Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Derek Manky
Cultura de ciberseguridad ante un panorama de amenazas en aceleración
A medida que la IA aumenta la velocidad y precisión de los ataques, reducir el tiempo entre una señal de advertencia y una acción defensiva se convierte en una fuente medible de resiliencia. Los aspectos básicos del cibercrimen rara vez cambian: un adversario identifica un activo expuesto o una credencial válida, establece acceso, expande ese punto de apoyo y, en última instancia, convierte la intrusión en un impacto financiero u operativo.
MVNO Nation Europe 2026
Date: November 3–5, 2026 Location: Hotel Meliá Villaitana, Alicante, Spain MVNO Nation Europe 2026 brings together senior leaders, MVNOs, mobile network operators, and technology providers for three days focused on the next stage of growth in Europe’s mobile virtual network ecosystem.
Building a Security-First Culture for an Accelerating Threat Landscape
The basics of cybercrime rarely change: An adversary identifies an exposed asset or a valid credential, establishes access, expands that foothold, and ultimately converts the intrusion into financial or operational impact. What is changing, however, is how quickly, at what scale, and how efficiently attackers can now move through that sequence. To start, threat actors no longer need to build everything from scratch.
Derek Manky
The basics of cybercrime rarely change: An adversary identifies an exposed asset or a valid credential, establishes access, expands foothold.
Why it will take strong public-private partnerships to fight AI-based threats
COMMENTARY: Cybercrime functions as an economic system, a marketplace for services, and a model for global collaboration. Modern cybercriminals have operationalized their networks to share infrastructure, sell access, recruit talent, transfer funds, and exploit gaps in visibility, trust, and jurisdiction. The FBI recently released its cyber strategy, which offers a roadmap for defending the American people and the nation's critical infrastructure in cyberspace.
Cybercrime Is converging. The response must converge faster
Cybercrime has become a converged criminal economy, linking ransomware, fraud, trafficking, money laundering and organized crime. Isolated technical responses are inadequate; defenders need shared intelligence, public-private cooperation and cross-domain coordination. Disruption should target criminal ecosystems: infrastructure, financial flows, service providers, recruitment channels and physical operating networks.
INTERPOL Operation Red Card 2.0: Turning collaboration into real-world cybercrime disruption
Cybercrime does not respect borders. The infrastructure behind online scams, mobile fraud, and investment schemes is global, fast-moving, and designed to stay ahead of fragmented, isolated enforcement. Criminal networks reuse the same hosting providers, social platforms, messaging channels, and monetisation paths across regions, which allows their fraud operations to scale, regroup, and persist even after individual takedowns. That is why coordinated, operational collaboration matters.
Can collaboration and incentives shift cybercrime economics?
Cybercrime activity has evolved into a borderless, efficient economy where criminal collaboration often outpaces the structures built to defend against it. A promising answer is emerging: strengthen collaboration and build new incentive models that mobilize a broader segment of society to safely disrupt cybercrime at scale. Community intelligence, public-private partnerships and incentivized reporting can help shift the economics of cybercrime away from the attackers.
Impulsionar a colaboração para combater o cibercrime
No último ano, quase 90% das organizações sofreram pelo menos uma violação de segurança. Fatores como a rápida adoção de novas tecnologias e a escassez de talento especializado em cibersegurança têm vindo a aumentar significativamente os níveis de vulnerabilidade. Não existe uma solução única para este problema e nenhuma entidade, por si só, consegue combater eficazmente a cibercriminalidade. A colaboração público-privada torna-se, por si só, essencial.
Addictware, noticias de Tecnología
Iniciativas como la Operación Serengeti 2.0 de la INTERPOL, apoyada por Fortinet y otros socios privados, demuestran como la inteligencia conjunta, intercambio de datos y disrupción focalizada impactan la infraestructura criminal. Cada año, FortiGuard Labs de Fortinet analiza cómo la tecnología, la economía y el comportamiento humano dan forma al ciber riesgo global.
