Risk Management | CSO Online

Google makes Gemini 4 AI model available to a trusted few

Google’s latest frontier model will offer expanded token capacity for complex enterprise workloads when it is eventually released — but for now, its benchmark results are mixed.

By Nidhi Singal

1 Oct 20265 mins

Artificial IntelligenceSecurity

Articles

50% of CISOs see Mythos as a sign to exit the profession

No strangers to stress, security execs recognize cutting-edge AI capabilities as a harbinger of challenges that will make the top cyber role untenable unless liability, authority, and alignment issues are quickly addressed.

By Maria Korolov

9 Sep 2026 8 mins

C-SuiteCSO and CISORisk Management

Securing AI agents: Key controls and best practices

Unchecked AI agents might be your worst insider threats. Security practitioners offer real-world insights on how security teams can reduce the risk and impact of rogue agent activity.

By Lucian Constantin

8 Sep 2026 11 mins

Access ControlIdentity and Access ManagementRisk Management

What do CISOs need to rest easy about future AI risks?

Security execs who feel prepared to face what’s coming hold several organizational factors in common, according to a recent report. But confidence and preparedness aren’t necessarily the true measures of security.

By Evan Schuman

7 Sep 2026 7 mins

CSO and CISOIT GovernanceRisk Management

Is your cloud security strategy ready for AI’s looming threat?

Agents are forcing a rethink of cloud security architecture. Here’s what CISOs should do to prepare for what’s next.

By Rosalyn Page

31 Aug 2026 7 mins

Artificial IntelligenceCloud SecurityRisk Management

4 big mistakes you're probably still making in vulnerability management…and how to fix them

Vulnerability management isn’t about checking boxes anymore—it’s about real-time visibility, risk prioritization, and automation that keeps you one step ahead of threats.

By Action 1

28 Apr 2025 4 mins

Endpoint ProtectionRisk ManagementVulnerabilities

CTEM can give your security team a contextual edge

Taking a continuous, contextual, and risk-oriented approach to defense will help your security org prioritize mitigations that matter most to your business.

By Víctor Manuel Fernández

28 Aug 2026 7 mins

Risk ManagementSecurity PracticesThreat and Vulnerability Management

AI threats are everywhere. A risk-first CISO decides what to prioritize

AI helps attackers and defenders, so CISOs need to focus on the risks that could hurt their business most.

By Chris Wheeler

21 Aug 2026 7 mins

Artificial IntelligenceRisk ManagementSecurity

Stop depending on heroics and start operationalizing third-party risk

When security enters the purchasing timeline too late, everyone loses.

By Greg Neville

3 Aug 2026 8 mins

IT ManagementRisk ManagementVendor Management

How CISOs can rise to the business resilience challenge

As resilience overtakes prevention as the top concern for security leaders and their organizations, CISOs who have made the strategic shift explain what it takes to step up to the task.

By Rosalyn Page

27 Jul 2026 9 mins

Business ContinuityC-SuiteCSO and CISO

Microsoft’s 3-day patching directive comes with added operational risk

CISOs face resiliency trade-offs as Microsoft accelerates its security patching guidance in response to AI, with the potential for other vendors to follow suit.

By John Leyden

23 Jul 2026 7 mins

Endpoint ProtectionPatch Management SoftwareWindows Security

Senior executives are killing your shadow AI strategy

Nearly two-thirds of senior decision-makers say they use unauthorized AI tools despite the risks, putting IT and security leaders in a difficult position.

By Grant Gross

17 Jul 2026 6 mins

Data and Information SecurityIT GovernanceRisk Management

Flaw surge fuels need for CISOs to rethink vulnerability management

Spikes in AI-assisted vulnerability discovery will further stress patch management practices, spurring the need for ‘just in time’ patching and other risk-based real-time defensive strategies.

By John Leyden

16 Jul 2026 7 mins

Patch Management SoftwareRisk ManagementSecurity Practices

AI incidents need a new playbook. Here’s how to build one

Old-school security playbooks can't handle AI glitches, so companies need a fresh approach to catch model errors and legal risks before they backfire.

By Julie Brunias

14 Jul 2026 7 mins

Incident ResponseRisk ManagementSecurity Practices