Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Cyber Risks
OpenAI warns of cyber risks posed by new AI models
OpenAI announced Wednesday that it is establishing a new advisory board, the Frontier Risk Council, as part of a broader strategy to better manage the risks surrounding advanced AI models. This was reported by Reuters. OpenAI warned that the next generation of models could pose a significantly higher cybersecurity risk, as they appear increasingly capable of identifying complex vulnerabilities and even developing new, working zero-day exploits.
Wisr AI Systems Appoints Jonathan Niednagel, Cyber Risk & Intelligence Veteran, to Board of Directors
Vancouver, British Columbia–(Newsfile Corp. – December 11, 2025) – Wisr AI Systems Inc. (CSE: WISR) (“Wisr AI” or the “Company”), a leader in developing Agentic AI platforms that predict and prioritise cyber risk, is pleased to announce the appointment of Jonathan Niednagel as a member of the Company’s Board of Directors.
Australian firms exposed as vendor cyber risk grows
Australian organisations are expanding their supplier networks faster than they can secure them, leaving many exposed to supply chain cyber threats, a new study from cyber firm BlueVoyant has found. The report said Australian third party risk management programs sit among the least mature in the world. It said 99% of local respondents suffered negative impacts from a supply chain breach over the past year.
Singapore leads in third-party cyber risk, yet breaches rise
Singapore organisations report some of the strongest third-party cyber risk management maturity in the world, yet most still suffer supply chain-related breaches, according to new research from cybersecurity firm BlueVoyant. The company’s latest State of Supply Chain Defence Report finds 60% of organisations surveyed in Singapore have what they describe as established or optimised third-party risk management programmes. This rate is nearly double the Asia-Pacific average.
Managing third-party cyber risk - Insight
Third-party breaches: the fastest- rising cyber threat Third-party breaches have surged to the forefront of Irish organisations’ cyber threat landscape, with 48% of respondents identifying them as their most significant exposure. This reflects a global shift. As digital supply chains and ecosystems grow increasingly interconnected, threat actors are exploiting vulnerabilities beyond company firewalls. They’re targeting suppliers, vendors and partners to gain entry.
Can Marsh & McLennan Take the Advisory Lead? - TradingView News
Marsh & McLennan Companies, Inc.’s MMC arm, Marsh, recently released a global cybersecurity report titled the “Cyber catalyst report: Guiding priorities in cyber investments.” The study revealed that about 75% of organizations worldwide say they are “highly confident” in their cyber-risk management strategies, though regional variation is strong: for instance, entities in India, the Middle East and Africa report 83% confidence, whereas firms in Asia report as low as 50%.
Black Kite debuts Product Analysis module for software risk evaluation, boosts third-party cyber assessments
Black Kite, vendor of third-party cyber risk management, announced the release of its new Product Analysis module, which allows security teams to evaluate the risks of third-party software products at a granular level. As the first TPRM platform to offer this capability, Black Kite delivers a more detailed view of exposure and supports better decision-making around specific products and vendor outreach.
CISOs in 9 Countries: Vendor AI and EHR Now Drive Most Healthcare Data Breaches
Black Book Research today announced headline findings from a flash survey of hospital and health system CISOs and senior cybersecurity leaders in nine countries reporting some of the highest recent rates of healthcare data breaches and patient privacy incidents. The rapid-response poll highlights a sharp escalation in cyber risk originating from electronic health record (EHR) vendors, AI and analytics platforms, and other digital health suppliers.
Rising Third-Party Risks and Persistent Ransomware Threats Drive Increased Cybersecurity Investments in 2026: Marsh Report
NEW YORK–(BUSINESS WIRE)–In a global cyber environment marked by major security lapses, cyberattacks, and technology outages, new research released today by Marsh, the world’s leading insurance broker and risk advisor and a business of Marsh McLennan (NYSE: MMC), reveals that organizations around the world are more confident in how they approach cyber risk management and are planning to invest even more in cybersecurity defenses in 2026.
