Cybersecurity has long been a game of cat and mouse. AI is making the mouse trickier to catch.

Attackers are using AI to launch spear-phishing campaigns, deepfake voice calls and hyper-targeted text attacks. These attacks are virtually impossible for humans to detect and can be launched at an unprecedented scale.

Multifactor authentication (MFA) has long played a critical role in cybersecurity. However, cybercriminals are using various technical and social engineering methods to bypass it. Adversary-in-the-Middle phishing, push bombing and session hijacking are among the techniques used to defeat MFA.

Risk-based MFA helps close these gaps.

Cyber insurance rates are dropping. Abundant capacity and intense competition have triggered a period of market softening, keeping prices favorable for corporate buyers.

However, this rate decline hides a critical catch. While base premiums are cheaper, insurers are restricting policy terms and widening coverage exclusions to offset the rise in cyber claims.

Patch management has long been a challenge for small to midsize enterprises, and it’s only getting worse. According to industry benchmarks, 77 percent of organizations take more than a week to deploy a patch organization-wide. Meanwhile, cybercriminals are using AI tools to build weaponized exploits in under an hour.

Identity management isn’t just about humans. In modern cloud and AI-driven environments, non-human identities (NHIs) outnumber human users by an estimated 100:1. Despite this, many organizations are stuck in a human-centric worldview, leaving machine accounts under-governed.

Cyber espionage is a growing threat that often targets small to midsize businesses (SMBs). Nation-states, corporate competitors and hacking groups are infiltrating company networks to steal sensitive data. They often use traditional hacking techniques, but the objective is different: get in, stay hidden for months or years, and steal as much data as possible.

Home networks are the primary security risk for distributed workforces. Nearly half of all corporate security incidents involve remote work vulnerabilities. About 31 percent of those incidents begin with attackers exploiting home network peripherals.

Ninety percent of IT security professionals state that managing remote worker threats is significantly harder due to a lack of visibility into residential Wi-Fi traffic.

Traditionally, the physical security of facilities has been a distinct discipline from the logic security of IT systems and data. Physical security was viewed as an extension of building operations to be handled by facilities managers. Their responsibilities included managing security cameras, mechanical locks, guard services and facility access.

All it takes is one. A weak or reused password. A click on a malicious link. Poor cyber hygiene in a supply chain partner. Any of these threats can result in compromised credentials, giving an attacker insider access to sensitive systems, accounts and data.

The nature of work has changed dramatically over the past 10 years. Organizations embraced cloud computing and collaboration technologies, and the pandemic spurred widespread adoption of remote and hybrid work styles.

These shifts represent more than a change in workplace culture.