Latest

►

Culture

Proof of Concept: What's Broken in Cybersecurity Hiring?

Anna Delaney  •  January 7, 2026

In the latest "Proof of Concept," Chase Cunningham, CSO, Demo-Force.com, and Brandy Harris, director, CyberEd.io, joined ISMG editors to examine why cybersecurity hiring continues to fail. Despite a growing talent pipeline, outdated frameworks and unrealistic expectations block progress.

Cybersecurity

FCC Loses Lead Support for Biden-Era IoT Security Labeling

Chris Riotta  •  January 6, 2026

UL Solutions has exited its role as lead administrator of the FCC's Cyber Trust Mark, leaving the flagship consumer IoT labeling program without oversight just months after internal security reviews raised concerns over foreign influence in program management.

Cyberattacks

RondoDox Botnet Exploiting Devices With React2Shell Flaw

Akshaya Asokan  •  January 2, 2026

Security firm CloudSEK has uncovered a botnet campaign that is exploiting the React2Shell vulnerability in the Meta-developed, open-source React framework across a variety of devices since December. The security firm attributed the campaign to RondoDox.

►

Culture

ISMG Editors: How AI Is Reshaping Cybersecurity Strategy

Anna Delaney  •  January 2, 2026

Security leaders are heading into 2026 facing growing pressure from AI-driven risks, limited resources and an increasingly complex threat landscape. Sean Mack, who leads ISMG's CXO Advisor practice, joined ISMG editors to discuss how these forces are reshaping security.

Cybersecurity

Implantable Brain Devices: Top Cyber and Privacy Concerns

Marianne Kolbasuk McGee  •  December 26, 2025

Implantable brain devices introduce a new and significantly more complex class of cybersecurity risk and critical privacy concerns, compared with traditional medical devices, given the sensitivity of neural data, says Professor Kevin Fu of the Archimedes Center at Northeastern University.

Cybersecurity

'I Quit!' - When CISOs Need to Take Charge of Their Careers

Brandy Harris  •  December 17, 2025

A recent CISO resignation letter exposes a structural flaw in how organizations manage cyber risk. It shows what happens when risk is accepted quietly and accountability is enforced retroactively, and it's a cautionary tale about why CISOs need to actively manage their careers.

Cybersecurity

CISA Warns of Severe Flaws in Nuclear Med Tracking Software

Marianne Kolbasuk McGee  •  December 3, 2025

U.S. federal authorities are warning that several high-severity vulnerabilities discovered in Mirion Medical Co. inventory tracking software used by nuclear medicine departments could allow attackers to modify program executables and gain access to sensitive information.

Cybersecurity

'Cyber Issue' Leads to FDA Recall of Baxter Respiratory Gear

Marianne Kolbasuk McGee  •  December 1, 2025

The Food and Drug Administration is warning that Life 2000 - an at-home ventilation system built by medical device maker Baxter - has been permanently recalled due to a cyber issue that could allow individuals with physical access to tamper with the gear's life support settings.

►

IoT/IIoT Device Management

AI Drives Faster Industrial Software Development Cycles

Matthew Perry  •  November 28, 2025

Industrial AI is accelerating software development cycles and boosting productivity. Adaptive interfaces and agentic models are enabling predictive monitoring and maintenance to support complex operations, says Rajesh Ramachandran, global chief digital officer for process automation at ABB.

As Space Becomes Warfare Domain, Cyber Is on the Frontlines

Shaun Waterman  •  November 27, 2025

Space is becoming a domain of warfare, with private sector companies' planet-side infrastructure on the front lines - and the first shots will likely be fired in cyberspace, a senior U.S. intelligence official warned this month. "If someone owns the ground station, they own the satellite."

Hardware Hackers Urge Vendor Engagement for Security Success

Mathew J. Schwartz  •  November 21, 2025

As fresh vulnerabilities in hardware keep coming to light, one question remains: What vendors can do to better prevent, identify and eradiate flaws? One shortlist offered by veteran hardware hackers centered on the upsides of engagement, including bug bounty programs.

IoT/IIoT Device Management

Is That Medical Device Secure? Get It Right in the Contract

Marianne Kolbasuk McGee  •  November 21, 2025

Newly revised "model contract language" guidance from the Health Sector Coordinating Council provides an updated reference document to help healthcare providers and medical device makers better articulate and evaluate cyber considerations when negotiating purchases of products and services.