Dentro l’industrializzazione del cybercrime: cosa aspettarsi nel 2026
Tecnologia, fattori economici e comportamenti umani modellano il rischio cyber a livello globale e il 2026 rappresenterà un punto di svolta in tale evoluzione: è la previsione che emerge dal report Cyberthreat Predictions for 2026. I dati confermano che il cybercrime continuerà a trasformarsi in un’industria organizzata, basata su automazione, specializzazione e intelligenza artificiale (AI).
Una mirada a la industrialización del cibercrimen: ¿qué esperar en 2026?
Las organizaciones que unifiquen la inteligencia, la automatización y la experiencia humana dentro de un único sistema de respuesta serán las que estén más capacitadas para enfrentar lo que se avecina. Derek Manky, VP Global de Inteligencia de Amenazas en Fortinet. Foto: cortesía. Portal ERP LATAM. Cada año, FortiGuard Labs de Fortinet analiza cómo la tecnología, la economía y el comportamiento humano dan forma al ciber riesgo global.
Inside the industrialisation of cybercrime: What to expect in 2026 Original
Automation, AI, and scale will define the next phase of the global cyberthreat landscape Each year, FortiGuard Labs analyses how technology, economics, and human behaviour shape global cyber risk. The Fortinet Cyberthreat Predictions for 2026 report outlines a turning point in that evolution. Cybercrime will continue to evolve into an organised industry, built on automation, specialisation, and artificial intelligence (AI).
Inside the industrialisation of cybercrime: What to expect in 2026
GUEST OPINION: Automation, AI, and scale will define the next phase of the global cyberthreat landscape. Each year, FortiGuard Labs analyses how technology, economics, and human behaviour shape global cyber risk. The Fortinet Cyberthreat Predictions for 2026 report outlines a turning point in that evolution. Cybercrime will continue to evolve into an organised industry, built on automation, specialisation, and artificial intelligence (AI).
Una mirada a la industrialización del cibercrimen: ¿qué esperar en 2026?
Un grupo afiliado de ransomware que antes gestionaba unas pocas campañas pronto podrá lanzar docenas en paralelo. Derek Manky, VP Global de Inteligencia de Amenazas en Fortinet. Foto: Fortinet. Portal ERP Colombia. Cada año, FortiGuard Labs de Fortinet analiza cómo la tecnología, la economía y el comportamiento humano dan forma al ciber riesgo global.
Opinión | Protégete del phishing y mantén el software actualizado
Las opiniones expresadas en este artículo son únicamente del autor y no reflejan las opiniones y creencias de El Nuevo Día o sus afiliados. El Mes de Concienciación en Ciberseguridad nos recuerda que lo fundamental sigue siendo clave: protegerse del phishing y mantener el software actualizado. PUBLICIDAD Guías de Opinión Las columnas deben enviarse a Gerardo Cordero: gerardo.cordero@gfrmedia.com. Las columnas tienen que ser de 300, 400 o 500 palabras.
CYBERSECURITY'S TRUST DEFICIT: Why We Need Responsible Transparency
The cybersecurity industry has a major trust problem. While demanding visibility from customers about their networks, applications and threats, security providers often operate their own businesses behind closed doors. The industry’s embrace of responsible disclosure needs to extend to responsible transparency as well.
Sensibilisation à la cybersécurité : le phishing et les mises à jour logicielles restent les principaux enjeux
D'après Derek Manky, Global VP Threat Intelligence chez Fortinet, deux pratiques fondamentales restent essentielles en cybersécurité : la sensibilisation au phishing et les mises à jour. Si cette année, les menaces sont devenues plus automatisées, opportunistes et incessantes, deux pratiques fondamentales restent essentielles : se protéger contre le phishing et maintenir les logiciels à jour. Ces pratiques n’ont rien de nouveau, mais elles restent la meilleure défense d’aujourd’hui et de demain.
How AI can help teams offset the skills shortage
COMMENTARY: The cyber skills gap keeps widening, and the same age-old organizational challenges persist. CISOs, CTOs, and their teams are asked to do more with fewer resources. They’re expected to onboard, monitor, and maintain a myriad of devices while embracing digital reformation, supporting shifting market needs, and enabling new business imperatives.
