... Accelerated GenAI adoption amplifies the risks of deepfakes, phishing and other adversarial attacks. Cybersecurity leaders must balance the breadth and depth of threat management by strengthening foundational controls that offer the greatest impact while investing in targeted new safeguards. Data Snapshot ...
Analyst(s): Akif Khan | Zachary Smith | Jeremy D'Hoinne | Prashast Gupta
Get more from Gartner
Interested in receiving proven business and technology insights, analyst guidance, benchmarks, diagnostics and more? Connect with a Gartner representative to learn more about becoming a Gartner client.
... Security risks in npm dependencies persist because trusted packages remain a primary attack path. Recent n8n and jsPDF incidents show how this affects enterprise workflows. This guidance focuses on governing npm dependencies, controlling promotion, and recovering quickly when things go wrong. Insights ...
Analyst(s): John Watts | Deepti Gopal | William Dupre | Eric Grenier | Lampis Alevizos
... increasingly insufficient against the rapid pace of sophisticated AI-driven attacks. Product leaders must invest in preemptive cybersecurity (PCS) solutions, which represents a crucial shift from reactive, detection and response, to proactive cyber defense. Gartner Recommended Reading Gartner Research ...
... Access Insights Already a Gartner client? As attackers use advanced AI to find and exploit vulnerabilities faster than organizations can patch them, prioritizing exposures based solely on inferred risk is no longer enough. Product leaders must adopt preemptive exposure management, using AI-driven validation ...
Analyst(s): Mitchell Schneider | Craig Lawson | Tom Powledge | Luis Castillo | Elizabeth Kim
... Access Research Already a Gartner client? Organizations using EDR tools face escalating risks of bypasses by threat actors. Neglecting to address these issues results in wasted investments and minimal impact on risk mitigation. Implement guidance in this research to avoid waste, realize value, and red ...
... Access Research Already a Gartner client? Executives and regulators continue to prioritize cyber-risk management, employing multiple methods and techniques to support governance, risk management and compliance. Security and risk management leaders can use this Hype Cycle to evaluate solutions and make ...
Analyst(s): Pedro Pablo Perea de Duenas | Deepti Gopal
... The Attack Surface Management Pickup Team will discuss challenges and approaches to maintaining their organization’s attack surface management (ASM) practice. CISOs will have the opportunity to share challenges, solutions and lessons learned with their peers. Session Description Gartner Research ...
... This Consult the Board survey summary features inputs from 13 Information Risk Management Research Board members on their approaches to implementing cyber-physical tools for operational technology (OT) environments. It discusses the number of OT sites assets, tool selection criteria, and methods to measure ...
... Access Insights Already a Gartner client? Most third parties have limited incentive to go beyond contractual minimums or invest in genuinely collaborative, “win-win” cybersecurity partnerships with the organizations they support. Cybersecurity leaders can leverage game theory principles to change the ...