IT-Sicherheit · Branchen-Briefing

Schellenberg Wittmer advised Quorum Cyber, a Microsoft-focused cybersecurity services provider, in its acquisition of Zurich-based Ontinue, a managed extended detection and response (MXDR) provider. This transaction represents consolidation activity in the cybersecurity market, bringing together complementary security service capabilities. [Quelle: swlegal]

You cannot defend a machine speed attack surface with a calendar speed risk program. This article discusses major cybersecurity shifts expected by 2027, focusing on how AI is fundamentally changing both attacker and defender capabilities. The concept of "Exploitability Drift" describes how improvements in AI models and tooling can make previously difficult exploits easier to operationalize even without environmental changes, exemplified by researchers using Claude to chain vulnerabilities in accessing OpenAI systems. The "Security Loop Gap"—the difference between how quickly attackers can discover and adapt versus how quickly defenders can understand and remediate—is identified as a critical challenge that security teams must address through continuous risk operations rather than static annual assessments. The article emphasizes that Third Party Risk Management (TPRM) and Continuous Threat Exposure Management (CTEM) platforms in 2027 must move beyond traditional workflows to enable continuous monitoring, evidence automation, and validated remediation. Modern vendors increasingly operate as complex execution dependencies involving cloud platforms, AI models, subprocessors and integrated agents, requiring platforms that detect meaningful changes between formal assessments and connect vendor posture to actual business impact. AI Security Posture Management should become integrated across TPRM, CTEM and application security rather than treated as a separate domain, as AI systems themselves now function as enterprise actors with access to data, identities, tools and APIs. [Quelle: safe]

This website content is an event announcement/agenda for the "Cyber Resilience Forum 2026" scheduled for September 29, 2026. While the event covers topics related to IT security regulation (NIS2), organizational resilience, and AI in cybersecurity, it is not news content reporting on current developments, regulatory changes, M&A activity, or market trends. The content describes an upcoming conference event with speaker bios and workshop descriptions, but contains no news reporting on specific regulatory updates, acquisitions, market consolidation, new market entrants, or other developments relevant to the user's stated search intents (IT-Sicherheit Regulierung Compliance Anforderungen, IT-Sicherheit M&A Übernahmen Konsolidierung, Cybersecurity Markttrends neue Anbieter Wettbewerb). [Quelle: ditis]