Adobe Commerce max-severity bug comes under active attack
Adobe has released an emergency hotfix, VULN-393411, for the vulnerability. But because attackers had three days to exploit the flaw before a fix arrived, Sansec…
Category: CISOOnline
Securing AI agents: Key controls and best practices
“We spent twenty years building identity management for people: usernames, passwords, role-based access,” says Justin Beals, CEO of governance, risk, and compliance company Strike Graph.…
Back-to-back N-able bugs send admins on a patching spree
A max-severity zero-day bug could be affecting cybersecurity firm N-able’s N-central remote monitoring and management platform, the company said, even as administrators were applying a…
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
Only the organizations enrolled in its Daybreak cybersecurity program were able to access the model, whereas Plus, Pro, Business, and Enterprise ChatGPT subscribers, along with…
What do CISOs need to rest easy about future AI risks?
Moreover, many CISOs are contending with what Almeida described as “organizational blind spots.” “In my conversations with CISOs, I have found that most leaders, security…
Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackers
“While traditional ClickFix campaigns direct victims to the Windows Run dialog, TerminalFix campaigns apply the same technique but direct users to Windows Terminal or PowerShell…
Zero trust has a big AI agent problem ahead
That means agents will get a mix of “rate limits, transaction boundaries, spend and data budgets, sandboxing, approval gates for high-consequence actions, and immutable activity…
The democratization of cyber warfare — and what it means for CISOs
Democratization of war is not a new trend. The firearm was itself a democratizing technology, dramatically reducing the skill and physical barriers required to inflict…
Bidding war for defunct Spirit Airlines’ employee data will not die
The destiny of Spirit Airline’s data is still undecided, months after the company sought bankruptcy protection. AI data company Micro1 has now offered $12.5 million…
FBI investigates breach of 153 million driving license records at IDscan.net
Drivers in North America received a nasty shock this week when it was revealed that digital scans of 153 million drivers’ licenses were for sale…
OpenAI launches GPT-6 Astra, its first model to cross a critical cybersecurity threshold
Developers can access Astra in the API as gpt-6-astra or through Amazon Bedrock, OpenAI said, priced at $10 per million input tokens and $50 per…
CISO vs. CSO: Rethinking cybersecurity leadership
That creates a powerful combination. The CSO provides the top-down, cross-functional influence. The CISO provides the technical depth and delivery capability. Neither role has to…