AI has huge potential around security. That potential goes both ways, with attackers using AI to improve their ability to exploit vulnerabilities and defenders responding faster to threats. But effectiveness can be expensive. Eric Avery looks at how to understand and control your defensive AI costs…
The Cloud Security Alliance has published the AI Security Maturity Model (AISMM). This aims to help organizations assess, build, and improve their AI security programmes.
The Committee of Sponsoring Organizations of the Treadway Commission (COSO) has announced the release of ‘From Guidance to Action: Exploring Practical Enterprise Risk Management’.
BlackFog has revealed findings from its analysis of global ransomware activity from January – March 2026 covering both publicly disclosed and undisclosed cyber attacks.
e2e-assure has published new research highlighting that one-third of surveyed organizations are relying on IT cyber security processes and standards, despite operational technology (OT) requiring a specialist approach.
A new paper, ‘The urgency of building systemic risk capacity in a polycrisis world’, looks at why traditional approaches to risk management are falling short due to their lack of a systems approach.
KnowBe4 has announced new research, ‘Phishing Threat Trends Report Volume Seven’, based on an evaluation of attacks from more than 3,000 unique threat actors.
Threat intelligence data from Orange Cyberdefense reveals a significant shift in the cyber security landscape. For the first time, incidents originating from inside organizations have overtaken external incidents.
The Australian Prudential Regulation Authority (APRA) has called for a step-change in how banks, insurers, and superannuation trustees manage AI-related risks as the technology continues to rapidly evolve.
Michael Campbell explains why taking an enterprise approach to resilience is gaining ground.