CISO

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced

Asimily, backup, CISO, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Dragos, Features, Hexnode, Hot stuff, Insurance, Internet of Things, News, opinion, Risk Management, strategy, supply chain, tips, Waterfall Security Solutions /

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced 2026-07-29 at 08:30 By Mirko Zorz A ransomware hit lands a chemical plant in a safe state. Nobody is hurt, the site holds steady, and the operators begin the restart. The systems stay down. Every attempt to bring them online meets […]

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced Read More »

Hugging Face breach reignites open-weights debate, raises liability questions

agentic AI, Anthropic, CISO, Cloud Security Alliance, Don't miss, Hot stuff, Hugging Face, LLMs, News, open source, OpenAI, policy /

Hugging Face breach reignites open-weights debate, raises liability questions 2026-07-28 at 18:55 By Zeljka Zorz The first publicly documented cyberattack run end-to-end by an autonomous AI was an OpenAI benchmark test that escaped its sandbox and breached Hugging Face. In an incident post-mortem compiled with the input from Hugging Face and several hundred members of […]

Hugging Face breach reignites open-weights debate, raises liability questions Read More »

Shadow AI incident response begins with logs that may already be gone

AI, CISO, Compliance, cybersecurity, Don't miss, Features, Hot stuff, LevelBlue, News, opinion, regulation, Shadow Brokers, strategy, tips /

Shadow AI incident response begins with logs that may already be gone 2026-07-28 at 09:00 By Mirko Zorz In this Help Net Security interview, Brandy Wityak, VP of Complex Matters at LevelBlue, explains what happens in the hours after a shadow AI incident. She describes how quickly logs roll over, why firewall records of outbound […]

Shadow AI incident response begins with logs that may already be gone Read More »

Building a defense in depth strategy for sensitive data

CISO, cybersecurity, data security, News, strategy, tips, Video /

Building a defense in depth strategy for sensitive data 2026-07-23 at 07:00 By Help Net Security In this Help Net Security video, Venkata Pavan Kumar Gummadi, Professional Software Engineer at Broadridge, explains how to build a defense in depth strategy for protecting sensitive data. He argues that a single control, like encrypting a disk or […]

Building a defense in depth strategy for sensitive data Read More »

The air gap is a myth and other OT security truths

CISO, critical infrastructure, cyber resilience, Don't miss, energy sector, Features, Hot stuff, interoperability, News, opinion, Risk Management, strategy, threat modeling, tips /

The air gap is a myth and other OT security truths 2026-07-21 at 09:00 By Mirko Zorz Benjamin Bachmann, Director Group Information Security at Bilfinger, speaks with Help Net Security about defending industrial plants. He explains why attackers want to control operations instead of stealing data, and why the air gap is mostly a myth. […]

The air gap is a myth and other OT security truths Read More »

The five step plan that cuts security budget waste

CISO, cybersecurity, Don't miss, News, security ROI, strategy, tips, Video /

The five step plan that cuts security budget waste 2026-07-17 at 08:00 By Help Net Security In this Help Net Security video, Viktor Bulanek, CTO of Penetrify, explains where security budget waste comes from. Budgets get built around vendor categories, compliance checkboxes, and last year’s headlines. Attackers work along attack paths, and that mismatch is […]

The five step plan that cuts security budget waste Read More »

Reading between the lines of a cyber insurance policy

CISO, cyber insurance, Don't miss, Features, financial industry, Hot stuff, News, opinion, strategy, tips /

Reading between the lines of a cyber insurance policy 2026-07-16 at 09:00 By Mirko Zorz Enterprises in regulated industries often carry cyber insurance policies because contracts require it or boards ask for documented risk transfer. The global market for these policies reached about $16 billion in premiums in 2024. Coverage has become widespread. Payouts have […]

Reading between the lines of a cyber insurance policy Read More »

Companies keep getting breached by vulnerabilities they already knew about

CISO, cybersecurity, Don't miss, News, report, Vicarius, vulnerability management /

Companies keep getting breached by vulnerabilities they already knew about 2026-07-16 at 07:30 By Mirko Zorz Scanning tools have gotten good at their work. Organizations now find more weaknesses across more of their systems than at any earlier point in the industry’s history. A survey from the security firm Vicarius points to a gap that […]

Companies keep getting breached by vulnerabilities they already knew about Read More »

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure

CISO, cyber risk, cybersecurity, digital transformation, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips /

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure 2026-07-08 at 09:00 By Mirko Zorz In this interview with Help Net Security, Miranda Ritchie, CISO at Orbia, talks about protecting industrial systems where software runs water, chemical and manufacturing processes. She explains why a cyber incident in these settings can harm people, equipment and […]

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure Read More »

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker

CISO, CISO Conversations, CISO Strategy, Interview, Tarah Wheeler /

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker 2026-07-07 at 15:00 By Kevin Townsend Tarah Wheeler is CISO at TPO Group, a firm that provides cybersecurity consultancy for high-stakes organizations. But despite this elevated position, her journey was far from typical. The post CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and […]

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker Read More »

Securing the inbox: Where identity, brand and security meet

CISO, cybersecurity, DMARC, Don't miss, email security, Features, GlobalSign, Hot stuff, News, opinion, Red Sift, strategy, tips /

Securing the inbox: Where identity, brand and security meet 2026-07-06 at 09:00 By Mirko Zorz Getting a verified logo to appear next to your email has traditionally meant having to work with two separate entities. You have to work with a DMARC partner for setting up DMARC and BIMI, then use a trusted Certificate Authority […]

Securing the inbox: Where identity, brand and security meet Read More »

Philip Martin Joins Uber as Chief Information Security Officer

CISO, CISO Strategy /

Philip Martin Joins Uber as Chief Information Security Officer 2026-06-26 at 08:13 By SecurityWeek News Martin brings experience from Coinbase, Palantir, Amazon, and the U.S. Army to lead Uber’s cybersecurity and enterprise security organization. The post Philip Martin Joins Uber as Chief Information Security Officer appeared first on SecurityWeek. This article is an excerpt from […]

Philip Martin Joins Uber as Chief Information Security Officer Read More »

CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct

CISO, CISO Conversations, CISO Strategy, Management & Strategy /

CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct 2026-06-23 at 15:50 By Kevin Townsend Carl Froggett combines CISO and CIO. He currently occupies both positions at Deep Instinct. Before then, he was CISO at Citi for almost 17 years. The post CISO Conversations: Carl Froggett – Combining CISO and CIO at […]

CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct Read More »

Who pays when you gate cyber-capable AI models?

AI, CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy /

Who pays when you gate cyber-capable AI models? 2026-06-22 at 09:00 By Mirko Zorz In this interview with Help Net Security, Jaya Baloo, COO & CISO at Aisle, examines the debate over restricting access to cyber-capable AI models. She lays out the strongest argument for gating these tools, then explains where it breaks down for […]

Who pays when you gate cyber-capable AI models? Read More »

Onspring CISO on where automated GRC systems fall short

automation, CISO, cyber risk, cybersecurity, Don't miss, Features, GRC, Hot stuff, monitoring, News, opinion, Risk Management /

Onspring CISO on where automated GRC systems fall short 2026-06-15 at 09:00 By Mirko Zorz In this interview with Help Net Security, Nichole Windholz, CISO at Onspring, talks about the limits of automated GRC systems and continuous control monitoring. She explains why color-coded dashboards can hide nuance, how teams can check the data feeding their […]

Onspring CISO on where automated GRC systems fall short Read More »

How to use NIST and ISO frameworks to govern AI agents

agentic AI, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, framework, Hot stuff, News, NIST, opinion, Token Security /

How to use NIST and ISO frameworks to govern AI agents 2026-06-12 at 11:07 By Help Net Security Security leaders no longer need convincing that AI agents introduce risk. What’s missing is how to govern them once they move into production and begin operating autonomously across enterprise environments. AI agents already read sensitive documents, invoke […]

How to use NIST and ISO frameworks to govern AI agents Read More »

Threat actors are recruiting the people who hold cloud logins

CISO, cloud security, cyber risk, cybersecurity, Don't miss, Insider Threat, Intel 471, News, report, threats /

Threat actors are recruiting the people who hold cloud logins 2026-06-11 at 11:18 By Anamarija Pogorelec Companies keep most of their data and applications in cloud platforms that anyone can reach with the right login. That setup turns each employee holding those credentials into a security variable, and members of the cybercrime underground have built […]

Threat actors are recruiting the people who hold cloud logins Read More »

Cyber resilience metrics that drive action

CISO, cyber resilience, cybersecurity, News, NormCyber, security metrics, strategy, tips, Video /

Cyber resilience metrics that drive action 2026-06-10 at 09:55 By Help Net Security In this Help Net Security video, Pete Bowers, COO at NormCyber, explains how organizations can build a cyber resilience metrics program that supports better decisions. He questions common ways of measuring resilience, such as risk registers, tool scores, and annual tests, and […]

Cyber resilience metrics that drive action Read More »

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic

CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, strategy /

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic 2026-06-09 at 09:42 By Help Net Security The advent of AI-assisted vulnerability discovery and autonomous exploit development has brought about a new age in cybersecurity—one in which we can no longer rely on patching as a primary defense mechanism. […]

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic Read More »

Scroll to Top