Follow the evidence.

How FDA's Draft Guidance Shapes AI Medical Device Safety

FDA's draft guidance for AI-enabled medical devices reflects a major change in how regulators address software that changes over time, recognizing AI's ability to evolve while emphasizing patient safety, transparency and accountability, said Phil Englert of the Health-ISAC.

How Renown Health Is Reshaping Its Digital ID Strategy

Renown Health is reshaping digital ID management with a strategy that reduces friction for clinicians, strengthens security and prepares the organization for emerging AI-driven identity challenges, said Steven Ramirez, Renown Health's chief information security and technology officer.

Live Webinar | Making the Case for PKI Modernization for CISOs and CIOs

ENISA: Guidelines on Incident Reporting

ENISA has issued guidelines to national telecom regulatory authorities about the implementation of Article 13a, in particular, the two types of incident reporting mentioned in Article 13a: the annual summary reporting of significant incidents to ENISA and the European Commission and ad hoc notification of incidents to other NRAs in case of cross-border incidents.

Oracle Health's Cerner EHR Breach Figure Soars to 20 Million

Vendor Has Updated Breach Reports to Several States Including TexasThe number of patients affected in a 2025 hacking incident involving health data managed by electronic health record vendor Cerner has soared to about 20 million. The breach of Cerner - acquired by Oracle Health in 2022 - is among the three largest health data incidents of 2025.

Who Owns OT Vulnerabilities? Defining Security Accountability Across Teams

'The Art of War' Never Said Know Only Your Vulnerabilities

Why Threat Intelligence Must Connect Adversary Intent to Business RiskOrganizations have become adept at cataloging vulnerabilities, but technical exposure alone does not reveal who will attack - and why or how. Strategic threat intelligence connects adversary behavior with business context to guide security priorities.

Is It America First, AI Safety Second?

Washington Gets First Draw on Frontier AI, But Outlaw Agents Ride OnWashington wants first dibs on testing American frontier AI models while telling a trusted ally to wait its turn. That's a curious way to police the frontier considering that British researchers keep finding agents that ignore boundaries and American-built agents are already hacking government systems overseas.

Making the Case to the Board for Post-Quantum Readiness

Frame Quantum Risk Around Business Exposure, Timelines and Staged InvestmentCIOs seeking board support for post-quantum readiness should skip the physics lesson. The stronger case connects vulnerable cryptography to critical services, explains the cost of waiting and requests funding in manageable stages.

ENISA: Technical Guidelines on Minimum Security Measures

ENISA has issued guidance to national telecom regulatory authorities about the implementation of Article 13a, in particular about the security measures that providers of public communications networks must take to ensure security and integrity of these networks.

ENISA: Cybersecurity Aspects in the Maritime Sector

ENISA has published the first EU report ever on cybersecurity challenges in the Maritime sector. This principal analysis highlights essential key insights, as well as existing initiatives, as a baseline for cybersecurity. Finally, high-level recommendations are given for addressing these risks.

ENISA Launches Information Security Awareness Videos

The European Network and Information Security Agency [ENISA] has launched information security awareness videos in 23 European languages.

How Cloud Security Risks Grow With Home-Based Care

As hospital-at-home programs expand and AI adoption accelerates, healthcare organizations face mounting cloud security demands. Anahi Santiago, CISO of ChristianaCare, discusses vendor accountability, identity management, clinical AI risks and the need for stronger cybersecurity foundations.

Anthropic Expands Access to Frontier Cyber AI Models

3 Access Tiers Cover Defense, Red Teaming and Critical SystemsAnthropic opened its advanced cyber AI program to applications from any organization, offering tiered access for defense, red teaming and critical infrastructure testing as increasingly capable models become available to attackers and defenders alike.

Live Webinar | Rethinking PKI From Risk to ROI

Webinar | From Autonomy to Accountability: Securing the New Agentic Workforce

Your Phishing Drill Numbers Are Lying to You

Why Measuring What Employees Do Matters More Than Tracking What They CompleteSecurity awareness programs track phishing clicks, training completion and defaulters, but those numbers say little about lasting behavior change. Research suggests the answer lies in better measurement, timely coaching and personalization, turning security awareness into a behavioral intervention.

Stop Waiting for Someone Else to Make AI Safe

Forget AI Doomsday. Defend Against the Agent Already Jimmying the LocksAI labs warn their creations could someday threaten humanity while governments race to keep their nations competitive. Security teams have a less cinematic problem: Autonomous agents can already probe defenses, exploit weaknesses and wield credentials. Let's not forget Cybersecurity 101.

Addressing Quantum Readiness in Healthcare Security

Healthcare organizations should prepare for post-quantum cryptography without overreacting to hype, said John Frushour, CISO of New York-Presbyterian Hospital. Stronger encryption standards, commercial software support and attention to medical devices can help providers manage emerging risks.

China Could Coerce Taiwan by Hacking Comms, Think Tank Warns

War Game Pits Taiwan's Telecom Sector Against ChinaA concerted Chinese attempt to take over neighboring Taiwan is more likely to involve "cyber-enabled economic warfare" rather than outright invasion, warns a Washington, D.C. national security think tank. Beijing has long asserted sovereignty over Taiwan.