-
The report outlines a dual approach to AI governance through Quality Management Systems (QMS) for AI providers and Risk Management Systems (RMS) for AI deployers, addressing the entire AI lifecycle.
-
Deloitte highlights the EU AI Act's risk-based categorization system, which classifies AI systems as Unacceptable Risk (forbidden), High Risk (regulated), or Non-High Risk (unregulated), with specific governance requirements for each.
-
Effective AI governance requires integration across four pillars: Structures (committees, roles), Practices (oversight, skills), Processes (approvals, testing), and Systems (automation platforms) - all designed to be efficient enough to preserve AI's productivity benefits.
-
Security software will lead the market in 2025, representing over half of worldwide security spending with 14.4% growth, driven by CNAPP, identity management, and security analytics solutions.
-
While the U.S. and Western Europe will maintain 70% of global security spending, regions like Latin America and Middle East & Africa are experiencing the fastest growth due to digital transformation initiatives.
-
Small and medium-sized businesses are increasingly investing in security despite large enterprises dominating spending, though experts warn that technology alone won't solve security challenges without proper implementation and processes.
-
Vulnerability analysis shows 70% of vulnerabilities reside deep within networks, while 22% are network exploitable and perimeter facing, with 39% potentially causing both loss of view and control in industrial systems.
-
Ransomware attacks against industrial organizations surged 87% compared to the previous year, with 69% of attacks targeting manufacturing entities across 26 subsectors, and Dragos tracking 60% more ransomware groups impacting OT/ICS.
-
The report identifies a concerning trend of lowering barriers to entry for OT/ICS attacks, with adversaries increasingly recognizing industrial systems as effective attack vectors despite using relatively unsophisticated techniques against internet-exposed devices.
📖
Discover my collection of industry reports, guides and cheat sheets in ‣
Cyber Strategy OS.
-
The cybersecurity job landscape shows significant disruption with Governance, Risk, and Compliance (GRC) positions growing 40% for Cybersecurity/Privacy Attorneys, while traditional technical roles like Security Engineers and Analysts continue to decline.
-
Organizations are increasingly turning to outsourcing and AI-driven security automation, causing a 43% drop in Cloud Security Engineer positions since 2022 as companies integrate these functions into broader IT teams.
-
Professionals seeking to remain competitive should focus on upskilling in governance, compliance, and automation-driven security operations as the industry shifts toward policy, risk management, and strategic leadership roles.
-
Multiple cybersecurity professionals with extensive experience (including one with 13+ years) report applying to dozens or hundreds of positions with virtually no interviews, only to later discover their resumes never reached hiring managers despite being qualified candidates.
-
Several hiring managers confirmed finding qualified candidates in "discard piles" or completely missing from their applicant pools, suggesting widespread dysfunction in automated applicant tracking systems that are filtering out ideal candidates.
-
The problem appears systemic across the industry, with one professional documenting 549 applications resulting in only 7 interviews, while others report that networking and directly contacting hiring managers has proven more effective than traditional application processes.
-
A team of 80 cybersecurity professionals at a large US company (300,000 employees) has been laid off after unknowingly training their AI replacement for the past two years.
-
The original poster expressed concerns about the future of cybersecurity as companies seek cost-cutting measures, with many industry professionals in the comments confirming their organizations are pursuing AI for operational efficiencies in security operations.
-
While some companies claim AI implementation is about repurposing talent rather than reducing headcount, security experts warn that current AI solutions are not yet sophisticated enough to fully replace human expertise in security operations centers.
-
Sec-Gemini v1 combines Gemini's reasoning capabilities with near real-time cybersecurity knowledge and tooling to help defenders combat the asymmetric nature of security challenges.
-
The model outperforms competitors by at least 11% on the CTI-MCQ benchmark and 10.5% on the CTI-Root Cause Mapping benchmark, leveraging integrations with Google Threat Intelligence and OSV database.
-
Google is making Sec-Gemini v1 freely available to select organizations, institutions, professionals, and NGOs for research purposes, with applications available through an online form.
-
RunReveal's Model Context Protocol Server enables security teams to analyze logs 100x faster with accuracy while leveraging AI models like Claude to provide clear explanations of findings.
-
Customers are using the tool for multiple security operations including threat hunting in AWS, investigating GuardDuty alerts in K8s containers, and tuning detection rules - all completed in under a minute versus hours of manual work.
-
The platform normalizes and enriches security data on ingest, storing it in LLM-friendly formats that enable comprehensive investigations at minimal cost (pennies per query) compared to traditional query-based approaches.
-
OpenAI has significantly increased its maximum bug bounty payout from $20,000 to $100,000 for critical security findings, while expanding their Cybersecurity Grant Program to fund research in software patching, model privacy, and agentic security.
-
The company is leveraging its own AI technology to enhance cyber defenses, partnering with SpecterOps for continuous red team assessments, and implementing specialized security measures for emerging AI agents like Operator.
-
OpenAI is proactively monitoring for threats targeting their systems, sharing intelligence about attacks with other AI labs, and building security foundations for next-generation projects like Stargate with zero-trust architectures and hardware-backed security solutions.
-
Wiz Defend unifies runtime signals, cloud telemetry, and threat intelligence to provide complete visibility across cloud environments, reducing detection time by 10x with many customers reporting MTTRs under an hour.
-
The platform bridges gaps between SecOps, cloud security, and development teams by providing shared context and automated investigation capabilities through features like Investigation Graph and Incident Timeline.
-
Wiz Defend offers end-to-end protection with capabilities including behavioral analytics, pre-built containment playbooks, and one-click remediation that traces threats back to source code for comprehensive cloud defense.
-
Adaptive Security, co-led by OpenAI and Andreessen Horowitz, simulates AI-generated social engineering attacks to train employees to recognize threats like spoofed calls, texts, and emails from executives.
-
The New York-based startup focuses on human-targeted hacks that have caused significant financial damage, such as the Axie Infinity breach that resulted in over $600 million in losses from a fake job offer scheme.
-
With over 100 customers since its 2023 launch, Adaptive Security will use the funding primarily for engineering talent to stay ahead in the AI arms race against increasingly sophisticated threat actors.
-
Yrikka AI Inc. has released an API that uses AI agents to assist in red-teaming processes, helping identify vulnerabilities in AI systems through simulated attacks and prompt injection testing.
-
The platform enables "human-AI teaming" to reduce model validation time from months to minutes, continuously monitoring for drift and adversarial attacks after deployment.
-
Founded by Dr. Kia Khezeli and John Kalantari (former ML leaders at Google, Intel, NASA), Yrikka has secured a $1.9M contract with the U.S. Department of Defense for automating computer vision model testing.
From Security Expert to Strategic Leader
Stop drowning in operational details. Get the strategic insights, frameworks, and leadership guidance you need to confidently step into your next security leadership role - all in just 10 minutes a week.
I will never spam or sell your information.
Wald.ai is an AI security platform that provides enterprise access to multiple AI assistants while ensuring data protection and regulatory compliance.
A-LIGN provides cybersecurity compliance audits and certifications, offering a range of services including SOC 2, ISO 27001, HITRUST, and FedRAMP, along with a technology platform for audit management.
Unbound is a cybersecurity tool designed to manage and secure the use of generative AI applications within enterprises.
Before you go
If you found this newsletter useful, I'd really appreciate if you could forward it to your community and share your feedback below!
For more frequent cybersecurity leadership insights and tips, follow me on LinkedIn, BlueSky and Mastodon.
Best,
Nikoloz
