Follow the evidence.

Making the Case to the Board for Post-Quantum Readiness

Frame Quantum Risk Around Business Exposure, Timelines and Staged InvestmentCIOs seeking board support for post-quantum readiness should skip the physics lesson. The stronger case connects vulnerable cryptography to critical services, explains the cost of waiting and requests funding in manageable stages.

Anthropic Expands Access to Frontier Cyber AI Models

3 Access Tiers Cover Defense, Red Teaming and Critical SystemsAnthropic opened its advanced cyber AI program to applications from any organization, offering tiered access for defense, red teaming and critical infrastructure testing as increasingly capable models become available to attackers and defenders alike.

FDIC: Institutions Encouraged to Work with Borrowers Impacted by Shutdown

Five federal regulatory agencies encourage financial institutions to work with customers affected by the federal government shutdown.

FDIC: Supervisory Approach to Payment Processing Relationships with Merchant Customers

The FDIC is clarifying its policy and supervisory approach related to facilitating payment processing services directly, or indirectly through a third party, for merchant customers engaged in higher-risk activities.

FFIEC: Statement on End of Microsoft Support for Windows XP

The FFIEC on Oct. 7 issued a joint statement concerning Microsoft's discontinuation of support for its Windows XP operating system as of April 8, 2014.

China Could Coerce Taiwan by Hacking Comms, Think Tank Warns

War Game Pits Taiwan's Telecom Sector Against ChinaA concerted Chinese attempt to take over neighboring Taiwan is more likely to involve "cyber-enabled economic warfare" rather than outright invasion, warns a Washington, D.C. national security think tank. Beijing has long asserted sovereignty over Taiwan.

Oracle Health's Cerner EHR Breach Figure Soars to 20 Million

Vendor Has Updated Breach Reports to Several States Including TexasThe number of patients affected in a 2025 hacking incident involving health data managed by electronic health record vendor Cerner has soared to about 20 million. The breach of Cerner - acquired by Oracle Health in 2022 - is among the three largest health data incidents of 2025.

Addressing Quantum Readiness in Healthcare Security

Healthcare organizations should prepare for post-quantum cryptography without overreacting to hype, said John Frushour, CISO of New York-Presbyterian Hospital. Stronger encryption standards, commercial software support and attention to medical devices can help providers manage emerging risks.

7 Data Security Priorities Before AI Gets Involved

What Security Leaders Want for Their Data Before AI Gets Anywhere Near ItSecurity leaders need full data visibility, accurate classification, stronger governance and real-time controls before AI gains access to sensitive information. The article outlines seven data security priorities and why DLP must be simple, autonomous and complete.

Webinar | How Leading Universities Build a Culture of Cybersecurity

How Renown Health Is Reshaping Its Digital ID Strategy

Renown Health is reshaping digital ID management with a strategy that reduces friction for clinicians, strengthens security and prepares the organization for emerging AI-driven identity challenges, said Steven Ramirez, Renown Health's chief information security and technology officer.

How Agentic AI Is Reshaping the Modern SOC

Agentic AI is redefining security operations by embedding intelligence across detection, investigation and response. Optiv's Ben Spencer and Google Cloud's Wayne Kearns explain how AI-powered SOCs strengthen defense, why human expertise is essential and how MSSPs can accelerate enterprise adoption.

How Cloud Security Risks Grow With Home-Based Care

As hospital-at-home programs expand and AI adoption accelerates, healthcare organizations face mounting cloud security demands. Anahi Santiago, CISO of ChristianaCare, discusses vendor accountability, identity management, clinical AI risks and the need for stronger cybersecurity foundations.

Your Phishing Drill Numbers Are Lying to You

Why Measuring What Employees Do Matters More Than Tracking What They CompleteSecurity awareness programs track phishing clicks, training completion and defaulters, but those numbers say little about lasting behavior change. Research suggests the answer lies in better measurement, timely coaching and personalization, turning security awareness into a behavioral intervention.

Live Webinar | The Identity Imperative: Securing the Enterprise in the Age of AI-Driven Risk

Webinar | Can You Account for What Your AI Agents Do With Sensitive Data?

Is It America First, AI Safety Second?

Washington Gets First Draw on Frontier AI, But Outlaw Agents Ride OnWashington wants first dibs on testing American frontier AI models while telling a trusted ally to wait its turn. That's a curious way to police the frontier considering that British researchers keep finding agents that ignore boundaries and American-built agents are already hacking government systems overseas.

Your Newest Workforce Isn't Human: Gaining Control of AI Agents Across the Enterprise

FDIC Issues Guidance to Areas in Illinois Impacted by Severe Storms

The FDIC has announced a series of steps intended to provide regulatory relief to financial institutions and facilitate recovery in areas of Illinois affected by severe storms, straight-line winds, and tornadoes.

'The Art of War' Never Said Know Only Your Vulnerabilities

Why Threat Intelligence Must Connect Adversary Intent to Business RiskOrganizations have become adept at cataloging vulnerabilities, but technical exposure alone does not reveal who will attack - and why or how. Strategic threat intelligence connects adversary behavior with business context to guide security priorities.