Secure AI adoption starts with API best practices
Closing this security gap isn’t just important to mitigate the financial and reputational damage of the worst-case scenario of a data breach. It’s also increasingly…
Category: CISOOnline
AI is making cybersecurity fundamentals more important than ever
At the same time, organizations are deploying systems vulnerable to prompt injection, model manipulation, data leakage, and other attacks aimed directly at AI. Grimes compares…
Zero Networks launches Least Agency Enforcement to stop compromised AI agents at the network layer
“We’re doing the same thing for AI agents that least privilege did for people, except now it must be automatic,” said Benny Lakunishok, CEO and…
Stop depending on heroics and start operationalizing third-party risk
This is something that I have witnessed time and again with clients. The team is excited about a new platform and reasonably anticipates a quick…
How MFA gets hacked — and strategies to prevent it
The security benefits of multifactor authentication (MFA) are well-known, yet MFA continues to be poorly, sporadically, and inconsistently implemented, undercutting its effectiveness as a security tool while…
Copilot worm can spread through Microsoft Word docs
An “AI worm” can spread through Microsoft Word documents using Copilot as a vector, a prominent Norwegian AI researcher reported on Tuesday. The report from…
Your Black Hat agenda: 5 key priorities and what to avoid
Like RSA, Black Hat also changed in 2005 but for a completely different reason. The conference was sold to CMP Media that year for $14m…
After OpenAI, Anthropic finds Claude breached three organizations during cyber tests
Anthropic said the most serious incident involved Claude Opus 4.7 exploiting vulnerabilities at a real company whose domain matched the fictional evaluation target, allowing the…
Microsoft Azure Cosmos DB key leak flaw patched before exploitation
Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmos DB databases…
VMware patches in ESX, vCenter, Fusion, Cloud Foundation and more
Broadcom has addresses five vulnerabilities in its VMware product range, three of which have been accorded a “critical” rating. The affected products are: VMware ESX,…
Google creates another set of names for threat actors
The new method of naming will involve a two-word approach: The first word will refer to motivation, attribution, or activity type, while the second word…
Smart glasses banned at DefCon
The smart glasses ban has been added to DefCon’s already strict rules on photography, which among other things ask visitors not to take group shots…