<p>Cyber insurance is a unique risk transfer product for enterprises. When a company purchases property insurance, the fire that might damage its offices isn’t trying to figure out better ways to burn down the building.</p> <p>Cybersecurity professionals know that digital…
Category: Search Security Resources and Information from TechTarget
It’s time to update incident response for the AI era
<p>In the age of AI, incident response is becoming a wholly different activity for security teams. Just a few years ago, a cybersecurity incident was almost always an attack or insider threat with a human behind it. At the Gartner…
The prosecution gap: Why cybercrimes go unpunished
<p>Cybercrime activity is rapidly escalating as attackers continue to explore both established and novel methods to defraud victims of their assets. The “FBI Internet Crime Report 2025” logged more than one million cybercrime complaints for the first time in the…
How to build AI security guardrails without blocking innovation
<p>While adoption of AI tools has surged, security has not kept pace.</p> <p>McKinsey’s “State of AI: Global Survey 2025” found that 88% of organizations now use AI in at least one business function. IBM’s “Cost of a Data Breach Report…
What is incident response? A complete guide
<p>Incident response is an organized, strategic approach to detecting and managing cyberattacks in ways that minimize damage, recovery time and total costs.</p> <p><a href=”https://www.techtarget.com/searchsecurity/tip/Incident-management-vs-incident-response-explained”>Incident response is a subset of incident management</a>. <i>Incident management</i> is an umbrella term for an enterprise’s broad handling…
Gartner Security & Risk Management Summit 2026: Adapting for AI
<p>The Gartner Security & Risk Management Summit gathers CISOs, business leaders and decision-makers with Gartner analysts to explore the current and future state of cybersecurity.</p> <p>This year’s Summit is being held June 1-3, 2026, at the Gaylord National Resort and…
AI in cyberdefense: Learning from threat actors’ playbooks
<p>When Sun Tzu said, “To know your enemy, you must become your enemy,” he never could have imagined how his wisdom would be applied to AI 2,500 years later.</p> <p>During his session at the Gartner Cybersecurity and Risk Management Summit…
Top identity and access management risks
<p><a href=”https://www.techtarget.com/searchsecurity/definition/identity-access-management-IAM-system”>Identity and access management</a> has evolved from a supporting IT function into the foundation of enterprise security. In modern organizations, identity governs access not only for employees, but also for contractors, cloud workloads, SaaS platforms, APIs, automation pipelines and,…
CISO role changes as cyber-risk appetites in the C-suite grow
<p>While cybersecurity incidents are inevitable, they’re rarely existential threats, according to Will Candrick, analyst at Gartner, who discussed shifting cyber-risk appetites during a session at the firm’s 2026 Security and Risk Management Summit.</p> <p>”In the long run, the likelihood of…
CISO’s guide to data minimization
<p>Many enterprise cybersecurity conversations still focus primarily on prevention technologies. While these controls remain critically important, CISOs today recognize that one of the most effective ways to lessen breach impact is far simpler in concept: reduce the amount of sensitive…
Researchers build autonomous AI worm that can reason and adapt
<p>University of Toronto researchers said they used open source technology to create an agentic AI worm that reasons and adapts — identifying each targeted device’s unique vulnerabilities and creating tailored attack strategies on the fly.</p> <p>Traditional worms are one-trick ponies…
How to secure data at rest, in use and in motion
<p>Data security is a non-negotiable strategic imperative cloaked with business implications for risk management and competitive advantage.</p> <p>Organizations today face ever-increasing cybersecurity risks — both internal and external. Safeguarding data against financial losses, regulatory penalties and reputational damage is not…
How to find cyber-risk data sources for a FAIR analysis
<p>In today’s enterprise, some degree of cyber-risk exposure is inevitable. CISOs must use limited resources to <a href=”https://www.techtarget.com/searchsecurity/tip/Enterprise-risk-management-should-inform-cyber-risk-strategies”>strategically address the most significant risks</a>, in alignment with their organizations’ <a href=”https://www.techtarget.com/searchsecurity/feature/How-to-define-cyber-risk-appetite-as-a-security-leader”>cyber-risk appetites</a>.</p> <p>The easiest and fastest — but also least reliably…
Lost in translation: Cybersecurity board reporting for CISOs
<p>Hundreds of security leaders from across industries recently packed a ballroom in National Harbor, Md., to tackle a challenge some consider even more daunting than nation-state hackers or AI-fueled cyber threats: presenting to a company’s board members so they understand…
Gartner Security & Risk Management Summit 2026: Adapting for AI
<p>The Gartner Security & Risk Management Summit gathers CISOs, business leaders and decision-makers with Gartner analysts to explore the current and future state of cybersecurity.</p> <p>This year’s Summit is being held June 1-3, 2026, at the Gaylord National Resort and…
How to prepare security controls for future AI regulations
<p>The global AI regulatory landscape is fragmented and volatile. As a result, cybersecurity leaders must reconcile competing compliance requirements and safeguard organizational AI without creating roadblocks to the overall AI strategy’s success.</p> <p>While the EU AI Act imposes a comprehensive,…
EO 14390 raises stakes for enterprise cybersecurity
<p>For years, federal cybersecurity policy has primarily focused on protecting government systems and critical infrastructure. Executive Order 14390: “Combating Cybercrime, Fraud, and Predatory Schemes Against American Citizens” signals a broader shift in emphasis. Signed on March 6, 2026, the order…
First month of Mythos Preview testing exposes 10K flaws
<p>Organizations using Claude Mythos have discovered thousands of vulnerabilities in the first month of security testing under Project Glasswing, per an announcement from Anthropic last week.</p> <p>The project, initially announced on April 7, granted preview access of Mythos to about…
How to secure data at rest, in use and in motion
<p>Data security is a non-negotiable strategic imperative cloaked with business implications for risk management and competitive advantage.</p> <p>Organizations today face ever-increasing cybersecurity risks — both internal and external. Safeguarding data against financial losses, regulatory penalties and reputational damage is not…
OT attacks shift from recon to physical control, raising stakes
<p>In the Netflix thriller <i>Leave the World Behind, </i>a massive cyberattack plunges the U.S. into a complete electrical and technological blackout. While the scope and scale of the fictional attack are improbable, research suggests real-world malicious hackers are increasingly interested…