Analyzing SEC 10-K filings reveals that while CISOs handle cybersecurity under the CIO, companies rely on the NIST framework to address growing AI and supply chain risks. In 2023, the Securities and ...

A lot happened in cybersecurity in 2022. We saw cyber's involvement in warfare with the Russian attacks on Ukraine. Supply chain attacks continued to make headlines. Healthcare organizations and ...

As we near the end of 2024 (hard to believe, right?), some important things are happening in federal government cybersecurity. The Department of Homeland Security (DHS) and other agencies have ...

Adopted in July 2023, the US Securities and Exchange Commission (SEC)’s cybersecurity disclosure rules require public companies to report material cybersecurity incidents on Form 8-K and to annually ...

The FBI, the NSA, and Five Eyes cybersecurity authorities have released a list of the top 15 routinely exploited vulnerabilities throughout last year, most of them first abused as zero-days. A joint ...

As readers of our 2025 Data Security Incident Response (DSIR) Report are aware, many organizations were concerned about complying with the Securities and Exchange Commission’s (SEC) cybersecurity ...