中文

Deep Dive

来自我们记者的行业洞察

"Paused Partnership": U.S. Government Turmoil Undermines Critical Infrastructure Cooperation

According to interviews with representatives from 14 critical infrastructure sectors, four former senior government cybersecurity officials, and multiple experts, the Trump administration's federal government restructuring has severely weakened the public-private partnerships that protect U.S. critical infrastructure from cyberattacks and physical disasters. Mass layoffs, mission uncertainty, and leadership vacancies have disrupted collaboration between the government and sectors such as healthcare, water, energy, and telecommunications, while sensitive information-sharing mechanisms like CIPAC have been eliminated, leaving industries deeply concerned about the government's ability to respond to major cyberattacks.

Deep Dive
Frequent Vulnerabilities in Network Security Devices Keep Corporate Defenses Under Pressure

In January 2025, federal network agencies and researchers again warned that attackers were exploiting a zero-day vulnerability (CVE-2025-0282) in Ivanti Connect Secure. This came about a year after the same product was exploited via two zero-day vulnerabilities (CVE-2023-46805 and CVE-2024-21887). The frequent occurrence of such incidents reveals that security flaws in network defense devices are continuously eroding corporate defenses. Edge devices such as firewalls and VPNs, lacking endpoint detection capabilities, have become preferred initial intrusion points for attackers. Experts point out that despite the risks, these devices will remain in use for the long term, and enterprises need to strengthen vulnerability management while addressing architectural challenges.

Deep Dive
CIOs Tackle Multiple Generative AI Risks with NIST Framework

The widespread application of generative AI brings numerous risks, prompting enterprise CIOs to turn to the National Institute of Standards and Technology (NIST) AI Risk Management Framework to systematically identify, quantify, and mitigate risks. Institutions like Discover Financial Services ensure compliance and security while advancing AI innovation through risk classification, human oversight, and continuous monitoring.

Deep Dive
Microsoft's years of security debt erupt, reputation crisis intensifies

Microsoft recently suffered two major state-sponsored cyber intrusions, sparking harsh criticism of its security culture. Experts believe the consequences of years of ignoring security warnings are now emerging, but market dominance and government customer lock-in make reform challenging.

Deep Dive
Inside Walmart's Security Operations Frontline: Scale, Trust, and Defense Strategies

In Bentonville, Walmart's headquarters, a carefully orchestrated conversation lifted the veil on its security operations. From a security operations center processing six trillion data points daily, to a forensics laboratory equipped with cleanrooms and X-ray technology, to a defense system blocking 8.5 billion malicious bots monthly, Walmart is fulfilling its commitment to 'becoming the world's most trusted retailer' with rare scale and institutional investment. Based on on-site visits and interviews with multiple executives, this article analyzes the uniqueness of its security strategy.

Deep Dive

Our partners