Security spending is growing — except for the typical CISO
Who gets to spend appears to depend heavily on the health and structure of the business. Companies that outperformed revenue targets by more than 5%…
Category: CISOOnline
Cisco patches max-severity ISE flaw, the second critical zero-day this week
Cisco released patches for an actively exploited authentication bypass vulnerability in its Cisco Identity Services Engine (ISE) platform, which is used for enterprise network access…
OpenAI admits six new misalignment incidents under new reporting framework
OpenAI has published six new reports detailing AI model misalignment, including instances of hidden instructions, unauthorized communication, and attempts to locate exposed API keys, adding…
16 governance tools for securing your AI fleet
Lasso Security Taking control of AI across a large enterprise platform requires a breadth of knowledge and the tools to control it. Lasso Security begins…
AI agent authorization risks remain a gap in new NIST-CISA token security guidance
AI agents’ actions are out of scope for new guidance from US authorities on securing identity and access tokens, but there is still plenty enterprises…
Oracle’s September patches put Fusion Middleware back in the hot seat
It also included a warning for organizations running older Oracle releases. The fixes are provided only for supported versions, the company said, adding that “Product…
LinkedIn fights for the right to tell customers when the feds want their data
Privacy now a ‘data stewardship obligation’ Jeff Valdes, a director at Acceligence, noted, “there is definitely some irony here.” “If Microsoft wants customers to view…
Big Tech’s AI safety rift signals disruption and disparity for enterprises
Enterprise concerns While the debate is often framed as a choice between slowing innovation and strengthening oversight, analysts said enterprises should focus less on which…
Hack-back programs could expose your security vendors
For multinationals, the exposure also runs inward. China’s Data Security Law bars providing data stored in China to foreign law enforcement without approval and compels…
Exaforce extends its AI security tool to monitor more than just Claude
While most of these efforts focused on AI agent discovery, a recent study showed that this is only part of the puzzle that enterprises need…
Hundreds of OpenAI agents attack RubyGems platform
“Once the AIs got arbitrary RCE on the build environment, they would sometimes use the build environment to attempt to steal other users’ API keys,…
Critical Cisco Secure Email Gateway zero-day gives attackers root access
If exploitation is suspected on physical devices, Cisco recommends contacting the Cisco Technical Assistance Center. For virtual devices, customers are advised to save all forensic…