Collecting Cyber-News from over 60 sources

Tag: governance

Insider risk in an age of workforce volatility

Jan 16, 2026 8:52 AM

Tags: access, ai, api, authentication, automation, backdoor, backup, china, ciso, control, credentials, cyber, cybersecurity, data, data-breach, exploit, framework, governance, government, identity, jobs, least-privilege, malicious, mitigation, monitoring, network, risk, strategy, supply-chain, threat, zero-trust

Early warnings: The machine as insider risk/threat: These dynamics are not emerging in a vacuum. They represent the culmination of warnings that have been building for years.As early as 2021, in my CSO opinion piece “Device identity: The overlooked insider threat,” Rajan Koo (then chief customer officer at DTEX Systems, now CTO) observed: “There needs…
Healthcare’s blind spot: What happens after our data is shared?

Jan 16, 2026 6:51 AM

Tags: ai, data, governance, healthcare, risk

A recent healthcare lawsuit exposes how data governance breaks down once records leave the EHR, highlighting the risks of unstructured text in an AI-driven ecosystem. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/healthcares-blind-spot-what-happens-after-our-data-is-shared/
CISA Issues New AI Security Guidance for Critical Infrastructure

Jan 15, 2026 11:51 PM

Tags: ai, cisa, governance, infrastructure, international, risk, technology

CISA and international partners issued new guidance on securing AI in operational technology, warning of OT risks and urging stronger governance and safeguards. The post CISA Issues New AI Security Guidance for Critical Infrastructure appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-cisa-ai-security-guidance-2026/
KI-gestützte Governance – Vom regulatorischen Labyrinth zur praktikablen Compliance

Jan 15, 2026 12:11 PM

Tags: ai, compliance, governance

First seen on security-insider.de Jump to article: www.security-insider.de/ki-unternehmen-governance-a-e1facfd75fdbbf8b4412f664bf69c913/
Beyond Testing: API Security as the Foundational Intelligence for an ‘industry leader’-Level Security Strategy

Jan 14, 2026 10:12 PM

Tags: ai, api, application-security, attack, business, ciso, communications, container, data, detection, gartner, governance, intelligence, risk, service, strategy, technology, tool, vulnerability

In today’s security landscape, it’s easy to get lost in a sea of acronyms. But one layer has become the undisputed foundation for modern application security: API security. Why? Because APIs are no longer just part of the application, they are the application. They are the connective tissue for microservices, third-party data, and the explosive…
AI in Manufacturing: The Growing Risk and Reward Dilemma Escalating Data Security

Jan 14, 2026 7:11 PM

Tags: ai, data, governance, privacy, risk, strategy

Explore the challenges and strategies for securing AI integration in manufacturing, focusing on governance, data privacy, and the role of connected worker platforms. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/ai-in-manufacturing-the-growing-risk-and-reward-dilemma-escalating-data-security/
CISO Assistant: Open-source cybersecurity management and GRC

Jan 14, 2026 7:11 PM

Tags: ciso, compliance, control, cybersecurity, framework, governance, grc, open-source, risk

CISO Assistant is an open-source governance, risk, and compliance (GRC) platform designed to help security teams document risks, controls, and framework alignment in a … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/01/14/ciso-assistant-open-source-cybersecurity-management-grc/
Cybersecurity risk will accelerate this year, fueled in part by AI, says World Economic Forum

Jan 13, 2026 11:02 PM

Tags: ai, attack, automation, business, ceo, ciso, control, country, cryptography, cyber, cybercrime, cybersecurity, data, detection, exploit, finance, framework, fraud, governance, healthcare, incident, infrastructure, international, middle-east, phishing, ransomware, resilience, risk, service, skills, software, strategy, supply-chain, technology, threat, tool, vulnerability

AI is anticipated to be the most significant driver of change in cybersecurity in 2026, according to 94% of survey respondents;87% of respondents said AI-related vulnerabilities had increased in the past year. Other cyber risks that had increased were (in order) cyber-enabled fraud and phishing, supply chain disruption, and exploitation of software vulnerabilities;confidence in national cyber…
Dark Patterns, Children’s Data and Corporate Fiduciary Risk

Jan 13, 2026 9:02 PM

Tags: ciso, corporate, data, governance, law, privacy, risk

How UX Decisions Are Becoming Regulatory Liabilities for CISOs Children’s data is entering a new regulatory era where dark patterns, defaults and monetization choices can signal breached fiduciary duty. As privacy, safety and consumer laws converge globally, CISOs must treat manipulative UX, consent flows and retention practices as core security and governance risks. First seen…
Email is Not Legacy. It’s Infrastructure.

