Arielle Waldman

Security governance needs to be more than an annual compliance exercise. New companies are emerging to address risk-management gaps in current audit tools.

Municipal leaders, utility personnel, and even one retired city auditor were eager to learn which cyber threats are targeting local governments, and

Ransomware and vendor breaches persist, but the 2026 Data Breach Investigations Report (DBIR) highlights how evolving social engineering tactics make the sector more vulnerable.

A recent congressional hearing highlighted how states are reeling from federal cutbacks to important cyber grants and information sharing initiatives amid damaging attacks to critical infrastructure.

Organizations are growing serious about what nation's rules apply to their data. Experts point to geopolitical tensions as a main contributing factor.

Operational technology security remains as difficult as ever, with even the best practice recommendation falling short.

Executive leaders may not be saying it aloud, but business objectives and priorities don't always promote timely disclosures.

Threat actors can easily steal one-time passwords sent by text when they conduct a SIM swap attack. This can lead to account takeovers, so users must layer up their security measures.

Age restrictions on accounts may be more of a ban(d) aid, because industry compliance is already falling short. Tech giants are struggling to follow the laws without affecting users.

State governments legislate AI transparency laws as autonomous artificial intelligence models deploy with reduced human oversight and control.