Should the CISO role be split in two?
Some larger enterprises opt to have a deputy CISO as a way to manage the workload. In this case, the CISO is responsible for strategic…
Year: 2026
Inside Maritime OT’s Isolation Problem: Tanker Cyber Incidents, an AI Test Breakout, and APT36’s USB Route to Air-Gapped Networks
In mid-September, the US Coast Guard and FBI confirmed they had boarded US-bound energy tankers after indications that the vessels’ networks had been compromised by…
CyberSafe and SANS award AI security fellowships to women cybersecurity professionals across Africa
CyberSafe Foundation and SANS Institute have launched an AI security fellowship for women in cybersecurity across Africa. The full fellowship is open to women with…
Wiz Service Catalog: Smarter Discovery & Service Governance
Modern cloud environments are built around services, but the context that defines them – what they include, who owns them, and how they should be…
Qualys TotalAppSec Is Now FedRAMP High Authorized
Key Takeaways Qualys TotalAppSec is now FedRAMP High Authorized on the Qualys Government Platform (FedRAMP Certified Class D, package FR2231052341). Federal AI use cases more…
Denmark population registry data breach affects 8.8 million people
Denmark’s Central Population Register (CPR) is warning of a data breach that exposed the personal information of approximately 8.8 million registered individuals. This includes people…
Malicious HEIC Images Can Trigger Remote Code Execution on WordPress Servers
A malicious HEIC image can become a route to remote code execution on a WordPress server. Researchers have demonstrated an attack chain that turns a…
Smashing the token limit with overlapping fragments
Published: Monday, 5 October 2026 at 15:04 UTC Updated: Monday, 5 October 2026 at 15:11 UTC I’m delighted to introduce Alex, my fellow swigger who…
Q&A With Oliver Simonnet at CultureAI: AI Security In 2026: Most Organisations Deploy AI And Hope For The Best
Over the past few years, AI has gone from something understood and used by a select few to a cornerstone of almost every organisation. As…
New RemoveMacAI Tool Removes Apple Intelligence Models and Reclaims Mac Storage
A new open-source command-line utility called RemoveMacAI lets Apple silicon Mac users running macOS 27 disable Apple Intelligence, remove downloaded on-device AI models, and prevent…
Star Blizzard Targets 100+ Organizations with Phishing and RedFlick Technique
Microsoft Threat Intelligence has detailed new phishing and malware delivery activity from Star Blizzard, a Russian state threat group. The group, also known as Callisto…
Bank CISO On Social Engineering Defense
05 Oct Bank CISO On Social Engineering Defense Posted at 09:08h in Blogs by Taylor Fox This week in cybersecurity from the editors at Cybercrime…