OpenAI not part of the new Open Secure AI Alliance
OpenAI is noticeably absent from the list of initial supporters of a new industry initiative to promote the creation of strong, safe, defensive AI cybersecurity…
Category: CISOOnline
Certighost haunts Microsoft Active Directory Certificate Services
“When the validation gate is active, the CA checks that the hostname supplied in cdc resolves to a legitimate Domain Controller computer object in the…
How CISOs can rise to the business resilience challenge
Organizations in heavily regulated industries such as healthcare and financial services will often prioritize data protection over uptime due to potential regulatory penalties or loss…
How OpenAI hacked Hugging Face: an experiment gone wrong
Some of OpenAI’s most powerful AI models teamed up to escape their sandbox and attack systems at Hugging Face in a cybersecurity evaluation gone wrong,…
4 ways AI-driven defense is rewriting the cybersecurity playbook
The cybersecurity landscape has evolved beyond human scale. Today’s adversaries have replaced predictable, manual playbooks with machine-generated attack chains that can breach traditional controls in…
Email threats changed after the Tycoon2FA take-down
The adaptation came in the form of using Microsoft Teams as a social engineering channel. Attackers established conversations to build trust before attempting credential theft…
Top AIs invent same fake PyPl and npm package names
Churilov set out his findings in a research paper, The Range Shrinks, the Threat Remains: Re-evaluating LLM Package Hallucinations on the 2026 Frontier-Model Cohort, which…
Ransomware groups are hammering your vulnerable VPNs
Cybercriminals are actively exploiting a recently discovered vulnerability in Palo Alto Networks firewall and VPN appliances to deploy the Qilin ransomware strain. A critical authentication…
AgentForger proves AI agents can become persistent insider threats
A ‘planted accomplice’ that does all the work Once activated, AgentForger can perform reconnaissance to create an internal map of a company. For instance, agents…
Check Point hole grants unauthenticated attackers full SmartConsole admin privileges
Challenges of IP address restrictions While it can be technically challenging to keep the IP address allowlists that Check Point recommends current, given DHCP’s ability…
RefluXFS exploit allows full root access to Linux systems on XFS
Affected Linux distributions include RHEL 8,9 and 10, CentOS Stream 8,9, and 10, Oracle Linux 8,9,10, Rocky and AlmaLinux 8,9, and 10, CloudLinux 8,9, and…
Oracle issues critical patches for Database Server, Fusion Middleware
Oracle’s July 2026 Critical Patch Update, its largest ever, contains 1,449 new security patches spanning 32 product families, from Oracle Database and E-Business Suite to…