MikroTik patches flaws currently being exploited to take over routers
MikroTik released patches in RouterOS 7.25 beta 3, 7.24.2, 7.23.4, and 6.49.21 and advises against enabling the SSH service on the internet interface. Despite this…
Category: CISOOnline
ChatGPT flaw lets attackers pull Gmail data across accounts via a hidden channel
A limited grant “narrows what any container-level leak can expose,” Handa said. She also recommended routing connected-app traffic through DLP or CASB inspection to catch…
SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise
The survey found that compromised NHIs (31%) are nearly 2x as likely to be the primary entry point compared to phishing and social engineering (17%),…
50% of CISOs see Mythos as a sign to exit the profession
“In the security space, I would use the AI for anomalies and to triage existing investigations,” he says. “I probably wouldn’t start out with using…
September 2026 Patch Tuesday roundup: Plugs for two zero day holes among almost 1,000 fixes in Windows
Tyler Reguly, Fortra’s associate director of security R&D, pointed out that as long as Microsoft is playing catch-up on patching vulnerabilities, numbers have lost all…
Mars Security Debuts Automated Threat Engine Processing Live Cyber Intelligence Into Validated Rules Within Minutes
By prioritizing behavioral mechanics over static signatures, Mars ensures detection integrity persists even as threat actors alter their tools or infrastructure. The underlying architecture also…
CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production
On a conventional server, disabling an unused service is usually a routine hardening task. On a Siemens S7 controller, the supposedly unused service may carry…
Adobe Commerce max-severity bug comes under active attack
Adobe has released an emergency hotfix, VULN-393411, for the vulnerability. But because attackers had three days to exploit the flaw before a fix arrived, Sansec…
Securing AI agents: Key controls and best practices
“We spent twenty years building identity management for people: usernames, passwords, role-based access,” says Justin Beals, CEO of governance, risk, and compliance company Strike Graph.…
Back-to-back N-able bugs send admins on a patching spree
A max-severity zero-day bug could be affecting cybersecurity firm N-able’s N-central remote monitoring and management platform, the company said, even as administrators were applying a…
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
Only the organizations enrolled in its Daybreak cybersecurity program were able to access the model, whereas Plus, Pro, Business, and Enterprise ChatGPT subscribers, along with…
What do CISOs need to rest easy about future AI risks?
Moreover, many CISOs are contending with what Almeida described as “organizational blind spots.” “In my conversations with CISOs, I have found that most leaders, security…