-up with IAM complexity, policy drift, and configuration debt. That’s why we’re offering two new courses designed to tackle the problem head-on:

How the CMD+CTRL Data API and Smart Catalog Power Smarter Secure Code Training

Jose Lazu — Mon, 22 Dec 2025 18:27:43 GMT

Turning Training Insight into Action with the CMD+CTRL Data API

If you’ve ever tried to get real clarity from training data, you know the feeling: multiple spreadsheets and reports that tell you “Who took what,” but not “what it means.” That’s about to change.

The new CMD+CTRL Data API gives teams the power to unlock learning insights in real-time directly in your own dashboards, analytics platforms, and compliance systems. Whether you live in Power BI, Tableau, or a custom compliance portal, your data now moves with you, not against you.

The New Age of API Security Training

Jose Lazu — Thu, 18 Dec 2025 15:13:10 GMT

APIs are everywhere, and so are attackers. If your API strategy hasn’t evolved since the OWASP 2017 era, the fact of the matter is that you are behind.