🤔 Data sovereignty, cloud and security ...

"BetaNews.com spoke to Sergej Epp, #CISO at #Sysdig , and previously #CISO at #PaloAlto Networks, to explore the theme of data #sovereignty , #cloud and security. ..."

https://betanews.com/2025/12/26/data-sovereignty-cloud-and-security-qa/

#technology #california #usa #privacy #security

Is your business ready to handle today's cyber threats alone?

If not 1: You need an MSSP for Operational Support for filling the talent gap.
If not 2: You need an MSSP for Operational Support for managing the noise.
If not 3: You need an MSSP for Governance & Compliance (ensuring you meet legal standards).
If not 4: You need an MSSP for Strategic Maturity (moving from "fighting fires" to proactive protection).

https://linktr.ee/formafastconsulting

#Mssp #FORMAFAST #SEARCHINFORM #dlp #siem #ciso #rssi #dpo

If you read the cybersecurity sections of the 2026 NDAA closely, you can almost hear a weary sigh. This is not the sound of bold futurism. This is the sound of an institution that just finished grading a stack of exams and realized half the class still doesn’t lock their phone.

After a year of SignalGate and other painfully avoidable security lapses, Congress has decided to do something radical: write laws that assume people will make bad decisions unless gently, repeatedly, and legally discouraged from doing so. Hence, there is a new focus on hardened mobile devices for senior officials and actual rules around AI security. Not vibes. Rules. And it's long overdue.

The subtext is refreshingly honest. Cybersecurity failures this year weren’t caused by zero-days or shadowy genius hackers. They were caused by convenience, overconfidence, and the timeless belief that “it’ll probably be fine.” The NDAA reads like a syllabus revision after the midterm went badly.

There’s a lesson here for the rest of us. You can buy the best tools, fund the smartest teams, and write the cleanest policies. But if leadership treats security like optional homework, the final grade will reflect that.

TL;DR
🧠 Cyber law reacts to real-world faceplants
⚡ Mobile and AI security get adult supervision
🎓 Leadership behavior becomes part of the threat model
🔍 Secure tools don’t cancel careless habits

https://www.csoonline.com/article/4103754/key-cybersecurity-takeaways-from-the-2026-ndaa.html

#Cybersecurity #NDAA2026 #Leadership #RiskManagement #AIsecurity #CISO #security #privacy #cloud #infosec

Microsoft’s upcoming 2026 security features highlight a shift many organizations are already experiencing: collaboration platforms and identity workflows are now prime attack paths.

From Teams-based impersonation to AI-driven data exposure, these updates address behaviors attackers are actively abusing — often without malware or zero-days. Security leaders should treat this roadmap as a planning signal, not a future wish list.

Read our blog for a full breakdown: https://www.lmgsecurity.com/5-new-ish-microsoft-security-features-what-they-reveal-about-todays-threats/

#Microsoft365 #CollaborationTools #IdentityAndAccess #AIinSecurity #CISO #SecurityOperations #ThreatDetection #CyberDefense

“AI shines wherever there’s high event volume and the need to aggregate weak signals into a meaningful picture.”
- Norman Gottschalk, Global CIO & CISO, Visionet Systems
This interview explores:
• AI-driven phishing and insider risk
• Governance gaps from shadow AI usage
• Why AI cannot judge intent without humans

Read more:
https://www.technadu.com/jack-of-all-trades-master-of-none-ai-excels-detection-and-triage-but-relies-on-humans-to-gauge-intent/616006/

#GenAI #InfoSec #CISO #ThreatDetection #AIgovernance

https://infosec.exchange/@sbeierle/115739298158462709

Headline: 🚨 Holiday Security for Blue Teams: From Detection to Restriction

Text: Most serious security incidents don’t happen during business hours. They happen during holidays, weekends, and reduced-staff periods—exactly when detection-heavy models struggle.

I’ve published Holiday Minimal Mode (HMM), a deterministic Blue Team posture designed specifically for holiday operations.

#BlueTeam #SOC #CyberSecurity #IncidentResponse #ZeroTrust #CloudSecurity #CISO