Majority of global firms plan to boost cyber spending in 2026
Two-thirds of organizations across the globe are planning to increase their investment in cyber risk prevention over the next 12 months, according to a report released Tuesday by Marsh. More than a quarter of organizations plan to boost their spending by more than 25%. The top spending priorities include security technology and mitigation, incident response and preparation, and hiring.
Pathlock Recognized as a Sample Vendor in Gartner® Hype Cycle™ for Cyber-Risk Management, 2025
Pathlock was named a Sample Vendor for Continuous Controls Monitoring (CCM) in the Gartner® Hype Cycle™ for Cyber-Risk Management, 2025, underscoring its focus on helping enterprises enhance security and streamline compliance across complex application environments.
Cybersecurity jobs available right now: December 9, 2025
Sony | USA | Remote – View job details As an Associate Analyst, Cyber Threat Intelligence, you will collect and analyze open-source threat data to identify signs of cyber threats. You will prepare analysis reports, threat assessments, and briefings for GSIRT and its stakeholders. You will also support projects that improve data collection, interpretation, and other threat intelligence processes.
Ampcus Cyber and ISC2 Bangalore Chapter Successfully Host Cyber Security Bangalore Summit
Ampcus Cyber, a global leader in cybersecurity, risk management, and digital trust solutions, in collaboration with the ISC2 Bangalore Chapter, successfully hosted the Cyber Security Bangalore Summit, bringing together cybersecurity professionals, practitioners, and industry decision-makers from across Karnataka. The summit witnessed participation from over 250 attendees, including members of the ISC2 community, technology leaders, and emerging cybersecurity talent.
What’s New in GravityZone December 2025 (v 6.69)
During early December, Bitdefender rolled out new functionality in Bitdefender GravityZone, a comprehensive cybersecurity platform that provides prevention, protection, detection, and response capabilities for organizations of all sizes. These features, consistent with our multi-layered security strategy, are intended to ease the workload of security analysts, administrators, and users.
AXA XL Joins ISASecure to Strengthen Cybersecurity Risk Prevention Through the Adoption of ISA/IEC 62443 Cybersecurity Standards
, /PRNewswire/ — The International Society of Automation (ISA) — the leading professional society for automation — announced that AXA XL has officially joined ISASecure®, the globally recognized certification program that validates conformance to the ISA/IEC 62443 series of standards for industrial automation and control systems (IACS) cybersecurity.
NASA Needs to Refine Agencywide Cyber Risk Management Strategy, GAO Finds
NASA Needs to Refine Agencywide Cyber Risk Management Strategy, GAO Finds 2 July 2025 Today in Security NASA has missed several key steps in an effective cyber risk management strategy, putting the civil space program’s systems and information at risk, according to a recent report from the U.S. Government Accountability Office (GAO). “Cyber-based threats to sensitive data associated with NASA’s major mission projects are becoming increasingly prevalent,” according to the GAO report.
Adapting to new threats with proactive risk management
Unplanned downtime poses a major challenge for organizations, and is estimated to cost Global 2000 companies on average $200 million per year. Beyond the financial impact, it can also erode customer trust and loyalty, decrease productivity, and even result in legal or privacy issues.
Identity, AI-Agents, and The New Guardrails
2025 marked the year AI agents moved from experimentation to real operational impact on both sides of the security equation. Enterprises accelerated adoption, attackers weaponized automation, and identity compromise once again dominated global breach reports. The industry reached an inflection point: the tools and organizational models built for human-driven systems can’t keep up with autonomous, API-native agents operating at machine speed.
The cybersecurity risk management construct is here. Now comes the hard part
COMMENTARY: Talk to anyone who has deployed technology that meets the U.S. Department of Defense’s cybersecurity standards, and they’ll tell you the same thing: Compliance is a pain.Why? It’s manual, takes too long and costs too much. Every deployment is different, requiring you to start from scratch each time.
Finance and Insurance Industries: Managing Risk in a Rapidly Evolving Environment
Financial institutions continue to be the backbone of the global economy. A cyber attack that compromises the operations of a financial institution can have a major effect on the ability to access finance and payment systems, with direct impacts for markets, businesses across sectors and the general public. As a result, issues related to cyber security are highly regulated.
