Microsoft patched an ‘agent-only’ role that was not
“The impact depends on the privileges assigned to the targeted service principal,” the researchers said. “In environments where service principals are widely used or hold…
Category: CISOOnline
4 Wege aus der Security-Akronymhölle
Gefangen im Buchstabensud? mikeledray | shutterstock.com Vor seinen MAGA- und DOGE-Eskapaden wurde Elon Musk in erster Linie als visionärer Entrepreneur wahrgenommen. Damals, im Jahr 2010,…
Autonome KI-Agenten: Strategien für die neue Bedrohungslage
Ein bereichsübergreifendes „Agentic Governance Council“ zu etablieren ist daher ein notwendiger strategischer Schritt. Dieses Gremium sollte die Verantwortung tragen und die strategische Führung übernehmen. Es…
Malicious pgserve, automagik developer tools found in npm registry
In addition, she said, developers need tooling that checks whether what is published to npm actually matches what is in the source repository. “Not all…
Claude Mythos signals a new era in AI-driven security, finding 271 flaws in Firefox
Firefox uses a defense-in-depth strategy, with internal red teams applying multiple layers of “overlapping defenses” and automated analysis techniques, he explained. Teams run each website…
Riddled with flaws, serial-to-Ethernet converters endanger critical infrastructure
Search engines such as Shodan show close to 20,000 internet-exposed serial-to-Ethernet converters, though the number of such devices deployed within networks is likely in the…
Google drafts AI agents to secure systems against AI hackers
Wiz, AI-BOMs, and securing the AI development sprawl Google has expanded its Wiz portfolio to tackle the chaos of AI development and multi-cloud risk. Wiz…
CISA last in line for access to Anthropic Mythos
The US Cybersecurity and Infrastructure Security Agency (CISA) does not yet have access to Anthropic’s bug-hunting AI model, Claude Mythos, even though other government agencies…
New US House privacy bills raise hard questions about enterprise data collection
It states that a controller, namely any entity that is processing personal data, may not process the sensitive data of a teen without obtaining verifiable…
Scattered Spider co-conspirator pleads guilty
However, there are members of the Scattered Spider group still active: last year it branched out and attacked a number of other businesses, including Marks…
The curious case of Sean Plankey’s derailed CISA nomination
CSO contacted Scholten’s office multiple times seeking comment, but received no response. CSO also received no response to the questions surrounding this letter from either…
3 practical ways AI threat detection improves enterprise cyber resilience
Why “more alerts” isn’t the same as better security If you run security in an enterprise environment, you already know the problem. Generic detection tools…