Security

True data sovereignty isn't where it's kept, but who has access to it

Hundreds of countries have data localization laws, and while geopolitics raise the stakes, data controls matter as much as physical location.

Before you ask what an AI agent can do, ask who it is

AI agent permissions won’t stop an impostor. Until companies can authenticate an agent’s identity, the rest of their security controls rest on shaky ground.

How to make sense of the agentic AI tools ecosystem

A complex, overlapping market of middleware is arising to help keep your AI systems orchestrated, trustworthy, governable, compliant, observable, productive, and on budget.

What hundreds of Microsoft 365 deployments have taught me about cybersecurity

Your Microsoft 365 environment may have the security tools it needs. The real danger is the forgotten setting, unchecked permission or exception nobody revisited.

OffSec Launches Free PHP2Shell Lab Following Critical Vulnerability Discovery

Spend vs. debt: what’s the bigger security risk?

Organizations continue investing heavily in cybersecurity, yet many are simultaneously increasing operational complexity and long-term security fragility. Here, Joan Goodchild from CSO speaks with veteran CISO Selim Aissi about security debt and why it may be a more meaningful measure of cyber risk than security budget size alone.

How to move fast with AI and still maintain customer trust

Companies are under growing pressure to roll out AI quickly, but IT leaders understand that speed cuts both ways. Ensuring accuracy, safety, and trustworthiness of customer-facing AI is equally important for long-term success.