How CISOs can make cyber risk a board-level priority
Cyber security has evolved into a core business risk For too long, cyber security was treated as just another technical function, an IT checklist item with firewalls, antivirus software, and a few internal protocols. That thinking is outdated. Today, cyber security directly affects your company’s finances, operations, reputation, and long-term viability. It’s not about protecting infrastructure anymore. It’s about protecting the whole business.
Attack Surface Management Market Latest Opportunities, Future Growth, Business Scenario, Size, Share, Scope and Leading Companies
“Palo Alto Networks (US), IBM(US), Microsoft (US), Cisco (US), Google Cloud (US), Trend Micro (Japan), Qulays (US), Tenable (US), Crowdstrike (US), Rapid7 (US), Bitsight(US), SecurityScorecard (US), CyCognito(US), Bugcrowd(US).” Attack Surface Management Market by Offering (Solutions, Services), Deployment Mode (Cloud, On-premises), Organization Size (Large Enterprises, SMEs), Vertical (BFSI, Healthcare, Retail & E-Commerce) and Region – Global Forecast to 2029.
The SEC Finalizes Rule on Cybersecurity Disclosures
The SEC’s new cybersecurity rules require public companies to promptly disclose cybersecurity incidents and detail their risk management strategies. These rules mandate reporting significant cyber incidents within four business days and providing updates on previously reported incidents. They also require disclosures about risk management processes, impacts on business strategy, and board oversight roles.
Third Party Risk + Exposure Management
TPRM: From governance to exposure management Traditional Third-Party Risk Management (TPRM) was built for a different era. Rooted in periodic assessments, spreadsheets, and static frameworks, it reflects a governance mindset that is woefully insufficient in today’s threat environment. Risk managers often operate on timelines measured in weeks or quarters, while attacks can occur and escalate in seconds.
Rising D&O Exposures as Geopolitical Shifts, Cyber Threats and AI Reshape Risk Landscape
Average securities class action settlements climb 27% as boards navigate unprecedented complexity, rising insolvencies: Allianz Commercial. Directors and officers face mounting liability from an expanding risk landscape where geopolitical uncertainty, cyber incidents and emerging threats like artificial intelligence increase the threat of litigation by shareholders, according to Allianz Commercial’s Directors and Officers Insurance Insights 2026.
Cybersecurity tool provides steps to manage risks, keep data safe
CIMA launched an updated version of a resource designed to help finance professionals tackle the growing threat of cyberattacks. The CGMA Cybersecurity Tool guides users to successful outcomes through robust risk management, response, and remediation strategies.
A how-to guide for third-party cyber risk
The impact of Jaguar Land Rover’s crippling cyberattack went far beyond the carmaker’s own walls. Parts suppliers, “many of them small and financially fragile,” felt the sting when JLR had to temporarily halt operations in September, the Wall Street Journal reported. The Cyber Monitoring Centre, a UK-based nonprofit, estimated the incident ultimately impacted more than 5,000 companies to the tune of £1.9 billion.
Panaseer launches AI-powered suite to boost cybersecurity clarity
Panaseer has released the IQ Suite, a three-tiered product suite powered by generative AI designed to help organisations address cybersecurity risks more quickly and with greater clarity. The company claims it is tackling a key challenge for security teams-making sense of growing volumes of security controls data and acting on it in a risk-driven way. AI-driven risk management The IQ Suite leverages generative AI to process, interpret and explain changes in risk metrics.
How audit committees can lead as cyber risks evolve
At a bare minimum, organizations should be complying with all applicable regulations. This past year saw regulatory developments in Canada and the EU that will create new reporting obligations and affect how organizations shape their cybersecurity programs. For example, the EU’s Network and Information Security Directive (NIS2) mandates cyber risk governance, risk management and reporting requirements for certain European organizations.
Kovr.ai and Carahsoft Partner to Accelerate Cyber Compliance for the Public Sector
AI-Native Compliance Automation Platform Now Available for Government Agencies RESTON, Va., Dec. 04, 2025 (GLOBE NEWSWIRE) — Kovr.ai, the only AI-native cyber compliance automation platform provider, and Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®, today announced a partnership.
