GoKawiil
Tech News
Checkmarx has appointed Kobi Sivilya to the combined role of Chief Information Security Officer and Chief Information Officer, overseeing security, IT and business applications. Sivilya previously held CISO and VP of IT roles at Outbrain and led security engineering at Fireblocks. CEO Sandeep Johri said Sivilya's background will help the company stay secure as AI reshapes software development.
James Shira, PwC's Chief Information Security Officer, discussed how enterprises must adapt security strategies as artificial intelligence changes business operations. Shira outlined the need for security teams to reassess risk models in light of accelerating AI adoption.
At ISC2 Strategic Congress 2026 in Denver, former CISO Lora Vaughn, now founder of The Vaughn Group consultancy, presented a simplified threat-modeling approach built around four whiteboard questions rather than lengthy formal reports. She said the method works across organizations of any size, from the NSA to small businesses, and can guide security investment decisions.
At ISC2 Strategic Congress 2026 in Denver, cyber legal expert Daniel B. Garrie, CEO of Law and Forensics, presented frameworks to help CISOs justify AI deployment decisions and preserve evidence in case of disputes or breaches. The approaches include scoring AI deployment risk, documenting board-level risk decisions, and specifying what incident data must be preserved, building on JAMS AI Rules he helped author in 2024 for arbitrating AI disputes.
Mark Weatherford, a security executive at Nvidia, says chief information security officers need to actively help business leaders evaluate the benefits and risks of deploying AI systems. He argues that the teams and leaders who choose to deploy AI should also be accountable for managing the risks that come with it.
360 Privacy's 2026 Annual Digital Exposure Report found that most CISOs, security professionals and wealth advisers now view digital exposure and physical safety as inseparable risks. The survey also found that a majority of these professionals believe the high-profile individuals they protect feel immune to threats because of their wealth or status, and that security attention tends to spike only after incidents occur.
Security researchers describe a growing cybercriminal tactic of targeting executives' family members and friends, who often lack the security training given to leadership, to gain backdoor access into corporate systems. Google Cloud's Office of the CISO warned in March that personal attacks against executives are rising, and BlackCloak's Brian Hill notes attackers can map a household's routines and relationships through reconnaissance before pivoting to impersonation, device compromise, or phishing.
Dark Reading's editor-in-chief has revealed her decision to leave the publication after two decades, including five years in her leadership role. She reflected on the publication's growth and her personal journey, highlighting its expanded scope and her contributions. Her departure marks a new chapter for both her and the media outlet, which has become a prominent voice in cybersecurity.
New research from IANS, discussed by senior director Nick Kakolowski, finds that most CISOs are using AI to automate routine security tasks rather than reduce staff. Instead, security leaders are reskilling junior employees and freeing senior professionals to focus on more complex problems, while also leveraging AI momentum to justify budget requests.
A cybersecurity opinion piece argues that the growing vulnerability backlogs plaguing enterprises are primarily caused by unclear ownership and remediation bottlenecks, not inadequate detection technology. The author describes how adding better scanning tools often increases the number of discovered vulnerabilities without improving fix rates, since remediation depends on engineering hours, change windows, and patch availability rather than licensing upgrades. The piece notes that organizations measuring success by open-finding counts can be incentivized to avoid expanding visibility altogether.
A report on CISO-C-suite dynamics highlights that the relationship between chief information security officers and chief financial officers is increasingly critical to whether security initiatives get funded and supported. Citing PwC's 2025 Global Digital Trust Insights survey, it notes only 47% of CISOs are involved in strategic planning with CFOs on cybersecurity investment, and just 26% of companies have controls to respond quickly to cyber threats. Executives including Theresa Payton of Fortalice Solutions and Adam Ennamli of Deel argue CISOs must better translate technical risk into financial and business terms.
A new industry piece argues that chief information security officers and chief marketing officers must proactively coordinate before a security incident occurs, rather than only communicating during a crisis. Security experts including David Elfering of Carrix and Diana Kelley of Noma Security recommend establishing standing touchpoints and joint crisis communications plans so security risk can be explained in business terms rather than technical jargon.