Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

When I started learning about cybersecurity, I thought it was only about firewalls and antivirus software. I didn’t know how fast things change and threats evolve. Whenever I felt like I had a handle on things, something new came in headlines: ransomware, phishing kits, zero-day attacks. It’s a lot. If you work in tech, you’ve probably felt that too. Even if cybersecurity isn’t your full-time job, it still touches everything. And keeping up with everything is not easy.

Let’s be real: 2024 is the year AI went from pilot to policy. And in 2025, it’s not slowing down. Every enterprise I talk to, from high-growth SaaS companies to large-scale global platforms, implements AI internally or embeds it into its products. With that momentum comes a wave of questions: Is this secure? Are we exposing customer data? What will our auditors say? CISOs are now expected to balance innovation with protection, fostering progress while staying ahead of risk.

It’s all over the news: GenAI will fuel a rise in scams and fraud. That’s a big claim, so let’s unpack what it means through the lens of one threat vector in particular: phishing.

As cyber threats grow more advanced and persistent, traditional reactive defences are no longer enough. Today’s security leaders must shift toward proactive threat intelligence, anticipating and neutralising risks before they evolve into serious breaches.

Cybersecurity is no longer a technical blocker but a strategic business priority crucial to survival. The Chief Information Security Officer (CISO) is at the forefront of this transformation. Beyond being the technologist overseeing the development and implementation of security strategies, CISOs are multifaceted leaders, managers, and communicators responsible for allocating budgets, managing teams, and translating complex security concepts into actionable strategies.

In this week’s episode of The Future of Security Operations podcast, I'm joined by Josh Lemos, CISO at GitLab. Throughout his 15-year career in security, Josh has led teams at ServiceNow, Cylance, and Square. Known for his expertise in AI-driven security strategies, Josh is also a board member with HiddenLayer. He drives innovation at GitLab with a relentless focus on offensive security, identity management, and automation. Josh and I discuss.

Zero-day vulnerabilities are the new normal in cybersecurity. In 2023 alone, more than 100 high-profile zero-day incidents were reported. Despite the early warning signs, major corporations and government agencies, from giants like Google and Cisco to the U.S. Government, continue to be blindsided by zero-day threats into 2025. In December 2024, for example, the U.S.

In today’s digitally driven world, cybersecurity is no longer just an IT concern, it’s a business imperative. Enter the Chief Information Security Officer (CISO): the executive responsible for overseeing an organisation’s information and cybersecurity strategy. From managing threats and risks to ensuring compliance and resilience, a CISO is critical in protecting a company’s digital assets and reputation.