“There is no single silver-bullet technology that can protect from all threats and all threat vectors,” Check Point Research noted.

Nearly 25% of survey respondents were unaware what their cybersecurity insurance covered — or if they even had insurance, Menlo Security found.

"We need to be fair to our audience, to our target customers — not everything is an XDR,” Trellix’s Chief Product Officer Aparna Rayasam said.

HP's Senior Malware Analyst Alex Holland, the report’s author, believes “mastering the basics” is one of three statutes necessary in defending against increasing cybercrime.

“Governments worry about the capabilities of state-backed hackers and the defense industry fears China’s growing technological prowess," GlobalData's Robert Penman said.

"At some point in the future, quantum computers will likely be able to implement specific algorithms that can attack some of the current day cryptography," Deloitte's Colin Soutar said.

“We need to make security inclusive and open for everyone. That means that we're encouraging people to point out, hey, I made a mistake,” Ian McShane said.

“It's not about one network function anymore. ... On a 5G network we’re thinking 5G use case security," Deloitte's Shehadi Dayekh explained

By acquiring Randori, IBM will get a better understanding of the hacker’s perspective by discovering the entire depth of the attack surface, according to Justin Youngblood, IBM’s vice president

“If you look at ransomware, it's a business, it's financially motivated,” CSW CEO Aaron Sandeen said.

The intersection of software and security "is an onion," Cisco's Head of Open Source Stephen Augustus said.

The challenge with discovering APIs is that there isn't typically one place to look for them, Gartner VP Mark O'Neill said.

Over the past two years, Comcast Business saw DDoS-extortion ransomware attacks increase 125%.

The secret to cloud security is preventing misconfigurations from being deployed in the first place, Snyk's Josh Stella wrote.

“The misunderstanding of zero trust is that it is a binary thing — either you're doing it or you're not doing it — that's not true,” John Kindervag said.

Lapsus$ group paid employees of the targeted companies or their partners to gain access and join incident response calls, Microsoft found.

Identifying choke points "is a way that we can actually hit [adversaries] with a pain point by disrupting their model,” Fortinet's Derek Manky said.

The new reporting requirements come as President Joe Biden warned about an increase in Russia-based cyberattacks on U.S. enterprises.

“What's missing and what we've added is more of the supply chain aspect and tying that all together,” Palo Alto Networks' Taylor Smith said.

“Don’t add to the fear, uncertainty, and doubt, instead, focus on what you can control,” Gartner Research VP Katell Thielemann wrote.

“All of these new APIs introduce a lot of security risks, and that’s why a lot of CISOs are now paying attention,” Imperva CTO Peter Klimek said.

“We are seeing the weaponization of victims’ data from multiple threat-actor groups,” CrowdStrike’s Adam Meyers said.

Both new modules come as CISOs look to consolidate security tools and converge network, endpoint, data, and workload security and telemetry.

“We are very open and trying to be transparent and we believe [we are] one of the most transparent companies in the world,” Huawei USA CSO Andy Purdy said.