If you’re like me, you’re noticing a chilling disconnect in the boardroom: The speed of agentic AI adoption vastly outpaces the maturity of our governance, risk and compliance frameworks. We have spent decades refining the GRC checklist, designing static policies… Read More "Beyond the checklist: Building adaptive GRC frameworks for agentic AI"
With many solutions offering attack surface management capabilities, choosing the right tool for your business can be overwhelming. In this post, we cut through the noise to present you with the top 10 ASM tools on the market in 2025. What… Read More "Top 10 Attack Surface Management Software Solutions in 2025"
Laut einer Studie waren fast 80 Prozent der Logistikunternehmen in Deutschland Opfer eines Hackerangriffs. vectorfusionart – shutterstock.com Fast 80 Prozent der Logistikbetriebe in Deutschland waren bereits von einer Cyberattacke betroffen.Das hat eine aktuelle Umfrage des Security-Anbieters Sophos ergeben. Demnach finden… Read More "Deutsche Logistik schlecht vor Cyberattacken geschützt"
A third-party risk assessment is a key part of a Third-Party Risk Management (TPRM) program. It’s a thorough process for evaluating potential risks that an outside vendor or external party could pose to your organization. This comprehensive examination encompasses various… Read More "How to Perform a Third-Party Risk Assessment: A Step-by-Step Guide"
This attack is another reminder that the modern attack surface extends deep into the software development lifecycle, Will Baxter, field CISO at Team Cymru, said in a statement. “Threat groups targeting source code repositories and build environments are seeking long-term… Read More "Source code and vulnerability info stolen from F5 Networks"
It’s no secret that human error still plays a significant role in data breaches – despite ongoing security and awareness training. But how do we finally disrupt this trend? The answer lies in a new approach to human risk management.… Read More "Why Human Risk Management is Now Critical in Cybersecurity"
Oct 15, 2025Ravie LakshmananVulnerability / Server Security Cybersecurity researchers have disclosed that a critical security flaw impacting ICTBroadcast, an autodialer software from ICT Innovations, has come under active exploitation in the wild. The vulnerability, assigned the CVE identifier CVE-2025-2611 (CVSS… Read More "Hackers Target ICTBroadcast Servers via Cookie Exploit to Gain Remote Shell Access"
AI is no longer an experiment in the security stack — it’s becoming the centerpiece. Foundry’s 2025 Security Priorities Study finds that 58% of organizations plan to boost spending on AI-enabled security tools next year, signaling a decisive shift from… Read More "58% of CISOs are boosting AI security budgets"
Because unmanaged assets are not continuously monitored for security risks, they likely contain cybersecurity exposures, like software vulnerabilities and cloud security misconfigurations. When these assets are connected to the internet, they become active attack vectors heightening your risk of suffering… Read More "The Cybersecurity Risks of Unmanaged Internet-Facing Assets"
A threat actor with ties to China has been attributed to a five-month-long intrusion targeting a Russian IT service provider, marking the hacking group’s expansion to the country beyond Southeast Asia and South America. The activity, which took place from… Read More "Chinese Threat Group ‘Jewelbug’ Quietly Infiltrated Russian IT Network for Months"
