Welcome to this week’s edition of CIOsurge!

This week:

Let’s make this week a game-changer.

Stay sharp. Stay ahead.

Security is the first objection most CIOs raise when we start talking about AI deployment. I brought this up with Anthony Enoh, CEO of Enbros Technologies, and his response was more radical than I expected.

"In the age of AI, most things will be commoditized," Anthony said. "So if everything is commoditized, what value does a business really have? It's their proprietary data, their intellectual property, their brand identity, and human interaction. Those are the three things that are un-AI-able."

Anthony's thesis is that organizations should build their own technology stacks rather than relying on SaaS products. "We predict a future where there will be less SaaS products because organizations can build it themselves," he told me. "By owning your own technology stack, you protect your intellectual property. You own where it sits, whether in Azure or GCP. You create and protect that proprietary data, because ultimately that is what is going to be your competitive edge."

I agree with the core principle. We tell our customers the same thing: own your data. Anthony and his team at Enbros build custom solutions within dedicated tenants owned entirely by the customer, not by Enbros. "We're not GPT wrappers," he said. "We build our agentic systems from the ground up within tenants that are owned wholly by the organization."

The architecture he described puts data at the center, with proprietary technology wrapped around it and human interactions on the outer layer. Everything flows from that protected core.

This is a strategic question every CIO needs to answer right now. How much of your organization's competitive advantage lives inside someone else's SaaS platform? How much of your data is scattered across agents and tools you do not control? The commoditization wave is real. If your only differentiator is the same AI tools everyone else is using, you have no moat.

— Zack Tembi, CEO, SingleFin

There are only 35,000 CISOs worldwide serving approximately 359 million businesses. That is a 10,000-to-one ratio, and the gap is widening. Gartner predicts that by 2028, half of all CISOs will manage disaster recovery alongside incident response, significantly expanding their scope beyond traditional security. Meanwhile, experienced professionals are leaving the role due to personal legal liability concerns, budget constraints, and relentless scope creep. Cybersecurity has moved from a technical discipline to a boardroom governance imperative, yet most organizations lack the leadership structures to address this evolution.

If your CISO is still buried three levels below the C-suite, you are not treating the threat with the seriousness it demands. The talent exodus is real and accelerating. CIOs need to advocate for their security leaders at the executive table, fight for their budgets, and restructure reporting lines before the next breach forces the conversation.

- Zack Tembi

Read the full story

GitHub confirmed unauthorized access to approximately 3,800 internal repositories on May 20, 2026. The attack originated through a malicious Visual Studio Code extension installed on a GitHub employee's device, which provided attackers with developer environment access and enabled lateral movement across GitHub's infrastructure. Compromised data includes internal source code, proprietary development tools, CI/CD workflow data, and organizational configurations. A threat group known as TeamPCP has claimed responsibility and is seeking $50,000 to $95,000 for the stolen dataset on underground forums. GitHub states customer repositories were not impacted.

If GitHub's own internal repos can get breached through a bad IDE extension, every enterprise running developer tools at scale needs to audit its extension ecosystem right now. The developer supply chain is the new attack surface. CIOs who treat endpoint security and developer tooling as separate conversations need to combine them immediately.

- Zack Tembi

Read the full story

Microsoft is deploying "forward-deployed engineers" to EY for agentic AI rollout across the consulting giant's client base.

Google Cloud Next 2026 unveiled Agentic Defense with Gemini-powered Threat Hunting and Detection Engineering agents for autonomous SOC operations.

OpenAI launched Daybreak, a new cybersecurity platform, with Cloudflare, Cisco, and CrowdStrike as early partners.

Exaforce raised a $125M Series B ($725M valuation) to build AI that catches cyberattacks in real time.

Gartner projects 40% of enterprise apps will embed AI agents by end of 2026, up from less than 5% in 2025, but nearly half run without security oversight.

SAP unveiled the Autonomous Enterprise at Sapphire 2026 with 50+ domain-specific AI assistants orchestrating 200+ specialized agents.

Send us your story

CIO, QualDerm Partners

CIO, Lobel Financial | Anaheim, CA

CIO, NEBCO, Inc. | Lincoln, NE

CIO, SmartStop Self Storage | Ladera Ranch, CA

CIO, Vaco by Highspring | Toledo, OH