Tag: business
-
Why patching SLAs should be the floor, not the strategy
SLAs measure discipline, not risk: Here’s the mental model I’ve been pushing with my peers. Think of patching SLAs the way you think of fire drills. Fire drills are necessary. They prove that, on a predictable cadence, your organization can execute a known procedure. No one in charge of a building full of people would…
-
Linux kernel maintainers suggest a ‘kill switch’ to protect systems until a zero-day vulnerability is patched
Tags: access, attack, business, control, cve, cybersecurity, exploit, flaw, group, incident response, infosec, linux, LLM, mitigation, risk, service, strategy, switch, technology, tool, update, vulnerability, zero-day), a logic bug which lets users easily obtain root access, and Dirty Frag, which abuses weaknesses in how the Linux kernel handles fragmented memory pages. The Dirty Frag attack combines two separate vulnerabilities affecting the Linux IPsec Encapsulating Security Payload (ESP) subsystem (CVE-2026-43284) and the RxRPC networking protocol (CVE-2026-43500). The proposal has set off a furious…
-
UK government renews calls to sign Cyber Resilience Pledge
Westminster renews calls for business leaders to sign up to its yet-to-be-launched Cyber Resilience Pledge and highlights growth, and challenges, for the UK’s cyber economy. First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366642938/UK-government-renews-calls-to-sign-Cyber-Resilience-Pledge
-
Securing AI Agent Orchestration In The Enterprise: Best Practices For 2026
Global businesses are racing to deploy artificial intelligence, sometimes at the expense of their cybersecurity postures. The rise of “agentic AI” is especially notable, due to its potential to automate business workflows, cloud operations, engineering tasks and cybersecurity. Not only are AI agents getting more capable, but they can also work much faster than humans,…
-
AI security is repeating endpoint security’s biggest mistake
Tags: access, ai, api, automation, business, control, data, detection, edr, endpoint, governance, incident response, injection, LLM, monitoring, open-source, radius, risk, saas, sbom, soc, strategy, technology, threat, tool, updateMost AI security is still at the posture phase: Look at where most organizations are with AI security today. Model cards, AI-specific SBOMs, input and output filters, prompt injection guardrails and access controls around model APIs. These are valuable controls, but they reflect a posture-based approach. To truly enhance security, organizations must recognize the importance…
-
8 guiding principles for reskilling the SOC for agentic AI
Tags: ai, automation, business, ciso, cyber, cybersecurity, data, governance, incident response, jobs, penetration-testing, sans, skills, soc, technology, tool, training, update, vulnerability, vulnerability-managementSet the tone from the top: The second principle for reskilling security teams for agentic AI is all about leadership.As Baker says, CISOs must set the tone. That means building a culture of rapid experimentation, iteration, and innovation. “Fail fast and move forward,” he says.A key aspect of CISO leadership is understanding the needs of…
-
The missing cybersecurity leader in small business
As AI and quantum threats target the backbone of the American economy, Washington must provide the guidance and incentives necessary for SMBs to access executive-level cyber expertise. First seen on cyberscoop.com Jump to article: cyberscoop.com/the-missing-cyber-leader-virtual-fractional-ciso-smb-op-ed/
-
LinkedIn verwehrt Recht auf Selbstauskunft, noyb legt Beschwerde ein
Das Business-Netzwerk LinkedIn beschränkt den Zugriff auf die Daten des eigenen Profils auf zahlende Kunden, was offenbar nicht legal ist. First seen on tarnkappe.info Jump to article: tarnkappe.info/artikel/it-sicherheit/datenschutz/linkedin-verwehrt-recht-auf-selbstauskunft-noyb-legt-beschwerde-ein-329056.html
-
ServiceNow’s New Platform Also Governs Everyone Else’s AI
ServiceNow Takes Aim at Enterprise AI Sprawl at Knowledge 2026. At its Knowledge 2026 conference, ServiceNow announced artificial intelligence control tower expansions, an autonomous workforce across every business function and a platform play to become the operating layer for all enterprise AI solutions. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/servicenows-new-platform-also-governs-everyone-elses-ai-a-31631
-
Frank Kölmel ist neuer Chief-Revenue-Officer für das B2B-Geschäft von Bitdefender
Bitdefender hat Frank Kölmel als Chief Revenue Officer (CRO) der Bitdefender Business Solution Group (BSG) vorgestellt. Kölmel blickt auf mehr als drei Jahrzehnte Erfahrung in der Cybersicherheitsindustrie zurück. In verschiedenen Stationen leitete er die Wachstumsstrategien führender internationaler Cybersicherheits- und Software-Anbieter. In seiner neuen Rolle ist Kölmel für Business-Development, Umsatzsteigerung und die Go-to-Market-Initiativen des gesamten BSG-Bereichs…
