Risk Management

When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis

Risk Management /

When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis 2026-10-29 at 18:30 By Steve Durbin Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you. The post […]

When Risk Becomes Personal: What Security Leaders Can Learn From a Cancer Diagnosis Read More »

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

Compliance, GRC, Risk Management, Supply Chain Security /

Nobody Trusts the Security Questionnaire. We Rely on It Anyway. 2026-10-28 at 12:30 By Sravish Sridhar The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies. The post Nobody Trusts the Security Questionnaire. We Rely on It […]

Nobody Trusts the Security Questionnaire. We Rely on It Anyway. Read More »

CISA lays out plan to push cyber adversaries out of US critical infrastructure

CISA, critical infrastructure, cybersecurity, News, quantum computing, Risk Management, strategy /

CISA lays out plan to push cyber adversaries out of US critical infrastructure 2026-10-27 at 14:14 By Anamarija Pogorelec The Cybersecurity and Infrastructure Security Agency (CISA) has released CISA 2030: Defend, Harden, Prevail, a strategy to strengthen national security and the resilience of critical infrastructure. It addresses intersecting cyber, physical, and geopolitical threats that can […]

CISA lays out plan to push cyber adversaries out of US critical infrastructure Read More »

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

Chrome, ClickFix, Data Protection, HTTP, Risk Management, Security Feature /

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections 2026-10-21 at 20:00 By Eduard Kovacs Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis. The post Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections Read More »

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

CA, certificate, certificate authority, eMudhra, Risk Management /

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys 2026-10-21 at 14:22 By Ionut Arghire The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The post Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

Pricing your bad days and how to build an economic model for security decisions

boardroom, CISO, CXO, cyber insurance, cyber risk, Don't miss, Features, Hot stuff, News, Risk Management, strategy, tips /

Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]

Pricing your bad days and how to build an economic model for security decisions Read More »

U.S. Bank CISO says the security role keeps growing and no one can own all of it

Banks, CISO, cyber risk, cybersecurity, Don't miss, Features, financial industry, Hot stuff, News, opinion, Risk Management, strategy, tips /

U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]

U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »

Three questions a hospital CISO should ask a healthcare fintech vendor

CISO, Compliance, CXO, cybersecurity, Don't miss, Features, HIPAA, Hot stuff, News, opinion, regulation, Risk Management, strategy, tips /

Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]

Three questions a hospital CISO should ask a healthcare fintech vendor Read More »

Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says

AI, Data Protection, PwC, Quantum, report, Risk Management /

Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says 2026-10-01 at 17:30 By Kevin Townsend PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures. The post Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says appeared […]

Enterprises Struggle to Prepare for AI and Quantum Threats, PwC Says Read More »

Four Cyber Threats Harboring Big Plans for the Future

AI, Quantum, resilience, risk, Risk Management /

Four Cyber Threats Harboring Big Plans for the Future 2026-09-29 at 14:30 By Steve Durbin – AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. The post Four Cyber Threats Harboring Big Plans for the Future appeared first on SecurityWeek. This article is […]

Four Cyber Threats Harboring Big Plans for the Future Read More »

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot

CISA, Government, Risk Management, Vulnerabilities, vulnerability, vulnerability management /

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot 2026-09-17 at 17:28 By Eduard Kovacs The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk. The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot Read More »

Comp AI Raises $34 Million for AI-Native Compliance and Security

Compliance, Cybersecurity Funding, funding, GRC, Risk Management /

Comp AI Raises $34 Million for AI-Native Compliance and Security 2026-09-17 at 16:00 By Ionut Arghire The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure. The post Comp AI Raises $34 Million for AI-Native Compliance and Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Comp AI Raises $34 Million for AI-Native Compliance and Security Read More »

The AI security question leaders should be asking instead

agentic AI, AI, CISO, cybersecurity, Don't miss, Features, Gremlin, Hot stuff, News, Risk Management, strategy, tips /

The AI security question leaders should be asking instead 2026-09-17 at 08:30 By Mirko Zorz In this Help Net Security interview, Frederic Bull, Security Officer at Gremlin, talks about what AI means for security teams. The conversation covers why asking what data a model was trained on is only part of the picture, and why […]

The AI security question leaders should be asking instead Read More »

“We Think the Security Control Is Working” Is No Longer Good Enough

CISO Strategy, Controls, Risk Management /

“We Think the Security Control Is Working” Is No Longer Good Enough 2026-09-15 at 22:30 By Sravish Sridhar Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. The post “We Think the Security Control Is Working” Is No Longer Good Enough appeared first on SecurityWeek. […]

“We Think the Security Control Is Working” Is No Longer Good Enough Read More »

HelmGuard Raises $7.3 Million for Agentic GRC and Security

AI, Compliance, Cybersecurity Funding, funding, GRC, HelmGuard, Risk Management /

HelmGuard Raises $7.3 Million for Agentic GRC and Security 2026-09-09 at 20:23 By Ionut Arghire The company will increase its US market presence and will expand its engineering and go-to-market teams. The post HelmGuard Raises $7.3 Million for Agentic GRC and Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

HelmGuard Raises $7.3 Million for Agentic GRC and Security Read More »

When AI quietly breaks things, who pays?

AI, CISO, cyber insurance, cyber risk, Don't miss, Features, Hot stuff, how-to, News, Risk Management, strategy, tips /

When AI quietly breaks things, who pays? 2026-09-03 at 08:00 By Mirko Zorz David Halbreich, an insurance recovery partner at Reed Smith, breaks down how AI companies should handle coverage gaps that come up as the industry grows. He covers straddle claims that fall between tail and go-forward D&O policies after a merger, how governance […]

When AI quietly breaks things, who pays? Read More »

A battery storage cyberattack would look exactly like a badly tuned controller

critical infrastructure, Don't miss, Europe, Features, Hot stuff, News, research, Risk Management, smart grid, storage, UK /

A battery storage cyberattack would look exactly like a badly tuned controller 2026-09-02 at 12:00 By Mirko Zorz Batteries connected to the grid make money by reacting to frequency, pushing power out when it sags and soaking it up when it rises. A few hundred of them moving together, on command from someone who should […]

A battery storage cyberattack would look exactly like a badly tuned controller Read More »

AI vulnerability discovery scores the highest impact of 20 emerging risks

AI, auditing, cyber resilience, cyber risk, cybersecurity, Gartner, News, report, Risk Management /

AI vulnerability discovery scores the highest impact of 20 emerging risks 2026-08-26 at 08:00 By Anamarija Pogorelec Risk managers, auditors and senior executives at 316 companies spent April and May ranking 20 threats they have not yet felt. AI discovery of cyber vulnerabilities came back first, according to Gartner. Three months earlier the same quarterly […]

AI vulnerability discovery scores the highest impact of 20 emerging risks Read More »

Digital executive protection is a strategic imperative for CEOs

Black Hat, Black Hat USA 2026, BlackCloak, CISO, CXO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Privacy, Risk Management, strategy, threats /

Digital executive protection is a strategic imperative for CEOs 2026-08-04 at 09:00 By Mirko Zorz In this interview with Help Net Security, Brian Hill, Field CISO, Client Advisory for BlackCloak, explains how attackers reach companies through the personal lives of executives. He describes a case where a draft report sat in an executive’s personal email […]

Digital executive protection is a strategic imperative for CEOs Read More »

Scroll to Top