55
55
30
30
55
42
AI adoption brings new security headaches for already stretched CISOs
Proofpoint's 2026 Voice of the CISO report finds 79% of CISOs must manage AI-related risks without added resources or expertise.
Proofpoint's 2026 Voice of the CISO report says AI governance is expanding CISO responsibilities faster than resources, with 79% expected to manage AI-related risks without proportional support. Seventy-eight percent of CISOs consider GenAI a security risk, chiefly customer data loss through public AI platforms, and 61% expect a targeted attack within 12 months, down from 76% in 2025. Human risk remains the top vulnerability for 79% of respondents, and 93% of organizations with material data loss said departing employees played a role. Cloud account takeover now tops perceived threats, while email fraud, ransomware and malware declined in the rankings.
22
Shadow AI in Financial Services | Risk & Governance
Huntress warns financial services firms that unsanctioned 'Shadow AI' tool use creates data leakage and compliance risks faster than governance controls can keep pace.
Huntress argues Shadow AI — employee use of unapproved AI tools such as ChatGPT and Microsoft Copilot — is spreading across financial services faster than visibility and controls. Uploading regulated customer data into public generative models risks breaches of client confidentiality, data protection rules, and market conduct obligations. The piece recommends secure web gateways, DNS filtering, DLP, application allowlisting, and corporate SSO/MFA for approved tools rather than outright bans, which can push usage onto personal devices.
22
55
Cyberthreats are moving faster than SMBs: Readiness must accelerate
ESET's SMB Cyber Readiness Index 2026 finds 73% of SMBs adopting AI while 40% lack AI policy, and reports 3,000+ malicious AI agent skills.
ESET argues AI is accelerating cyberthreats while expanding the attack surface: its SMB Cyber Readiness Index 2026 found 73% of SMBs integrating AI and 40% of businesses lacking a proper AI policy. ESET analyzed 900,000 AI agent skills across popular repositories between March and May 2026, finding over 25,000 suspicious and more than 3,000 malicious skills that exfiltrate data, execute malware, or abuse prompt injection. The piece also cites AI-assisted reconnaissance, exploit development, and social engineering, plus PromptSpy, an Android spyware abusing Google Gemini at runtime for persistence.
25
Your employees are already using AI tools you never approved
OneTrust report: 74% of organizations have scaled AI adoption, but only 17% embed governance by design and agent use outpaces oversight.
OneTrust's 2026 AI-Ready Governance Report finds 74% of respondents report departmental or scaled AI adoption, yet only 17% report governance embedded by design and just 5% have coordination and accountability defined across the AI lifecycle. Nearly half experienced at least one incident in the past year where AI systems or agents took unapproved actions, with data loss, corruption, and misclassification cited as the most likely and least prepared-for risks. 33% say employees used unapproved AI tools because approved options were not available quickly enough, and 98% plan to increase AI governance technology budgets next financial year.
18
55
42
30
55
30
日本のビジネスパーソンを対象としたWiz調査で 「AI導入加速」はクラウド移行を上回ることが明らかに
Wiz survey of Japanese business professionals finds AI adoption outranking cloud migration and 60% planning AI security investment.
A Wiz survey of Japanese business people found that accelerating AI adoption now outranks cloud migration as a priority. At the same time, more than 80% feel behind in preparing for AI-driven cyber-attacks, and 60% plan to invest in AI security. The findings highlight a preparedness gap as organizations adopt AI faster than they secure it.
30
55
Securing Data in the AI era
Wiz published guidance arguing AI adoption reshapes data risk, urging teams to identify what data is connected to AI services and exposed.
Wiz published a viewpoint on how AI adoption changes the context of data risk. The post argues that understanding what data is connected to AI systems, what is exposed, and why is now critical for managing that risk. No specific incident, vulnerability, or product release is described in the available text.
15
30
55
Black Hat USA 2026: AI is racing ahead of cybersecurity controls
Black Hat USA 2026 commentary says AI adoption is racing ahead of cybersecurity controls, with accountability the key unresolved question.
ESET's commentary on Black Hat USA 2026 reports that AI dominated the conference agenda while cybersecurity controls lag behind AI adoption. The clearest takeaway, per the piece, concerns who is accountable when AI-driven systems fail rather than what AI can technically do. The item is opinion and conference coverage with no incident details.
27
55
55
30
55
30
30
30
55
55
30
CISOs are feeling the security burden of accelerated AI use
Proofpoint's Voice of the CISO survey finds 85% of CISOs prioritizing AI security, with 80% managing AI risks without proportional resources.
Proofpoint's annual Voice of the CISO report, a Censuswide survey of 1,600 CISOs across 16 countries, found 85% rank securing AI assistants, copilots and automation among top priorities for the next two years. Eight in ten say they must manage AI-related security risk without a proportional increase in resources or expertise, and 78% now consider generative AI a major security risk, up 18% year over year. Board alignment improved to 85%, though nearly 80% still report excessive board pressure; 80% cite human behavior as the biggest cyber vulnerability.
28
Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones
Opinion piece argues attackers prioritize repeatable playbooks like ClickFix (47% of Microsoft-notified attacks) and living-off-the-land over novel techniques.
The column analyzes why commodity techniques scale: Microsoft observed ClickFix as the top initial access method at 47% of its notifications last year, while Bitdefender found 84% of 700,000 analyzed high-severity incidents involved binaries already present on machines. Verizon's DBIR shows vulnerability exploitation rising to 31% of initial access vectors, up from 20%, and ransomware leak-site rankings show Qilin (roughly 1,600 claimed victims) and The Gentlemen (121 claimed victims in June) competing on throughput. The author argues attackers behave like a generics business, standardizing repeatable procedures rather than investing in novel tradecraft.
28
55
30
42
CREST Onboards First Cohort for AI-Enabled Pentesting Accreditation
CREST accredited 10 companies, including ImmuniWeb and Thoropass, in the first cohort of its new AI-Enabled Penetration Testing accreditation.
CREST granted its AI-Enabled Penetration Testing accreditation, an optional module added in July 2026 to its Penetration Testing Accreditation Standard, to a first cohort of 10 firms spanning Europe, India, the US, and Canada, including Closed Door Security, ImmuniWeb, JUMPSEC, Packetlabs, Pentesys, REDSECLABS, Risk Associates, SECNORA, Solusec, and Thoropass. The module lets providers that integrate AI into pentesting demonstrate responsible AI governance through independent assessment. A March 2026 CREST report found 76% of cybersecurity providers increased AI usage year over year and 69% already integrate it into daily service delivery; its June AI Charter has been signed by over 100 organizations.
25
Fortinet expands AI security portfolio with Virtue AI acquisition
Fortinet acquired Virtue AI to add agent red-teaming, MCP scanning and runtime guardrails to its AI security portfolio.
Fortinet acquired Virtue AI to extend its Security for AI strategy beyond FortiAIGate, which protects LLMs from prompt injection, data leakage and model poisoning. Virtue AI brings automated agentic red-teaming across 50+ sandboxed environments and 14 domains, agent discovery and governance including MCP tool scanning, continuous AI validation, and real-time guardrails across text, images, video, audio and code. Financial terms were not disclosed and the consideration is immaterial to Fortinet; Gartner projects the AI security market to grow from $2.8B in 2026 to $16.4B by 2030.
45
30