Whither the CVE?

Adm. Michael Rogers writes about the relevance of CVEs moving forward as AI continues to accelerate vulnerability discovery and exploitability.

Read more

CVEs' relevance is in question. Successful security teams will have to understand OT and IoT assets that are essential to the business, document how those assets communicate internally and externally to the public internet, integrators, partners, and vendors, and prioritize remediation according to their impact on the business as a whole.

ICS Advisory Project founder and Industrial Data Works CEO Dan Ricci writes about the importance of validating security controls in OT environments. Dan advises: A deployed patch is not necessarily a validated patch. CISOs need security, engineering, and operations teams to share a common definition of completion.

Operational Technology

Vulnerability Management

Validation is Maintenance: How OT Teams Prove Security Controls Work

Former Pfizer Global Head of Automation Engineering James LaBonty writes about how to develop an AI-powered cybersecurity strategy to protect cyber-physical systems (CPS) in manufacturing environments. An AI-powered CPS security strategy in manufacturing should establish operational resilience as its prime mission statement. That means ensuring that uptime of manufacturing assets is paramount. It also means strategizing about how to handle the growing influx of vulnerability disclosures driven by frontier AI models

Operational Resilience

Cyber Resilience

How AI Fits into a Manufacturing CPS Security Strategy

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Operational Technology

Operational Resilience in the Age of AI: Hunting Beyond Malware

AI-Powered Cyber Threats Further Exposing Society's Fragile Foundations

Trending in Cyber

Explore now

Cyber Resilience

Operational Resilience

Nexus Podcast: Jake Braun on DEF CON Franklin, Water Cybersecurity

Operational Technology

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard

In this episode of the Nexus Podcast, Ben Gardiner, Senior Cybersecurity Research Engineer at the National Motor Freight Traffic Association (NMFTA), shares his experience analyzing security risks in heavy-duty commercial vehicles. His research into the Bendix EC80 braking system controllers confirmed that a safety recall that resolved several software defects also patched a number of critical vulnerabilities that put the risk of a truck’s braking architecture at risk.

Operational Technology

Vulnerability Management

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers

Check Point Head of Agentic Security Innovation Shahar Tal joins the Nexus Podcast to discuss research he and researcher Yarden Porat presented at Black Hat on vulnerabilities in popular AI agent frameworks, including LangChain, LangGraph, CrewAI, AutoGen, Microsoft Agent Framework, and Google ADK. The vulnerabilities are an indication that these frameworks require additional scrutiny from a security perspective given the trust AI agents are given to execute tasks.

Cyber Resilience

Risk Management

Operational Resilience

Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Essential Topics (for Security Leaders)

Discover expert insights on Risk Management, Cyber Resilience, Vulnerability Management, and more. Learn how top security leaders safeguard critical cyber-physical systems.

Explore more

Risk Management

Will CVEs Remain Relevant in an AI-Driven World? Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation Nexus Podcast: Check Point’s Shahar Tal on Exploiting AI Agent Frameworks

Cyber Resilience

Will CVEs Remain Relevant in an AI-Driven World? Nexus Podcast: Jake Braun on DEF CON Franklin, Water Cybersecurity HOPE Has Shed Its Skin: Beyond the Canonical Asset Operational Resilience in the Age of AI: Hunting Beyond Malware

Healthcare

HOPE Has Shed Its Skin: Beyond the Canonical Asset AI in Healthcare Cybersecurity: How We're Scaling Defense Without Losing Control Nexus Podcast: Krista Arndt on Healthcare Cyber Resilience Nexus Podcast: Tiffany Wilson on the Security Crisis of Consumer Tech in Healthcare

Industrial

Nexus Podcast: Jake Braun on DEF CON Franklin, Water Cybersecurity Validation is Maintenance: How OT Teams Prove Security Controls Work Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers

Vulnerability Management

Will CVEs Remain Relevant in an AI-Driven World? Validation is Maintenance: How OT Teams Prove Security Controls Work Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation

Latest Insights in

CVEs' relevance is in question. Successful security teams will have to understand OT and IoT assets that are essential to the business, document how those assets communicate internally and externally to the public internet, integrators, partners, and vendors, and prioritize remediation according to their impact on the business as a whole.

