Management & Strategy
Boardroom conversations about cyber can no longer be siloed apart from strategy, operations, or geopolitics.
Hi, what are you looking for?
SecurityWeek
ICS/OT
The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period.
Risk Management
Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.
Risk Management
Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.
Cybersecurity Funding
The company is enhancing third-party risk management (TPRM) through autonomous AI agents.
ICS/OT
The number of participants in the cyber and physical grid security exercise increased by nearly 50% compared to two years ago.
Risk Management
MITRE has unveiled the latest version of ATT&CK, with the most significant changes in the defensive part of the framework.
Cybersecurity Funding
The company plans to triple its engineering and go‑to‑market teams and to accelerate its agentic AI platform.
Compliance
RegScale has raised a total of more than $50 million, with the latest investment being used to enhance its platform and expand.
Cybersecurity Funding
The AI-powered automated penetration testing firm will invest the new funds in R&D, team expansion, and global scale.
Application Security
SBOM adoption will drive software supply chain security, decreasing risks and costs, and improving transparency.
Cybersecurity Funding
Seemplicity announced a Series B funding round that will be used to create AI agents for its exposure management solution.
Risk Management
Other noteworthy stories that might have slipped under the radar: Canada’s House of Commons hacked, Russia behind court system attack, Pennsylvania AG targeted in...
Risk Management
Safe has raised $70 million in Series C funding to advance cyber risk management through specialized AI agents.
Cybersecurity Funding
Risk management and compliance solutions provider Vanta has raised more than $500 million since 2021.
Risk Management
The MITRE AADAPT framework provides documentation for identifying, investigating, and responding to weaknesses in digital asset payments.
Risk Management
Learn how attackers hide in plain sight—and what you can do to stop them without slowing down your business.
Risk Management
Patch Tuesday: Adobe documents hundreds of bugs across multiple products and warns of code execution, feature bypass risks.
Risk Management
Learn why your security controls matter more than theoretical risk scores and how exposure validation helps slash massive patch lists down to the few...
Risk Management
Despite massive investment, the explosion of sophisticated malware and deepfake attacks persists because organizations struggle to verify digital identities and establish fundamental trust.
Management & Strategy
The OpenEoX model proposes a shared data format that can be integrated into SBOMs, security advisories, and other ecosystem tools.
Network Security
Before engaging in a full-scope exercise, it’s important to assess whether your program, people and processes are truly ready.
Risk Management
With over 12,000 breaches analyzed, this year’s DBIR reveals a landscape shaped by not just individual threats, but by entire economies of compromise.
Cybersecurity Funding
Anecdotes has raised $55 million in an extended Series B funding round that brings the total raised by the company to $85 million.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)
Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts.
(Tod Beardsley)