Editors’ Picks

  • Digital image of three red chain links on a black background. The middle link is broken.
    Image attribution tooltip
    Getty Images
    Expert Advice

    Supply chain risk: Strategies to manage third-party exposure

    Enterprises face numerous security risks from their suppliers, cloud providers and other vendors. Learn how to limit third-party risk exposure in your operations.

  • Cell phone with a yellow case, with the screen on and a locked padlock on top next to a Halloween pumpkin adorned on sackcloth and surrounded by toy spiders and fallen leaves next to pine cones.
    Image attribution tooltip
    Getty Images

    Why Black October signals a new era of cyber-risk

    Experts unpack Black October 2026, a wave of cybersecurity incidents that show how AI accelerates exploitation of old vulnerabilities. Read their insights to get ahead of the next storm.

  • A close-up image of a vishing alert on a mobile phone warning that an incoming call looks suspicious and to be careful with personal information.
    Image attribution tooltip
    Getty Images
    Expert Advice

    CISOs and UC teams: Join forces against vishing attacks

    Vishing is a major security issue for enterprise communications and only growing more threatening thanks to AI. Learn how attackers exploit UC platforms and explore defense strategies.

  • Person in a black hooded sweatshirt sitting in front of computer monitors displaying code.
    Image attribution tooltip
    Getty Images

    AI-driven vibe hacking is lowering the bar for attackers

    New AI tools give casual cybercriminals the same skills that veteran hackers needed years to hone. Learn how to counter AI-driven vibe hacking.

  • A hand holds a magnifying glass over a digital shield with a padlock and green checkmark, representing cybersecurity and risk management.
    Image attribution tooltip
    Getty Images

    Cybersecurity risk management: Best practices and frameworks

    Proactive cyber-risk management protects business operations, ensures compliance and preserves reputation through established frameworks and security best practices.

  • Screenshot of the PHP.net website, with text describing what PHP is and buttons to click what's new in version 8.5 and download.
    Image attribution tooltip
    Yong Teck Lim via Getty Images

    PHP2Shell explained: Timeline of the global vulnerability crisis

    Two critical PHP RCE flaws, dubbed PHP2Shell, triggered mass patching worldwide. Here's the timeline, the technical details and what CISOs should do.

  • An employee with a headset is sitting in front of two monitors
    Image attribution tooltip
    Getty Images

    Help desk deepfakes: Why CISOs must rethink verification

    Protecting the help desk from deepfake threats doesn't necessarily mean deploying the latest detection tools. Prioritizing policy over detection can stop deepfakes in their tracks.

  • Yellow, orange and white paper planes flying toward a coral colored umbrella on blue background.
    Image attribution tooltip
    Getty Images
    Expert Advice // Understanding the ins and outs of cyber insurance

    Cyber insurance explained, from selection to post-purchase

    Before you sign on the dotted line, make sure you understand what cyber insurance can and can't do -- and what type of policy will do the most for your organization.

  • The techtarget logo in teal next to the text reading techtarget set against a dark-blue background
    Image attribution tooltip
    Brand Experience Team/TechTarget
    Expert Advice

    Just-in-time access: A CISO’s guide to reducing standing privilege

    Adopting just-in-time access helps companies better control who is accessing corporate resources, dovetailing with other key strategies such as PAM and zero trust.

  • A hand wearing a white thumbs giving the thumbs up in front of a solid purple background
    Image attribution tooltip
    Getty Images
    Expert Advice

    White-glove security training closes executive vulnerability gap

    Executives present a unique security vulnerability. White-glove security training provides personalized strategies against impersonation, deepfake and spear phishing attacks.