Risk Management

Federal AI security guidance misses real-world enterprise threats

Federal AI incident response guidance leaves enterprise security teams to bridge critical gaps around rogue agents and prompt injection.

By Nathan Eddy • Oct. 27, 2026

AI makes Rust rewrites easier, but there are caveats

AI can make it easier to update legacy apps to Rust for stronger security, but a language switch does not solve system design problems.

By Ben Lutkevich • Oct. 27, 2026

Some businesses are pulling back from AI. CISOs can’t afford to

Some businesses are pulling back from AI amid low ROI, but CISOs can’t afford to lose it. Here’s how to protect AI in security operations.

By Richard Livingston • Oct. 27, 2026

Welcome to TechTarget Cybersecurity

Our expanded reporting, deeper analysis and sharper enterprise security coverage will help CISOs cut through the noise, assess emerging risks and make informed decisions that strengthen their security posture and business resilience.

By Sharon Shea , James Walker • Oct. 27, 2026

Cyber insurance explained, from selection to post-purchase

Before you sign on the dotted line, make sure you understand what cyber insurance can and can't do -- and what type of policy will do the most for your organization.

By Sherri Davidoff • Oct. 23, 2026

AI will drive up credit cost of weak cyberdefenses, says Moody’s

As Moody's links poor cyber resilience directly to higher capital costs, CISOs gain a powerful financial metric to convince boards to fund defenses.

By Alissa Irei • Oct. 21, 2026

Beyond Arup: CISOs combat escalating deepfake fraud

In the two years since the landmark Arup attack, deepfake technology has rapidly matured. Cybersecurity and legal experts analyze why traditional controls fail against live executive clones.

By Richard Livingston • Oct. 12, 2026

How to build a successful security champions program

Security champions integrate security into daily team decisions. Learn who should be a champion and how to establish an effective program.

By Nihad Hassan • Oct. 12, 2026

Risk-based alerting slashes SOC noise -- when done right

A landmark independent study validates risk-based alerting, revealing which scoring strategies cut false positives and which popular vendor rules fail in practice.

By James Walker • Oct. 7, 2026

Supply chain security: How CISOs can explain costs to the board

When explaining supply chain risk costs to the board, the best tactic is to present funding options and establish satisfactory risk levels.

By Damon Garn • Oct. 6, 2026

When a critical supplier gets breached: CISO’s response guide

Third-party breaches account for a growing number of cyberattacks. Organizations must have strategies and systems in place before a critical vendor breach occurs.

By Karen Kent , Sharon Shea • Oct. 2, 2026

How to tackle a ransomware readiness self-assessment, with template

Ransomware readiness self-assessments are key to spotting vulnerabilities and preparing for third-party assessments. Use this template to evaluate your organization's preparedness.

By Karen Kent • Sept. 22, 2026

CISOs more confident -- and more stressed -- than ever

Security leaders are growing more confident in their abilities to withstand cyberattacks, yet the pressure on them continues to build. Proofpoint's latest survey of CISOs explains why.

By Craig Galbraith • Sept. 14, 2026

EU Cyber Resilience Act reporting: What CISOs need to know

The EU Cyber Resilience Act doesn't take full effect until 2027, but the mandatory vulnerability reporting deadline hits on September 11, 2026. Is your organization prepared?

By Samira Sarraf • Sept. 9, 2026

Why cyber resilience fails: 5 obstacles holding orgs back

Technical debt, cybersecurity skills shortages and identity risks are among the challenges that can make it difficult for an organization to achieve cyber resilience.

By Sean Kerner • Sept. 2, 2026

Cutting through the Claude Mythos hype: What it means for CISOs

In this Reporters' Notebook video, Informa TechTarget journalists discuss what we know -- and don't know -- about Claude Mythos, and what CISOs should do next.

By Alissa Irei • Aug. 19, 2026

How CISOs can use risk assessments to drive security culture

A strong security culture requires that executives and rank-and-file users understand why controls exist. A risk assessment can be a powerful tool for winning hearts and minds.

By Michael Nadeau • Aug. 4, 2026

How mapping security controls can ease the compliance burden

Being able to map cybersecurity controls to applicable standards and regulations can make compliance work less complicated – especially when automation and AI come into play.

By Paul Kirvan • July 16, 2026

Why conversational AI is redefining your security perimeter

As employees become more accustomed to using AI, they might be getting a little too comfortable. Learn how strong AI governance helps manage this new human risk.

By Richard Livingston • July 13, 2026

NO FAKES Act advances: What CISOs need to know

As the NO FAKES Act moves to the Senate, the country is closer to real protections against unauthorized AI replica use -- a move that also has enterprise implications.

By Richard Livingston • June 26, 2026

What CISOs should know about AI runtime security

With AI, security at runtime means protecting access, vetting inputs, checking outputs and detecting anomalous behaviors. It is challenging to get right.

By John Burke • June 25, 2026

As Q-Day looms, 90% of systems are unprepared for PQC

Quantum computing could break encryption in the next several years, and research suggests that few organizations are ready. Experts say CISOs must act now.

By Craig Galbraith • June 24, 2026

Most security pros say their culture is ‘just average’

'The Life and Times of Cybersecurity Professionals' survey assessed how workers feel about defending against constant threats, as well as what's getting better and what is not.

By Phil Sweeney • June 18, 2026

How to build AI security guardrails without blocking innovation

To take advantage of opportunities AI might present -- without opening the door to a breach -- an organization needs to put the right guardrails in the right places.

By Matthew Smith • June 11, 2026

Researchers build autonomous AI worm that can reason and adapt

University of Toronto researchers created a proof-of-concept AI worm that dynamically identifies vulnerabilities and adapts its attack strategies. Here's what it means for enterprises.

By Alissa Irei • June 6, 2026