Careers

The rise of the chief trust officer: Where does the CISO fit?

The increase of chief trust officers signals a shift from defending systems to safeguarding credibility. Understanding what the CTrO stands for may see CISOs finding a new calling.

The books shaping today’s cybersecurity leaders

Cybersecurity leaders reveal the books that have influenced how they lead, think, and manage security in the enterprise — and their own lives.

Malicious npm package sneaks into GitHub Actions builds

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious artifacts under GitHub’s own name.

OpenAI launches Aardvark to detect and patch hidden bugs in code

Currently in private beta, the GPT-5-powered security agent scans, reasons, and patches software like a real researcher, aiming to embed AI-driven defense into the development workflow.

Cybersecurity Skills Report: Today’s CISO is Shifting Toward Strategic Business Enablement

The 10 biggest issues CISOs and cyber teams face today

From escalating AI-enabled threats to budgets that don’t scale alongside expanding threat landscapes, security leaders are reshaping their agendas to address several key long-standing and emerging concerns.

Why must CISOs slay a cyber dragon to earn business respect?

Security leaders and industry experts weigh in on the complex calculus of CISOs’ internal clout.

CISOs’ security priorities reveal an augmented cyber agenda

Tasked with increasing responsibilities and oversight, CISOs are seeking ways to expand cyber capabilities with AI, while piloting new tools, enlisting more partners, and finding ways to stretch their budgets further, according to CSO’s Security Prio

The expanding CISO role: From security operator to enterprise risk strategist

Security leaders are taking on bigger roles, adding new responsibilities, and gaining influence across the business, new research finds.

Google DeepMind launches an AI agent to fix code vulnerabilities automatically

CodeMender aims to help developers keep pace with AI-powered vulnerability discovery by automatically patching security flaws.