Compliance

Companies push AI, sysadmins keep it on a short leash

Action1, AI, automation, Compliance, cybersecurity, News, patching, report /

Companies push AI, sysadmins keep it on a short leash 2026-07-31 at 08:00 By Anamarija Pogorelec In 2024, sysadmins expected AI to automate patch management optimization, vulnerability prioritization, infrastructure monitoring, and incident response within two years. Action1’s 2026 Survey Report: AI Impact on Sysadmins found that those expectations proved overly optimistic. The largest shortfalls appeared […]

Companies push AI, sysadmins keep it on a short leash Read More »

Timeless Compliance: Why Better Questions Beat Bigger Frameworks

AI, Artificial Intelligence, Compliance /

Timeless Compliance: Why Better Questions Beat Bigger Frameworks 2026-07-30 at 18:46 By Matt Honea The best compliance programs aren’t the biggest ones. They’re the ones built on a short list of questions that can actually be answered, and that still hold true when the models change. The post Timeless Compliance: Why Better Questions Beat Bigger

Timeless Compliance: Why Better Questions Beat Bigger Frameworks Read More »

Shadow AI incident response begins with logs that may already be gone

AI, CISO, Compliance, cybersecurity, Don't miss, Features, Hot stuff, LevelBlue, News, opinion, regulation, Shadow Brokers, strategy, tips /

Shadow AI incident response begins with logs that may already be gone 2026-07-28 at 09:00 By Mirko Zorz In this Help Net Security interview, Brandy Wityak, VP of Complex Matters at LevelBlue, explains what happens in the hours after a shadow AI incident. She describes how quickly logs roll over, why firewall records of outbound

Shadow AI incident response begins with logs that may already be gone Read More »

AI can’t fix cybersecurity’s hiring problem

AI, automation, certificates, Compliance, News, regulation, report, SANS, skill development /

AI can’t fix cybersecurity’s hiring problem 2026-07-22 at 07:30 By Anamarija Pogorelec Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past year,

AI can’t fix cybersecurity’s hiring problem Read More »

The Windows 10 hangover is becoming a security problem

Compliance, cyber insurance, News, regulation, report, Windows /

The Windows 10 hangover is becoming a security problem 2026-07-20 at 11:37 By Anamarija Pogorelec Windows 11 now runs on 78.8% of Windows devices after Microsoft ended support for Windows 10 on 14 October 2025, according to Lansweeper. Windows 10 still accounts for 16.9% of devices and no longer receives security updates, leaving newly discovered

The Windows 10 hangover is becoming a security problem Read More »

Nearly half of open-source AI projects never reach production

AI, Compliance, Mozilla, News, open source, report, software development /

Nearly half of open-source AI projects never reach production 2026-07-20 at 07:00 By Anamarija Pogorelec Open models are moving into production across more organizations, and the work of securing those deployments increasingly extends beyond the model weights. Mozilla’s The State of Open Source AI 2026 identifies deployment, governance and operational tooling as persistent obstacles as

Nearly half of open-source AI projects never reach production Read More »

Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday

CMMC, Compliance, Feedback Friday, Government, Management & Strategy /

Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday 2026-07-17 at 14:08 By SecurityWeek News Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI. The post Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday appeared first on SecurityWeek. This article is

Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday Read More »

Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules

CMMC, Compliance, Government /

Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules 2026-07-14 at 09:37 By Eduard Kovacs A new CMMC review and reform task force will conduct a comprehensive review of the program. The post Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules appeared first on SecurityWeek. This article is an excerpt

Pentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules Read More »

GitHub’s new tool helps prevent costly open-source license violations

Compliance, GitHub, News, open source, policy, software development /

GitHub’s new tool helps prevent costly open-source license violations 2026-07-02 at 07:00 By Anamarija Pogorelec GitHub’s Open Source Program Office (OSPO) uses the new GitHub License Compliance feature, now in public preview, to manage thousands of open-source dependencies and identify dependencies whose licenses require review. The feature is available to GitHub Advanced Security customers and

GitHub’s new tool helps prevent costly open-source license violations Read More »

Getting boards to fund ERM means speaking their currency

boardroom, Compliance, cybersecurity, News, Trend Micro, Video /

Getting boards to fund ERM means speaking their currency 2026-07-01 at 07:00 By Help Net Security In this Help Net Security video, Greg Young, VP Cybersecurity and Corporate Development at TrendAI, explains how to build Enterprise Risk Management that a board will pay for. Drawing on nearly four decades in cybersecurity, including time as a

Getting boards to fund ERM means speaking their currency Read More »

Healthcare leaders see a fatal cyber incident as inevitable

Compliance, cybersecurity, healthcare, News, report /

Healthcare leaders see a fatal cyber incident as inevitable 2026-06-26 at 08:00 By Mirko Zorz Healthcare practices run on a chain of outside vendors. An EMR system holds clinical records, a billing platform processes claims, a telehealth tool supports remote visits, and a cloud provider stores data. Every one of those connections gives an outside

