3+ day, 13+ hour ago   (57+ words) What CIO-CISO alignment looks like when it’s working SC Media What CIO-CISO alignment looks like when it’s working Access matters more than the org chart Security became part of how the business operates Business metrics resonate more than security metrics…...

3+ day, 15+ hour ago   (83+ words) SC Media A credo for the AI era: Trust, but Decompile - Verify: Establish the ground truth on the artifact itself.Harden – strip out what verification shows the workload never actually calls, converting a pile of "known vulnerable" into "not present....

4+ day, 11+ hour ago   (82+ words) SC Media Paul Wagenseil is a custom content strategist for CyberRisk Alliance, leading creation of content developed from CRA research and aligned to the most critical topics of interest for the cybersecurity community. He previously held editor roles focused on…...

5+ day, 17+ hour ago   (85+ words) An AI agent designed to query internal documentation returns classified files to unauthorized users. The vulnerability scan passed — prompt injection tests confirmed the model wouldn’t execute malicious code or leak credentials. But the test never verified whether the retrieval system…...

5+ day, 14+ hour ago   (910+ words) Organizations routinely authorize high-consequence decisions — wire transfers, executive delegations, privileged access grants — based on instructions they cannot later prove were genuine. Fraud detection controls may catch suspicious activity after the fact, but they do not produce evidence of why a…...

5+ day, 16+ hour ago   (172+ words) scworld.com 6 ways teams can leverage zero-trust to manage AI agents - Don’t let agents blindly trust what they read in emails, documents – treat this as untrusted input. - Make guardrails such as permissions, allow-lists, sandboxing, and rate limits sit outside the…...

1+ week, 2+ day ago   (1353+ words) AUSTIN, TEXAS — A chief theme at this year's Ping YOUniverse conference Tuesday and Wednesday of last week (Sept. 1 and 2) was the notion of "verified trust," which Ping Identity views as the next stage of the authentication of humans. "Every step…...

3+ week, 12+ hour ago   (153+ words) SC Media When an Agent Fails: Incident Response for AI-Initiated Access Events What An Agent Incident Looks Like An In-Depth Guide to AI This content was reviewed and approved by a cybersecurity practitioner participating in CyberRisk Alliance’s Expert Review Program....

3+ week, 3+ day ago   (52+ words) SC Media AI skills in cybersecurity jobs double, but junior hiring lags IT leaders increasingly value gaming skills in hiring and decision-making Perspective and lessons learned from mergers and acquisitions Get daily email updates You can skip this ad in…...

3+ week, 3+ day ago   (86+ words) SC Media Report calls for AI sector to be designated critical infrastructure Hackers compromise Rust crate arrayref to inject malware Unspecified actors making AI-assisted attacks on critical infrastructure T-Mobile cybersecurity staff cut cable to expel Chinese hackers Public sector security:…...