ZeroHour
Organization

CSO Online

0 mentions in 7 days · 3 in 30 days · 3 total · first seen · last

Timeline

New CISO appointments 2026

Companies including Mistral AI, Trellix, Marriott, and ANZ appointed new CISOs in July-September 2026 amid high security-leadership turnover.

CSO Online's rolling column tracks senior security appointments, noting many companies are hiring a CSO/CISO for the first time. Notable moves include Thomas Coudray leaving Ledger to become Mistral AI's CISO, David Soto joining Trellix from Amazon, and Daniel Dubowski becoming Marriott International's SVP and CISO. Other appointments span ANZ, Gigamon, Axonius, Tricentis, Remitly, Allied Universal, and the State of California.

CSO Online · 8d agoIndustry

The democratization of cyber warfare — and what it means for CISOs

CSO Online argues AI is democratizing cyber warfare, citing Taiwan's first largely autonomous AI-driven attack that hit 85 government accounts.

CSO Online argues AI is accelerating the democratization of cyber warfare by collapsing cost and skill barriers, with effects already reaching the private sector. It cites the August disclosure of the first largely autonomous AI-enabled attack on Taiwan government infrastructure, where up to eight agents operating simultaneously compromised at least 85 government accounts and exfiltrated more than 2,500 personnel records before expanding to the nuclear safety agency and energy companies. The piece places this in a historical arc from crossbows to cheap drones and cites Kane Gamble's 2015 solo social-engineering compromise of senior US intelligence officials as evidence that low-resource attackers were already viable.

CSO Online · 11d agoIndustry

Stop playing with the CISO role. Fix cybersecurity leadership

Op-ed argues the CISO role is overloaded and advocates elevating a business-first Chief Security Officer above it.

The author contends that business-alignment failures in cybersecurity are structural rather than communication problems, with CISOs expected to act simultaneously as technologists, strategists, risk executives, and board advisers. The piece proposes a distinct Chief Security Officer role focused on enterprise protection, business continuity, and cross-functional decision authority, with the CISO retaining technical cybersecurity responsibility and potentially reporting to the CSO. It argues this model would give executive ownership of business protection while preserving technical depth.

CSO Online · 12d agoIndustry