With S. 3315 and the pending HIPAA Security Rule NPRM in the wings, healthcare providers need to start making changes now to keep pace with the rapidly changing regulatory regime.
Featured
Employees aren’t necessarily ignoring AI governance when they use unapproved tools. Olivia Rose argues that conflicting messages, weak training and poor leadership are fueling shadow AI — and policies alone won’t fix it.
Former CIA, FBI, NSA and counterterrorism professionals at CruiseCon explain how intelligence tradecraft can make cyber defenders safer and more effective on and off the job.
CYBR.SEC.CON 2026
STARTS IN
--
Days
--
Hours
--
Minutes
Sponsored
Community Corner
See allFrom the CYBR.SEC.Community
AI Spend as a Security Control
What if the next attacker doesn’t want your data, but your AI budget? Why usage-based billing is a security risk, and what to do before the invoice arrives.
The CAPTCHA That Needed an AI to Explain It
Five dice, a tiny zero, and a litmus test for the health of cybersecurity.
Why I Don't Like Cybersecurity Awareness Month
If your security plan expires on November 1, it isn't a plan. It's a seasonal flavor.
You Don't Have To Say Everything, To Everyone All At Once
A product may have ten important features, but that does not mean every communication needs to explain all ten. The job of marketing is to establish quickly why the target audience should be interested in the product, and move them to the next stage.
CruiseCon AI & Privacy 2026: Ship's Log (A.K.A. Racing Isaias)
Bill Brenner posts regular updates from abourd the Mariner of the Seas cruise ship, where he is covering the proceedings during CruiseCon 2026
Latest Articles
See all
AI and ransomwareRansomware
AI Is Making Ransomware Easier to Scale — and Putting More Businesses at Risk
AI-powered ransomware attacks don't need sophisticated new techniques to create more risk. ThreatLocker CTO Michael Jenkins says automation lets cybercriminals target more businesses with less work, putting smaller organizations increasingly in the crosshairs.
zero trust
Zero Trust Doesn’t End at Login: Why Security Teams Must Control What Happens Next
Zero Trust security requires more than authentication and network access controls. ThreatLocker CTO Michael Jenkins explains why organizations must restrict what users, applications and processes can do after access is granted.
HIPAAcompliance
Senate Votes to End HIPAA’s Risk-Based Cybersecurity Era
The Health Care Cybersecurity and Resiliency Act would mandate MFA, encryption, and penetration testing — with a 36-month clock and no guaranteed funding for rural providers.
CruiseConAgentic AIAI and Privacy
CruiseCon AI/Privacy 2026: Full Coverage
Full CruiseCon 2026 coverage from aboard Mariner of the Seas, including AI security, privacy, insider threats, cyber risk and leadership.
AI GovernanceAgentic AI
Static Security Policies Can't Keep Up With Agentic AI
Agentic AI is exposing the limits of static security policies, excessive permissions and decades of technical debt. Enterprises need dynamic, runtime security controls that evaluate what AI agents are doing in real time. (Sponsored by Eve Security)
Agentic AIAI Governance
AI Agents Will Make Mistakes. Enterprise Security Must Be Ready When They Do
As enterprises deploy autonomous AI agents across critical systems, security teams must assume those agents will make mistakes. Agentic AI security requires continuous monitoring of behavior, intent and context — not blind trust in permissions. (Sponsored by Eve Security)
AI Data BreachesCruiseConAI Governance
AI-Powered Bank Attacks Exposed 67,000 People. Here Are 5 Things Security Teams Should Do Now
Suspected AI-assisted cyberattacks breached seven South Korean financial firms and exposed data on more than 67,000 people. The attacks reinforce warnings heard at CruiseCon AI and Privacy 2026 and point to five security actions organizations should take now.
Podcasts & Video
See all
Podcast
AI or Bust with Olivia Rose
Podcast
Something to do with Skyrim with Michael Jenkins
Podcast
The Wild West of Deploying Agents with Nadav Cornberg
Podcast
'Energized Cybersecurity Culture' Book Review with Michael Farnum
Podcast
CYBR.SEC.Careers with Sheridan Skurupey-McDonald & James “JB” Bryant
Video
Vendor Breaches, Shared Responsibility, and the Contract Clauses Security Teams Should Care About - Haylie Treas
Video
The 5-step Purple Team Blueprint - Ross Burke
Sponsored
Sponsored