SearchSecurity

The traditional network perimeter has effectively disappeared, creating a major data security problem for CISOs and their teams. Organizations today operate across on-premises, multi-cloud, API and edge systems with no fixed boundaries. Data traverses SaaS platforms and cloud services, remote user systems, APIs and partner ecosystems, changing the data security game. SaaS sprawl, shadow IT and API-driven integrations only make the data security challenge more difficult.

Nonprofits serving vulnerable populations sit at the uncomfortable intersection of sensitive data, global exposure and limited security resources. Geneva-based Protect.ngo, formerly the CyberPeace Institute, helps nonprofit and nongovernmental organizations (NGOs) navigate those challenges with free cybersecurity support.

This week, the Senate Judiciary Committee unanimously approved the Nurture Originals, Foster Art and Keep Entertainment Safe Act, legislation that would establish federal protections against unauthorized AI-generated replicas. It's a move that could reshape both individual privacy rights and corporate security strategies. Deepfakes aren't just a celebrity problem anymore -- they're an enterprise risk.

CISOs recognize the cybersecurity implications of AI, but many remain focused on preventing AI-enabled data loss and compliance breaches. Few are paying attention to the full scope of AI-related cybersecurity yet. Runtime security focuses on protecting running models from compromise. This means monitoring, protecting and controlling AI systems while they are actively running and making decisions -- rather than only securing them during development and deployment.

Cybersecurity executives have a long way to go before they are ready for a quantum computing world, researchers warn -- and they're likely running out of time. A new report from Forescout Research Vedere Labs found that 90% of systems remain unprepared for Q-Day -- when a quantum computer can first break today's public-key cryptography. Some experts anticipate that moment will arrive by 2030, leaving enterprises with only a few years left to prepare.

Infostealers do exactly as their name implies: The malware secretly steals sensitive information, such as passwords and financial information, from user endpoints and then transfers that information to a location selected by the attacker. Infostealers have become far more prevalent in recent years, underpinning dark web markets where attackers actively buy, sell and trade the sensitive data they acquire.

Not even one in three cybersecurity professionals views their organization's cybersecurity culture as better than average, according to a new survey.

At its annual customer event, Zenith Live, Zscaler showcased a number of innovations spanning its already broad portfolio. The breadth of announcements supports Zscaler's goal of expanding its conversations from the network and digital transformation focus that has driven its business over the last 15 years to a more security operations-oriented discussion.

Viral AI agent platform OpenClaw is spreading through enterprises like wildfire -- and bringing with it major cyber-risk. OpenClaw, an open source, self-hosted AI personal assistant, burst onto the scene in late 2025.

Cloud security is no longer just about deploying controls. Instead, it's about measuring effectiveness, demonstrating risk reduction and communicating outcomes clearly to leadership and to the board. To that end, cloud security metrics and KPIs are essential. These tools enable CISOs to go beyond tool-centric discussions and move toward a data-driven understanding of security posture, operational effectiveness and business risk.