Why data quality dictates security operations success
As AI takes on more security operations center (SOC) workflows to automate threat triage, indicator extraction, and incident report generation, security operations leaders face a…
Category: CISOOnline
Zhipu says new coding AI developed advanced cyber skills faster than expected
“After expert review, screening, and deduplication, the model identified 2,436 vulnerabilities across 269 projects, including 1,097 medium-to-high severity issues,” the statement added. The findings cover…
What the CISO role will look like in 2029
And they’ll have to change their operating model. “Security has always been about managing uncertainty. What’s changing is the speed at which uncertainty develops,” he…
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability
Advice for CSOs For CSOs, the primary strategic priority should be reducing the window of exposure around CVE-2026-68820, because exploitation is already occurring, Bicer said.…
Researcher bypasses Microsoft Defender patch, seizing control
“What makes it dangerous is what it does once they’re in: it turns an ordinary low-privilege account into full system control by abusing Defender itself,…
It took $58 to break Microsoft’s SCCM, but a patch made it harder
The revealed attack chain combines four weaknesses, including a broken authorization in the AdminService upload functionality, a path-traversal flaw dubbed “CabSlip,” weak code-signing validation that…
How CSOs can turn cybersecurity into a business growth strategy
Build security into the business, not around it The most effective cybersecurity programs are not created in isolation. They are built through partnership with the…
How to reduce cybersecurity backlogs and fix vulnerability debt
An increasing backlog indicates a failure in the operating model Security teams often become the default owners of any issue labeled as a security concern.…
Oracle’s new database security tool is free — for six months
Oracle is also concerned about the threat posted by the launch of bug-hunting AI model Mythos. In May it responded by accelerating its patching schedule,…
Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those…
Akira ransomware reboots into Windows Safe Mode to knock EDR offline
The approach is not entirely new. Huntress pointed to ransomware families, including Snatch and AvosLocker, that have used Safe Mode to disable defenses for years.…
5 key takeaways from Black Hat USA 2026
Microsoft’s Yossi Weizman and Echo’s Mor Weinberger showed that recent supply chain attacks such as Shai-Hulud, Trivy, and Megalodon repeatedly used the same patterns: forged…