Simplifying Cybersecurity - ThreatLocker
Overview
In this CISO Inspired Summit masterclass, Morgan Clutterbuck, Lead Solutions Engineer at ThreatLocker, revisits the fundamentals of cybersecurity at a time when threats and their consequences keep escalating. He sets out simple things organisations can do to stop cyberattacks and better protect themselves today.
Morgan explains how widely attackers reuse the same techniques against businesses with the same endpoint security in place, and why ThreatLocker's approach centres on application allowlisting with a default deny stance, automated so that it no longer takes years to implement.
Key takeaways
- It is suggested that a ransomware attack happens somewhere in the world every 11 seconds, and that 60 to 70% of attacks go undisclosed.
- The Qilin ransomware group publicly recorded close to 3,000 successful attacks in 2025.
- Application allowlisting with default deny approves known software and blocks everything else, including ransomware, malware and viruses.
- ThreatLocker's learning mode catalogues what is running on each machine and learns around 90% of an environment in seven to ten days.
- A 24/7 applications team maintains over 13,000 built-in applications, so updates do not break the allowlist or the end-user experience.
Watch the full session on YouTube: ThreatLocker: Simplifying Cybersecurity - Morgan Clutterbuck, CISO Inspired Summit 2026