Insurers face new threats as AI & MCP adoption reshape cyber risk
Cyber risk experts warn that the insurance sector is facing a new phase of risk as businesses adopt artificial intelligence at scale and integrate Model Context Protocol (MCP) technology into their operations. MCP adoption MCP allows AI systems to access and interact directly with an organisation’s existing tools, data, and applications in real time. Its use is growing, particularly among companies deploying generative AI solutions to streamline business processes.
What CISOs should know about SOC modernization
Legacy SOC infrastructure can’t keep pace with the modern threat landscape, leaving SecOps teams overwhelmed and underprepared to face increasingly sophisticated and frequent cyber threats. Security alerts and malicious actors eventually slip through the cracks, putting organizations at risk of catastrophic incidents.
Cowbell Launches Self-Service Platform for Cybersecurity Risk Management Services, Empowering Policyholders with On-Demand Digital Protection
, /PRNewswire/ — Cowbell, a leading provider of adaptive cyber and specialty insurance solutions for global small and mid-market organizations, today announced the launch of self-service capabilities for Cowbell Resiliency Services (CRS).
Supply Chain Cyber Security Market to reach 2,243.33 million
Supply Chain Cyber Security Market The global supply chain cybersecurity market reached US$ 663.27 million in 2023, with a rise to US$ 706.40 million in 2024, and is expected to reach US$ 2,243.33 million by 2033, growing at a CAGR of 13.7% during the forecast period 2025-2033. The global supply chain cybersecurity market is being shaped by the rising number of cyber incidents targeting critical infrastructure and vendor networks.
Security Risk Advisors names Suzanne Hall as CISO in residence to guide cyber strategy
Security Risk Advisors (SRA), vendor of cybersecurity and services, announced the appointment of Suzanne Hall as CISO in Residence. In this role, Suzanne will serve as a trusted advisor to SRA and its clients, bringing deep expertise and thought leadership to strengthen cyber resilience and risk management across industries. Tim Wainwright, co-founder and CEO of SRA, commented: “We are proud to welcome Suzanne to SRA.
Cyber’s defining lessons of 2025, and what comes next
2025 was a wild ride for cyber security. The landscape is shifting faster than ever, and several themes stand out when I think about the most important cyber security lessons from the year. Nation-state risk remains constant. In June, US authorities urgently warned companies to prepare for Iranian cyber attacks. This is just one example of the environment we’re in. Security teams must be ready to defend at a moment’s notice.
JLR cyberattack holds lessons for CFOs on preparedness and response
The September cyberattack on Jaguar Land Rover (JLR) is just the latest reminder of how severe and widespread damages from a cyber incident can get.
AI-Native Human Risk Management: The Future of Workforce Security
For years, organizations have relied on traditional security awareness programs to protect their employees from making costly mistakes.The premise was simple: teach people to recognize threats—phishing emails, suspicious links, insider risks—and the organization would be safer. Yet, the results tell a different story. Despite more training than ever before, human-related risk still accounts for the vast majority of breaches.
Cyber Insurance Quotes: Compare Rates Online
In today’s digital economy, a single cyber attack can financially devastate a business. A cyber insurance policy is essential for managing financial losses after a cyber attack. Comparing cyber insurance quotes from multiple providers allows for a side-by-side evaluation of coverage options. This helps you find a policy that aligns with your business needs and risk management strategy. Terms, coverages, and availability vary by insurer and state. What Is Cyber Insurance?
What is cybersecurity risk? | Marsh
Cybersecurity risk is the exposure to harm or loss stemming from cyber threats that can compromise an organization’s information systems, data integrity, and operational stability. Cybersecurity risk includes the potential for financial loss, operational disruption, reputational damage, and legal and regulatory consequences resulting from threats to information technology systems and data.
