Risky shadow AI use remains widespread

A new report offers fresh evidence for why enterprises should prioritize AI governance policies.

By Eric Geller • Jan. 6, 2026

NIST and MITRE partner to test AI defense technology for critical infrastructure

Experts said the new partnership should focus on making AI-based systems more reliable.

By Eric Geller • Dec. 23, 2025

Explore the Trendline➔

CISO Strategy

Corporate stakeholders want to better understand the risk calculus of their technology stacks, answering the lingering question: Are we a target? 

By Cybersecurity Dive staff

ServiceNow to buy Armis for $7.75B

The combination yields a major player in cyber-physical security and exposure management. 

By David Jones • Dec. 23, 2025

CISA loses key employee behind early ransomware warnings

The future of a program that has helped prevent an estimated $9 billion in economic damages is now unclear.

By Eric Geller • Dec. 23, 2025

AI security is fundamentally a cloud infrastructure problem, Palo Alto Networks says

Companies should prioritize identity security and integrate cloud monitoring into the SOC, according to the security firm.

By Eric Geller • Dec. 22, 2025

Top lawmaker asks White House to address open-source software risks

The Senate Intelligence Committee’s chairman voiced concern about foreign adversaries tampering with code.

By Eric Geller • Dec. 19, 2025

Cybersecurity concerns are paramount among executives in almost all roles, regions and industries

A new survey finds widespread agreement that security is one of the biggest challenges facing companies today.

By Eric Geller • Dec. 15, 2025

CISA updates cybersecurity benchmarks for critical infrastructure organizations

The agency streamlines and supplements goals it first issued in 2022.

By Eric Geller • Dec. 12, 2025

US, allies urge critical infrastructure operators to carefully plan and oversee AI use

New guidance attempts to temper companies’ enthusiasm for the latest exciting technology.

By Eric Geller • Dec. 4, 2025

Lawmakers question White House on strategy for countering AI-fueled hacks

The Trump administration has said little about how it will prevent hackers from abusing AI.

By Eric Geller • Dec. 4, 2025

CISA eliminates pay incentives as it changes how it retains top cyber talent

Auditors had described the program as poorly managed. CISA is scrapping it in favor of another recruitment tool.

By Eric Geller • Dec. 3, 2025

Senators push to renew cyber grant program for state, local governments

Security experts and local officials say the program is vital to protecting the country.

By Eric Geller • Dec. 2, 2025

Gainsight CEO promises transparency as it responds to compromise of Salesforce integration

The company has been in regular contact with customers, and says only a handful have seen data directly impacted.

By David Jones • Updated Nov. 26, 2025

FCC eliminates cybersecurity requirements for telecom companies

Commissioners sharply disagreed over whether the rules were appropriate and necessary.

By Eric Geller • Nov. 20, 2025

FCC plan to scrap telecom cyber rules draws congressional backlash

A prominent U.S. senator wants the commission to rethink its plans.

By Eric Geller • Nov. 19, 2025

Trump’s cyber strategy will emphasize adversary deterrence, industry partnerships

Cyberattacks on the U.S. are “becoming more aggressive every passing day,” the national cyber director says.

By Eric Geller • Nov. 18, 2025

CISA, eyeing China, plans hiring spree to rebuild its depleted ranks

The agency will also change some of its workforce policies to avoid driving away talented staff.

By Eric Geller • Updated Nov. 18, 2025

CISO pay is on the rise, even as security budgets tighten

Companies are increasingly lavishing benefits on their top security executives, a recent report found.

By Eric Geller • Nov. 17, 2025

Companies want more from their threat intelligence platforms

Customers expect faster, more accurate and more relevant data, Recorded Future found in a new report.

By Eric Geller • Nov. 12, 2025

Shadow AI is widespread — and executives use it the most

Employees in fields like health care and finance trust AI more than they trust their colleagues, according to a new report.

By Eric Geller • Nov. 12, 2025

SonicWall says state-linked actor behind attacks against cloud backup service

CEO announces security and governance reforms inside the company, including the adoption of secure-by-design practices.

By David Jones • Nov. 6, 2025

Security leaders say AI can help with governance, threat detection, SOC automation

Executives and technical leaders differ on AI priorities, according to a report from Amazon.

By Eric Geller • Nov. 3, 2025

AI risks pack a punch, but governance provides a buffer

Enterprises strengthen governance and focus on responsible practices as more than 3 in 5 suffer AI risk-related losses of more than $1 million, EY data shows. 

By Lindsey Wilkinson • Oct. 29, 2025

UN member states sign cybercrime agreement despite industry, activist opposition

Critics say the new convention is ripe for abuse by authoritarian countries.

By Eric Geller • Oct. 27, 2025

Climbing costs, skills loss and other AI warnings for CIOs

Amid seismic change for IT leaders, enterprises need to curate survival kits to mitigate reliability and cost challenges, Gartner analysts said. 

By Lindsey Wilkinson • Oct. 23, 2025