-
Financial stability risks are rising as AI fuels cyber-attacks, IMF warns; oil below $100 on Iran peace hopes as it happened
Rolling coverage of the latest economic and financial news<ul><li><a href=”https://www.theguardian.com/business/2026/may/07/climate-campaigners-attack-shell-over-windfall-profits-from-iran-war”>Climate campaigners attack Shell over ‘windfall’ profits from Iran war</li></ul>The Danish shipping giant <strong>Maersk</strong> has maintained its profit guidance for the year, even as it reported a spike in fuel costs and warned that traffic through the strait of Hormuz “remains at a near standstill”.The company,…
-
Financial stability risks are rising as AI fuels cyber-attacks, IMF warns; oil below $100 on Iran peace hopes business live
Rolling coverage of the latest economic and financial news<ul><li><a href=”https://www.theguardian.com/business/2026/may/07/climate-campaigners-attack-shell-over-windfall-profits-from-iran-war”>Climate campaigners attack Shell over ‘windfall’ profits from Iran war</li></ul>The Danish shipping giant <strong>Maersk</strong> has maintained its profit guidance for the year, even as it reported a spike in fuel costs and warned that traffic through the strait of Hormuz “remains at a near standstill”.The company,…
-
CISOs: Align cyber risk communication with boardroom psychology
Tags: breach, business, ciso, compliance, control, cyber, cybersecurity, data, finance, governance, psychology, resilience, risk, threat, updateStop reporting risk as a technical status update: Executives do not need a master class in threat modeling. They need to know what the business stands to lose.Risk has to be framed in terms boards already use to weigh other enterprise decisions: financial exposure, operational disruption, compliance consequences, legal risk and the cost of delay.…
-
Ten years later, has the GDPR fulfilled its purpose?
Tags: access, ai, breach, business, china, cio, compliance, data, data-breach, dora, finance, flaw, framework, GDPR, governance, government, international, jobs, law, mobile, office, privacy, regulation, risk, service, technology, tool, trainingFernando Maldonado, technology advisor at Foundry. MuleSoft. Gray areas remain: Still, if anything has been demonstrated in the decade since its entry into force, it’s that the GDPR still has a long way to go.Miguel Recio, president of APEP.IA (Spanish Professional Association for Privacy), argues that some of the limitations that have been exposed about the…
-
World Passkey Day 2026: Passkeys als Schlüssel zum sicheren Agentic Enterprise
Der 7. Mai, der World Passkey Day, ist ein globaler Anlass, um den Übergang von Passwörtern hin zu einfachen und sicheren Anmeldemethoden voranzutreiben. Im Zeitalter von autonomen KI-Agenten, die längst von Cyberkriminellen für Hacks missbraucht werden, wird die Umstellung dringlicher. Den Ergebnissen unseres jüngsten, jährlichen Berichts Business at Work zur Folge waren Angriffe auf Basis……
-
Multi-model AI is creating a routing headache for enterprises
Application teams are moving AI inference into production systems that support business operations. Enterprises are expanding traffic management, identity controls, … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/05/07/f5-ai-inference-operations-report/
-
How orphaned applications are quietly fueling your shadow IT problem
Tags: access, ai, api, awareness, business, cloud, compliance, control, credentials, data, finance, framework, governance, infrastructure, monitoring, risk, security-incident, service, threat, tool, updateOperational and financial overhead: Orphaned applications continue consuming licenses and infrastructure while cluttering configuration management databases (CMDBs). They introduce undocumented dependencies that skew asset management and complicate troubleshooting.Security exposure: Applications without active ownership are rarely reviewed. This means updates are missed, underlying components are no longer maintained, and access paths remain open far longer than intended.Hidden data…
-
How orphaned applications are quietly fueling your shadow IT problem
Tags: access, ai, api, awareness, business, cloud, compliance, control, credentials, data, finance, framework, governance, infrastructure, monitoring, risk, security-incident, service, threat, tool, updateOperational and financial overhead: Orphaned applications continue consuming licenses and infrastructure while cluttering configuration management databases (CMDBs). They introduce undocumented dependencies that skew asset management and complicate troubleshooting.Security exposure: Applications without active ownership are rarely reviewed. This means updates are missed, underlying components are no longer maintained, and access paths remain open far longer than intended.Hidden data…