Ciberseguridad: Por qué las estrategias estáticas ya no funcionan
2 El panorama de la ciberseguridad está experimentando una transformación radical. Con la irrupción de la inteligencia artificial, los ciberdelincuentes han evolucionado hacia modelos de ataque más sofisticados y automatizados, dejando obsoletas las defensas tradicionales. En función de ello es clave que las organizaciones adopten un enfoque dinámico y proactivo para protegerse en esta nueva era digital. Los atacantes ya no actúan de forma aislada.
Insights on AI-enabled cyber-crime through collaboration with UC Berkeley’s Center
Over the last year, discussions about Artificial Intelligence (AI)-enabled cyber crime have shifted from speculation about impacts to real-world observations. Malicious actors continue to find ways to harness AI to their advantage, resulting in an increased volume and velocity of threats, keeping the cybersecurity community on their toes.
Fortinet offers Insights on AI-enabled cybercrime
By Derek Manky, Chief Security Strategist & Global VP Threat Intelligence at Fortinet Over the last year, discussions about AI-enabled cybercrime have shifted from speculation about impacts to real-world observations. Malicious actors continue to find ways to harness AI to their advantage, resulting in an increased volume and velocity of threats, keeping the cybersecurity community on their toes.
AI in Cybercrime: Derek Manky Predicts the Next Wave of Threats
Over the last year, discussions about AI-enabled cybercrime have shifted from speculation about impacts to real-world observations. Malicious actors continue to find ways to harness AI to their advantage, resulting in an increased volume and velocity of threats, keeping the cybersecurity community on their toes. As defenders, awareness of AI’s impacts on the threat landscape is vital, as is understanding strategies to combat the shifts occurring in the wake of this new technology.
Fortinet contributes to major cybercrime operation arrests
Fortinet contributes to major cybercrime operation arrests By Derek Manky, Chief Security Strategist & Global VP Threat Intelligence at Fortinet The International Criminal Police Organisation (INTERPOL) and the African Union Mechanism for Police Cooperation (AFRIPOL) announced last year that the organisations have identified and arrested members of cybercrime groups operating across Africa.
Amenazas para 2025: Ciberataques más grandes y audaces
Impulsar la resiliencia colectiva en contra del panorama de amenazas evolucionado Los cibercriminales siempre encontrarán nuevas formas para infiltrarse en las organizaciones. Sin embargo, existen numerosas oportunidades para que la comunidad de ciberseguridad colabore para anticiparse a los siguientes movimientos de los adversarios y poder así interrumpir sus actividades de un modo significativo.
Predicciones de amenazas para 2025: prepárate para ciberataques más grandes
Los cibercriminales están subiendo la apuesta para ejecutar ataques más dirigidos y dañinos. Derek Manky, jefe de Estrategia de Seguridad y VP Global de Inteligencia de Amenazas en FortiGuard Labs de Fortinet. Foto: Fortinet. Portal ERP Colombia.
Threat predictions for 2025: Get ready for bigger, bolder attacks
While threat actors continue to rely on many ‘classic’ tactics that have existed for decades, our threat predictions for the coming year largely focus on cybercriminals embracing bigger, bolder, and, from their perspectives, better attacks. From Cybercrime-as-a-Service (CaaS) groups becoming more specialised to adversaries using sophisticated playbooks that combine both digital and physical threats, cybercriminals are upping the ante to execute more targeted and harmful attacks.
Threat predictions for 2025: Get ready for bigger, bolder attacks Original
While threat actors continue to rely on many "classic" tactics that have existed for decades, our threat predictions for the coming year largely focus on cybercriminals embracing bigger, bolder, and, from their perspectives, better attacks. From Cybercrime-as-a-Service (CaaS) groups becoming more specialized to adversaries using sophisticated playbooks that combine both digital and physical threats, cybercriminals are upping the ante to execute more targeted and harmful attacks.
