One C2 kit. 30 customers. 2 governments
I was mapping the command-and-control infrastructure behind a state-linked intrusion set when the query came back and effectively ended the exercise I thought I was…
Category: CISOOnline
Ruby on Rails critical bug puts every image upload under scrutiny
Don’t trust image processing pipelines Complex image libraries support many formats and rely on numerous parsers and third-party components, creating a broad attack surface, Seker…
ChainDrop credential stealing worm infects over 400 npm packages
Mitigation Unfortunately, enterprise security teams must perform full audits of developer machines. The compromised packages are transient dependencies for thousands of others and if any…
Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security
Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat USA 2026. The new capabilities build on…
Critical Azure Cosmos DB flaw threatened cross-tenant database takeover
Rather than evaluating managed database services primarily on features such as encryption, private networking, or identity controls, enterprises should examine how providers isolate tenant-controlled execution…
Secure AI adoption starts with API best practices
Closing this security gap isn’t just important to mitigate the financial and reputational damage of the worst-case scenario of a data breach. It’s also increasingly…
AI is making cybersecurity fundamentals more important than ever
At the same time, organizations are deploying systems vulnerable to prompt injection, model manipulation, data leakage, and other attacks aimed directly at AI. Grimes compares…
Zero Networks launches Least Agency Enforcement to stop compromised AI agents at the network layer
“We’re doing the same thing for AI agents that least privilege did for people, except now it must be automatic,” said Benny Lakunishok, CEO and…
Stop depending on heroics and start operationalizing third-party risk
This is something that I have witnessed time and again with clients. The team is excited about a new platform and reasonably anticipates a quick…
How MFA gets hacked — and strategies to prevent it
The security benefits of multifactor authentication (MFA) are well-known, yet MFA continues to be poorly, sporadically, and inconsistently implemented, undercutting its effectiveness as a security tool while…
Copilot worm can spread through Microsoft Word docs
An “AI worm” can spread through Microsoft Word documents using Copilot as a vector, a prominent Norwegian AI researcher reported on Tuesday. The report from…
Your Black Hat agenda: 5 key priorities and what to avoid
Like RSA, Black Hat also changed in 2005 but for a completely different reason. The conference was sold to CMP Media that year for $14m…