Infosecurity Opinions
Attackers Don’t Need AI to Get in, Just a High-Vis Jacket
While security leaders debate AI-enabled threats, an attacker may only need a convincing story and someone willing to help to access confidential systems
The RAF’s New Space Squadron Offers a Lesson in Cyber Resilience
Vodafone's Steve Knibbs urges organizations to adopt a mission-focused approach to cybersecurity
CISO Accountability Needs an Operating Model, Not a Liability Shield
Fastly CISO Marshall Erwin says that responsibility and authority for security must be aligned across the teams involved in managing risk
You Are Not the Target of AI Agents: You Are the Shortcut
CISOs must view risk differently when it comes to 'reward hacking' by AI agents
Confronting What Lurks in the Shadows: AI Regulation and Governance
Companies must get a handle on shadow AI now ahead of inevitable federal government regulation of AI agents
Stop Counting Vulnerabilities and Start Measuring Risk Reduction
Neena Sharma argues that the most important cybersecurity metric isn't how much work the security team completed. It's whether the organization is harder to attack as a result
AI Didn't Break Vulnerability Management: it Exposed its Biggest Weakness
Scott Loughlin argues that context analysis is a far bigger vulnerability issue than the scale of flaws shown by AI
What Amazon's Blocking of Meta’s AI Shopping Agent Reveals About Current Identity Protocols
Identity protocols haven't yet caught up with AI agents - organizations must act to implement architectural boundaries
Five Questions Security Teams Must Be Able to Answer About Every AI Agent
Security teams need evidence to detect, authorize, contain and reconstruct consequential agent actions
Securing the Leap to Autonomous AI
Organizations must act now to establish controls that ensure AI systems act within a defined scope
The Clock Has Run Out on Traditional Cybersecurity
In the era of AI, organizations must adapt faster than their adversaries
How to Create a Path to Real AI Sovereignty
Hanane Lboukili advocates a risk-based approach to AI sovereignty, built on layered controls
AI is Finding More Vulnerabilities But Open Source Needs More People to Fix Them
Amid the growing capabilities of AI in vulnerability discovery, the need for skilled people to investigate and action these insights is more important than ever
Why Space Infrastructure's Biggest Cyber Risk Never Leaves the Ground
OPSWAT's Benny Czarny explains how most of space's digital attack surface remains on Earth, and is highly vulnerable to compromise
AI Security Awareness is the New Frontline of Cybersecurity
As AI becomes more embedded in everyday work, organizations need to ensure their approach to human risk keeps pace with their AI governance responsibilities
Why AI Fluency Is Now an Imperative in Closing the Cyber Skills Gap
Organizations that invest in AI fluency today will be better positioned to strengthen cyber resilience and build security teams capable of defending at machine speed
The CISO's New Liability Problem: Governing What You Don't Control
Chas Coyne warns that CISOs are facing extra liability exposure when AI agents act unexpectedly, resulting in security incidents
How CISOs Should Navigate a Growing UK-EU Cyber Compliance Squeeze
Many CISOs are juggling overlapping EU and UK regulatory regimes, the challenge will be to turn them into one coherent resilience conversation at board level
Why Today's Cybersecurity Leaders Must Help Shape Tomorrow's Talent
Cheryl Martin argues that experienced cyber professionals have a duty to provide opportunities for young people in the sector and help them develop once they arrive
What Okta and Microsoft’s Approaches Tell Us About the Future of Identity Security
As authentication gets stronger, enrolment and recovery become the targets
