Why 'AI Fatigue' Is Risky to Cyber Leaders and Their Teams

Marianne Kolbasuk McGee • July 15, 2025

The flood of new artificial intelligence tools, including those to help cybersecurity teams, can overwhelm healthcare CISOs and their security staff, fueling "AI fatigue" that in itself can create additional cyber risk, said Drew Henderson and Jon Hilton, practice leaders at consulting firm LBMC.

Healthcare

Top Cyber Struggles of Small, Rural Healthcare Providers

Why the HIPAA Security Rule Proposal Draws Expert Concerns

Latest

Artificial Intelligence & Machine Learning

Trump Lifts Nvidia Chip Restrictions to China, Raising Concerns

Chris Riotta • July 15, 2025

President Donald Trump has reportedly reversed a U.S. policy restricting Nvidia chips critical to artificial intelligence technology development from being exported to China in a move that experts say could undercut the U.S. lead in the burgeoning emerging technology market.

Endpoint Security

'Ghost in the Machine' Exploits Spotted in Gigabyte Firmware

Prajeet Nair • July 15, 2025

Multiple high-severity vulnerabilities in Gigabyte's UEFI firmware could enable attackers to execute arbitrary code within System Management Mode, granting persistent and nearly undetectable control over affected systems, cybersecurity researchers reported.

Application Security

AI Coding Tools Promise Speed, But Slow Pros Down

Rashmi Ramesh • July 15, 2025

If AI coding tools were meant to be the espresso shot of developer productivity, a recent study suggests they might actually be more like decaf - offering the aroma of efficiency without the buzz, based on findings from a nonprofit AI research group.

Endpoint Security

Unified Cyber Standards Are Vital for 5G Resilience

Suparna Goswami • July 15, 2025

At a time when ASEAN nations are accelerating 5G deployments, cybersecurity leaders at the 5G and OT Security Summit in Malaysia issued a sobering warning: Fragmented regulations and uneven OT readiness threaten to undermine the region’s digital ambitions.

Identity & Access Management

CyberArk: Rise in Machine Identities Poses New Risks

Brian Pereira • July 15, 2025

A study from CyberArk shows that machine identity-related security incidents are increasing as the volume and complexity of machine identities surge. Security leaders must build an end-to-end strategy to secure non-human identities and prevent attacks and outages.

Application Security

Unpacking the $5 Billion Power Struggle for a Tiny AI Firm

Rahul Neel Mani • July 15, 2025

As with any story about AI start-ups, the acquisition of Windsurf AI happened at lightning speed. In just a couple of weeks, major Silicon Valley players took a close look at the four-year-old AI-assisted coding vendor, and ultimately Google and Cognition AI ended up with parts of the company.

Government

How Trump's Cyber Cuts Dismantle Federal Information Sharing

Chris Riotta • July 14, 2025

The White House has continued to sharply reduce the size of cybersecurity teams across the federal government while cutting information technology budgets and funding for key programs. Experts warn public-private information sharing around critical cyberthreats has slowed.

Governance & Risk Management

Wing FTP Vulnerability Actively Exploited Globally

Prajeet Nair • July 14, 2025

Threat actors are actively exploiting a critical vulnerability in a server file transfer solution. Researchers say the flaw in Wing FTP Server could allow threat actors to execute system-level commands remotely, using null byte and Lua injection without authentication.

Cloud Security

Aviatrix Pivots Investment From Networking to Cloud Security

Michael Novinson • July 14, 2025

Aviatrix is addressing cloud network security gaps with its new Cloud Native Security Fabric. CEO Doug Merritt says companies need zero trust across ephemeral workloads, especially with agentic AI multiplying data pathways. The company’s pivot includes a new C-suite and product strategy overhaul.

Governance & Risk Management

Attackers Now 'Scanning Extensively' for Citrix Bleed 2

Mathew J. Schwartz • July 14, 2025

Security experts warn that attackers have ramped up their collective attempts to find and exploit Citrix NetScaler devices that remain unpatched. Cloud Security Group patched CVE-2025-5777, a flaw also known as "Citrix Bleed 2," nearly four weeks ago with a software update.

Artificial Intelligence & Machine Learning

How AI Expands SASE's Role in Policy, Operations Efficiency

Michael Novinson • July 14, 2025

Cato Networks raised $359 million at a $4.8 billion valuation to accelerate AI integration into SASE. Co-founder and CEO Shlomo Kramer says AI will streamline security operations, improve agility and help secure generative AI workloads and business-critical systems.

Critical Infrastructure Security

Nation-State Threats Push Claroty to Take on Risk Reduction

Michael Novinson • July 14, 2025

Claroty is strengthening its public sector offerings as hostile nation-state actors adopt sabotage tactics. CEO Yaniv Vardi says AI is accelerating adversary capabilities, requiring defenders to shift from visibility to action and reduce risks across connected cyber-physical systems.