Trusted Chrome, Edge extensions weaponized in supply chain campaign
The campaign was heavily focused on cryptocurrency theft, but its capabilities went further. Socket observed code that captured information typed into web forms and extracted…
Category: CISOOnline
CTEM can give your security team a contextual edge
As a result, contextual intelligence must combine technical context (exploitability, exposure, existing measures) with business context (which systems support critical processes, legal obligations, or contractual…
ServiceNow patches three maximum severity flaws that could put enterprise data at risk
Overall, Seker noted, AI changes the economics of vulnerability exploitation more than it changes the underlying vulnerability. Attackers are using AI to analyze disclosures, generate…
GPUThor hardware attack can root Nvidia GPU systems
However, the researchers also tested Nvidia server GPUs such as A100 and H100 or newer GPUs on the Blackwell architecture like RTX 5090 or RTX…
Why privacy by design is key to earning customer trust
The first area is customer intent. If a customer changes a privacy setting, opts out of personalization or asks for certain data to be deleted,…
How to respond to an AI agent security incident
Hours 1-4: Scope the blast radius Now I am answering what the agent actually touched. I pull the full tool-call log, every API invoked, every…
AI can be made to read an email much differently than you do
During each pass through the injected email, the summary output reported an invoice deadline of September 3, 2026, instead of the actual August 21, 2026,…
Critical infrastructure’s long, undefended tail exposed by UK energy attack
The same connection can expose equipment designed decades ago, when its manufacturers never contemplated that it would face internet-based attackers. “The thing that brought the…
Who is accountable when your AI agent goes rogue?
Security teams must extend the same controls to the agent’s interactions with internal systems and agents. Restricting what it can access on the internet, or…
Microsoft warns patch window is collapsing, urges shift to network-level containment
Microsoft is warning that the window for patching vulnerabilities is rapidly shrinking, as attackers move from disclosure to exploitation faster than enterprises can safely deploy…
NemoClaw’s AI can be poisoned through a browser tab
The problem starts with networking. Because the OpenShell sandbox runs inside a Docker container, it cannot reach an Ollama service listening only on the loopback…
How Equifax is using AI to elevate its cybersecurity
“We can use AI in that process as well,” Koppen says, noting how AI has helped Equifax perform code review earlier in the design process,…