Tag: risk management
318 articles
Vulnerability Patching Lag Exposes 91% of Organizations to Known Threats
The alarming truth is that 91% of organizations are leaving themselves exposed to known threats due to a vulnerability patching lag, with only 9% able to remediate high-severity flaws within a critical 24-hour window. This delay is not just a statistic - it's a recipe for disaster, with organizations that patch more slowly facing significantly higher breach rates.
Boards Urged to Prioritize Cyber Risk Quantification
To make cyber risk more tangible and actionable, boards are advised to prioritize quantifying it in terms of dollar value, allowing managers across the organization to understand and address potential threats more effectively. By translating cyber risk into a clear financial impact, companies like BP are better equipping themselves to manage and mitigate digital threats.
AI Tools Expose Vulnerabilities in Army's Unified Network
The Army's unified network is facing a new wave of vulnerabilities, thanks to AI tools that are making it easier for attackers to breach defenses. With AI, techniques that once required specialized skills can now be scaled with ease, expanding the attack surface and increasing risk.
Australia Grapples with Integration Lag in Overlapping Risk Era
We're facing a new reality of overlapping risks that are continuous, concurrent, and cascading - a far cry from the isolated shocks of the past. It's time for governments and institutions to rethink their response to risk, as the old approach of tackling single problems at a time no longer fits the problem.
Threat Intelligence Fails to Bridge Business Risk Gap
Threat intelligence falls short when it doesn't drive informed decision-making, often leaving a gap between analyst findings and senior leaders' priorities. Silobreaker and the SANS Institute are bridging this gap with a new study that explores how to turn threat intelligence into actionable business risk strategies.
Cybersecurity Shifts from Risk to Acceleration, Connection
The World Economic Forum's 2025 survey reveals a stark reality: 72% of organizations are facing increased cyber risks, with ransomware remaining a top threat - forcing us to rethink how we keep information safe in an AI-driven world. It's time to shift from traditional risk management to practical, accelerated solutions.
Enterprise AI Risk Concentrated Among Small Group of Power Users
Meet the AI power users: a small but mighty 5% of enterprise employees who are generating a whopping 144 conversations or more with AI tools, creating a concentrated risk that demands attention. These super-users are producing far more intense interactions, with 18 prompts per conversation compared to just 2.
US Navy Rethinks Risk in Software Development for Edge Operations
The Department of the Navy is shaking up its approach to software development, redefining risk to deliver mission-critical data at breakneck speeds. By recalibrating its tolerance for risk, the Navy aims to accelerate the flow of vital information to where it's needed most, when it's needed most.
Cybersecurity Burnout Spurs Call for Risk-Based Response
Half of all cyber professionals are burning out weekly or daily - it's time for organizations to shift their approach and view burnout as a critical operational risk, rather than just a wellness issue. By reframing burnout in this way, businesses can prioritize effective solutions and safeguard their cyber resilience.
UK Firms Bolster Cyber Defenses as AI Risks Mount
As uncertainty becomes the new normal, UK businesses are bolstering their cyber defenses, with 68% of leaders planning to boost cybersecurity investment over the next year. Despite this, many remain vulnerable, with fewer than three in 10 confident in their ability to respond to a major cyber incident.
SecurityScorecard Bolsters Internet Visibility with Driftnet Acquisition
SecurityScorecard has acquired Driftnet, an internet scanning startup, to supercharge its third-party risk management capabilities with deeper, real-time visibility into internet infrastructure and hidden exposures. This strategic move allows SecurityScorecard to directly control data quality and drive future innovation in AI security.
Securing Autonomous AI Requires New Risk Strategies
Autonomous AI agents are revolutionizing enterprise environments with lightning-fast speed, unprecedented autonomy, and access to sensitive systems and data - but many security teams lack the visibility and control to manage the resulting risks. This game-changing technology is rapidly expanding the enterprise attack surface, demanding new risk strategies to stay ahead.
Cyber Insurance Grapples with AI Liability Risks
As AI-driven tools take on a bigger role in patient care, hospitals and insurers are scrambling to reevaluate cyber insurance policies and figure out who's liable when things go wrong. To navigate this uncertainty, experts recommend carefully scrutinizing policy exclusions to ensure you're protected against your biggest risks.
Allianz Transfers Commercial Cyber Unit to Coalition
This game-changing partnership brings a fresh approach to commercial cyber insurance, elevating protection and benefits for customers. By joining forces, Allianz and Coalition are revolutionizing cyber coverage with a unique and robust offering.
Breach Readiness Lags as Identities Become Prime Attack Surface
To stay ahead of threats, organizations must move beyond generic risk assessments and instead focus on tailored risk management, taking into account the unique business context and technical severity of potential breaches. By doing so, they can harden identity controls, improve governance, and build a stronger defense against cyber attacks.
Securing AI Adoption Requires New Risk Oversight Approach
As AI adoption accelerates, organizations are essentially onboarding fast-moving digital colleagues that require a new risk oversight approach - one that acknowledges their unique behavior and risk profile, which differs significantly from human workers. Traditional human-centric controls may not be enough to secure this new digital perimeter.
US Agencies Warn of AI Deployment Risks, Issue Security Guidance
As AI systems become more autonomous, US agencies warn that they may behave unexpectedly, and organisations should prepare for this by prioritising resilience and risk containment. To stay safe, businesses should assume the unpredictable and plan deployments with caution.
Security Leaders Face New Risk Calculus with AI-Driven Workforces
The modern workforce has a new equation: humans and AI agents working together, facing the same dynamic threats and risks. This emerging reality demands a fresh approach to security, one that recalibrates risk and rethinks trust in a blended workforce.
Attackers Target New Assets Within Minutes of Exposure
The moment a new asset goes live with a public IP address, the clock starts ticking - and within minutes, attackers are circling, waiting to pounce on unsuspecting targets. In just 24 hours, a newly exposed asset can go from discovery to compromise, with threat actors exploiting vulnerabilities at an alarming rate.
Cyber Risks Expose Organizations to Increased Threats
Organizations are facing a harsh reality: understanding cyber risk is only half the battle, as the real challenge lies in responding effectively when a threat strikes. Marsh's 2026 People Risks report reveals that cyber-related challenges, including cyber-threat literacy, top the list of people risks, ahead of technological change and skills shortages.
Threat Response Times Hinge on Smart SOC Design
When a breach occurs, the clock is ticking - and the cost of delayed response can be crippling, with every hour of inaction threatening data exfiltration, service disruption, regulatory exposure, and brand damage. A smart SOC design can be the difference between a swift response and a devastating fallout.
Insurance Premiums Signal Global Supply Chain Strains Ahead
A sharp spike in maritime war-risk insurance premiums served as an early warning sign of impending supply chain disruptions in the Strait of Hormuz, offering a potential low-cost signal for officials to anticipate and prepare for global supply shocks. By tracking these premium changes, Australia and other nations may be able to mitigate the impact of future disruptions.
Cyber Insurance Claims Data Reveals Top Incident Types
A new report reveals that a whopping majority of cyber insurance claims are driven by just three types of incidents, forcing insurers, organizations, and regulators to rethink where risk lies and how it should be priced. This surprising concentration of claims in a few categories has significant implications for managing financial risk.
NIST Scales Back Vulnerability Ratings Amid Surge in Submissions
The National Institute of Standards and Technology is overhauling its vulnerability rating system, scaling back severity scores for lower-priority flaws as submissions surge. This change means some software flaws will no longer get a severity score, shifting focus to the most critical vulnerabilities.