Latest

Ransomware Demands Fall but Endpoint Attacks Escalate

Brian Pereira  •  August 11, 2025

Ransomware operators are increasingly abandoning encryption-only tactics in favor of stealing and compromising data integrity. Aaron Bugal, field CISO for APJ at Sophos, shares how ransomware groups are moving from pure encryption to stealing sensitive data and exploiting remote endpoints.

Data Breach Notification

Adversarial Exposure Validation (AEV) – The Missing Link in Your CTEM Program

Seemant Sehgal  •  July 16, 2025

Traditional security testing tools can’t keep pace with modern threats—or prove which vulnerabilities truly matter. Discover how Adversarial Exposure Validation (AEV) bridges the gap by continuously simulating real-world attacks to reveal exploitable exposures, prioritize risk, and empower smarter security...

Cloud Security

Cloud Security and the Evolving Role of the Firewall

Tom Field  •  May 8, 2025

As organizations and cybersecurity threats have both moved to cloud, what role will the traditional firewall continue to play? A significant and evolving one, says Rich Campagna of Palo Alto Networks. He talks about this role and how AI is being employed in new solutions.

►

Events

How Linking Identity, Data Security Can Help Cyber Response

Michael Novinson  •  May 2, 2025

A growing reliance on complex identity systems has made identity a popular attack surface for several reasons, said Arvind Nithrakashyap, co-founder and CTO, Rubrik, discussing the ever-expanding security risks and difficulties faced by organizations.

►

Events

How Generative AI Enables Solo Cybercriminals

Anna Delaney  •  May 2, 2025

While artificial intelligence is a "double edged sword" for both enhancing security and enabling cybercriminals, the defenders are thankfully currently "ahead of the game," said Ray Heffer, field CISO of Veeam. But there's the worrisome threat that the advantage could shift the other way, he said.

►

Events

Agentic AI Tackles Network Outage Prevention Challenges

Tom Field  •  May 1, 2025

Agentic AI combined with intent-based automation offers proactive problem-solving within a network infrastructure, said Lingping Gao, CEO and chairman of NetBrain. The solution is not just reacting to outages but understanding and enforcing the underlying "intent" behind every function in a network.

►

Artificial Intelligence & Machine Learning

Why Better Security in AI Use Will Fuel Wider Adoption

Michael Novinson  •  April 30, 2025

While adoption of artificial intelligence tools and development is soaring, security of these technologies - through model validation and other techniques - will fuel even wider adoption of AI, said DJ Sampath, vice president of AI software and platform at Cisco.

►

Events

Securing AI Models Against Unpredictability and Exploitation

Michael Novinson  •  April 29, 2025

AI is transforming cybersecurity from the ground up. Security teams battle skills shortages, alert fatigue and bloated technology stacks. Jeetu Patel, Executive Vice President and Chief Product Officer at Cisco, said AI can augment capacity and simplify defenses when applied thoughtfully.

►

Events

AI vs. AI: The New Cybersecurity Battlefield

Tom Field  •  April 29, 2025

Offensive cybersecurity is gaining momentum, driven by frameworks such as Gartner's Continuous Threat Exposure Management and advancements in generative AI. Organizations are increasingly adopting proactive strategies to secure their digital assets, said BreachLock CEO Seemant Sehgal.

►

Events

The Importance of Quantifying Security Risk for the Board

Michael Novinson  •  April 29, 2025

Quantifying the potential cost impact of a cyberattack on a critical business operation and demonstrating how to reduce that risk to a more acceptable level is crucial for CISOs gaining cybersecurity budget buy-in from the CFO, board and others, said Sumedh Thakar, president and CEO of Qualys.

Cyberwarfare / Nation-State Attacks

Ukrainian Signal Users Fall to Russian Social Engineering

Akshaya Asokan  •  February 19, 2025

Russian nation-state hackers are using phishing attacks to target Ukrainian users of the chat app Signal, say security researchers. Rather than circumventing Signal's end-to-end encryption via a cryptographic attack, attackers use malicious prompting to prod victims into exposing messages.