Cyber Resilience

Vulnerability Management

Risk Management

Will CVEs Remain Relevant in an AI-Driven World?

ADM. Michael S. Rogers, USN (Ret.)

Cyber Resilience

Operational Resilience

Nexus Podcast: Jake Braun on DEF CON Franklin, Water Cybersecurity

ICS Advisory Project founder and Industrial Data Works CEO Dan Ricci writes about the importance of validating security controls in OT environments. Dan advises: A deployed patch is not necessarily a validated patch. CISOs need security, engineering, and operations teams to share a common definition of completion.

Operational Technology

Vulnerability Management

Validation is Maintenance: How OT Teams Prove Security Controls Work

AI-Powered Cyber Threats Further Exposing Society's Fragile Foundations

Operational Technology

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard

CVEs' relevance is in question. Successful security teams will have to understand OT and IoT assets that are essential to the business, document how those assets communicate internally and externally to the public internet, integrators, partners, and vendors, and prioritize remediation according to their impact on the business as a whole.

Cyber Resilience

Vulnerability Management

Risk Management

Will CVEs Remain Relevant in an AI-Driven World?

ADM. Michael S. Rogers, USN (Ret.)

Cyber Resilience

Operational Resilience

Nexus Podcast: Jake Braun on DEF CON Franklin, Water Cybersecurity

ICS Advisory Project founder and Industrial Data Works CEO Dan Ricci writes about the importance of validating security controls in OT environments. Dan advises: A deployed patch is not necessarily a validated patch. CISOs need security, engineering, and operations teams to share a common definition of completion.

Operational Technology

Vulnerability Management

Validation is Maintenance: How OT Teams Prove Security Controls Work

AI-Powered Cyber Threats Further Exposing Society's Fragile Foundations

Operational Technology

Nexus Podcast: Tatyana Bolton on IEC 62443 as a Global OT Security Standard

In this episode of the Nexus Podcast, Ben Gardiner, Senior Cybersecurity Research Engineer at the National Motor Freight Traffic Association (NMFTA), shares his experience analyzing security risks in heavy-duty commercial vehicles. His research into the Bendix EC80 braking system controllers confirmed that a safety recall that resolved several software defects also patched a number of critical vulnerabilities that put the risk of a truck’s braking architecture at risk.

Operational Technology

Vulnerability Management

Risk Management

Nexus Podcast: Ben Gardiner on Hacking Truck Brake Controllers

Tal Kollender, CEO and founder of Remedio, joins the Nexus Podcast to discuss the challenges and security gaps enterprises and critical infrastructure organizations face with insecure configurations and other risky exposures. As AI and advanced attackers accelerate the speed at which exposures are uncovered and exploited, organizations are beginning to consider automated remediation.

Vulnerability Management

Risk Management

Nexus Podcast: Tal Kollender on the Age of Automated Security Exposure Remediation

ASL Roma 1’s Healthcare Operational Protection & Excellence (HOPE) cybersecurity and risk governance framework is re-organizing the way it recognizes assets via their relationships. According to CISO Stefano Scaramuzzino and Deloitte’s Fabio Battelli, this is a better reflection of how healthcare organizations view events and mitigate exposures, based upon their dependencies and strategic value.

Cyber Resilience

Operational Resilience

HOPE Has Shed Its Skin: Beyond the Canonical Asset

Stefano Scaramuzzino

Operational resilience must evolve as artificial intelligence becomes a prominent tool in the protection of operational technology (OT) and cyber-physical systems (CPS). Defenders may use AI to correlate operational signals at machine speed to make more context-informed judgments about the intent behind changes to a facility.

Cyber Resilience

Operational Resilience

Operational Technology

Operational Resilience in the Age of AI: Hunting Beyond Malware

Next

1 2 3 4 5 6 7 8 9 10 ... 42 43 Next