The latest deepfake numbers give CISOs plenty to worry about 2026-09-22 at 15:05 By Sinisa Markovic AI is letting cybercriminals reach deeper into organizations than a phishing email ever could. 41% of CISOs reported at least one social engineering incident involving a deepfake during an employee audio call in the past 12 months, according to […]
The latest deepfake numbers give CISOs plenty to worry about Read More »
CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast 2026-09-21 at 17:30 By Kevin Townsend Noopur Davis never planned a career in cybersecurity. She was a developer at Intergraph, and for many years that was all she wanted to be. The post CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast […]
CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast Read More »
The AI security question leaders should be asking instead 2026-09-17 at 08:30 By Mirko Zorz In this Help Net Security interview, Frederic Bull, Security Officer at Gremlin, talks about what AI means for security teams. The conversation covers why asking what data a model was trained on is only part of the picture, and why […]
The AI security question leaders should be asking instead Read More »
A flat cybersecurity budget doesn’t have to mean weaker coverage 2026-09-17 at 08:00 By Help Net Security Cheri Hotman, Managing Partner of Hotman Group, works as a vCISO and vGRC leader. In this Help Net Security video, she talks about holding coverage steady when the CFO asks for a flat budget or a 12% cut. […]
A flat cybersecurity budget doesn’t have to mean weaker coverage Read More »
MSPs say nearly half their customers rely on them for CISO services 2026-09-16 at 07:30 By Anamarija Pogorelec MSPs estimate that 46% of their customers, on average, look to them to act as CISOs, according to Sophos. Most of those providers do that job without the full set of compliance services, and many spread the […]
MSPs say nearly half their customers rely on them for CISO services Read More »
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities 2026-09-14 at 15:23 By Sinisa Markovic The EU Agency for Cybersecurity switched on the Cyber Resilience Act‘s Single Reporting Platform on 11 September 2026, the same day the law’s reporting obligations started binding manufacturers. ENISA built the tool and runs its day-to-day operations, a […]
ENISA launched the CRA Single Reporting Platform for actively exploited vulnerabilities Read More »
CISOs Race to Control AI Agents Without Destroying Their Value 2026-09-14 at 13:30 By Kevin Townsend Security leaders are struggling to modernize cyber hygiene and prevent over-privileged agents from causing unintended harm. The post CISOs Race to Control AI Agents Without Destroying Their Value appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]
CISOs Race to Control AI Agents Without Destroying Their Value Read More »
AI adoption brings new security headaches for already stretched CISOs 2026-09-10 at 07:30 By Anamarija Pogorelec CISOs are taking on AI governance without a matching increase in resources or expertise, adding to an already broad remit spanning data protection, identity, resilience and compliance, according to Proofpoint’s 2026 Voice of the CISO report. The Al mandate […]
AI adoption brings new security headaches for already stretched CISOs Read More »
September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor 2026-09-09 at 12:04 By Zeljka Zorz September 2026 Patch Tuesday is here, with Microsoft delivering another record-breaking number of patches, including those for two vulnerabilities that have been exploited as zero-days. Another “new normal” is the anonymous security researcher Nightmare Eclipse publishing […]
September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor Read More »
Ransomware negotiation tactics have turned into a business process 2026-09-08 at 08:40 By Help Net Security In this Help Net Security video, Dave Ross, Senior Director of the Intelligence Fusion Team at Intel 471, explains what happens behind the scenes during ransomware negotiations. Ross walks through the tactics groups use once an attack begins, from […]
Ransomware negotiation tactics have turned into a business process Read More »
When AI quietly breaks things, who pays? 2026-09-03 at 08:00 By Mirko Zorz David Halbreich, an insurance recovery partner at Reed Smith, breaks down how AI companies should handle coverage gaps that come up as the industry grows. He covers straddle claims that fall between tail and go-forward D&O policies after a merger, how governance […]
When AI quietly breaks things, who pays? Read More »
National Life Group CISO expects more vulnerabilities in six months than in thirty years 2026-09-02 at 09:00 By Mirko Zorz In this Help Net Security interview, Becky Palmer is VP and CISO at National Life Group, answers five questions about defending against AI-driven attacks. The discussion covers why patch cycles built for human speed cannot […]
National Life Group CISO expects more vulnerabilities in six months than in thirty years Read More »
What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree 2026-08-31 at 09:00 By Mirko Zorz In this Help Net Security interview, Dr. Joye Purser, Global Field CISO at Cohesity, explains how to rank vulnerabilities when KEV, EPSS, and CVSS point in different directions. Active exploitation comes first, then exploit likelihood, then technical severity, […]
What vulnerability prioritization looks like when KEV, EPSS, and CVSS disagree Read More »
What 90 days and a small budget can buy in AI agent security 2026-08-28 at 08:30 By Mirko Zorz In this interview with Help Net Security, Prasad Tharippala, Field CISO at Versa, explains what organizations miss when they run open-weight models in house. He covers the hidden costs of GPU infrastructure, licensing review and staffing, […]
What 90 days and a small budget can buy in AI agent security Read More »
CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to the C-Suite 2026-08-27 at 14:15 By Kevin Townsend SecurityWeek talks to Chris Wheeler, CISO at Resilience, about his journey from the Navy to becoming a cybersecurity leader. The post CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to […]
CISO Conversations: Chris Wheeler – Trust Is the Job, From the Navy to the C-Suite Read More »
Production data in testing is still common, and Tricentis’ CISO wants it gone 2026-08-26 at 08:30 By Mirko Zorz In this Help Net Security interview, Erika Dean, CISO at Tricentis, talks about keeping production data out of test environments and why she thinks the alternatives are good enough now. She explains how her team caught […]
Production data in testing is still common, and Tricentis’ CISO wants it gone Read More »
Hired for One Job, Judged on Another: The CISO’s Real Problem 2026-08-24 at 17:00 By Sravish Sridhar The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job. The post Hired for One Job, Judged on […]
Hired for One Job, Judged on Another: The CISO’s Real Problem Read More »
CISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOW 2026-08-18 at 17:30 By Kevin Townsend With no formal training and no career plan, Waisman built a path from Argentina’s early hacking scene to leading security at an AI-powered offensive security firm. The post CISO Conversations: Nico Waisman – From Self-Taught […]
Four corporate investigation mistakes organizations make under pressure 2026-08-13 at 08:00 By Help Net Security In this Help Net Security video, Christine Gadsby, VP and Chief Security Advisor at BlackBerry, explains why corporate investigations go wrong before the forensic team arrives. The first hours matter more than leaders assume. Access gets granted, conversations start, and […]
Four corporate investigation mistakes organizations make under pressure Read More »
Post-quantum migration gets harder when every user holds a key 2026-08-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Christopher Smith, CEO of Quantus, discusses what cryptographic inventories turn up in banks and hospitals, including default passwords and admin keys still held by former employees. He explains where post-quantum key sizes break […]
Post-quantum migration gets harder when every user holds a key Read More »