SEC's new cyber-disclosure rule just rewrote what CISOs must report in 72 hours — the board memo template every security leader needs this week.
Automation compresses audit cycles from quarters to hours — and quietly transfers accountability to whoever signs the report. Twelve Fortune 500 CISOs on the agentic GRC stack they will not deploy, the controls they refuse to automate, and the board conversation that has to happen before the next attestation.
Jun 16, 2026
Jun 3, 2026
May 28, 2026
May 14, 2026
Joint advisory urges utilities, transport and healthcare operators to harden defences ahead of the holiday window when staffing is thin and attacker dwell time grows.
The Bureau warns that intrusion crews are timing extortion to align with earnings windows, mergers and IPOs — moments when public exposure is most painful.
Sophisticated actors used a previously unknown flaw to maintain persistence on enterprise gateways for at least six months before detection.
The FCC vote revokes operating authority and orders a 60-day exit — the latest escalation in Washington's effort to insulate domestic networks from state-linked carriers.
A coalition convened by the White House commits to crypto-tracing, banking choke points and shared takedown intelligence — but stops short of an outright payment ban.
Richard Bussiere
APAC Technical Director, Tenable
Amit Raju
VP Engineering
CISO MAG Editorial
Interview
Long-form research from the CISO MAG editorial desk and partners — published for security leaders making the next budget cycle's case.
Of the three IT infrastructure categories — compute, network, storage — the last holds the most value, and the least scrutiny. A practitioner playbook.
▶ Watch on YouTubeHD · RSA 2026EC-Council Group President Jay Bavisi takes the centre stage on cybersecurity, ethical hacking, social engineering and cyber policy — bold, insightful conversations with the practitioners and policymakers shaping the industry today.
The Cybersecurity Podcast · EC-Council