June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’
Microsoft recently told customers it expects the number of vulnerabilities in monthly updates to continue rising, influenced by the growing use of AI tools. As…
Category: CISOOnline
Microsoft feud escalates as researcher drops new Windows zero-day
The researcher said their exploit uses a race condition problem affecting Microsoft Defender, giving attackers less than a hundred percent odds at success, which can…
AI red teaming comes of age
“Agentic AI is really the intersection of all of the cybersecurity risks that come with traditional software systems along with all of the AI security…
UK move to filter photos and messages triggers encryption worries for CISOs
Starmer did not go into a lot of detail, preferring to let technology companies craft their own plans, but in this case the details matter.…
Anthropic releases Mythos-class Fable 5 model with safeguards for cyber risks
According to Dianne Penn, Anthropic’s head of product management, research, and labs, the goal was to make Mythos-level intelligence broadly available without exposing users to…
Security shifts to the human layer as AI scams surge
Google, in its latest Fraud & Scams Advisory, separately highlighted the evolution of traditional phishing into Adversary-in-the-Middle (AITM) and QR-code phishing attacks while documenting growing…
Check Point warns of ransomware-linked attacks exploiting outdated VPN protocol
“To date, the observed exploitation has been limited to a few dozen targeted organizations globally,” Lotem Finkelstein, vice president of research at Check Point, said…
AI worm prototype shows attackers don’t need Mythos to take over your network
“We discovered that it is possible to create an AI-driven computer worm, using only small, free AI models, that can autonomously identify each machine’s unique…
OpenAI’s Lockdown Mode is trying to solve the problem that it created
If the agent finds a way to access internal emails and documents from Finance and shares the answer with the end user, and that end…
Attackers exploiting unpatched Cisco SD-WAN flaw
The older authentication bypass flaws were exploited by a cyberespionage threat actor Cisco Talos tracks as UAT-8616. It’s not clear whether the new vulnerability was…
Why most enterprise security teams would fail a military readiness test
More recently, researchers at Cisco revealed that frontier models from OpenAI, Anthropic, Google, xAI, and Amazon have significantly worse risk profiles when pressured in multi-turn…
Protocol Buffers schemas expose remote code execution risk
Protocol Buffers is a technology for packaging data in a compact, structured format to streamline the exchange of information between different applications. The protobuf.js library…