AI, security operations and the new race against time
You don’t trust AI in the abstract. You trust that a system understands your tools, your telemetry and the edge cases that only exist in…
Category: CISOOnline
10 survival tips for CSOs who report to the CEO
We asked several current CSOs, CEOs, and IT staffing experts for advice on how security executives can best navigate a direct reporting relationship with their…
Claude Mythos FAQ: Capabilities, access, competitors, implications
Western intelligence agencies that form the Fives Eyes alliance issued a statement warning that frontier AI models such as Claude Mythos are “fundamentally transforming both…
Context bombing heralds a new AI era of deceptive defense
Furthermore, once one of these banned instructions make it into the context window, the whole session is poisoned, and the model will often refuse to…
AI agents can escape sandboxes without ever breaking them
Sandboxes have become a key security control for AI coding agents, but new research suggests they may not provide the isolation many organizations assume. Pillar…
White hat hacker Park Chan-am zeros in on the AI era’s key security challenges
The ever-widening blast radius of AI testing Local AI testing environments are becoming a dangerous security blind spot that information security leaders often overlook. Rapid…
New ACR Stealer campaigns use WebDAV, MSHTA to evade detection
The second chain uses MSHTA, heavily obfuscated PowerShell, stenography, and predominantly fileless, in-memory execution to minimize forensic trails. “The most troubling part of ACR Stealer…
ServiceNow’s sandbox escape RCE hole now exploited in the wild
“A compromise that starts in the cloud tenant can end up inside the corporate network, turning a SaaS incident into an on-premises one,” he pointed…
AI adoption and business acceleration are changing the expectations of technology risk management
As AI becomes embedded in customer experiences, internal workflows, and throughout the supply chain, security leaders are being asked to do more than manage risk.…
Patch now: WordPress REST API bug allows remote code execution
In a technical analysis published by Hadrian, researchers reconstructed the root cause from WordPress’ security patch released on July 17. The vulnerability, they said, resides…
SOCs face a human challenge as AI speeds alerts and threats
“People who work in SOCs are now seeing overwhelming volumes of data, and they’re getting fatigued,” Griffiths tells CSO. AI can help automate portions of…
7 skills and traits of elite security engineers
“The same generative tools that help security teams work faster are available to adversaries, and it shows,” Ahmed says. “Phishing campaigns read better and land…