-
How orphaned applications are quietly fueling your shadow IT problem
Tags: access, ai, api, awareness, business, cloud, compliance, control, credentials, data, finance, framework, governance, infrastructure, monitoring, risk, security-incident, service, threat, tool, updateOperational and financial overhead: Orphaned applications continue consuming licenses and infrastructure while cluttering configuration management databases (CMDBs). They introduce undocumented dependencies that skew asset management and complicate troubleshooting.Security exposure: Applications without active ownership are rarely reviewed. This means updates are missed, underlying components are no longer maintained, and access paths remain open far longer than intended.Hidden data…
-
Allianz Hands Commercial Cyber Insurance Unit to Coalition
Allianz Retains Risk Exposure While Outsourcing Cyber Insurance Operations. Allianz will transition operational control of its standalone commercial cyber insurance business to Coalition, combining the insurer’s global distribution and balance sheet with Coalition’s cyber underwriting, monitoring and incident response capabilities in a long-term strategic partnership. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/allianz-hands-commercial-cyber-insurance-unit-to-coalition-a-31618
-
Patching Is ‘Just Phase One’ Of AI’s Disruption To Cybersecurity: CrowdStrike’s Daniel Bernard
Even as a massive disruption to patch management practices is expected due to accelerated vulnerability discovery by powerful AI models, that is just one piece of the growing opportunity for solution and service providers around cybersecurity and AI, according to CrowdStrike Chief Business Officer Daniel Bernard. First seen on crn.com Jump to article: www.crn.com/news/security/2026/patching-is-just-phase-one-of-ai-s-disruption-to-cybersecurity-crowdstrike-s-daniel-bernard
-
Passkeys als Schlüssel zum sicheren Agentic-Enterprise
Der 7. Mai, der World-Password-Day, ist ein globaler Anlass, um den Übergang von Passwörtern hin zu einfachen und sicheren Anmeldemethoden voranzutreiben. Im Zeitalter von autonomen KI-Agenten, die längst von Cyber-Kriminellen für Hacks missbraucht werden, wird die Umstellung dringlicher. Den Ergebnissen unseres jüngsten, jährlichen Berichts Business at Work zur Folge waren Angriffe auf Basis von Anmeldedaten für…
-
Building Strategic Advantage With Integrated Planning
Siloed planning slows decisions and hides risk. Integrated business planning connects finance, demand, supply, and strategy into a single disciplined cycle. First seen on hackread.com Jump to article: hackread.com/building-strategic-advantage-integrated-planning/
-
Train like you fight: Why cyber operations teams need no-notice drills
Tags: breach, business, cloud, communications, credentials, cyber, cybersecurity, detection, framework, healthcare, injection, login, military, psychology, ransomware, risk, skills, soc, threat, training, updateThe Yerkes-Dodson inverted-U curve: Performance rises with arousal to an optimal point, then falls sharply.Wikimedia Commons, CC-ZeroWhat repeated no-notice drills do is shift a team’s position on that curve. By building familiarity with threat-level arousal, they raise the threshold at which stress becomes performance-impairing. The stimulus is no longer novel. The cascade is shorter. Executive…
-
BlueVoyant Prepares SaaS Push Under New CEO John Hernandez
BlueVoyant Seeks to Expand Beyond MDR Clients Into Firms With Mature In-House SOCs. BlueVoyant named John Hernandez – the former leader of Quest’s Microsoft security business – as its next CEO to drive an agentic AI SaaS platform that expands the vendor beyond managed services and helps customers accelerate detection, response and supply-chain risk management.…
-
Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts
Hackers abused Google AppSheet to send Meta phishing emails, compromising 30,000 Facebook business accounts across 50 countries. The post Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-appsheet-facebook-phishing-accountdumpling/
-
Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts
Hackers abused Google AppSheet to send Meta phishing emails, compromising 30,000 Facebook business accounts across 50 countries. The post Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-appsheet-facebook-phishing-accountdumpling/
-
Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts
Hackers abused Google AppSheet to send Meta phishing emails, compromising 30,000 Facebook business accounts across 50 countries. The post Google AppSheet Abuse Helped Phish 30,000 Facebook Accounts appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-google-appsheet-facebook-phishing-accountdumpling/