Dual BIOS: The laptop security feature SMBs don’t know they need
Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and keeping software up to date. All four protect what happens after…
Category: CISOOnline
Oracle patched 1295 security flaws in October, six rated 10.0
One, tracked as CVE-2026-91231, is in the Adapters component, and enables unauthenticated attackers to compromise Oracle SOA Suite resulting in its takeover, with potential impact…
eMudhra quits global TLS certificate market after compromise of CA signing keys
“The harder finding for many organizations will be that they can’t answer these questions at all,” Grover said, referring to where certificate trust decisions are…
The AI notetaker risk is now an everywhere problem
The businesspeople adopting AI notetakers are not being reckless. They are responding to a real business need. Our teams are in meetings all day with…
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But…
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a dozen bugs and security issues, including some…
Security teams urged to center defense on the flaw profile attackers target most
“If your patching cadence still has the word ‘monthly’ in it, you’re defending against an adversary who abandoned that schedule a long time ago,” McKee…
LiteLLM release pipeline hacked to distribute credential-stealing malware
According to cybersecurity firm Aikido, files bundled with the compromised package executed automatically when Python started, even if an application did not import LiteLLM. The…
Microsoft: Treat AI agents as insider threats
EVP of Microsoft Security Hayete Gallot writes in a blog post that AI agents operating independently within companies could be a serious security threat. According to Microsoft,…
OpenAI’s models are deliberately breaking their misalignment monitoring systems
He added that OpenAI deserves credit for transparency. “OpenAI’s own candor is the most striking part. A frontier lab publicly saying it isn’t sure whether…
Two critical PHP flaws put the web on alert as emergency patches arrive
PHP is ‘the web itself’ PHP is a widely-used, open source server-side scripting language that underlies websites like WordPress, which powers 43% of the web,…
Google, Mozilla revoke eMudhra intermediates after private key compromise
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhra have been compromised, potentially allowing attackers to forge trusted certificates…