6 critical security gaps every CISO must address
Such figures indicate that critical cybersecurity gaps remain in many, if not most, organizations. As adversaries lean into automation and artificial intelligence, the pressure is…
Category: CISOOnline
What the industrialization of exploitation means for defenders
Think about what your team used to rely on. Attackers left clues that telegraphed their presence – patterns you could learn, signatures you could catch…
Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects
Until a patch is released, developers and CSOs in organizations with the platform in use should strictly enforce restricted network access to Gogs, Emmons said,…
Cybersecurity trends in SEC filings
The total cost in tokens for development, debugging, and running was around $15, not expensive, but not something I’d likely develop for every project I…
The Gentlemen are coming for your files, and then your network
“Modern ransomware is no longer just about encrypting files,” said Paul Reid, vice president of Adversary Research at AttackIQ. “The bigger risk is how quickly…
Microsoft and security researcher’s dueling posts about cybersecurity disclosures get nasty
Erosion of trust In addition, Ishraq Khan, CEO of coding productivity tool vendor Kodezi, said that he is concerned about the emotional elements of the…
Russia-aligned crime group Greyvibe extensively uses AI in attacks
“While the activities align with Russian state interests, several observed indicators suggest the group has ties to the broader cybercrime ecosystem, with the group potentially…
Certifiably random: Swiss researchers claim perfect random number source
Many sources of randomness are biased. For example, coins or dice tend to favor one side. “Even modern random number generators, which are based on…
DNS-AID will make AI agents easier to discover, says Linux Foundation
While many details remain to be worked out, the proposal suggests domain owners create a new well-known address that can provide a starting point for…
Notepad++ vulnerabilities could enable arbitrary code execution on Windows systems
The two code execution flaws share a single design weakness. Notepad++ stores user choices, such as the path to the command-line interpreter and the list…
GDPR set the tone for regulatory action — and the AI fine pushback to come
The EU’s General Data Protection Regulation (GDPR) came into force eight years ago this week. Over those eight years, European regulators announced an estimated €7.1…
IBM and Red Hat want to become the ‘security clearinghouse’ for open source applications in the enterprise
Announced today, the project will commit $5 billion and 20,000 IBM and Red Hat engineers to build a new ‘enterprise clearinghouse’ to accelerate discovery and…