Loading story…
Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs) are facing unprecedented challenges as they prepare for 2025, with cybersecurity emerging as the top concern for 41% of CIOs according to the Experis Future Forward: CIO 2025 Outlook report. Organizations are responding by planning significant increases in cybersecurity budgets, with 77% of surveyed companies intending to boost security spending in the coming year. Alongside this, there is a parallel push to expand cloud infrastructure (68%) and accelerate artificial intelligence (AI) capabilities (67%), reflecting the dual imperative to innovate while defending against evolving threats. However, the Bitdefender 2025 Cybersecurity Assessment Report reveals a troubling trend: 58% of security professionals have been instructed to keep breaches confidential, a 38% increase since 2023, raising concerns about transparency, compliance, and stakeholder trust. The pressure to remain silent is particularly acute for CISOs and CIOs, highlighting a growing disconnect between leadership and frontline security teams. The reports also underscore a critical skills gap, with 76% of IT employers struggling to find qualified tech talent, prompting 52% of tech leaders to embed AI skills into existing roles rather than create new positions. Attack surface management has become a top priority for 68% of organizations, driven by the rise of Living Off the Land (LOTL) attacks, which now account for 84% of high-severity incidents and exploit legitimate tools within enterprise environments to evade detection. Proactive measures such as disabling unnecessary services, removing unused applications, and limiting lateral movement are increasingly seen as essential. The relationship between CIOs and other C-suite executives, particularly the COO, is identified as crucial for effective risk management and operational alignment. Despite increased investment, 56% of IT leaders believe that senior leadership lacks sufficient understanding of the CIO role and its responsibilities, potentially hindering effective cybersecurity governance. AI is both a source of optimism and concern, with 67% of leaders believing in its transformative potential, but there remains a gap between perception and practical implementation. Internal audit teams are adapting to these risks by reassessing their approaches to cybersecurity, AI, and economic uncertainty. Burnout among middle management and the need for improved board-level engagement are also highlighted as factors influencing organizational resilience. The combined findings from Experis and Bitdefender illustrate a landscape where technology leaders must balance innovation, risk management, and transparency to safeguard their organizations in an era of relentless cyber threats and rapid digital transformation.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcethehackernews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Chief Information Security Officers (CISOs) are facing an increasingly complex cybersecurity landscape, driven by rapid technological advancements and the proliferation of artificial intelligence (AI) and automation. According to CSO’s 2025 Security Priorities Study, 76% of security leaders report that determining the most suitable security solutions for their organizations has become more complicated. The study also highlights that 57% of organizations have struggled to identify the root causes of security incidents in the past year, underscoring the growing sophistication of cyber threats. CISOs are now responsible for a broader range of duties, including developing cyber strategies, managing risk, and addressing the unique challenges posed by AI-enabled technologies. A significant portion, 67%, must also contend with security issues that extend beyond their local regions, reflecting the global nature of modern cyber risks. Persistent challenges such as employee awareness, budget constraints, talent retention, and process complexity continue to hinder progress. Protecting sensitive and confidential data remains a top priority, with 48% of leaders focusing on this area, followed by securing cloud environments and simplifying IT security infrastructure. The integration of AI into security operations is both a necessity and a challenge, as organizations seek to leverage new tools while managing the risks associated with disruptive technologies. CISOs are increasingly looking to consolidate security tools and maximize the value of existing platforms to stretch limited budgets. The evolving threat landscape, marked by a surge in attack volume and severity, demands that security teams adapt quickly and efficiently. The pressure to scale cybersecurity operations is heightened by high-profile incidents affecting major retailers and manufacturers, resulting in significant financial losses and operational disruptions. The sheer volume of threat intelligence generated by these attacks can overwhelm security operations centers (SOCs), making it difficult to extract actionable insights. As a result, CISOs are prioritizing the development of strategies that enable their teams to respond effectively to both current and emerging threats. The need for robust AI governance frameworks is becoming more apparent, as organizations recognize the importance of establishing clear guidelines for AI deployment and oversight. Security leaders are also focusing on enhancing employee training and awareness to mitigate human-related risks. The complexity of the modern security environment requires a holistic approach that balances technological innovation with sound risk management practices. As CISOs navigate these challenges, collaboration with external partners and the adoption of automation are seen as critical enablers for future resilience. Ultimately, the evolving role of the CISO reflects the broader transformation of cybersecurity from a technical function to a strategic business imperative.
Jun 29, 2026
Chief Information Security Officers (CISOs) are facing unprecedented pressure as cybersecurity threats intensify, regulatory demands increase, and hybrid infrastructure becomes the norm. Despite rising budgets and the adoption of advanced technologies such as AI, CISOs report that risk reduction is not keeping pace with the evolving threat landscape. Studies highlight that hybrid environments, while improving resilience and compliance, introduce operational complexity, visibility gaps, and identity management challenges. Security leaders are increasingly focused on business continuity, regulatory compliance, and the need for rapid incident detection and response, but many feel overwhelmed by the volume of incidents and the expectation of inevitable breaches. The growing complexity of security operations is compounded by the need for better coordination, communication, and leadership readiness. CISOs are under pressure to shrink the gap between detection and investigation, with many expressing concerns about burnout and the potential for nation-state attacks. The integration of AI and automation is reshaping both threats and defenses, but organizations still struggle to translate increased investment into tangible improvements in risk posture. The shift to hybrid infrastructure and the adoption of new security models are driving a fundamental reset in security strategy, making resilience a structural requirement rather than a long-term goal.
Jun 29, 2026
Chief Information Security Officers (CISOs) are facing increasing complexity in managing cybersecurity risk as organizations become more reliant on managed service providers (MSPs), integrate artificial intelligence (AI) into business processes, and contend with expanding attack surfaces. Nearly half of organizations reported a cyberattack or data breach involving a third-party in the past year, highlighting the growing importance of robust vetting and governance processes for service providers. At the same time, the rapid adoption of AI has elevated cybersecurity to a top priority at the board level, with CISOs now expected to communicate risk and strategy more effectively to executive leadership. However, internal conflicts, unclear authority, and misaligned incentives between CISOs and other business leaders are often more damaging to incident response than the cyberattacks themselves, according to recent industry surveys. The threat landscape is intensifying, with a 20% year-on-year increase in high-severity vulnerabilities and attackers leveraging generative AI to exploit both new and old weaknesses. Security teams are under pressure to manage a greater volume of serious issues without corresponding increases in staff or budget, leading to operational strain. Effective vulnerability management now requires clear governance, defined scope, and continuous evaluation, while CISOs must balance technical risk reduction with business alignment and shared responsibility across the organization. As AI accelerates both attack and defense, CISOs are urged to rethink traditional risk management processes and foster stronger leadership alliances to ensure resilient cybersecurity postures.
Jun 29, 2026