Sign in Subscribe
CISOsCISO
Where Cybersecurity, AI, and Digital Trust Meet Reality.

Featured articles

The Cloud Has Changed — Our Security Model Hasn’t

The Cloud Has Changed — Our Security Model Hasn’t

Black Hat USA 2026 — The Architecture of Trust Is Changing

Black Hat USA 2026 — The Architecture of Trust Is Changing

DEF CON 34 — What CISOs Should Take Away From the Hacker’s View of the Future

DEF CON 34 — What CISOs Should Take Away From the Hacker’s View of the Future

The Shadow AI Economy: From Shadow IT to Shadow Agency

The Shadow AI Economy: From Shadow IT to Shadow Agency

SAP Is Not a Black Box Anymore — The CISO Needs to See Inside

SAP Is Not a Black Box Anymore — The CISO Needs to See Inside

Invisible Lies: Why Sensor Manipulation May Become the Most Dangerous Attack on Smart Buildings

Invisible Lies: Why Sensor Manipulation May Become the Most Dangerous Attack on Smart Buildings

THE AI CONTROL GAP

THE AI CONTROL GAP

Zero Trust Beyond the Office: Securing Remote Teams Operating in High-Risk Environments

Zero Trust Beyond the Office: Securing Remote Teams Operating in High-Risk Environments

Your Cloud Strategy May Depend on a Court Case You Are Not Following

Your Cloud Strategy May Depend on a Court Case You Are Not Following

Europe Does Not Become Sovereign Because Its Cloud Is European

Europe Does Not Become Sovereign Because Its Cloud Is European

AI Compliance Is Not the Same as AI Control

AI Compliance Is Not the Same as AI Control

The AI Software Paradox Series

The AI Software Paradox Series

AI in the SOC: Why We Didn’t Gain Control — We Scaled Complexity

AI in the SOC: Why We Didn’t Gain Control — We Scaled Complexity

The Most Dangerous Sentence in Information Security? “That’s Not in Scope.”

The Most Dangerous Sentence in Information Security? “That’s Not in Scope.”

Leading Through Transformation as a CISO

Leading Through Transformation as a CISO

Latest

04
Oct
Part 8 — The CISO’s Cloud Security Agenda for 2027

Part 8 — The CISO’s Cloud Security Agenda for 2027

16 min read
04
Oct
Part 7 — From Least Privilege to Least Agency

Part 7 — From Least Privilege to Least Agency

16 min read
04
Oct
Part 6 — AI Systems Are Becoming Security Domains of Their Own

Part 6 — AI Systems Are Becoming Security Domains of Their Own

14 min read
04
Oct
Part 5 — Your Cloud Boundary Is Now Someone Else’s API

Part 5 — Your Cloud Boundary Is Now Someone Else’s API

15 min read
04
Oct
Part 4 — AI Doesn’t Replace Cyberattacks — It Compresses Them

Part 4 — AI Doesn’t Replace Cyberattacks — It Compresses Them

15 min read
04
Oct
Part 3 — When Non-Human Identities Outnumber Humans

Part 3 — When Non-Human Identities Outnumber Humans

Non-human identities are becoming the dominant identity population. The real risk is not their number, but whether machine authority grows faster than human accountability. Who owns the identities that increasingly act for us?
13 min read
04
Oct
Part 2 — Identity Is Becoming the New Cloud Control Plane

Part 2 — Identity Is Becoming the New Cloud Control Plane

Identity no longer just determines who can access the cloud. It determines who — or what — can change it. As infrastructure becomes programmable and agents gain authority, identity itself is becoming the new cloud control plane.
11 min read
04
Oct
Part 1 — The Cloud Has Changed — Our Security Model Hasn’t

Part 1 — The Cloud Has Changed — Our Security Model Hasn’t

The cloud attack surface is no longer just a collection of assets. Identity, APIs, AI agents and third parties create paths where risk emerges from relationships. Attackers already see the graph. Do defenders?
11 min read
04
Oct
The Cloud Has Changed — Our Security Model Hasn’t

The Cloud Has Changed — Our Security Model Hasn’t

Cloud security is shifting from protecting assets to governing relationships, identities and autonomous actors. This eight-part CISOsCISO series explores what the CSA Top Threats 2026 mean for CISOs — and why the next frontier is digital agency.
8 min read
03
Oct
Black Hat USA 2026 — The Architecture of Trust Is Changing

Black Hat USA 2026 — The Architecture of Trust Is Changing

Black Hat USA 2026 points to a fundamental shift in cybersecurity: from protecting assets to governing authority. Across AI agents, MCP, identity, supply chains, cloud, hardware and OT, this 12-part CISO series explores how the architecture of trust is changing.
10 min read