CISO

CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality

CISO, CISO Conversations, CISO Strategy /

CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality 2026-11-05 at 13:00 By Kevin Townsend Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI. The post CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality appeared […]

CISO Conversations: Ryan Davis – The Unknown Is Where Security Meets Reality Read More »

Qualys CISO on what security teams can do as exploit campaigns grow

automation, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, Qualys, strategy, tips, vulnerability management /

Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]

Qualys CISO on what security teams can do as exploit campaigns grow Read More »

I underestimated how fast security teams would trust AI to act in the SOC

AI, CISO, Don't miss, Exaforce, Expert analysis, Hot stuff, News, opinion, SOC /

I underestimated how fast security teams would trust AI to act in the SOC 2026-10-28 at 17:25 By Help Net Security For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I assumed it would follow […]

I underestimated how fast security teams would trust AI to act in the SOC Read More »

Bellini Capital CISO on AI security governance and the limits of patching faster

AI, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, strategy, tips /

Bellini Capital CISO on AI security governance and the limits of patching faster 2026-10-28 at 08:30 By Mirko Zorz In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams […]

Bellini Capital CISO on AI security governance and the limits of patching faster Read More »

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question

boardroom, CISO, Cloud, cloud computing, cybersecurity, data, data security, Don't miss, EU, Europe, Features, Government, Hot stuff, Microsoft, News, opinion, regulation, strategy, tips /

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop […]

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question Read More »

AI agent permissions are outrunning security

agentic AI, AI, automation, CISO, cybersecurity, data, data security, Don't miss, Features, Hot stuff, Illumio, News, regulation, report /

AI agent permissions are outrunning security 2026-10-22 at 09:02 By Mirko Zorz Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. […]

AI agent permissions are outrunning security Read More »

The cyber talent shortage? Job postings just hit a four-year low

CISO, cybersecurity jobs, Don't miss, Features, GRC, Hot stuff, News, report, USA /

The cyber talent shortage? Job postings just hit a four-year low 2026-10-16 at 08:30 By Mirko Zorz US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job […]

The cyber talent shortage? Job postings just hit a four-year low Read More »

CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO

CISO, CISO Conversations, CISO Strategy, Netskope /

CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO 2026-10-15 at 11:26 By Kevin Townsend James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope. The post CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO appeared first […]

CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO Read More »

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

agentic AI, CISO, cybersecurity, data security, Don't miss, Features, Hot stuff, Immuta, News, opinion, strategy, tips /

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

Patching and preventing issues: What are the lessons you can learn?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, patching, Qualys, strategy, tips /

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Most companies count AI agents as insiders, and CISOs worry about their own liability

agentic AI, CISO, Don't miss, Insider Threat, News, report, survey, Trellix /

Most companies count AI agents as insiders, and CISOs worry about their own liability 2026-10-14 at 07:30 By Anamarija Pogorelec Software that works on an employee’s behalf is now turning up in incident reports. At 95% of the companies in a Trellix survey of 600 CISOs, an AI agent or other autonomous system was linked […]

Most companies count AI agents as insiders, and CISOs worry about their own liability Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

Thousands of wind and solar park systems sit exposed on the internet across Europe

CISO, critical infrastructure, cybersecurity, Don't miss, EU, Europe, Features, hardware, Hot stuff, ICS/SCADA, News, research, vulnerability assessment /

Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]

Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »

Pricing your bad days and how to build an economic model for security decisions

boardroom, CISO, CXO, cyber insurance, cyber risk, Don't miss, Features, Hot stuff, News, Risk Management, strategy, tips /

Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]

Pricing your bad days and how to build an economic model for security decisions Read More »

U.S. Bank CISO says the security role keeps growing and no one can own all of it

Banks, CISO, cyber risk, cybersecurity, Don't miss, Features, financial industry, Hot stuff, News, opinion, Risk Management, strategy, tips /

U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]

U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »

Three questions a hospital CISO should ask a healthcare fintech vendor

CISO, Compliance, CXO, cybersecurity, Don't miss, Features, HIPAA, Hot stuff, News, opinion, regulation, Risk Management, strategy, tips /

Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]

Three questions a hospital CISO should ask a healthcare fintech vendor Read More »

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list

AI, CISO, cybersecurity, News, PwC, report, survey /

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list 2026-10-02 at 08:00 By Sinisa Markovic Companies are putting more money into AI while naming attacks on AI systems as the threat they are least ready to face. PwC surveyed 3,934 business and technology leaders in 71 countries between May and July 2026. Half […]

Botnets, adversarial attacks and data poisoning top leaders’ AI threat list Read More »

Cybersecurity hiring practices leave little room for junior talent

AI, boardroom, CIO, CISO, News, report, skill development, training /

Cybersecurity hiring practices leave little room for junior talent 2026-09-29 at 14:00 By Anamarija Pogorelec Twenty-minute training sessions that fit into the workweek could help new hires become productive sooner, keep employees’ skills current and build problem-solving skills they can use across different tools, according to SkillBit’s The Shift to Continuous Cybersecurity Micro-Training report. Reasons […]

Cybersecurity hiring practices leave little room for junior talent Read More »

Call for Presentations Open for 2026 CISO Forum Virtual Summit

CISO, CISO Strategy, event /

Call for Presentations Open for 2026 CISO Forum Virtual Summit 2026-09-28 at 18:15 By Mike Lennon SecurityWeek seeks original, vendor-neutral presentations that help cybersecurity leaders navigate emerging threats, strengthen resilience, and address the strategic challenges facing today’s enterprise security programs. The post Call for Presentations Open for 2026 CISO Forum Virtual Summit appeared first on […]

Call for Presentations Open for 2026 CISO Forum Virtual Summit Read More »

If you do one security check this quarter, make it agent memory

agentic AI, CISO, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

If you do one security check this quarter, make it agent memory 2026-09-28 at 09:00 By Mirko Zorz In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on […]

If you do one security check this quarter, make it agent memory Read More »

Scroll to Top