Apu Pavithran

The cybersecurity skills gap is usually framed as a hiring problem. Organizations respond by expanding recruitment pipelines, investing in certifications, and launching internal training programs. The logic seems simple: if security teams are understaffed, the solution is to add more talent. There is some truth to that. Skilled cybersecurity professionals are indeed scarce globally. The ISC2’s 2025 Cybersecurity Workforce Study found that 59% of organizations report critical or significant skills shortages, with many struggling to find the talent they need. Yet this diagnosis misses a harder truth. What if the shortage we talk about so often is partly a consequence…

As of mid-2025, more than 21,500 Common Vulnerabilities and Exposures (CVEs) have been catalogued, which is a staggering 16-18% increase from the previous year. If this pace holds, experts predict we could face an overwhelming 50,000 disclosed vulnerabilities globally by the close of the year. This translates to security teams waking up to over 130 new CVEs every single day that require immediate triage and mitigation. Security Operations Centers (SOCs) are already fighting a battle on multiple fronts: talent shortages and fragmented toolsets have stretched resources to the limit. The true breaking point, though, is the steady stream of vulnerability…

Regional conflicts have triggered a significant corporate exodus, with many organizations shifting bases. This resulted in employees and their devices constantly being on the move. However, this isn’t an entirely new phenomenon. Nearly half a decade ago, the post-pandemic era had already ushered in a generation of borderless businesses and digital nomads. Globalization, economic incentives, and cloud computing have only accelerated this organizational diaspora. Yet, moving a device across borders today is no longer as straightforward as emigration and immigration once were. What may appear as a simple case of an employee travelling with a work laptop could be, in…

Admins are in a tough position right now. Enterprise ecosystems are expanding, role responsibilities are growing, and hackers are getting smarter. Rather than viewing AI as another potential vulnerability, Hexnode CEO Apu Pavithran argues that admins must embrace it as a powerful ally. In this exclusive interview with Information Security Buzz, Pavithran discusses how organizations can strategically implement AI-powered security tools to strengthen their defenses while maintaining system integrity and compliance. The most concerning trend is that cybercriminals are doing more with less. Generative AI is free or cheap and exponentially enhances what cybercriminals can do. Whether it’s 24/7 vulnerability…