Cybersecurity pioneer Chris Wysopal argues that awareness campaigns have failed and that software liability and accountability are needed to improve security.
Featured
Chris Wysopal warns that buying security tools without fixing vulnerabilities creates activity, not risk reduction.
AI uncovered seven FatFs flaws affecting embedded devices. The challenge now is patching millions of systems with no easy fix.
Sponsored
Community Corner
See allFrom the CYBR.SEC.Community
Cybersecurity Lessons from the Semiquincentennial of Liberty
As the United States of America enters its second quarter millennia, the tradeoff of security and liberty is never more apropos than it is to the cybersecurity industry. (Includes infographic)
Size DOESN'T Matter When It Comes To DDoS Attacks
The biggest DDoS attacks grab headlines, but impact matters more than size. Learn what defenders should really measure.
Stewarding the Generative Set in the Age of AI
As AI spreads, communities need trusted stewards to provide context, judgment, and accountability where automation falls short.
When Agents Knock: PACT, AI Browsers, and the Next Web Perimeter
AI agents and AI browsers are changing security boundaries. Learn what PACT means for the next web perimeter.
More Noise, More Risk: Reframing Internal Comms Overload
If you work in SecOps more noise equals more risk. The more alerts you have, the harder it is to find the ones that need immediate action. Yet in my experience, this idea of more noise being detrimental to understanding, does not stretch beyond the SOC into business communications.
Latest Articles
See all
CYBR.SEC.CON
HOU.SEC.CON. Is Now CYBR.SEC.CON.
CYBR.SEC.CON. didn't replace HOU.SEC.CON. It grew from it, expanding from a Houston conference into a national cybersecurity event. (Includes infographic)
Mobile App AI Security
Survey: AI Adoption in Mobile Apps Is Surging, But Visibility and Security Lag Behind
New research from NowSecure finds AI is now embedded in 95% of enterprise mobile apps, but more than one-third of organizations lack visibility into how those systems operate, even as mobile security incidents and third-party software risks continue to rise.
Security Awareness TrainingMental Health
Why Security Awareness Training Failed and What's Next
Security awareness training isn't stopping breaches. Learn why human behavior matters and what security teams should do next. (Includes infographic)
Email Security
Why the Email Gateway Is No Longer Enough
Modern phishing attacks bypass traditional email gateways. Learn why identity, behavior, and post-delivery security matter. (Sponsored by Abnormal AI)
Email Security and AI
Email Security Has Become an AI Arms Race
Attackers and defenders are both using AI. Learn why email security now depends on speed, context, and adaptive detection. (Sponsored by Abnormal AI)
CVEVulnerability Management
The CVE Stampede Is a Distraction, Finding the Vulns that Matter is the Challenge
With 48,000+ CVEs published annually, the challenge isn't volume. It's finding the vulnerabilities attackers will actually exploit.
GRCpost-quantum cryptography deadlines
Trump's Quantum EO Sets Aggressive PQC Deadlines
A new White House executive order sets hard deadlines for federal agencies to migrate to post-quantum cryptography by 2030 and 2031 and extends those obligations to contractors through new procurement rules. (includes infographic)
Podcasts & Video
See all
Podcast
30 Years of Raising Awareness with Chris Wysopal
Podcast
Cyber Sunday is now CYBR.Signal!
Podcast
The Human Factor with Dr. Calvin Nobles
Dr. Dustin Sachs sits down with Dr. Calvin Nobles to explore why security awareness alone is insufficient when it comes to changing human behavior.
Podcast
AI vs. AI: Scott Deluke on the Future of Cybersecurity
In this episode of CYBR.HAK.CAST, hosts Michael and Phil speak with Scott Deluke of Abnormal AI live from the inaugural CYBR.HAK.CON.!
Podcast
Why AI Usage Intelligence is the Missing Layer in Enterprise AI Security with Harmonic Security CEO Alastair Paterson
In this episode of CYBR.SEC.CAST, hosts Michael and Sam sit down with Alastair Patterson, CEO of Harmonic Security, to discuss the rapid evolution of AI in the enterprise.
Video
DON’T WAIT: Engineering Outcomes Between Red Lines and Rules of Engagement
Danielle (DJ) Jablanski argues that critical-infrastructure owners must stop waiting for perfect regulation or deterrence and instead start today to map interdependencies, engineer fault-tolerant redundancy, and reduce the severity of inevitable cyber-physical impacts.
Video
Safe Use of AI in OT Environments: Gaining the Benefits without the Risk
Christopher Walcutt argues that AI can be used safely in OT environments if organizations first establish strong cybersecurity maturity, segmentation, visibility, and strict containment controls.
Sponsored
Sponsored