Risk-based patching is the future. AI made it table stakes
CISA’s new Binding Operational Directive (BOD) 26-04 marks one of the most important changes to federal vulnerability management in years. Rather than requiring agencies to…
Category: CISOOnline
CISA unveils a six-step blueprint for isolating critical infrastructure during cyberattacks
It’s also important to identify connections that might lower trust or increase network vulnerability, such as those to carrier-provided networks, or Wi-Fi, satellite, radio point-to-point,…
OpenAI rogue AI agent’s attack expanded beyond Hugging Face
The autonomous AI agent that escaped during OpenAI testing exploited weaknesses across a customer workload, a third-party cloud platform, and Hugging Face’s production environment before…
Anthropic finds weakness in Hawk post-quantum digital signature algorithm
“The attack operates under a chosen plaintext threat model, which is the most common assumption used for studying ciphers like AES,” it explained in the…
It’s easier to steal cargo than toothpaste
How did we get here? Freight logistics is quite a fragmented industry. From the production line all the way to consumers or customers, there are…
A 13-year-old flaw is exposing tens of thousands of data center management systems
Why this attack method is dangerous BMCs sit a layer below that which many security products monitor, on shared out-of-band management networks where administrative credentials…
Fortinet’s new FortiGate platform converges firewall, SASE technologies
When configured as a FortiSASE Outpost, the 1200G can be deployed as a local SASE point of presence (POP), extending SASE enforcement closer to users…
Hugging Face breach shows why incident response needs multi-model AI
That said, Hugging Face is an AI infrastructure company with the compute power readily available to host such large models. The big open-weight models need…
Infoblox joins crowded EASM market with DNS-centric approach
Infoblox’s differentiation lies in applying its long-standing DNS expertise to the problem. The company’s new EASM capability discovers internet-facing assets without requiring software agents, credentials…
Why your AI safety certificates are worthless at runtime
This is a dangerous operational blind spot. The governance challenge with autonomous systems lives in their unpredictable runtime behaviour, not in their fixed code. Traditional…
Hackers are compromising hotel Wi-Fi gateways to hijack Microsoft 365 accounts
The compromised Wi-Fi gateways were discovered across multiple US cities as well as in India and Saudi Arabia, and impacted users were from companies in…
Samsung’s entry into AI-powered glasses forces CISOs to again consider corporate risk
“You need to be educating your end-users, with constant reinforcement, telling them, ‘If you do this, here’s how you can harm the company and our…