Security Leaders Trade Bloated Legacy Platforms For Tools Built For Today's Threats
Brad Gorka, CISO at Veritiv, on why security leaders are moving their budgets to platforms built for current threats as AI native challengers gain ground.
Industry News
Cybersecurity News—in-depth breach analysis, emerging threat intelligence, vulnerability reports, and regulatory changes for informed, proactive decision-making.
Security Leaders Prepare For Improvised Attacks By Changing Their Own Operating Speed
Shekhar Kachole, Founder and CTO at Turiya Digital, explains why a company's own practices and the industry's hard-won lessons both have to feed its security program.
Security Leaders Win Budget By Auditing Their Own Operating Model First
Hem Asher, former Senior Manager of Information Security at Insurity, explains why a metrics program and a ranked risk register have to come before any request for more budget.
Employee Fear Gives Attackers Their Biggest Head Start. Psychological Safety Takes It Back.
Cybersecurity strategists Jothi Dugar and Ty Hughes explain how a leader's first reaction to a reported mistake sets the length of the attacker's head start.
AI Impersonation Leaves Employees Paying A Trust Tax. Independent Verification Cuts The Bill.
Cybersecurity strategists Jothi Dugar and Ty Hughes explain how matching verification to what a request can set in motion keeps routine work fast and high-risk approvals safe.
CISOs Are Becoming Risk Champions As Recovery Replaces Prevention As The Metric
Joseph Davis, Chief Security Advisor for Microsoft's U.S. Health & Life Sciences business, makes the case that the next generation of CISOs will be measured on recovery, auditable decisions, and resilience.
Five Years After DOL Guidance, Some Benefit Plans Still Have No Security Program
Julie Tracy, principal at Withum's cybersecurity advisory practice, explains why Taft-Hartley funds that outsource every operation to third parties keep treating vendor assessment as one-and-done, and why the long voluntary stretch on the DOL's guidance won't end gently.
Solving Alert Fatigue Requires Shared Ownership, Defined Language, And Risk-Based Prioritization
Aditya Bhise, Senior Manager of Information Security at Avaya, walks through why solving alert overload starts with governance, shared ownership, and organization-specific interpretation.
Most Enterprise SIEMs Can Only Detect 1 in 5 Known Attack Techniques. New Research Shows Why.
The data is already in the SIEM, but the detection rules aren’t. A growing body of research is revealing a structural gap between what security teams collect and what they can actually see, and the causes go deeper than headcount or budget.
Outsourced SOC Teams Are Abandoning Alerts the Moment They Hit Friction, Security Leaders Say
A growing number of enterprise security directors say their outsourced Tier 1 analysts routinely stop investigating alerts when they encounter obstacles, raising questions about the actual coverage organizations are paying for in a managed security services market worth $43 billion.
Anthropic’s Fix for Lying AI Models Is to Let Them Cheat
Anthropic finds that forbidding AI models from cheating teaches them to lie, but giving them permission to cheat during training reduces malicious behavior.
Google’s Record $32B Bid for Wiz Wins Key US Approval
Google's planned $32 billion acquisition of cloud security firm Wiz clears its U.S. antitrust review, a key step for the tech giant's largest-ever purchase.
US Agencies Drop New Guide to Harden Vulnerable Exchange Servers
U.S. federal agencies release a new guide to secure on-premises Microsoft Exchange servers, which remain a persistent target for hackers.
72 Countries Ink First Global Treaty to Fight Surging Cybercrime
Seventy-two countries sign the first global, legally binding UN treaty to combat surging cybercrime.
Wharton Survey Concludes Enterprises Are Getting Serious About AI ROI
A new Wharton study finds 72% of enterprise leaders now measure AI ROI, with three-quarters already reporting positive returns.
FCC Ditches Post-Hack Cyber Rules, Puts Trust in Telecoms
The Federal Communications Commission is reversing mandatory cybersecurity regulations for telecom companies, replacing them with a voluntary, industry-led approach.
Slow Response to Email Breaches Is a Welcome Mat for Ransomware
A new report reveals nearly 80% of companies suffered an email security breach last year, with slow response times significantly increasing the risk of a ransomware attack.