Tarah Wheeler, CISO at TPO Group, describes her accidental path into cybersecurity through social science, red teaming, and policy work. Her sharpest concern today is not a specific attack — it is the collapse of reliable data in cybersecurity itself. With NIST having shed more than 700 jobs since 2025, including staff responsible for validating government encryption standards, she warns the industry is making decisions on hype rather than evidence. When the institutions that produce ground truth are dismantled, every security decision built on their work becomes less reliable. 🔥 #CyberNewsLive https://lnkd.in/egM6Jcan

TPO Group's Chief Security Officer Tarah M. Wheeler was tapped by WIRED's Lily Hay Newman to weigh in on the reality of frontier AI models' inevitable availability and expanding prevalence. TPO Group's leading experts are committed to sharing informed insight to drive collective action and support our clients, partners and the #Security community overall. See the full article and Tarah's commentary here: https://lnkd.in/ebna7nnM

𝗖𝗜𝗦𝗢 𝗖𝗼𝗻𝘃𝗲𝗿𝘀𝗮𝘁𝗶𝗼𝗻𝘀: 𝗧𝗮𝗿𝗮𝗵 𝗪𝗵𝗲𝗲𝗹𝗲𝗿, 𝗖𝘆𝗯𝗲𝗿𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗟𝗲𝗮𝗱𝗲𝗿, 𝗧𝗵𝗼𝘂𝗴𝗵𝘁 𝗟𝗲𝗮𝗱𝗲𝗿 𝗮𝗻𝗱 𝗢𝗿𝗶𝗴𝗶𝗻𝗮𝗹 𝗧𝗵𝗶𝗻𝗸𝗲𝗿 Tarah Wheeler is CISO at TPO Group, a firm that provides cybersecurity consultancy for high-stakes organizations. But despite this elevated position, her journey was far from typical. The post CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker appeared first on SecurityWeek. https://lnkd.in/gzr3m7DC Protect what you’ve built. Secure your future.

We've just published the latest edition of our Monthly Cyber & Tech Digest on Substack, bringing together some of the cyber threats, policy developments, and technology updates in today's security landscape. This month's edition explores how attackers are moving beyond traditional phishing, from malware hidden in browser extensions and fake IT support calls to the growing role of AI in making phishing harder to detect. We also cover recent EU privacy developments, ransomware trends affecting nonprofits and universities, and key security updates from WhatsApp and Apple. Originally written for nonprofits and community organizations, we hope it's also a useful resource for researchers, students, and practitioners looking to stay informed.

Geopolitics, AI and cyber resilience are converging at unprecedented speed. At #ISMGStudio at RSAC Conference 2026, Rob Knake, Co-Founder of TPO Group and Edna Conway, EMC Advisors in conversation with Tom Field on how emerging technologies and global policy dynamics are reshaping the cybersecurity landscape. The discussion examines the intersection of national security, supply chain resilience and AI-driven risk, highlighting the need for coordinated public–private collaboration and forward-looking governance. As AI accelerates both innovation and threat capabilities, leaders must align strategy, policy and technology to safeguard critical infrastructure and digital economies. Stay tuned for the full interview. #RSAC2026 #ISMGStudio #Cybersecurity #ISMGatRSAC #AI #EnterpriseAI #GenerativeAI #AIIntelligence #NationalSecurity #SupplyChainSecurity #CyberPolicy

Last week, a new article by Bill Goodwin and Dr Duncan Campbell for ComputerWeekly.com revealed some surprising details from a spyware company’s forensic investigation of the landmark EncroChat hack, in which French police accessed a network of devices used by organized crime groups. Virtual Routes Co-Director James Shires discusses the implications for spyware proliferation, government offensive cyber capabilities, and everyone’s privacy and security. Explore more expert-led insights on cybersecurity, technology and policy at virolearning.com.

Do not, and I cannot emphasize this enough, try to stand up a separate AI third party risk management process outside your normal channels. AI is not separate or magically somehow different from your TPRM. It is the exact same set of questions, the fundamentals, and the costs of all the rest of your boring-ass accounting and sales management software. If your execs are pressuring you to create a separate process.... ... ... ... ... Document that process in your risk register as inherent, unmitigated risk that is also just dumb. That's just...a dumb risk that they should not do. Do not do a dumb risk.

We are still in less than 25% of the roles in cybersecurity - join us to learn how to break the barriers and take up space. "Women are the fastest-growing segment of the global talent pool, but less than 25% hold cybersecurity roles worldwide. The reasons are complex, the stakes are high, and the solutions are rarely discussed. Drawing on insights from Girls Who Code's Breaking Barriers: Girls and the Future of Cybersecurity study and WiCyS's new research, The ROI of Resilience, this session will examine what it takes to build and maintain an equitable and sustainable cybersecurity workforce."

Speakers during a recent Information Technology and Innovation Foundation webinar repeated their calls for Congress to pass a national privacy standard, and warned that new approaches in several states could complicate matters further. https://lnkd.in/e9NYYdbY

Truly appreciated a debate with Rob Knake of TPO Group and Tom Field of Information Security Media Group (ISMG) on the state of Supply Chain Resilience given ever-present ICT Hardware risks. #HBOMS, the reality of where hardware is manufactured, and how we use process, technology and policy to meaningfully move toward embedded systems security are all on the table in this high velocity conversation. Listen Here: https://lnkd.in/gDVB6Zfa