cybersecurity

Shadow AI Now Needs a Bill of Materials

By / Blog / , , ,

Enterprises are adopting AI Bills of Materials (AI-BOMs) to manage the complexity of Shadow AI, including tracking AI models, datasets, prompts, agents, identities, and cloud infrastructure, beyond traditional software components. Companies like Cisco, Wiz, and Palo Alto Networks are developing tools to create detailed, machine-readable inventories of AI assets to improve security, governance, model provenance, and compliance with emerging regulations such as the EU AI Act.

https://techinformed.com/shadow-ai-now-needs-a-bill-of-materials/

The Breakup: Why CISOs Are Decoupling Data From Their SIEMs

By / Blog / ,

CISOs are increasingly decoupling security log data from their SIEMs by implementing separate data lakes and pipelines, often using cloud storage, to gain greater control over data schema, retention, and analytics while reducing costs and vendor lock-in. Although this approach offers flexibility and improved data management, it also requires significant investment in designing, building, and operating secure and scalable infrastructure without disrupting existing security processes.

https://www.techtarget.com/searchsecurity/tip/The-breakup-Why-CISOs-are-decoupling-data-from-their-SIEMs

The Ultimate Guide to Managing Third-Party Risk

By / Blog / ,

Third-party risk management (TPRM) is the process of identifying, assessing, and mitigating risks associated with external third parties. TPRM programs are driven by regulatory requirements, cybersecurity risk, competitive advantages, and internal efficiency. The TPRM lifecycle includes sourcing and selection, intake and onboarding, inherent risk scoring, internal controls assessment, external risk monitoring, SLA and performance management, and offboarding and termination.

https://www.jdsupra.com/legalnews/the-ultimate-guide-to-managing-third-5033967/

New Report Shows How AI Gives Cybersecurity Competitive Advantage

By / Blog / , ,

A new World Economic Forum report reveals that artificial intelligence (AI) is the key driver transforming cybersecurity, with 94% of cyber leaders recognizing its defining role and 77% of organizations already employing AI in their cyber operations. The report highlights that strategic AI deployment enhances vulnerability detection, accelerates response times, and reduces breach costs, providing organizations a competitive edge in the escalating race against AI-empowered cyber threats.

https://www.weforum.org/press/2026/05/new-report-shows-how-ai-gives-cybersecurity-competitive-advantage/

Mythos AI Is a Cybersecurity Threat, but It Doesn’t Rewrite the Rules of the Game

By / Blog / , ,

Anthropic's latest AI, Claude Mythos, has demonstrated the ability to rapidly find and exploit thousands of software vulnerabilities, raising significant cybersecurity concerns globally. While Mythos represents an impressive advance in automating vulnerability discovery and exploitation, experts note it does not introduce fundamentally new types of threats but rather amplifies existing cybersecurity challenges by accelerating processes traditionally done by experts, highlighting the persistent imbalance between defenders and attackers in cybersecurity.

https://theconversation.com/mythos-ai-is-a-cybersecurity-threat-but-it-doesnt-rewrite-the-rules-of-the-game-281268

What CISOs Need to Get Right as Identity Enters the Agentic Era

By / Blog / , ,

As agentic AI identities rapidly increase, CISOs face new security challenges in managing and securing both human and non-human identities within enterprises. Experts Dustin Wilcox and Michael Adams advise adopting an identity-first security model that emphasizes continuous verification, strong identity hygiene, inventorying non-human identities, and evolving beyond traditional MFA to address expanded attack surfaces and behavioral signal erosion. This shift is critical as identity becomes the primary control plane for security in the AI era, requiring CISOs to rethink frameworks and focus on intent-based access and real-time monitoring.

https://www.cio.com/article/4164014/what-cisos-need-to-get-right-as-identity-enters-the-agentic-era-2.html

Mythos Changed the Math on Vulnerability Discovery. Most Teams Aren’t Ready for the Remediation Side

By / Blog / , ,

Anthropic’s AI system Mythos significantly accelerates vulnerability discovery, posing challenges for many organizations that lack the operational infrastructure to efficiently triage, prioritize, and remediate the increased volume of findings. The article highlights that while Mythos improves detection speed, most security teams struggle with closing the discovery-to-remediation gap, emphasizing the need for centralized management, risk-based prioritization, and closed-loop remediation workflows to effectively address vulnerabilities identified by advanced AI tools.

https://thehackernews.com/2026/04/mythos-changed-math-on-vulnerability.html

Nearly Half of Cybersecurity Pros Want to Quit – Here’s Why

By / Blog / ,

A recent survey by Harvey Nash reveals that nearly half of cybersecurity professionals are considering quitting due to a significant mismatch between their workload, the evolving threats posed by AI, and inadequate compensation and recognition. Despite the increasing challenges and pressure from new AI-powered threats, many security specialists feel undervalued, leading to waning motivation and a high desire to change jobs, highlighting a critical risk for organizations relying on their cyber defenses.

https://www.zdnet.com/article/nearly-half-of-cybersecurity-pros-want-to-quit-heres-why/

Delivering an Impactful 15-Minute Board Briefing

By / Blog / , , ,

Cyber risk oversight is increasingly a priority for audit committees, which often allocate only 10 to 15 minutes per quarter for cybersecurity briefings amidst other responsibilities. Effective CIO and CISO briefings focus on delivering concise, actionable insights that highlight material risks, changes in the external environment, and program health, enabling directors to govern with clear priorities and decisions rather than merely receiving status updates.

https://www.cio.com/article/4163334/delivering-an-impactful-15-minute-board-briefing.html

Defender’s Guide to Frontier AI: a Checklist for CISOs

By / Blog / ,

The “Defender’s Guide to Frontier AI: A Checklist for CISOs” by Palo Alto Networks highlights the critical need for organizations to enhance their cybersecurity posture in response to the rapid advancement and widespread adoption of frontier AI models with deep cybersecurity capabilities. The guide emphasizes a phased approach for CISOs to identify and close security gaps before malicious actors can exploit them, stressing that partial protection is inadequate in the evolving threat landscape driven by AI technologies.

https://www.paloaltonetworks.com/resources/datasheets/defenders-guide-to-frontier-ai-checklist-for-cisos

Scroll to Top