Security, AI Oversight Are Flashpoints in Draft Defense Bill

Chris Riotta • July 18, 2025

Washington is wagering that future conflicts will unfold as much in cyberspace as on the battlefield, with House and Senate lawmakers unveiling dueling drafts of a nearly $900 billion defense bill that spotlights needs for cybersecurity and artificial intelligence technology.

Operational Technology (OT)

Survey: 52% of Firms Now Put CISO in Charge of OT Security

Latest

Remote Monitoring & Management

The Cybersecurity Bomb Ticking in Smart Buildings

Prajeet Nair • July 4, 2025

Automation and remote connectivity in smart buildings doesn't just help building managers - hackers also love it. The state of smart building security is the "equivalent of putting a 'kick me' sign on someone's back," said Grant Geyer, CSO of industrial security firm Claroty.

IoT/IIoT Device Management

Connected Devices Pose Escalating Security Risks

Michael Novinson • July 2, 2025

IoT devices have surged from 20 billion to 75 billion in under a decade. Chris Rouland, CEO of Phosphorus Cybersecurity, outlines why these devices remain vulnerable and how outdated software stacks and poor patching practices create massive risk exposure.

Culture

Your Security Stack Is Only as Secure as Your Sales Team

Brandy Harris • July 2, 2025

Thanks to Cybersecurity Awareness Month, everyone knows security is a priority, but what are we doing differently to change the culture? If our goal is to reduce risk - and not just to meet regulatory expectations - then we need to focus on behavior, not just boxes on a checklist.

Asset Management

Rethinking IT Risk Assessments for OT Environments

Suparna Goswami • June 30, 2025

IT organizations can apply multiple frameworks to help reduce risk, but relying on them in OT environments could create blind spots. Security leaders must rethink compliance-driven strategies and adapt controls to meet the unique demands of industrial systems, said Sydney Trains' Maryam Shoraka.

Healthcare

FDA Expands Premarket Medical Device Cyber Guidance

Marianne Kolbasuk McGee • June 27, 2025

The Food and Drug Administration has published final guidance for the cybersecurity of premarket medical devices. The new document presents FDA’s latest recommendations on medical device cybersecurity and the information makers must include in their premarket submissions to the agency.

Cybersecurity

FDA Urges Medical Product Makers to Beef Up OT Security

Marianne Kolbasuk McGee • June 25, 2025

The Food and Drug Administration is urging medical product makers to carefully address the cybersecurity of their connected operational technologies, including advanced and "smart" devices used in their manufacturing and supply chains, to reduce the risk to rising cyberthreats.

Culture

Vibe Coding - a Great Tool if You Know How to Use It

Brandy Harris • June 25, 2025

When used well, vibe coding can unlock astonishing productivity and lower the barrier to getting ideas off the ground. But here's the problem: Too many newcomers are mistaking it as a replacement for a deep understanding of coding and software development principles.

Cybersecurity

Feds Warn Healthcare Sector of Rising Iranian Cyberthreats

Marianne Kolbasuk McGee • June 24, 2025

Government authorities are warning of increased risk of Iranian cyber and related threats against healthcare and public health sector organizations, including ransomware, distributed denial-of-service and other attacks related to that nation's escalated conflicts with Israel and the United States.

ISMG Research

Identity and Access Management (IAM) Market Guide 2025

Dan Verton • June 24, 2025

The Identity and Access Management (IAM) Market Guide 2025 provides an essential industry briefing on the evolving identity security ecosystem - offering unparalleled insights into the trends, technologies and market forces reshaping IAM this year.

Cybersecurity

Healthcare IT Embraces Scalable Mobile Security

Tom Field • June 23, 2025

What happens when security stops saying "no" and starts asking, 'What's needed?' Mike D'Arezzo of Wellstar Health System shows how rethinking security through mobile tech, user trust and OT visibility can empower healthcare teams without adding friction or slowing down care.

IoT/IIoT Device Management

IoT Security Failures: Same Mistakes, Different Devices

Mathew J. Schwartz • June 20, 2025

IoT manufacturers continue making the same security mistakes due to rushed development and poor disclosure practices, said Ken Munro, CEO of Pen Test Partners. "You need to think about cybersecurity from day one," he said, because retrofitting security is both difficult and expensive.

Culture

ISC2 Report: Entry-Level Hiring Needs a Reset

Anna Delaney • June 18, 2025

According to ISC2's 2025 Cybersecurity Hiring Trends Report, job descriptions for entry-level cybersecurity roles tend to list qualifications that are out of reach for new cyber professionals. Managers need updated requirements and broader talent pipelines to build more resilient security teams.