CISO Strategy

AI agents gaining autonomy faster than businesses can secure them

Most companies now grant AI agents autonomous decision-making power, yet fewer than half can audit what those agents do on enterprise systems.

By Craig Galbraith • Oct. 29, 2026

Wave of PHP2Shell-style flaws coming, Nvidia security exec predicts

Brace yourselves, CISOs. On the heels of the PHP2Shell disclosure, Nvidia's head of cybersecurity policy predicts things will get better – but first, we're in for a bumpy ride.

By Alissa Irei • Oct. 28, 2026

Federal AI security guidance misses real-world enterprise threats

Federal AI incident response guidance leaves enterprise security teams to bridge critical gaps around rogue agents and prompt injection.

By Nathan Eddy • Oct. 27, 2026

Some businesses are pulling back from AI. CISOs can’t afford to

Some businesses are pulling back from AI amid low ROI, but CISOs can’t afford to lose it. Here’s how to protect AI in security operations.

By Richard Livingston • Oct. 27, 2026

Welcome to TechTarget Cybersecurity

Our expanded reporting, deeper analysis and sharper enterprise security coverage will help CISOs cut through the noise, assess emerging risks and make informed decisions that strengthen their security posture and business resilience.

By Sharon Shea , James Walker • Oct. 27, 2026

Help desk deepfakes: Why CISOs must rethink verification

Protecting the help desk from deepfake threats doesn't necessarily mean deploying the latest detection tools. Prioritizing policy over detection can stop deepfakes in their tracks.

By Katherine Finnell • Oct. 23, 2026

How to conduct a cyber-resilience assessment

Regularly reviewing cybersecurity plans and procedures helps organizations prepare for cyberattacks. This checklist outlines key steps for assessing cyber resilience.

By Paul Kirvan • Oct. 21, 2026

AI kill switch: Can we really shut down artificial intelligence?

In this episode of Tech News this Week, Richard Livingston explains the debate around AI kill switches and recent legislation surrounding AI oversight and shutdown capabilities.

By Kate Murray • Oct. 13, 2026

Unclear AI risk ownership could leave CISOs in familiar scapegoat role

With no consensus on who owns AI risk, cybersecurity leaders could be exposed. Experts say CISOs need authority over AI security -- not just accountability when it goes wrong.

By Alissa Irei • Oct. 9, 2026

How to build an effective cybersecurity awareness program

Effective cybersecurity awareness programs manage human risk through role-based interventions, behavior change, continuous measurement and evolving threat scenarios.

By Damon Garn • Oct. 7, 2026

White-glove security training closes executive vulnerability gap

Executives present a unique security vulnerability. White-glove security training provides personalized strategies against impersonation, deepfake and spear phishing attacks.

By Sean Kerner • Oct. 6, 2026

Use Cybersecurity Awareness Month as a springboard -- not a fire drill

National cybersecurity awareness efforts peak in October, but attacks happen year-round. Experts explain how CISOs can use Cybersecurity Awareness Month to build long-term momentum.

By Alissa Irei • Oct. 1, 2026

Rethink Cybersecurity Awareness Month: 4 different approaches

Instead of measuring Cybersecurity Awareness Month by training completion, use October to fix problems, eliminate risk, test critical capabilities and drive accountability.

By Damon Garn • Oct. 1, 2026

The CISO role isn’t universal: 5 industry perspectives

One title, many jobs: CISOs at Fastly, SolarWinds, DeVry and other organizations reveal how industry shapes their responsibilities and priorities.

By Sean Kerner • Sept. 30, 2026

Security vendors turn to multi-model, open AI to bypass guardrails

Commercial AI guardrails are blocking legitimate cyberdefense activities. Security vendors are fighting back with multi-model frameworks and open-weight LLMs.

By Alissa Irei • Sept. 29, 2026

Shadow AI agents: What CISOs need to know

Shadow AI agents pose unique threats as their autonomous nature can bypass IT controls. CISOs need effective strategies to secure enterprise data and enable AI innovation.

By Amy DeCarlo • Sept. 28, 2026

Pulling the plug: Why the AI kill switch might be a dead end

As lawmakers push to make AI kill switches mandatory, security leaders warn that the "big red button" may be a dangerous illusion. Here’s why policy doesn't match the technical reality.

By Richard Livingston • Sept. 25, 2026

How to explain AI risk to the board: What directors need to hear

CISOs must build a narrative on security, reputation and financial impact when discussing AI risks with board members -- and drop the jargon and fearmongering.

By Ed Moyle • Sept. 17, 2026

Cyber budgets flatline as CISOs shift new spending to AI

AI is absorbing new security spending even as budgets stall, forcing CISOs to rethink how they deploy people, automation and risk dollars.

By James Walker • Sept. 16, 2026

EU cyber rule exposes gaps in product security operations

Europe's new reporting rule could establish a global product security standard, but smaller manufacturers and legacy products face the steepest challenge.

By Nathan Eddy • Sept. 16, 2026

The growing case for deputy CISOs in the enterprise

Cybersecurity teams need a leader -- or do they need two? As the pressures on security professionals grow, the deputy CISO role has become a bigger topic of conversation.

By Phil Sweeney • Sept. 10, 2026

Billington Summit highlights blurring public-private cybersecurity lines

At the Billington Cybersecurity Summit, public sector security experts address a threat landscape that no longer distinguishes between government and private targets.

By Richard Livingston • Sept. 8, 2026

Cybersecurity and the end of AI’s Wild West era

The days of unproven promises and marketing hype around AI security are coming to a close. The next phase of AI requires scrutiny and measurable results.

By Richard Livingston • Aug. 28, 2026

Avoid these 5 pitfalls in your cybersecurity technology PoC

A cybersecurity technology proof of concept can validate a good purchasing decision -- or waste months of your team's time. Look out for these five common PoC missteps.

By Sean Kerner • Aug. 28, 2026

Black Hat 2026: Key news, takeaways and security trends

This is your guide to the breaking news, trending topics and more at Black Hat USA 2026, from Dark Reading, Cybersecurity Dive and TechTarget Cybersecurity.

Aug. 26, 2026