Healthcare leaders see a fatal cyber incident as inevitable Read More »

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure

Compliance, Data Protection, News, regulation, strategy, tips, Video /

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure 2026-06-17 at 07:30 By Help Net Security In this Help Net Security video, Rick Goud, Global Field CTO at Kiteworks, discusses how to handle SEC, NIS2, and DORA disclosure timelines during a security incident. He opens with a 3.47 a.m. call: the team cannot confirm

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure Read More »

The checklist problem behind critical infrastructure cyber safety

asset discovery, Compliance, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Government, ICS/SCADA, News, policy, regulation, research, USA /

The checklist problem behind critical infrastructure cyber safety 2026-06-17 at 07:00 By Anamarija Pogorelec An asset owner can meet major federal cyber compliance standards and still run equipment that lacks the engineering to withstand an attack or a failure. New research from George Mason University examines how United States cyber policy defines reasonable care for

The checklist problem behind critical infrastructure cyber safety Read More »

Software supply chains are heading for a transparency test

Compliance, cybersecurity, ENISA, EU, Europe, News, regulation, software development, supply chain /

Software supply chains are heading for a transparency test 2026-06-16 at 12:24 By Anamarija Pogorelec Software supply chain visibility is becoming part of product security work as the EU Cyber Resilience Act (CRA) moves toward application in December 2027. ENISA’s SBOM Adoption State of Play 2026 shows organizations preparing for CRA obligations through SBOM tooling,

Software supply chains are heading for a transparency test Read More »

EU Cybersecurity Act 2.0: When good regulation goes bad

BH Consulting, Brian Honan, Compliance, Data Protection, Don't miss, enterprise, EU, Europe, Expert analysis, Expert corner, Hot stuff, News, opinion, regulation, strategy, tips /

EU Cybersecurity Act 2.0: When good regulation goes bad 2026-06-16 at 08:30 By Help Net Security Over recent years we’ve witnessed the EU becoming increasingly serious about cybersecurity. After years of watching high profile breaches, many resulting from supply chain attacks targeting our critical infrastructure, that seriousness is welcome. But good intentions and good policy

EU Cybersecurity Act 2.0: When good regulation goes bad Read More »

Making the cloud prove it followed your privacy wishes

auditing, Cloud, cloud security, cloud storage, Compliance, data, data security, Don't miss, EU, News, Privacy, regulation, research, storage, strategy /

Making the cloud prove it followed your privacy wishes 2026-06-11 at 08:43 By Sinisa Markovic Making companies that store personal data in cloud key-value databases handle deletion requests by running the operation and confirming the job is complete. The people making those requests and the regulators overseeing them have had limited means to confirm the

Making the cloud prove it followed your privacy wishes Read More »

Organizations can’t see much of their mobile AI activity

agentic AI, AI, BYOD, Compliance, cybersecurity, Lookout, mobile security, News, report, smartphones /

Organizations can’t see much of their mobile AI activity 2026-06-11 at 08:43 By Anamarija Pogorelec Organizations have limited visibility into AI activity on mobile devices despite security leaders expressing confidence in their AI governance, according to Lookout’s “Solving for the Mobile AI Blind Spot: Executive Confidence Meets Technical Reality” report. Mobile AI visibility gaps Enterprises

Organizations can’t see much of their mobile AI activity Read More »

WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order

Compliance, Featured, lawsuit, NSO, Privacy & Compliance, spyware, WhatsApp /

WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order 2026-06-08 at 17:58 By Eduard Kovacs The Meta-owned communications app is filing a federal court contempt order against NSO. The post WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

WhatsApp Catches Spyware Firm NSO Defying No-Hacking Court Order Read More »

The modern-day business can learn a lot about risk from this year’s mega events

Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, LogicGate, News, opinion, Risk Management, strategy /

The modern-day business can learn a lot about risk from this year’s mega events 2026-06-04 at 13:17 By Help Net Security Every year brings its share of global events, but 2026 is proving to be a banner year for mega-scale entertainment. The year got off to a roaring start with the Winter Olympics, and now

The modern-day business can learn a lot about risk from this year’s mega events Read More »

Spotless compliance evidence can still hide a broken control

auditing, CISO, CMMC Accreditation Body, Compliance, cyber risk, cybersecurity, Don't miss, Features, framework, Hot stuff, News, NIST, opinion, Risk Management, Secureframe, security assessment, security controls, strategy /

Spotless compliance evidence can still hide a broken control 2026-06-04 at 09:26 By Mirko Zorz In this interview with Help Net Security, Marc Rubbinaccio, Head of Cybersecurity and Compliance at Secureframe, explains where security teams go wrong when preparing for CMMC and FedRAMP 20x. The conversation covers how organizations check the 110 requirements but miss

Spotless compliance evidence can still hide a broken control Read More »

Scroll to Top