Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

AI Adoption Surges While Governance Lags - Report Warns of Growing Shadow Identity Risk

The 2025 State of AI Data Security Report reveals a widening contradiction in enterprise security: AI adoption is nearly universal, yet oversight remains limited. Eighty-three percent of organizations already use AI in daily operations, but only 13 percent say they have strong visibility into how these systems handle sensitive data. Produced by Cybersecurity Insiders with research support from Cyera Research Labs, the study reflects responses from 921 cybersecurity and IT professionals across industries and organization sizes.

New Report Reveals Third-Party Risk Management's Next Chapter

After six years of tracking third-party risk management programs (TPRM), one thing has become clear: having a program doesn't necessarily mean it's working. Our latest The State of Supply Chain Defense report reveals an interesting shift. Organizations are spending more than ever on securing their vendor ecosystem, with 95% planning to increase their budgets in the next year. Programs are maturing, with nearly half of surveyed organizations reporting established and optimized initiatives.

Making DORA Strategy Practical: What Cybersecurity Leaders Need to Succeed in 2026

For many cybersecurity teams, the race to comply with the Digital Operational Resilience Act (DORA) is well underway, but clarity and confidence remain elusive. With enforcement set to take effect in January 2026, the countdown is on for financial institutions and their ICT providers to prove that they can withstand and recover from digital disruptions. The regulation sets high expectations for cross-functional coordination, ICT risk oversight, third-party accountability, and real-time monitoring.

AI Browsers: A Security Nightmare Flipping the Board on Decades of Security Progress

Modern browsers are among the most hardened mass consumer applications that we have access to. Decades of work have produced strict isolation between sites, safer defaults for cookies, strong TLS enforcement, controlled permissions, and a user experience that steers people away from phishing and fraud. The result is a trustworthy gatekeeper that keeps untrusted sites and attacker payloads confined to their own sandboxes.

Master Your Application Security Risk with Veracode's Application Risk Management Platform

Discover how Veracode's Application Risk Management Platform transforms application security from a growing liability into a strategic advantage. Watch this video to learn how Veracode cut's through the chaos of expanding portfolios, AI-driven development, and vulnerable supply chains to deliver clarity, prioritization, and automated remediation.

Solving Human Risk: Automate Governance and Prioritize Action

In our previous blog post, “Closing the Visibility Gap,” we established that visibility is the first step in managing the modern human attack surface; however, prioritizing that data is the next major concern for any CISO. Prioritization of human risk data is critical, as it directly informs governance and effective high-level decision-making. Simply put, prioritization is crucial to driving action.

Securing the Smart Factory

In the manufacturing industry, IT and OT systems are converging, automation is accelerating and supply chains are more interconnected than ever before. While these changes are about progress, they also introduce new risk. A single compromise now has the potential to completely halt production and ripple across global logistics. Earlier this year, Jaguar Land Rover experienced this firsthand.

Modernizing Vendor Risk for the AI Era

See how Riverside County transformed vendor risk from a manual, time-consuming process into a streamlined, data-driven operation that speeds decision-making, reduces risk, and enables innovation. Also hear about their approach to managing emerging AI risks, with practical, actionable lessons other security teams can apply. Interested in finding out more about UpGuard?