Practical lessons from deploying AI securely at scale
When I first started working on enterprise AI security initiatives, I expected the biggest challenges to be technical. I assumed we’d spend most of our…
Category: CISOOnline
Verification closes the loop | CSO Online
Most organizations assume remediation reduces risk. It’s a reasonable assumption. A vulnerability is identified, a patch is applied, the scanner comes back clean, and the…
Attackers hid malware inside Oracle Database after SQL injection breach
The attackers could have simply extracted or manipulated data through SQL injection, but instead, they expanded the exploit to include long-term persistence and remote command…
Autonomy is earned, not claimed
After more than 300,000 production penetration tests (pentests), our company has learned something that may surprise people watching the recent wave of autonomous security announcements.…
CTEM isn’t failing. It’s not being operationalized
Cybersecurity is full of frameworks, regulations, and directives that tell organizations what they should do. Zero Trust, NIST, CIS Controls, CMMC, DORA, NIS2, and now…
The exploit window is shrinking. Most security workflows are not
AI is accelerating vulnerability discovery, exploit development, and attacker weaponization faster than most organizations can adapt. Security teams are inundated with vulnerability disclosures, threat intelligence…
Cybersecurity needs a new operating model
For decades, cybersecurity has been built around one assumption: defenders had enough time to: Discover vulnerabilities. Assess exposure. Deploy patches. Verify that critical systems remained…
You’re only as secure as your last evaluation
The updated Cybersecurity Maturity Model Certification (CMMC) represents a critical evolution in the Department of War (DoW) strategy to secure the Defense Industrial Base (DIB).…
Meta joins OpenAI, Anthropic in latest AI test breach
Meta has become the third frontier AI developer in recent weeks to disclose a security incident involving one of its advanced AI models during cyber…
What is the cost of a data breach cost?
Severe business downtime can cost millions Business downtime can also be significantly costly for a breached organization, depending on the level and extent of the…
Human oversight is still critical as AI patching tools miss security risks
Fixing is not the same as securing Instead of simply checking whether the fixed code compiled or passed automated tests, 1Password said it reviewed every…
Snowflake attacker pleads guilty to hack of 165 companies’ data
Moucka and other members of the group used stolen login credentials to compromise data belonging to at least 165 customers of a US-based software-as-a-service company.…