Jan 13, 2026 11:02 AM

Tags: ai, automation, business, email, governance, infrastructure

Discover why business email remains mission-critical infrastructure, and how governance, automation, and AI integration future-proof it. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/email-is-not-legacy-its-infrastructure/
Top 10 vendors for AI-enabled security, according to CISOs

Jan 13, 2026 9:01 AM

Tags: access, ai, api, attack, automation, business, ceo, cisco, ciso, cloud, container, crowdstrike, cybersecurity, data, detection, edr, email, encryption, endpoint, firewall, gartner, google, governance, group, ibm, identity, incident response, intelligence, jobs, mandiant, microsoft, monitoring, network, openai, phishing, ransomware, risk, risk-assessment, service, siem, soar, soc, social-engineering, software, startup, technology, threat, tool, vmware, vulnerability, waf, zero-trust

2. Microsoft: Why they’re here: Similar to Cisco, Microsoft is embedded in virtually every enterprise, and is also a vendor that has marshalled its considerable resources to build an AI-powered security ecosystem. The platform includes Microsoft Defender for securing cloud environments, Microsoft Sentinel for cloud-native SIEM, Microsoft Purview for data governance, Microsoft Intune for endpoint…
The Top Security, Risk, and AI Governance Frameworks for 2026

Jan 13, 2026 5:01 AM

Tags: ai, business, cybersecurity, framework, governance, risk

<div cla By 2026, cybersecurity programs will no longer be evaluated on how many frameworks they “support,” but on whether they can produce defensible decisions at the business’s operating speed. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/the-top-security-risk-and-ai-governance-frameworks-for-2026/
Palo Alto Networks Introduces New Vibe Coding Security Governance Framework

Jan 12, 2026 7:02 PM

Tags: control, framework, governance, network, tool

Researchers at Palo Alto’s Unit 42 have outlined a list of recommended security controls for vibe coding tools First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/palo-alto-networks-vibe-coding/
Tenable Is a Gartner® Peer Insights Customers’ Choice for Cloud-Native Application Protection Platforms

Jan 12, 2026 6:02 PM

Tags: ai, api, attack, automation, banking, ciso, cloud, compliance, control, cybersecurity, data, detection, gartner, google, governance, healthcare, identity, infrastructure, microsoft, risk, risk-management, service, software, strategy, technology, tool, vulnerability, vulnerability-management

This recognition, based entirely on feedback from the people who use our products every day, to us is a testament to the unmatched value Tenable Cloud Security CNAPP offers organizations worldwide. Our key takeaways: In our view, this peer recognition confirms Tenable’s strategic value in helping organizations worldwide, across all industry sectors, preemptively close critical…
What Enterprises Need in AI Governance Software – Kovrr

Jan 12, 2026 6:02 PM

Tags: ai, cyber, governance, risk, risk-management, software

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/what-enterprises-need-in-ai-governance-software-kovrr/
Predict 2026: AI, Trust and the Security Reckoning Ahead

Jan 12, 2026 5:02 PM

Tags: ai, governance, risk, risk-management

Join us at Predict 2026 to understand how AI transforms security, governance, and risk management, preparing leaders for the rapidly evolving landscape. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/predict-2026-ai-trust-and-the-security-reckoning-ahead/
Unlock remote work’s GRC impact: Challenges to opportunities

Jan 12, 2026 4:02 PM

Tags: compliance, governance, grc, risk, risk-management

As organizations worldwide recalibrate their operations in the wake of unprecedented change, remote work has emerged not simply as a fleeting trend but as a mainstay of modern business. For compliance experts and leaders alike, this shift has introduced a complex interplay of governance, risk management, and compliance (GRC) challenges and opportunities. This article explores…The…
Healthcare Chatbots Provoke Unease in AI Governance Analysts

Jan 9, 2026 11:02 PM

Tags: ai, governance, healthcare

AI Failures May Hide in Ways that Safety Tests Don’t Measure. When an AI chatbot tells people to add glue to pizza, the error is obvious. When it recommends eating more bananas – sound nutritional advice that could be dangerous for someone with kidney failure – the mistake hides in plain sight. First seen on…
What AI Agents Can Teach Us About NHI Governance

Jan 9, 2026 10:01 PM

Tags: access, ai, automation, control, governance, identity

Agentic AI is a stress test for non-human identity governance. Discover how and why identity, trust, and access control must evolve to keep automation safe. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/what-ai-agents-can-teach-us-about-nhi-governance/
Like it or not, AI will transform cyber strategy in 2026

Jan 9, 2026 7:01 AM

Tags: ai, compliance, cyber, governance, intelligence, risk, skills, strategy

Bubble or no bubble, from cyber skills to defensive strategies to governance, risk and compliance, artificial intelligence will remake the cyber world in 2026 First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366637095/Like-it-or-not-AI-will-transform-cyber-strategy-in-2026
Enterprises still aren’t getting IAM right

Jan 9, 2026 6:01 AM

Tags: access, ai, api, authentication, automation, cloud, control, credentials, cybersecurity, data, email, governance, iam, identity, incident response, infrastructure, least-privilege, password, risk, saas, service, tool