Addictware, noticias de Tecnología
Implementar programas de concientización y entrenamiento, a nivel de toda la organización, por ejemplo, es un componente vital para manejar el riesgo. Al tiempo que los actores maliciosos continúan confiando en muchas de las tácticas “clásicas” que han existido por décadas, nuestro informe de predicción de amenazas para el próximo año se enfoca en los cibercriminales adoptando ataques más grandes, audaces y más eficientes.
As attackers embrace AI, every organisation should do these five things
Artificial Intelligence (AI) benefits our society at large in numerous ways, but cyber criminals are using this new technology for nefarious purposes. From gathering data more efficiently to using large language models to craft phishing communications, experienced and novice threat actors are relying on AI to streamline their efforts. Organisations worldwide are taking notice, and executives are implementing efforts to combat this and other shifts in the threat landscape.
Fortinet Threat Predictions for 2025: Get Ready for Bigger, Bolder Attacks
Personally, I love shadow IT—most employees do. But is it a problem? Let’s explore. Wondering what shadow IT is? Shadow IT refers to the use of software and hardware tools or services by employees without the knowledge of the organization’s IT department. The use of shadow IT tools has been a topic of discussion for years, with each company having its stance. Using these tools is often more about personal preference than anything else, and the same applies to how companies handle them.
Fortinet’s Derek Manky Shares 5 Tips to Combat Cyber Threats
AI benefits our society at large in numerous ways, but cybercriminals are using this new technology for nefarious purposes. From gathering data more efficiently to using large language models to craft phishing communications, experienced and novice threat actors are relying on AI to streamline their efforts. Organizations worldwide are taking notice, and executives are implementing efforts to combat this and other shifts in the threat landscape.
5 cosas que debieran hacer todas las organizaciones, al tiempo que los atacantes utilizan la IA
La inteligencia artificial (IA) beneficia a nuestra sociedad de muchas maneras, pero los cibercriminales están utilizando esta nueva tecnología con fines maliciosos. Desde la recopilación de datos de manera más eficiente hasta el uso de grandes modelos de lenguaje para elaborar comunicaciones de phishing, tanto los expertos como los novatos confían en la IA para agilizar sus esfuerzos.
Ciberataques con IA: las 5 cosas que debieran hacer todas las empresas Original
¿Qué hacer para protegerse de las amenazas impulsadas por la IA? Los actores maliciosos están aprovechando cada vez más la IA para aumentar el volumen y la velocidad de sus ataques. También están utilizando esta tecnología para hacer que el phishing y las amenazas relacionadas sean más creíbles que nunca.
As attackers embrace artificial intelligence, every organisation should do these five things Original
Artificial intelligence (AI) benefits our society at large in numerous ways, but cybercriminals are using this new technology for nefarious purposes. From gathering data more efficiently to using large language models to craft phishing communications, experienced and novice threat actors are relying on AI to streamline their efforts. Organisations worldwide are taking notice, and executives are implementing efforts to combat this and other shifts in the threat landscape.
How to Predict Your Patching Priorities
While a robust suite of security technology undoubtedly plays a starring role in every organization’s risk management strategy, implementing a smart and timely approach to patching remains one of the primary ways for organizations to protect their networks from attackers. Patching vulnerabilities addresses known security weaknesses, preventing potential exploits that malicious actors could use to gain unauthorized access to corporate data or disrupt operations.
The New Cybercrime Atlas: A Collaborative Approach to Fighting Digital Crime
By Derek Manky, Chief Security Strategist & Global VP of Threat Intelligence at FortiGuard Labs The global transition to the digital economy means that the operations of governments, critical infrastructures, businesses, and individuals are now a tightly integrated system of interconnected resources.
Cybersecurity in 2024: Priorities and challenges for Canadian organizations
By Derek Manky As predictions for 2024 point to the continued expansion of cyber threats, cybersecurity experts are calling for a renewed commitment to cyber resilience. In our FortiGuard Labs´ 2024 Cyber Threat Prediction report, we offer advice on combating evolving threats.
