cybersecurity

​​Securing Critical Infrastructure: Why Europe’s Risk-based Regulations Matter

/ ,

Cyberattacks increasingly threaten critical infrastructure like hospitals, power grids, and financial systems, prompting Europe to implement new cybersecurity regulations (NIS2, DORA). These rules broaden security requirements, making CISOs more strategic and demanding improved risk management, swift incident reporting, and higher board involvement. The goal is to shift from a compliance mindset to real, risk-based resilience, prioritizing effective controls such as multifactor authentication and robust asset management. Boards are now accountable for cyber risks, and organizations should use specific metrics, such as inventory, privileged access, and timely updates, to measure and manage security posture. The focus is on practical protections that clearly mitigate real threats to society, rather than applying all possible controls equally.

https://www.microsoft.com/en-us/security/blog/2025/11/05/securing-critical-infrastructure-why-europes-risk-based-regulations-matter/

10 Promising Cybersecurity Startups CISOs Should Know About

/ ,

This article lists 10 notable cybersecurity startups founded after 2020, each addressing trending security challenges and gaining rapid traction with enterprises and investors.

Highlighted Startups:

  • Astrix Security: Focuses on securing non-human identities in enterprise environments; raised $85M since 2021.
  • Chainguard: Provides software supply chain security via a Linux-based platform; $600M+ in funding, $3.5B valuation.
  • Cyera: Specializes in data security posture management, with a significant platform play in the AI era. The company has raised $1.3 billion and is valued at $6 billion.
  • Drata: Automates GRC & trust management, growing quickly post-acquisition of SafeBase; $100M ARR, 7,000+ customers.
  • Island: Developed a secure enterprise browser for safer SaaS access; $730M in funding, 450+ enterprise customers.
  • Mimic: Ransomware detection and deflection at the kernel level, with fast simulation and recovery features; founded in 2023.
  • Noma Security: AI and agent security/governance, rapid growth, and $135M raised since 2023.
  • Reality Defender: Deepfake detection across media types, industry award-winner, strong market backing.
  • Upwind: Cloud-native app protection with runtime-first detection; rapid revenue and feature growth, $180M raised.
  • Zenity: Governs AI agents’ access and behavior in real-time, integrates broad agent discovery/governance, with $38M raised.

https://www.csoonline.com/article/4080699/10-promising-cybersecurity-startups-cisos-should-know-about.html

73% of U.S. CISOs Faced a Significant Cyber Incident in the Past Six Months, According to Nagomi Data

/ , ,

73% of U.S. CISOs experienced significant cyber incidents in the last six months, highlighting internal pressures rather than external threats as the main stressors. Burnout is prevalent, with 87% reporting increased role pressure. Many struggle with managing numerous security tools and face board expectations exceeding their ability to quantify risk. Nagomi Security’s CISO Pressure Index reveals the need for shared accountability and support for CISOs to navigate these challenges effectively.

https://www.businesswire.com/news/home/20251105165613/en/73-of-U.S.-CISOs-Faced-a-Significant-Cyber-Incident-in-the-Past-Six-Months-According-to-Nagomi-Data

The Next Evolution Of Cybersecurity Is Preemptive

/ , ,

Cybersecurity is rapidly evolving from reactive responses to proactive prevention as advances in AI enable attacks to occur much faster. Instead of only responding to incidents, the new focus is on detecting early signals—like new domains or infrastructure—that may indicate an impending attack and neutralizing threats before they develop. This shift has led to the development of new metrics that measure how quickly organizations can preempt threats. Both attackers and defenders are leveraging AI to stay ahead, with startups like Malanta designing systems to discover and dismantle potential attacks at the earliest stage. The industry sees prediction and early intervention as key to future cybersecurity.

https://www.forbes.com/sites/tonybradley/2025/11/05/the-next-evolution-of-cybersecurity-is-preemptive/

The AI Penetration Testing Lie: Why Human Expertise Remains Irreplaceable

/ , ,

AI cannot replace human expertise in penetration testing; it only automates tasks without the creativity needed for real security. Compliance testing has degraded to automated scans, misleading businesses about their security. AI tools are similar to vulnerability scanners and lack human adaptability and innovation. The best approach is a hybrid model, using AI for repetitive tasks but relying on humans for genuine threat emulation. Penetration testing is a crucial investment for security, promising significant ROI by preventing costly breaches.

https://aijourn.com/the-ai-penetration-testing-lie-why-human-expertise-remains-irreplaceable/

To Maximize Their Influence, CISOs Need Diverse Skills

/ , ,

CISOs must possess diverse skills to influence organizational strategy by effectively addressing cybersecurity as a business issue. Key requirements include understanding security technology, aligning cybersecurity with business goals, and communicating risks clearly to stakeholders. Modern CISOs need leadership skills to engage all employees in security practices and a risk-centric mindset to prioritize vulnerabilities. With increased cybersecurity threats, corporate executives are more receptive to CISOs, marking a significant shift in their role from solely tech leaders to strategic business partners.

https://www.techtarget.com/searchsecurity/tip/To-maximize-their-influence-CISOs-need-diverse-skills

Top 10 Countries That Have Payment Card Info Spilled Onto the Dark Web in 2025

/ ,

Top 10 countries with card info on dark web in 2025: US (30,000+ cards), Singapore (5,400+), Spain (5,090+), UK (1,804+), Kuwait (1,518), France (722), Ireland (589), Canada (442), Germany (408), Cyprus (326). Stolen cards trading at low prices due to high supply and low-quality data. Most stolen details remain valid for 12-16 months, making them risky for consumers. Key security measures: monitor statements, use strong passwords, disable browser password saving, enable multi-factor authentication.

https://www.cybersecurity-insiders.com/top-10-countries-that-have-payment-card-info-spilled-onto-the-dark-web-in-2025/

How Agentic AI Could Turbocharge Fraud

/ , ,

Agentic AI could revolutionize online shopping but poses significant fraud risks. Payments professionals at Money 20/20 expressed concerns that criminals might exploit AI to execute scams more effectively. Programs like FraudGPT, available for subscription, could escalate fraud incidents by automating scams and creating synthetic identities. Executives highlighted challenges in verifying AI-driven transactions and the need for robust authentication processes to combat fraud as agentic AI technology becomes prevalent.

https://www.paymentsdive.com/news/how-agentic-ai-could-turbocharge-fraud-payments/804562/

Vulnerability-Lookup

/

Vulnerability-Lookup is a platform for security teams to track and manage vulnerabilities across products and vendors. It integrates multiple vulnerability databases, enabling users to correlate and manage vulnerabilities without relying on specific identifiers. Features include custom watch lists, an API, modular import systems, and support for Coordinated Vulnerability Disclosures (CVD). It is co-funded by CIRCL and the EU.

https://www.vulnerability-lookup.org/

Preparing for Threats to Come: Cybersecurity Forecast 2026

/ ,

Cybersecurity Forecast 2026: Google Cloud’s report focuses on upcoming cybersecurity threats, emphasizing AI’s role in escalating cybercrime, with adversaries leveraging AI for more sophisticated attacks and social engineering. Key predictions include increased ransomware incidents, the growth of cyber operations from nation-states like Russia, China, Iran, and North Korea, and challenges in securing AI systems. Organizations are advised to adapt to these evolving threats, enhancing their security strategies in anticipation of 2026.

https://cloud.google.com/blog/topics/threat-intelligence/cybersecurity-forecast-2026/

Scroll to Top