risk management

Bridging Cybersecurity and AI

/ , ,

AI and machine learning models introduce new vulnerabilities, such as poisoning and evasion attacks, that traditional cybersecurity frameworks like the CVE Program are not equipped to address. The White House AI Action Plan proposes creating an AI Information Sharing and Analysis Center (AI-ISAC) to bridge the gap between existing cybersecurity infrastructure and AI security needs. Integrating AI vulnerability standards into established frameworks, such as the CVE Program, is crucial to ensuring the security of AI systems.

https://www.paloaltonetworks.com/blog/2026/01/bridging-cybersecurity-and-ai/

Managing Risk Has Been a Priority Ever Since You Asked About It

/

The CISO Series Podcast, recorded live at FAIRCON25 in NYC, discusses the challenges of starting risk management from scratch and the need to modernize GRC systems. The conversation highlights the importance of focusing on risk rather than just compliance, and the potential pitfalls of relying solely on AI-powered tools for risk quantification. The discussion also touches on the accountability of AI agents and the need for clear ownership and governance when they make mistakes.

https://cisoseries.com/managing-risk-has-been-a-priority-ever-since-you-asked-about-it/

CISOs’ Top 10 Cybersecurity Priorities for 2026

/ , , ,

CISOs' 2026 cybersecurity priorities focus on AI threats, data protection, resiliency, third-party risk, and geopolitical risks. Core tasks include securing AI deployments, enhancing threat intelligence, and managing identity access due to the rise of AI. CISOs aim to address shadow AI risks, improve third-party management, and ensure resilience across operations. Global events heighten attention on geopolitical risks impacting cybersecurity strategies.

https://www.csoonline.com/article/4114020/cisos-top-10-cybersecurity-priorities-for-2026.html

Businesses in 2026: AI Security Oh Yeah Better Look at That

/ , , ,

Businesses are increasingly prioritizing AI security, with the number of organizations assessing AI tools for security risks almost doubling to 64% in a year. Many leaders view AI as a key driver of cybersecurity change, fearing data leaks and adversarial attacks. Geopolitical factors influence security strategies, especially in larger organizations. While most companies meet basic cyber resilience standards, significant concerns remain about ransomware and supply chain attacks.

https://www.theregister.com/2026/01/12/ai_security_wef_survey/

11 Runtime Attacks Driving CISOs to Deploy Inference Security Platforms in 2026

/ , , , , ,

AI-enabled attacks are exploiting runtime weaknesses in AI systems, bypassing traditional security controls. Attackers are using techniques like prompt injection, camouflage attacks, and model extraction to gain unauthorized access and exfiltrate data. CISOs must prioritize deploying defenses such as automated patch deployment, normalization layers, and stateful context tracking to mitigate these risks.

https://venturebeat.com/security/ciso-inference-security-platforms-11-runtime-attacks-2026

From Reactive Compliance to Proactive Command: How ITAM Enables Regulatory Compliance

/ , , ,

The regulatory environment is becoming increasingly complex, with frameworks like NIS2, DORA, CRA, and the EU AI Act introducing stringent cybersecurity and data privacy requirements. IT Asset Management (ITAM) plays a crucial role in enabling regulatory compliance by providing visibility and control over IT assets. ITAM helps organizations meet these requirements by offering a comprehensive view of assets, facilitating security reviews, managing vulnerabilities, and accelerating incident response.

https://www.deloitte.com/uk/en/Industries/technology/blogs/how-itam-enables-regulatory-compliance.html

7 Cybersecurity Tips for 2026 No One Will Tell You About

/ ,

TLDR: For effective cybersecurity in 2026, focus on live documentation, rotate responsibilities, scrutinize CI/CD pipelines, customize vendor defaults, train under stress, audit shadow integrations, and preserve raw incident reports. Such practices reduce risks, enhance awareness, and build resilience against attacks.

https://devops.com/7-cybersecurity-tips-for-2026-no-one-will-tell-you-about/

PCI Compliance: a Complete Guide to Its 12 Requirements

/ , , , ,

PCI DSS is a set of information security standards for organizations that process, store, or transmit cardholder data. The 12 requirements cover secure networks, data protection, vulnerability management, access control, monitoring, and information security policies. Achieving PCI DSS certification reduces data breach risk, strengthens customer trust, and protects business reputation.

https://mindsec.io/pci-compliance/

How to Make AI Agents Reliable

/ , ,

AI agent reliability requires focusing on simple, constrained tasks rather than complex, autonomous functions. Most failures stem from agents' unpredictability, making them unsuitable for enterprise use. To improve reliability, enterprises should establish limited scopes, enforce governance, and maintain strict memory controls. Successful AI applications in enterprises are those that augment human work, not replace it, thereby gradually building trust and enhancing usability. Focusing on reliable and “boring” engineering ensures scalability and effectiveness in AI deployments.

https://www.infoworld.com/article/4112542/how-to-make-ai-agents-reliable.html

Cybersecurity & Vendor Risk in 2026

/ ,

In 2026, organizations face heightened cybersecurity risks due to reliance on external vendors, complicating security management. Critical vulnerabilities, often outside direct oversight, emerge as organizations depend on multiple vendors and sub-vendors. Attackers increasingly exploit these connections, amplified by AI, while regulatory demands for vendor oversight grow. CIOs must redefine trust by ensuring vendor security through continuous monitoring, clear contractual obligations, and governance. Effective vendor risk management is crucial for protecting revenue, operational continuity, and technology investments, positioning it as a key business performance driver.

https://nationalcioreview.com/articles-insights/information-security/cybersecurity-vendor-risk-in-2026/

Scroll to Top