Chained AI, CaaS Operations Give Attackers More “Easy” Buttons Than Ever
With the growth of Cybercrime-as-a-Service (CaaS) operations and the advent of generative AI, threat actors have more "easy" buttons at their fingertips to assist with carrying out attacks than ever before. By relying on the growing capabilities in their respective toolboxes, adversaries will increase the sophistication of their activities.
Stemming the tide of cybercrime
By: Derek Manky Technology continues to play a significant role in accelerating cyberattacks and increasing their effectiveness, reflecting a global trend that sees cybercriminals growing in number and sophistication. So, how are the defenders doing? Are we making any headway against this evolving threat landscape? Sadly, not as much as we’d like. Today’s cybercriminals are tech-savvy, emboldened, and supported by sophisticated cybercrime ecosystems bent on maximizing their profits and impact.
Threat Predictions for 2024: Chained AI and CaaS Operations Give Attackers More “Easy” Buttons Than Ever
by Derek Manky, Global VP Threat Intelligence Fortinet With the growth of Cybercrime-as-a-Service (CaaS) operations and the advent of generative AI, threat actors have more “easy” buttons at their fingertips to assist with carrying out attacks than ever before. By relying on the growing capabilities in their respective toolboxes, adversaries will increase the sophistication of their activities.
2024: A new era of cybercrime ahead
With the growth of Cybercrime-as-a-Service (CaaS) operations and the advent of generative AI, threat actors now have more “easy” buttons at their fingertips to assist with carrying out attacks than ever before. They will launch more targeted and more stealthy hacks designed to evade robust security controls, as well as become more agile by making each tactic in the attack cycle more efficient. Here are our cyber predictions for 2024. Next year, the “classics” attack tactics are not going away.
2024: A new era of cybercrime ahead
Digital malice, fraud and aggression have become so lucrative in a war-torn and fragmented world: expect more artificially-intelligent cyber threats soon! With the growth of Cybercrime-as-a-Service (CaaS) operations and the advent of generative AI, threat actors now have more “easy” buttons at their fingertips to assist with carrying out attacks than ever before.
Threat Predictions for 2024: Chained AI and CaaS Operations Give Attackers More “Easy” Buttons Than Ever
By Derek Manky | November 09, 2023 With the growth of Cybercrime-as-a-Service (CaaS) operations and the advent of generative AI, threat actors have more “easy” buttons at their fingertips to assist with carrying out attacks than ever before. By relying on the growing capabilities in their respective toolboxes, adversaries will increase the sophistication of their activities.
Are We Making Progress in the Fight Against Cybercrime? Here’s How to Tell.
From news articles to discussions at industry events, numerous examples demonstrate the far-reaching effects of cybercrime on businesses, infrastructure, and national security. Malicious actors continue to advance their tactics, with attacks becoming more complex and targeted. It comes as no surprise that professionals worldwide are growing increasingly concerned.
Phishing emails more believable than ever, here’s what to do about them - Our Today
Reading Time: 4 minutes By: Derek Manky Phishing isn’t new. This social engineering tactic has existed in attackers’ respective toolboxes for decades, with threat actors posing as trusted contacts and then targeting unsuspecting victims through email or text messages to steal sensitive data. There are plenty of data points that illustrate the effectiveness of this attack method.
How Next-Gen Threats Are Taking a Page From APTs
One of the ongoing threats that defenders have to deal with is APTs: advanced persistent threats. APT attackers use more complex tactics to compromise networks than a typical attacker might, such as the deployment of a Trojan or other straightforward software. For instance, an APT attacker may employ complex espionage techniques over an extended period of time and involve numerous individuals inside an organization to achieve their ultimate objective.
Cybersecurity Public-Private Partnership: Where Do We Go Next?
When faced with an increasing number of cyberattacks, many organizations think in terms of what additional security tools they need. However, building alliances is one of the most effective—and frequently disregarded—actions organizations can take to address the urgent challenge of cybersecurity and combat cybercriminals.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Derek
Contact Derek, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack