CISO

Treating AI agents like service accounts for federated query security

access control, agentic AI, AI, CISO, cybersecurity, Don't miss, Features, LLMs, News, opinion, strategy /

Treating AI agents like service accounts for federated query security 2026-06-09 at 08:46 By Mirko Zorz In this interview with Help Net Security, Paras Malhotra, CISO at Starburst, explains how the company handles data governance across federated query environments. Topics include layering Starburst’s access controls above native source permissions, tiering vendor risk across more than […]

Treating AI agents like service accounts for federated query security Read More »

AI agent governance gets harder when agents outnumber your people

agentic AI, CISO, cybersecurity, enterprise, News, opinion, strategy, tips, Video /

AI agent governance gets harder when agents outnumber your people 2026-06-05 at 09:24 By Help Net Security In this Help Net Security video, Amit Gautam, CTO at Abluva, explains the security risks that autonomous AI agents bring into enterprise environments. He opens with a real case: a reconciliation agent at a financial services firm had […]

AI agent governance gets harder when agents outnumber your people Read More »

Spotless compliance evidence can still hide a broken control

auditing, CISO, CMMC Accreditation Body, Compliance, cyber risk, cybersecurity, Don't miss, Features, framework, Hot stuff, News, NIST, opinion, Risk Management, Secureframe, security assessment, security controls, strategy /

Spotless compliance evidence can still hide a broken control 2026-06-04 at 09:26 By Mirko Zorz In this interview with Help Net Security, Marc Rubbinaccio, Head of Cybersecurity and Compliance at Secureframe, explains where security teams go wrong when preparing for CMMC and FedRAMP 20x. The conversation covers how organizations check the 110 requirements but miss […]

Spotless compliance evidence can still hide a broken control Read More »

What CISOs need to do about post-quantum migration in the next 24 months

CISO, Encryption, News, quantum computing, QuSecure, strategy, tips, Video /

What CISOs need to do about post-quantum migration in the next 24 months 2026-06-03 at 07:40 By Help Net Security In this Help Net Security video, Garfield Jones, SVP Global Strategy and Research, QuSecure, lays out what CISOs should do over the next 24 months. A recent Google paper moved the expected arrival of a […]

What CISOs need to do about post-quantum migration in the next 24 months Read More »

Zero trust physical security needs trust decisions at the edge

CCTV, CISO, cyber risk, cybersecurity, Don't miss, Features, hardware, Hot stuff, News, opinion, Risk Management, security cameras, strategy, tips, zero trust /

Zero trust physical security needs trust decisions at the edge 2026-06-02 at 09:09 By Mirko Zorz In this interview with Help Net Security, Chuck Davis, VP, Global Information Security at Hikvision, explains how zero trust applies to physical security systems like cameras and door controllers. He breaks down how to make trust decisions at the […]

Zero trust physical security needs trust decisions at the edge Read More »

Data discovery gaps that catch enterprises off guard

CISO, cybersecurity, data, Don't miss, enterprise, Features, Hot stuff, News, opinion, Schellman, SMBs, strategy, tips /

Data discovery gaps that catch enterprises off guard 2026-06-01 at 11:46 By Mirko Zorz In this interview with Help Net Security, Avani Desai, CEO at Schellman, talks about the gap between what organizations think they know about their data and what discovery scans turn up. She shares stories of shadow data in abandoned cloud storage, […]

Data discovery gaps that catch enterprises off guard Read More »

EU organizations buckle under rising compliance pressure

AI, CISO, Compliance, conferences, cybersecurity, Don't miss, EU, Features, Government, Hot stuff, News, regulation, Risk Management /

EU organizations buckle under rising compliance pressure 2026-06-01 at 08:19 By Sinisa Markovic Cybersecurity governance in the EU is shifting under expanding frameworks such as NIS2 and DORA, while AI raises new questions for security teams. What the future brings is hard to predict, and organizations must find a way to cope. Antonija Vojnović, Governance, […]

EU organizations buckle under rising compliance pressure Read More »

Governing shadow AI without killing innovation

AI, CISO, cybersecurity, News, strategy, tips, Video /

Governing shadow AI without killing innovation 2026-06-01 at 08:19 By Help Net Security In this Help Net Security video, Alan Snyder, CEO at NowSecure, talks about governing shadow AI without stopping innovation. He frames the problem as two opposing forces. Companies need to adopt AI fast because attackers and competitors will outpace them otherwise, but […]

Governing shadow AI without killing innovation Read More »

The CISO selling confidence in a market full of breach headlines

AI, CISO, cyber risk, cybersecurity, Don't miss, enterprise, Features, Hot stuff, identity management, identity protection, News, Risk Management, security operations, skill development, SOC, Span, strategy, tips /

The CISO selling confidence in a market full of breach headlines 2026-05-28 at 10:16 By Mirko Zorz Engineering teams across enterprise IT are writing their own software with AI coding assistants, spinning up agents that act on their behalf, and assigning those agents the same access privileges their human creators hold. The shift has pulled […]

The CISO selling confidence in a market full of breach headlines Read More »

Coinflow CISO on crypto payments security under AI pressure

APT, boardroom, CISO, communication, conferences, Crypto, cyber risk, cybercrime, cybersecurity, Don't miss, enterprise, Features, fraud, Hot stuff, News, opinion, Risk Management, Span, strategy, tips /

Coinflow CISO on crypto payments security under AI pressure 2026-05-27 at 09:24 By Mirko Zorz Crypto payment firms sit near the top of the target list for advanced persistent threat groups, and the workload on their security leaders keeps growing. Malcolm Portelli, CISO at Coinflow, runs the company’s security program from Malta. Coinflow is headquartered […]

