Cyber Security Tribe

On June 18, 2026, Fortinet said it was seeing a credential-compromise campaign against internet-facing FortiGate devices, where attackers were focusing on exposed VPN and firewall services to obtain valid access. In simple terms, this was not a single isolated break-in; it was a broader attempt to exploit weak, reused, or exposed credentials at the network edge.

The cybersecurity industry is not suffering from a shortage of AI innovation. Every week brings new announcements about agents, copilots, autonomous workflows, and intelligent automation. Yet despite the excitement, many CISOs are still wrestling with a more fundamental problem. They have more visibility than ever before, but they are not necessarily getting better execution. That was one of the strongest themes to emerge during a recent conversation with Benny Porat, Co-Founder and CEO of Twine.

At Cyber Security Tribe, we recently hosted an online fireside chat on Mythos and What CISOs Need to Do Next, bringing together a panel of three industry experts, including Alan Berry, CISO at Centene, Jason Barnes, Senior Director of Security Operations at Charter Communications and Frank DePaola, CISO at Enpro, to discuss what advanced AI capability means for cyber security leaders.

For most of my career, I looked at cybersecurity from the attacker’s side. My background is in offensive operations, working in environments where the job was to understand how organizations could be breached, how defenders could be avoided, and how small mistakes in security architecture could become meaningful opportunities for an attacker. That experience shaped the way I see the market today.

At Gartner’s Security and Risk Management Summit in National Harbor, Gartner Director Analyst Alex Michaels delivered a clear message to security leaders. The cybersecurity landscape is not simply evolving, it is being reshaped by artificial intelligence, emerging technologies, expanding governance obligations, and growing executive expectations. For CISOs, the challenge is not just keeping pace with new threats.

It's fair to say, that at this point in time, organizations have moved on from initial Agentic AI experimentation to using them widespread in enterprise workflows. With these changes cybersecurity leaders face an identity challenge: how to govern systems that can act, delegate, and trigger actions without direct human involvement.

Artificial intelligence has quickly moved from experimentation to everyday business operations. Across nearly every industry, organizations are using AI to improve productivity, accelerate decision-making, and streamline workflows. The efficiencies are real, and the business value is becoming increasingly difficult to ignore. As a security leader, I believe the conversation around AI needs to evolve beyond whether organizations should adopt it. Most organizations have already made that decision.

As AI becomes more embedded in security operations, software development and identity environments, CISOs are having to separate practical value from assumptions that are moving faster than many security teams can validate. At InfoSec Europe 2026, Cyber Security Tribe asked industry leaders which AI myths security teams can no longer afford to believe. Which Assumptions Are Beginning to Create Problems?

At Gartner's Security and Risk Management Summit in National Harbor, one of the most memorable presentations did not focus on the latest security platform, the newest AI capability, or a vendor success story. Instead, Adam Palmer, CISO of First Hawaiian Bank, delivered something many security leaders rarely hear at industry conferences: a candid discussion about outcomes, leadership, governance, and the mistakes that can derail transformation efforts.

For the past two years, conversations about artificial intelligence have largely centered on opportunity. Boards have pushed executives to accelerate adoption. Business leaders have looked for productivity gains. Employees have embraced copilots, assistants, and AI-powered workflows that promise to eliminate repetitive work and speed decision making. Today, however, the conversation has changed. CISOs are no longer being asked whether their organizations should adopt AI.