National Insider Threat Awareness Month is drawing to a close. This year’s theme, “Protect Our Potential,” speaks directly to the impact that insider incidents can have. According to Forrester data, insider incidents account for 25% of data breaches, and a third of those incidents are due to malicious intent. Yet many organizations still don’t have […]

Vulnerable applications were already a frequent cyberattack target, but frontier model capabilities are ushering in a new and massive wave of threats. In response, 59% of enterprise CISOs responding to Forrester’s Security Survey, 2026 cited improving application or product security as among their top tactical IT security priorities in the coming year. As tech consolidation continues, CISOs also plan to better utilize built-in security capabilities from their cloud providers (46%) and AI features in their security tools (44%). They’re also prioritizing threat intelligence improvements (35%) and stressing customer-facing IAM improvements (31%) to improve authentication while reducing friction.

While AI may dominate the security conversation, 40% of enterprise CISOs responding to Forrester’s Security Survey, 2026 said that preventing human-centered breaches is among their top priorities for the coming year. Additional top priorities cited by CISOs responding to this survey include better understanding of the threat and vulnerability landscape (37%), securing AI systems and infrastructure (33%), improving threat detection and response (32%), and consolidating the security tech stack (30%). Together, these priorities show that CISOs are balancing emerging AI risks with the persistent challenge of protecting the enterprise from threats that target and are caused by people.

Insider risk continues to plague organizations, although most security programs focus only on external threats. Common consequences of insider incidents include fraud, privacy abuses, intellectual property theft, and infrastructure damage. Security decision-makers in Forrester’s Security Survey, 2026 whose organization experienced a breach in the past 12 months said that 25% of breaches with a known cause resulted from an internal incident. Thirty-six percent experiencing an internal incident described it as accidental, but 34% blamed malicious intent, and 30% noted both inadvertent misuse and malicious intent. This data snapshot underscores the importance of building an insider risk management program.

Of the challenges security decision-makers have faced in 2026, the evolving nature of external security threats was the most common, just edging out other interlinking challenges. This data underscores how the dynamic nature of the external threat environment amplifies challenges in the internal ecosystem. Security leaders must demonstrate how protecting against these threats allows the organization to grow — and get buy-in for programs that continuously adapt, prioritize, and prove business resilience to key externalities.

Our team of analysts discusses what we've learned, heard, and experienced while working with clients as they adapt to new advanced AI model releases, including Fable and Mythos.Key takeaways: Learn how clients are shifting to proactive security to contend with frontier model vulnerability discovery capabilities.Listen in as we share the tips, tricks, and lessons learned as CISOs and tech leaders work with Fable, Mythos, and other advanced AI models.Target audience level: all levels

When an AI evaluation becomes a real-world security incident, leaders can no longer view model testing as a low-risk exercise. The OpenAI and Hugging Face incident reveals how agentic AI can cross trust boundaries, exploit vulnerabilities, and create business risk long before deployment.

Have a great story about leveraging security, privacy, and risk management to drive trust, resilience, and responsible innovation? We'd love to hear from you.

OpenAI recently announced Daybreak, its vision for making agentic application security faster and more capable. While promising, Daybreak will also make security more expensive per unit of work. In this model, customers will pay for tokens and multiagent workflows burn tokens. CISOs and CIOs should budget for application security (AppSec) line-item inflation, not deflation, with […]

Forrester analyzed the top global breaches and worst privacy abuses of 2025 and identified key trends and lessons learned. With more than 10.6 billion records exposed in the top 35 breaches alone and almost $2.8 billion in fines levied on the top 35 violators, lessons abound for security teams. Join us as we review some of the most important breaches of 2025 and discuss ways your security team can protect against them.Key takeaways: Understand the key breaches and lessons from the past year.Learn how to augment your security and privacy strategies accordingly.Target audience level: all levels