Qualys launches first agentic AI-powered Risk Operations Center
Qualys is introducing two major innovations to Enterprise TruRisk Management (ETM), the industry’s first Agentic AI-powered Risk Operations Center (ROC),designed to streamline and accelerate autonomous cyber risk management. Qualys unveiled a marketplace of Cyber Risk AI Agents delivering real-time risk insights across all attack surfaces, prioritized by business impact.
Ramsey Theory Group CEO Dan Herbatschek Warns New Customer
NEW YORK, Dec. 01, 2025 (GLOBE NEWSWIRE) — Ramsey Theory Group (RTG), a research-driven firm specializing in cybersecurity, applied mathematics, software engineering, and artificial intelligence, today announced its October 2025 customer survey of 100 enterprise leaders across multiple industries revealed the evolving dual-use nature of AI in the cybersecurity domain.
Kevin Lancaster Joins the usecure Board to Accelerate North American Channel Growth
Claymont, Delaware, December 1st, 2025, CyberNewsWire Lancaster’s arrival brings significant North American channel experience and expertise, supporting usecure’s ambition to cement its position as the market-leading human risk management solution for MSPs. usecure today announced the appointment of Kevin Lancaster as a Non-Executive Director. Kevin joins usecure with a wealth of experience in the North American channel and a strong background in human risk management and security awareness.
Supply Chain Security: Cyber Risk Management Factors
As organizations become more digitally connected to their vendors, partners and other third parties, they are quickly discovering that they ignore supply chain security at their peril. Supply chains connect manufacturing companies with logistics firms, transportation providers and others to get products and services onto our store shelves, and poor supply chain cybersecurity can break the chain.
Cyber Risk Quantification (CRQ): Deciphering Financial Exposure to Better Prioritize Cybersecurity Investments
What if cyber risk could be expressed in euros or dollars? That is precisely what cyber risk quantification (CRQ) solutions propose. Between 2010 and 2015, this market developed rapidly—particularly in the United States—while remaining relatively unknown to the general public in Europe. Cyber risk quantification (CRQ) is a method used to measure the financial impact of a potential cybersecurity incident on a given organization.
Bitsight Command Center: Cyber Risk Visibility Dashboard
Today’s security teams face disconnected tools and scattered data, which makes managing cyber risk increasingly complex. With the rapid rise in ransomware, new CVEs, and a constant stream of emerging threats, it has become difficult to monitor not only an organization’s own security posture but also the security of its third- and fourth-party vendors.
DoD issues replacement for risk management framework
WASHINGTON — The Department of Defense unveiled a new five-phased framework for assessing cyber risks on its networks, dubbed the Cybersecurity Risk Management Construct, to replace its old risk management system. “The previous Risk Management Framework was overly reliant on static checklists and manual processes that failed to account for operational needs and cyber survivability requirements.
Top 10 Best Exposure Management Tools In 2026
Exposure Management is a proactive cybersecurity discipline that systematically identifies, assesses, prioritizes, and remediates security vulnerabilities and misconfigurations across an organization’s entire attack surface both internal and external. Unlike traditional, periodic vulnerability scanning, EM leverages continuous monitoring, threat intelligence, and a holistic, graph-based view of risk to anticipate and neutralize potential attack paths before adversaries can exploit them.
DOD Unveils New Cybersecurity Risk Management Construct - MeriTalk
After months of vowing to “blow up” the Risk Management Framework (RMF), the Pentagon has officially rolled out a new cybersecurity model designed to “deliver real-time cyber defense at operational speed.” The Cybersecurity Risk Management Construct (CSRMC) is the Department of Defense’s (DOD) – which the Trump administration has rebranded as the Department of War – new real-time framework that replaces the previous RMF.
NIST publishes Cybersecurity Framework 2.0 manufacturing profile to help strengthen risk management
The U.S. National Institute of Standards and Technology (NIST) has published Internal Report (IR) 8183 Revision 2, the Cybersecurity Framework Version 2.0 Manufacturing Profile, and opened a public comment period through Nov. 17, 2025. The framework is organized around the functional areas of the NIST Cybersecurity Framework 2.0, covering Govern, Identify, Protect, Detect, Respond, and Recover.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Cyber
Contact Cyber, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack