GreatXML zero-day BitLocker bypass doesn’t seem to work, yet
“If Defender offline scan was initiated in the victim machine at any point then there is no need to login, the machine is automatically vulnerable,”…
Category: CISOOnline
Warrantless wiretaps cut off for a week following US Congress vote
This has significance for CISOs because they need to be aware of how communication between the US and other countries is being monitored. The Act…
Prompt injection breaks today’s AI agents, study warns
The researchers executed 3,168 adversarial runs across NanoBrowser and BrowserUse using 264 benchmark cases. Indirect prompt injection attacks, where malicious instructions are hidden inside ordinary…
Oracle PeopleSoft zero‑day fuels ShinyHunters extortion spree
Google Cloud’s threat intelligence team (GTIG) said the attack unfolded between May 27 and June 9, before Oracle publicly acknowledged the issue. Google said it…
Aged-domain acquisition: The tradecraft phishing operators are using to bypass your mail filter’s reputation score
How age-weighted reputation became the blind spot Most enterprise mail filters from major vendors, including Microsoft Defender for Office 365, Proofpoint, Mimecast and Cisco Talos,…
China-linked recon botnet outpaces enterprise defenses
Lumen said the activity is linked to Chinese nation-state-backed actors, including Volt Typhoon. The findings point to a growing challenge for enterprise security teams. Many…
What SRE teams need before they trust AI agents
Trust is operational, not emotional SRE teams do not trust tools in the abstract. They trust behavior under stress. A platform earns credibility when it…
ServiceNow fixes API issue after reports of suspicious tenant activity
According to the company’s advisory, the vulnerability was initially reported through ServiceNow’s bug bounty program in April, prompting an investigation and subsequent security updates. ServiceNow…
Frontier AI models offer sneak peak of seismic cyber shifts ahead
Countermeasures For defenders, the answer to the challenge posed by frontier AI models is faster vulnerability remediation. “Security teams need to stop treating vulnerability discovery…
GitHub finally pulls the plug on automatic install script execution for npm
Specifically, the post said, “allowScripts defaults to off: npm install will no longer execute preinstall, install or postinstall scripts from dependencies unless they are explicitly…
CISA tells agencies to patch smarter, not harder — foreshadowing broader industry practice
That’s the backdrop against which the US Cybersecurity and Infrastructure Security Agency issued Binding Operational Directive 26-04. The directive reflects growing recognition that patching based…
June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’
Microsoft recently told customers it expects the number of vulnerabilities in monthly updates to continue rising, influenced by the growing use of AI tools. As…