Attackers target zero-day vulnerability in geospatial data platform GeoServer
If the database runs with administrator permissions on Microsoft SQL Server, the account also has the ability to execute commands on the system, so the…
Category: CISOOnline
Trump administration opens door to private-sector cyber offensives
“Enterprise CISOs should be careful before feeding telemetry into these programs,” said Neil Shah, vice president for research at Counterpoint Research. “The threat intelligence is…
AI agents wage near-autonomous cyberattack on Asian government networks
Autonomous AI agents built on open-source frameworks breached Taiwanese government systems, compromised credentials, and probed a nuclear safety agency in a multi-day cyberattack that researchers…
Microsoft wants you to rethink your approach to cyber defense
Cyber defenders need to shake off traditional best practices and switch from reactive patching to building inherently resilient systems in the face of AI-accelerated vulnerability…
17 old software bugs that took way too long to squash
“While investigating an unrelated vulnerability, Trellix Advanced Research Center stumbled across a vulnerability in Python’s tarfile module,” Kasimir Schulz, a vulnerability researcher for Trellix’s Threat…
Researcher creates workaround for Microsoft Defender security patch
“What makes it dangerous is what it does once they’re in: it turns an ordinary low-privilege account into full system control by abusing Defender itself,…
The AI harness is the new attack surface
“Teams think in terms of apps, services, pipelines, or bots,” Santos says. Harnesses disappear into code repositories, SaaS products, and vendor configuration screens instead of…
Fake CCleaner downloads turn Chrome into a credential-stealing surveillance tool
When executed, “cscript.exe” runs a series of scripts carrying out basic system reconnaissance like collecting the machine GUID, hostname, and supported languages. It then replaces…
4 barriers to AI adoption in enterprise SOCs
Begin with your most critical systems. Automate repetitive investigations first. Expand integrations over time. Allow analysts to learn alongside the technology. This approach not only…
Metabase SQLi exploit grants attackers total access
Metabase said that after it discovered the attack, it immediately blocked the exploited endpoints, patched the vulnerability, terminated relevant sessions, and revoked credentials used in…
Zoom zero-click RCE flaws allow attackers to compromise meeting participants
“The entire operation, from finding the flaw to building a working exploit, was carried out by A [Security] using fewer than 20 prompts on publicly…
OpenAI launches GPT-5.6-Cyber as AI narrows vulnerability response window
Keith Prabhu, founder and CEO of Confidis, also argued that models such as GPT-5.6-Cyber may accelerate vulnerability discovery and weaponization without fundamentally shifting the attacker-defender…