Security teams are caught between a rapidly expanding attack surface and accelerating adversarial use of AI. Thirty-two percent of security teams see automated, AI-fueled attacks as the single greatest driver reshaping their offensive security strategies.
This week: How AI is reshaping security vendor business models, disrupting cybersecurity procurement, exposing governance gaps, fueling new trust debates, and further complicating persistent threats like ransomware and Microsoft insecurity.
A trio of fresh flaws highlights the heightened vulnerability of the entire enterprise software stack, as the combination of automated scanning, the availability of exploit code, and patching delays is cited as a factor in the rise of vulnerability exploitation as a preferred entry point.
A new report from Cye finds that AI adoption is racing ahead of AI security, leaving organizations stuck between governance policies on paper and operational controls that can actually reduce risk. The report analyzed more than 2,400 assessments across 21 countries and 16 industries.
The people on the ground often know whether that event is ordinary, suspicious, urgent, harmless, political, embarrassing, dangerous, or simply the latest chapter in a long operational story.
As AI accelerates product development and cybersecurity categories blur together, security leaders face a growing challenge: figuring out who actually does what anymore. (Sponsored by Crush Security.)
Security leaders have spent years optimizing detection and response while relying on spreadsheets, tribal knowledge, and reseller relationships to make million-dollar technology decisions. A new generation of AI-powered platforms aims to change that. (Sponsored by Crush Security.)
We are joined by Crush Security co-founders Joshua Jones and Josh Johnson, plus CISO John Barrow. They discuss navigating an increasingly complex vendor ecosystem where tool sprawl, contract complexity, reseller incentives, and budget pressure make buying harder. (Sponsored by Crush Security)
The normalization of ransomware in industrial systems, along with an operating culture that treats downtime as unacceptable, is an uncomfortable tension that's not likely to go away soon.
This week, we recognize four cybersecurity influencers on YouTube who skillfully unpacked the war between Microsoft and "Nightmare Eclipse."
Also: The CYBR.SEC.CON call for papers has been extended to June 14. We hope to see you there!
Zero Trust was designed to control people and machines. The rise of autonomous AI agents is forcing security teams to extend those same principles to software capable of making decisions and taking action on its own. (Includes infographic)
Salesforce knew its platform was being systematically exploited. Charter's customers are paying the price. The gaps that enabled these intrusions are largely the same. Here's what enterprises and platform providers should have done and still need to do.
At CYBR.HAK.CON, Jason Haddix showed how AI-powered "hackbots" are helping offensive security teams scale reconnaissance, analyze complex applications, and uncover real vulnerabilities, while proving that human expertise remains the deciding factor.
Dr. Eric Cole's cybersecurity accomplishments are legendary, but his willingness to speak openly about burnout is something that particularly resonated with me, as it is something many of us struggle to avoid.
AI may be making deception easier, but Dustin "Wirefall" Dykes argues that human connection -- not technology -- is the most effective defense against a future where reality itself becomes increasingly difficult to verify.
