Tag: risk management
318 articles
Large Firms Expose Themselves to Cyber Risk by Leaving Vulnerabilities Unpatched
Large companies are leaving themselves exposed to cyber risk by neglecting to patch high or critical vulnerabilities, with 66% of security leaders at firms with over $1bn in revenue admitting to doing so at least sometimes. This stark contrast with smaller firms highlights a troubling trend in cyber risk management.
ISACA Bolsters AI Governance with New Certification Amid Skills Gap
Get ready to take control of AI with ISACA's new AI governance certification, launching in early 2027, which helps professionals manage AI securely and responsibly. This game-changing credential is the ultimate tool for individuals looking to govern AI effectively, filling a crucial gap in the skills market.
Australia Grapples with Legacy IT Security Risks as AI Threats Escalate
Australia's ageing IT systems are a ticking time bomb, and AI-powered threats are making it easier for cyber attackers to exploit weaknesses, putting the entire nation at risk. The Department of Home Affairs has stepped in, ordering a national stocktake of legacy technology to identify and mitigate these vulnerabilities.
CISOs Struggle to Gauge Security Posture
Most security leaders struggle to confidently answer the board's toughest questions: How secure is the organization overall, what's the actual financial exposure, and is our posture improving? The problem isn't a lack of data, but scattered context that's making it hard to provide clear answers.
SOC 2 Faces AI Agent Test
As AI agents increasingly infiltrate enterprise systems, the authenticity of SOC 2 compliance comes under scrutiny - can a certificate that verifies controls at a single point in time truly guarantee security in a rapidly changing environment? Token Security argues that SOC 2 may be more about appearances than actual protection.
AI Leaders Urge UN to Regulate Technology Over Humanity Risks
Anthropic CEO Dario Amodei sounds a stark warning: if AI isn't managed carefully, it could pose an existential threat to humanity. He urges the UN to take a closer look at broad risk management controls to prevent this worst-case scenario.
Microsoft 365 Governance Gaps Expose Organizations to Risk
Most organizations think their Microsoft 365 environments are fine - until disaster strikes. But the truth is, hidden governance gaps are lurking, putting companies at risk, with 77% of global organizations experiencing at least one governance incident in the past year.
Patch Automation Needs Checks to Balance Speed
Automation isn't just about speeding up patch deployment - it's also about building in checks to prevent errors and ensure reliability, or you risk accelerating your way to failure. By neglecting to balance speed with safety measures, you can turn automation into a high-speed train wreck.
Cybersecurity Shifts Focus to Human Judgment
As AI takes over the technical heavy lifting in cybersecurity, such as pattern recognition and analysis, human judgment is becoming increasingly crucial in making critical decisions that require experience and contextual understanding. The focus is shifting from technical analysis to informed decision-making, making human expertise more valuable than ever.
Securing Enterprise AI Requires Lifecycle Approach
The AI revolution is here, with nearly a third of organizations already leveraging AI for threat detection and incident response, and 63% expecting full integration by 2027 - but a staggering 73% of IT security leaders admit their organization wouldn't be ready for a major cyberattack. As AI adoption accelerates, the gap between usage and security readiness is growing alarmingly.
AI Tools Operate Largely Unchecked, Heightening Security Risks
Most AI tools are flying under the radar, with a staggering 80% operating without IT oversight in enterprise ecosystems, leaving organizations vulnerable to security risks. This alarming lack of governance is even more pronounced in smaller organizations, according to Reco's latest findings.
Cyber Insurance Losses Spike as Claim Costs Soar
Cyber insurance losses are skyrocketing as claim costs surge, with non-refundable fees in large suits potentially exceeding $10m before a case is even heard, and average claim costs jumping significantly in 2025 despite a decrease in overall claims.
NIST Seeks Overhaul of Vulnerability Database for AI-Driven Era
The National Institute for Standards and Technology is calling for a major revamp of its National Vulnerability Database to better tackle software vulnerabilities in the AI-driven era. It's seeking public input on how to modernize the database and its processes to stay ahead of emerging threats.
Zero-Knowledge Proofs Offer Secure Path for Cyber Risk Disclosure
ZKPs offer a game-changing solution, allowing companies to securely share proof of vulnerabilities without exposing sensitive data that could be exploited by attackers. By using ZKPs, organizations can demonstrate the truth of a statement, such as confirming a specific vulnerability exists, without revealing confidential details.
Generative AI Disrupts Hacker Landscape
The technical barriers that once limited credible cyberattacks are rapidly eroding, making it essential to rethink security strategies and prioritize exploitable risk over theoretical exposure. With generative AI, the traditional ranking of attacker sophistication is collapsing, empowering less-skilled hackers to launch more potent threats.
InfraTrust Report Flags Urgent Infrastructure Vulnerabilities
In a wake-up call for infrastructure security, Eclypsium's inaugural InfraTrust Pulse report reveals a staggering 61 vulnerabilities, including six critical ones, threatening the very foundation of our digital world. The monthly report aims to help organizations focus on the most pressing threats, prioritizing vulnerabilities that pose a real-world risk.
Patch Management Struggles to Keep Pace with AI-Accelerated Threats
Nearly a third of breaches occur because hackers exploit known vulnerabilities that could have been easily fixed with a patch, highlighting the urgent need for more efficient patch management. By speeding up patching, organizations could prevent around one in three incidents, making it a crucial defense against cyber threats.
GRC AI Tools Fall Short on Enterprise Readiness
Most organizations are flying blind when it comes to GRC AI tools, with a staggering 87% of IT and security pros admitting they can't fully see the AI tools active within their organization. This visibility gap poses a foundational risk, making it harder to rely on other controls and assurances.
Pentera Injects Validation into AI-Driven Security Workflows
Pentera is revolutionizing AI-driven security by injecting validation into workflows, empowering teams to turn disconnected risk signals into decisive action against real attack paths. By safely emulating attacker techniques, Pentera provides the evidence needed to transform guesswork into effective security measures.
Lumen Technologies Rebuilds Exposure Management with Trusted Asset Data
Lumen Technologies' security team transformed their exposure management by consolidating 40 disconnected systems into one trusted view, growing their asset count from 17,000 to 1.1 million devices. This overhaul empowered them to respond to incidents with confidence, knowing who owned what and taking informed risk decisions.
AI Exacerbates Vulnerability Prioritization Crisis
The irony of AI-powered vulnerability discovery is that it's creating an overwhelming crisis: despite spotting weaknesses at unprecedented speed and scale, organizations are no safer - just more inundated. The harsh truth is that a vulnerability is just a clue, not risk, and the real challenge lies in prioritizing and assessing true threats.
Threat Management Fails to Keep Pace with Visibility Gains
Most organizations are drowning in threat intelligence, with an average of 14 distinct feeds, yet struggle to turn that visibility into action, with 61% unable to identify which vulnerabilities are most likely to be exploited. As a result, security teams waste 42% of their time on low-priority risks, highlighting a critical gap between threat awareness and effective management.
AI Agents Emerge as Unchecked Identities in Enterprise Security
The equation for enterprise security is no longer simple: with AI agents now connected to critical business services, controlling identities is no longer enough to control risk. These emerging insiders have quietly become privileged - and potentially invisible - attack paths that security and identity programs must urgently address.
AWS Unveils AI-Powered Platform to Streamline Vulnerability Management
Discover and remediate code vulnerabilities with ease using AWS Continuum, a game-changing platform that streamlines vulnerability management with AI-powered recommendations and automated remediation. With Continuum, you can gain confidence in your security posture and automate fixes based on your own risk profiles and priorities.