-
Companies are reallocating funds from critical areas including risk management and crisis management to meet NIS2 compliance, with 95% of affected organizations diverting resources from other business functions.
-
Survey reveals 80% of IT budgets in EMEA region now dedicated to cybersecurity and compliance, despite 68% of companies already reducing their IT budgets over the past two years.
-
While 90% of organizations experienced security incidents that NIS2 could have prevented, only 43% believe the directive will significantly improve EU cybersecurity, highlighting a disconnect between implementation costs and perceived effectiveness.
-
Despite July's outage impact of over $5B to Fortune 500 companies, CrowdStrike maintains strong reliability metrics with less than 3% of clients experiencing material cyber-insurance claims, suggesting hasty vendor changes may introduce unnecessary risks.
-
Organizations should carefully evaluate update processes, as delaying security patches to implement additional testing could leave systems vulnerable to emerging threats, requiring a balance between thorough testing and timely protection.
-
Companies should prioritize comprehensive resilience planning, including proper cyber hygiene, insurance coverage, and detailed incident response procedures, rather than making reactive decisions that could compromise security posture.
-
Nearly half of cybersecurity leaders don't consider security awareness training essential, with only 41% implementing training to address supply chain risks.
-
Organizations prioritize developer-focused training over comprehensive employee education, driven by customer satisfaction and financial metrics rather than security needs.
-
Research emphasizes the importance of role-specific customized training for all employees to improve organizational resilience against cyber threats and reduce breach incidents.
-
Position the role strategically by having the CISO report directly to the CIO or CEO, ensuring proper authority and organizational structure to attract leadership-oriented candidates rather than pure technologists.
-
Focus on candidates who can balance both defensive security and offensive business growth, with strong change management capabilities to drive organization-wide security culture and behavior adoption.
-
Demonstrate board-level commitment by involving directors in the interview process and ensuring they understand cyber governance beyond just technical tools, as the best CISOs seek organizations with tech-savvy leadership that prioritizes security investments.
-
For the first time in six years, the cybersecurity workforce remained flat at 5.5 million people, with only 0.1% growth in 2024. Budget constraints have replaced talent shortage as the primary reason for unfilled positions, cited by 67% of organizations.
-
Job satisfaction among cybersecurity professionals has declined from 74% to 66% since 2022, while organizations with significant skills gaps are almost twice as likely to experience a material breach compared to those without gaps.
-
AI adoption is viewed as a potential solution, with 45% of teams already using AI tools for cybersecurity tasks, though 58% believe current skill shortages put their organizations at significant risk. The top AI use case is augmenting common operational tasks, implemented by 56% of respondents.
Your feedback shapes Mandos Brief and I'd love to hear your thoughts about the content I share.
-
Over 25% of Google's new code is now AI-generated and subsequently reviewed by engineers, marking a significant shift in their development practices while supporting various AI product initiatives.
-
Google's financial performance shows strong growth with Cloud revenue reaching $11.4 billion (up 35% YoY) and Google Services revenue hitting $76.5 billion (up 13% YoY), demonstrating successful AI integration across products.
-
Despite ongoing antitrust challenges and potential remedies phase following the August monopoly ruling, Google continues to expand AI features across Search, Cloud, and YouTube, with Gemini-powered chatbots and AI tools driving product adoption.
-
GreyNoise Intelligence's honeypot system detected active exploitation attempts of two critical vulnerabilities (CVE-2024-8956 and CVE-2024-8957) in NDI-enabled PTZ cameras, with the most severe having a CVSS score of 9.1.
-
The vulnerabilities affect cameras used in healthcare, industrial, and government facilities, allowing attackers to potentially access sensitive information, manipulate video feeds, and incorporate devices into botnets.
-
Affected devices include PTZOptics, Multicam Systems SAS, and SMTAV Corporation cameras running VHD PTZ firmware versions below 6.3.40, with patches now available to address these security flaws.
-
Data centers driving energy demand growth are prompting new infrastructure development, with major tech companies investing in power production including nuclear facilities to meet increasing needs.
-
AI presents dual implications: enhancing energy sector efficiency through improved monitoring and automation, while creating new vulnerabilities that malicious actors could exploit through sophisticated phishing and infrastructure mapping.
-
The Department of Energy is establishing AI testbeds to safely evaluate capabilities and threats, while industry coalitions are developing guidelines to strengthen supply chain security and establish standards for implementing AI in energy systems.
-
A faulty update in CrowdStrike's Falcon security tool caused massive disruptions affecting 1.3 million Delta passengers across 7,000 flights on July 19, leading to the lawsuit filed in Georgia's Fulton County Superior Court.
-
The incident's impact extended beyond aviation, affecting multiple sectors including banking, healthcare, media, and hospitality, with Delta claiming the disruption caused over $500 million in damages.
-
CrowdStrike disputes the allegations, stating they stem from Delta's misunderstanding of cybersecurity and poor infrastructure modernization, setting the stage for a contentious legal battle between the companies.
-
Device security company reaches $200M in Annual Recurring Revenue, doubling growth in under 18 months while preparing for potential public offering.
-
Platform provides agentless security monitoring for managed and unmanaged devices, including IoT, industrial, and medical devices, with recent acquisition of Silk Security for $150M.
-
Funding led by General Catalyst and Alkeon Capital will support organic product development and potential acquisitions, building on previous rounds that have seen valuation grow from $1.1B in 2020 to current $4.2B.
-
Proofpoint signs agreement to acquire DSPM provider Normalyze, with deal expected to close in November, integrating Normalyze's agentless scanner technology for data discovery and classification into their security platform.
-
Normalyze's technology enables organizations to identify sensitive data across cloud environments, assess risk impact, and remediate security issues through an automated approach that addresses visibility challenges in modern IT environments.
-
The acquisition follows Proofpoint's strategic expansion after their $12.3 billion privatization by Thoma Bravo, adding to their portfolio of email security, DLP, and compliance solutions, marking their third recent acquisition in the data security sector.
Improve Your Cybersecurity Leadership
Join security leaders receiving the most critical insights, strategies, and resources to stay ahead in cybersecurity.
I will never spam or sell your information.
Hacksplaining is a comprehensive security training platform for web developers, offering hands-on experience with real, vulnerable applications and concrete advice for securing code.
Covenant is a collaborative .NET command and control framework designed for red team operations, providing robust infrastructure for managing offensive security engagements.
Deception based detection techniques mapped to the MITRE’s Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK): Windows Technique Matrix Linux Technique Matrix Mac Technique Matrix.
Before you go
If you found this newsletter useful, I'd really appreciate if you could forward it to your community and share your feedback below!
For more frequent cybersecurity leadership insights and tips, follow me on LinkedIn, BlueSky and Mastodon.
Best,
Nikoloz
