Security Practices

Security Practices | News, how-tos, features, reviews, and videos

Cybersecurity is a leadership problem: Why the management model needs to catch up

We keep buying better security tech, but the real gaps are ownership and follow-through, so cybersecurity can’t stay the CISO’s problem alone.

By JC Gaillard

Oct 14, 202610 mins

IT LeadershipSecuritySecurity Practices

Articles

AI made software development unrecognizable. Is cybersecurity next?

Agent-run SOCs, machine-speed containment, and flatter security teams could transform how cyber defense is practiced as the AI era takes hold.

By Cynthia Brumfield

Sep 16, 2026 11 mins

IT Skills and TrainingSecurity InfrastructureSecurity Operations Center

AI is exposing a security structure built for yesterday’s threats

AI-driven threats are blurring cyber and physical security, making integrated, cross-functional defense essential for resilience.

By Jeffrey Sallet

Sep 15, 2026 5 mins

Artificial IntelligencePhysical SecuritySecurity Practices

When the prompt becomes the payload: A practical pen-testing guide for GenAI, LLM and RAG applications

The most damaging LLM flaws rarely stop at an unsafe answer. They cross into retrieval systems, identity controls, tools, data pipelines and business transactions. A useful assessment follows that full path.

By Sunil Gentyala

Sep 9, 2026 9 mins

Application SecurityGenerative AISecurity Practices

The democratization of cyber warfare — and what it means for CISOs

AI is giving more attackers more power, faster, so defenders need to rethink how they use AI to keep pace.

By Chris Lentricchia

Sep 4, 2026 10 mins

CyberattacksCybercrimeData and Information Security

Why exposure management is replacing vulnerability management

Visibility isn’t the problem.

By Stephen Gates, Horizon3.ai

Aug 6, 2026 6 mins

Risk ManagementSecuritySecurity Practices

The first 24 hours of an AI agent security incident

AI agents can scale an attack faster than humans can respond, making traditional incident response dangerously slow.

By Ravindra Annam

Aug 28, 2026 7 mins

Artificial IntelligenceIncident ResponseSecurity Practices

CTEM can give your security team a contextual edge

Taking a continuous, contextual, and risk-oriented approach to defense will help your security org prioritize mitigations that matter most to your business.

By Víctor Manuel Fernández

Aug 28, 2026 7 mins

Risk ManagementSecurity PracticesThreat and Vulnerability Management

How Equifax is using AI to elevate its cybersecurity

The credit bureau’s CISO explains how AI is helping the company defend against attacks, secure code, and accelerate fixes — and why security fundamentals and controls are more vital than ever.

By Maria Korolov

Aug 25, 2026 7 mins

Financial Services IndustrySecurity InfrastructureSecurity Operations Center

Most organizations aren’t ready for a Hugging Face-level event

AI is changing the cyber fight, so security teams need to test their defenses constantly — not just hope they work.

By Lee Rossey

Aug 19, 2026 7 mins

Incident ResponseSecurity InfrastructureSecurity Practices

The cybersecurity backlog is not a security problem

A giant security backlog? The real problem may be who owns the fixes, not the security team tracking them.

By Joshua Copeland

Aug 14, 2026 8 mins

IT LeadershipIT ManagementSecurity Practices

How CSOs can turn cybersecurity into a business growth strategy

The next evolution of cybersecurity leadership is moving from the team that says “no” to the team that helps organizations say “yes.”

By Christopher Squier

Aug 14, 2026 6 mins

Business IT AlignmentC-SuiteCSO and CISO

Microsoft wants you to rethink your approach to cyber defense

When finding vulnerabilities and generating targeted exploits is a 21-minute job that costs just $3.61, it’s time to scrap outdated best practices and ‘hand-to-hand combat with attackers,’ warns Redmond’s AI security lead.

By John Leyden

Aug 13, 2026 7 mins

SecuritySecurity PracticesThreat and Vulnerability Management

Your orchestration framework choice is a security decision, not just an engineering one

Framework choice can change AI agent compromise rates by 2.6x, making orchestration architecture as important as the model itself.

By Julie Brunias

Aug 5, 2026 6 mins

Data and Information SecuritySecuritySecurity Practices

View all

Cybersecurity is a leadership problem: Why the management model needs to catch up

These ARE the droids you’re looking for

The 7 biggest issues CISOs and security teams face today

When building an AI-native security program, start with outcomes

AWS takes aim at runaway AI agent behavior with Strands Box

Anthropic widens access to AI cyber capabilities for vetted security teams

Whatever happened to the 36-month IT security roadmap?

Fixing Flock: The controls needed now that misuse patterns are clear

Strong fundamentals make next-gen security possible

Articles

AI made software development unrecognizable. Is cybersecurity next?

AI is exposing a security structure built for yesterday’s threats

When the prompt becomes the payload: A practical pen-testing guide for GenAI, LLM and RAG applications

The democratization of cyber warfare — and what it means for CISOs

Why exposure management is replacing vulnerability management

The first 24 hours of an AI agent security incident

CTEM can give your security team a contextual edge

How Equifax is using AI to elevate its cybersecurity

Most organizations aren’t ready for a Hugging Face-level event

The cybersecurity backlog is not a security problem

How CSOs can turn cybersecurity into a business growth strategy

Microsoft wants you to rethink your approach to cyber defense

Your orchestration framework choice is a security decision, not just an engineering one

Resources

DevOps vs Security: Breaking Down the Wall of Confusion in Modern Application Delivery

Stop Chasing Charts for Risk Adjustment

How Health Plans Are Achieving Payer-Provider Interoperability Through Bidirectional Data Exchange

Podcasts

Cyber Sessions with Joan Goodchild

Beyond Cybersecurity: The CISO as a Business Leader

Identity Has Become the New Security Perimeter