Just 1% have fully implemented a modern just-in-time (JIT) privileged access model;91% say at least half of their privileged access is always-on (standard privilege), providing unrestricted, persistent access to sensitive systems;45% apply the same privileged access controls to human and AI identities;33% lack clear AI access policies.The research also revealed a growing issue with “shadow…
ChatGPT Health: Top Privacy, Security, Governance Concerns

Jan 9, 2026 12:01 AM

Tags: chatgpt, governance, openai, privacy, tool

OpenAI: Tool Will ‘Securely’ Connect With Medical Records, But How Will That Work?. OpenAI is rolling out a new version of ChatGPT dedicated to health that the company said will also securely connect users’ medical records and wellness apps to better personalize responses. OpenAI says more than 230 million people each week ask ChatGPT wellness…
AI and the Future of Work: 5 Predictions for 2026

Jan 8, 2026 9:01 PM

Tags: ai, cyberattack, governance

Experts predict 2026 will bring less AI hype and more governance, delayed enterprise spending, AI moving into OT, smarter cyberattacks, and faster cooling tech. The post AI and the Future of Work: 5 Predictions for 2026 appeared first on TechRepublic. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-ai-predictions-2026-future-of-work/
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
The 2 faces of AI: How emerging models empower and endanger cybersecurity

Jan 8, 2026 8:02 PM

Tags: ai, api, attack, compliance, credentials, cyber, cybersecurity, data, deep-fake, defense, detection, endpoint, espionage, exploit, finance, flaw, framework, GDPR, google, governance, government, group, guide, hacker, HIPAA, incident response, injection, intelligence, LLM, malicious, malware, mandiant, microsoft, network, PCI, penetration-testing, privacy, risk, russia, scam, security-incident, service, social-engineering, strategy, tactics, threat, tool, vulnerability, zero-day

Self-modifying, evasive malware More recently, the researchers at Google Threat Intelligence Group (GTIG) identified a disturbing new trend: malware that uses LLMs during execution to dynamically alter its own behavior and evade detection. This is not pre-generated code, this is code that adapts mid-execution.In June 2025, GTIG identified an experimental malware called PROMPTFLUX, which connects…
US announces withdrawal from dozens of international treaties

Jan 8, 2026 3:01 PM

Tags: cyber, governance, international, law

Although the list does not include what are perceived to be the more consequential multilateral bodies shaping global cyber governance and state behaviour in cyberspace, some of the organizations play a role in shaping international law broadly. First seen on therecord.media Jump to article: therecord.media/us-announces-withdrawal-from-dozens-international-orgs
Top cyber threats to your AI systems and infrastructure

Jan 8, 2026 9:01 AM

Tags: ai, api, attack, best-practice, business, chatgpt, ciso, cloud, cyber, cybersecurity, data, defense, detection, exploit, framework, governance, hacker, infrastructure, injection, intelligence, LLM, malicious, mitre, monitoring, open-source, RedTeam, risk, sans, service, skills, software, strategy, supply-chain, tactics, theft, threat, tool, training, unauthorized, usa, vulnerability

Data poisoning Data poisoning is a type of attack in which bad actorsmanipulate, tamper with, and pollute the data used to develop or train AI systems, including machine learning models. By corrupting the data or introducing faulty data, attackers can alter, bias, or otherwise render inaccurate a model’s performance.Imagine an attack that tells a model…
AI Risk Governance Suite for Enterprise Oversight – Kovrr

Jan 7, 2026 9:02 PM

Tags: ai, cyber, governance, risk, risk-management

Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/01/ai-risk-governance-suite-for-enterprise-oversight-kovrr/
How to eliminate IT blind spots in the modern, AI-driven enterprise

Jan 7, 2026 5:01 PM

Tags: access, ai, api, attack, automation, awareness, cio, cloud, control, data, detection, endpoint, governance, group, identity, injection, intelligence, metric, monitoring, network, radius, risk, service, technology, tool, training, vulnerability

The more organizations lean on artificial intelligence (AI), spread workloads across different environments, and tie systems together, the harder it becomes for traditional security practices to present a complete picture of what’s going on. The result is a growing number of blind spots hidden misconfigurations, inconsistent controls, and unpredictable behaviors across systems and AI agents…
How to eliminate IT blind spots in the modern, AI-driven enterprise

Jan 7, 2026 5:01 PM

Tags: access, ai, api, attack, automation, awareness, cio, cloud, control, data, detection, endpoint, governance, group, identity, injection, intelligence, metric, monitoring, network, radius, risk, service, technology, tool, training, vulnerability

The more organizations lean on artificial intelligence (AI), spread workloads across different environments, and tie systems together, the harder it becomes for traditional security practices to present a complete picture of what’s going on. The result is a growing number of blind spots hidden misconfigurations, inconsistent controls, and unpredictable behaviors across systems and AI agents…