Breaking the SOC triangle: How AI reshapes security operations trade-offs
The constraint is not a failure of strategy. It is structural. And until recently, it was largely unavoidable. Why the SOC was built this way…
Category: CISOOnline
M365 Copilot SearchLeak: Your prompt injection attack surface just got bigger
In the case of Copilot Enterprise Search, Microsoft had a guardrail in place that enclosed the LLM’s search responses inside blocks, presenting it to the…
Oracle releases 245 new security patches, all rated ‘high-priority security’
“The figure worth watching is not the 245 patches but where they land,” he noted. “Of the 245 fixes, 106 sit in Fusion Middleware and…
New CISO appointments 2026 | CSO Online
New CISO appointments in March 2026 Kathy Wang joints micro1 as CISO Frontier AI model training company micro1 has hired Kathy Wang as CISO. She…
FortiBleed campaign exposes 75,000 Fortinet firewalls worldwide
“Attribution is ongoing, but the operational fingerprints are clear,” SOCRadar researchers said in a blog post, adding that the tooling and targeting choices are consistent…
Attackers abuse Google Ads, GitLab, and Claude to deliver malware
Dhar added that in most cases, access to applications such as Google, GitLab, and AI applications is not blocked, as this could hinder operations within…
What 22,000 breaches teach us about incident preparedness
The structural problem is straightforward. Organizations faced a median of 16 CISA Known Exploited Vulnerabilities in 2025, up from 11 the year before. Only 26%…
5 AI risk management frameworks for shoring up key gaps
Its main goal is to tackle the unique vulnerabilities that come with AI technologies such as attacks that tamper with training data, trick models through…
Estonia plans government IDs giving AI agents rights and responsibilities
There’s no shortage of agentic AI tools out there that offer to perform online tasks on your behalf, if only you’ll give them all your…
Google’s Vertex AI SDK could allow RCE through bucket squatting
A design flaw in the Vertex AI software development kit (SDK) for Python, Google Cloud’s managed platform for building, training, and deploying AI agents, could…
Microsoft says you don’t need another email security tool; experts say, not so fast
The SEG players it ranked itself against this year includes Mimecast, Proofpoint, Hornetsecurity, Trend Micro, Iron Port (Cisco), Barracuda, and FireEye (Trellix); ICES companies include…
Zero trust isn’t broken. Most companies just do it wrong.
Kindervag, currently chief evangelist at Illumio, concurs. “AI doesn’t change the fundamentals of zero trust. It reinforces them. Zero trust is the strategy that allows…