Coinflow CISO on crypto payments security under AI pressure Read More »

What happens when security teams inherit identity

CISO, cybersecurity, Don't miss, Features, Hot stuff, identity, identity management, News, opinion, Span /

What happens when security teams inherit identity 2026-05-26 at 13:38 By Sinisa Markovic At the Span Cyber Security Arena conference, I sat down with Eric Woodruff, Chief Identity Architect at Semperis, to talk about how organizations perceive identity and the challenges those perceptions create for security. He shared his perspective on where organizations struggle with […]

What happens when security teams inherit identity Read More »

Boards want cyber risk in dollars, not CVE counts

boardroom, CISO, communication, CVE, cyber risk, CYE, Don't miss, News, strategy, tips, Video /

Boards want cyber risk in dollars, not CVE counts 2026-05-25 at 08:11 By Help Net Security In this Help Net Security video, Ziv Levi, SVP of Technology at CYE, explains why translating cyber risk into dollars is one of the most pressing tasks for security leaders. Boards and executives want cyber exposure described in business […]

Boards want cyber risk in dollars, not CVE counts Read More »

Why AI changed the threat model for travel technology

CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips /

Why AI changed the threat model for travel technology 2026-05-21 at 09:16 By Mirko Zorz In this Help Net Security interview, Devon Bryan, SVP, Global CSO at Booking Holdings, reflects on his path from Air Force network security engineer to global CSO across financial services, hospitality, and travel technology. He discusses why the travel industry’s […]

Why AI changed the threat model for travel technology Read More »

Verizon DBIR: Vulnerability exploitation is the dominant initial access vector

AI, CISO, credentials, data breach, Don't miss, Hot stuff, News, phishing, Ransomware, report, social engineering, Verizon, vulnerability disclosure, vulnerability management /

Verizon DBIR: Vulnerability exploitation is the dominant initial access vector 2026-05-20 at 17:16 By Zeljka Zorz Vulnerability exploitation has overtaken stolen credentials as the most common way attackers gain initial access to target networks, according to the 2026 Verizon Data Breach Investigations Report. This is the first time credential theft has been knocked off the […]

Verizon DBIR: Vulnerability exploitation is the dominant initial access vector Read More »

Communicating cyber risk in dollars boards understand

boardroom, CISO, communication, conferences, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Span, strategy, tips /

Communicating cyber risk in dollars boards understand 2026-05-20 at 09:34 By Mirko Zorz In this Help Net Security interview, Nick Nieuwenhuis, Cybersecurity Architect at Nedscaper, explains why cybersecurity has not delivered the resilience that decades of investment have promised. He argues that spending has leaned too heavily on technical controls while neglecting people, processes, and […]

Communicating cyber risk in dollars boards understand Read More »

When ransomware hits, confidence doesn’t restore endpoints

Absolute Security, boardroom, CISO, Endpoint Security, News, Ransomware, resilience, UK, USA /

When ransomware hits, confidence doesn’t restore endpoints 2026-05-18 at 07:03 By Anamarija Pogorelec Ransomware, supply chain vulnerabilities, insider threats, compliance failures, and software disruptions remain major concerns for security leaders, according to The Ransomware Reality: Zero Days to Recover report by Absolute Security. How CISOs currently ensure endpoint resilience against ransomware (overall, %) (Source: Absolute […]

When ransomware hits, confidence doesn’t restore endpoints Read More »

Closing the AI governance gap in your enterprise

AI, CISO, cyber risk, cybersecurity, enterprise, News, strategy, tips, Video /

Closing the AI governance gap in your enterprise 2026-05-14 at 08:00 By Help Net Security In this Help Net Security video, Casey Bleeker, CEO at SurePath AI, talks about the AI governance gap that exists in almost every organization. Drawing from three years of conversations with IT, business, and security leaders, Casey explains why AI […]

Closing the AI governance gap in your enterprise Read More »

Spotting third-party cyber risk before attackers do

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, News, opinion, Risk Management, strategy, tips, Video /

Spotting third-party cyber risk before attackers do 2026-05-04 at 09:46 By Help Net Security In this Help Net Security video, Jeffrey Wheatman, SVP and Cyber Strategist at Black Kite, discusses how organizations can identify and manage third-party cyber exposures before attackers exploit them. He argues that businesses should move beyond a data-loss mindset toward one […]

Spotting third-party cyber risk before attackers do Read More »

Cyber Insurance Data Gives CISOs New Ammo for Budget Talks

CISO, cyber insurance /

Cyber Insurance Data Gives CISOs New Ammo for Budget Talks 2026-04-28 at 22:18 By Kevin Townsend Boards may ignore alerts, but they listen to losses: new data from Resilience links security gaps directly to financial impact. The post Cyber Insurance Data Gives CISOs New Ammo for Budget Talks appeared first on SecurityWeek. This article is […]

Cyber Insurance Data Gives CISOs New Ammo for Budget Talks Read More »

AI is speeding up nation-state cyber programs

CISO, cyber risk, cybersecurity, Don't miss, Features, Government, Hot stuff, Microsoft, NATO, News, North Korea, opinion, strategy /

AI is speeding up nation-state cyber programs 2026-04-24 at 08:40 By Mirko Zorz Im this Help Net Security interview, Kaja Ciglic, Senior Director, Cybersecurity Policy and Diplomacy at Microsoft, discusses how nation-state cyber programs have changed over three years. Cyber has become a core instrument of state power, integrated with military, economic, and diplomatic tools. […]

AI is speeding up nation-state cyber programs Read More »

Scroll to Top