Cybersecurity needs more prevention and less reliance on cure
The limits of a detection-first model When we gather for industry forums like the RSAC Conference, the topics include automation, AI-driven response and operational resilience.…
Category: CISOOnline
Flaw surge fuels need for CISOs to rethink vulnerability management
“Virtual patches require accurate detection signatures, they don’t remediate the underlying vulnerability, and they can create a false sense of closure that delays proper patching…
Senior executives are killing your shadow AI strategy
“That requires executive alignment, clear governance, and providing secure AI tools that people actually want to use,” he adds. “When leadership embraces those solutions, the…
Fake TTF files deliver stealthy malware in global phishing campaign
The campaign has been deploying malware families such as Agent Tesla, Remcos, XWorm, and a Snake Keylogger variant known as Best Private LOGGER, since at…
OnlyFans performers become unlikely allies of CISOs in securing websites
These distribution systems work in three stages: entry points using adult or other content to attract and capture web traffic, a routing system sends it…
Google must open Android to rival AI agents, EU orders
The EU move doesn’t just cause problems for Google but for CISOs as well, warned Roman Stanek, CEO of Good Data AI. “Enterprise security has…
The SaaS blind spot: Why security teams can’t get inside their own apps
What gets me about this one is the timeline. That token had been sitting there since October 2021. Nearly two years, inside Microsoft, before anyone…
The executive profile your security team isn’t defending
Monitor regularly The starting point is establishing visibility into what AI tools are actually returning about your executive population. Not a one-time audit conducted during…
When AI gets a body, it inherits an attack surface
Embodied AI puts a model inside a machine that operates in the physical world: a robot, an arm, a humanoid. Once a model gains motors,…
Zoom patches account takeover hole
The company originally said that the takeover issue impacted Zoom Desktop Client for Windows before version 7.0.0, Zoom VDI Client for Windows before version 7.0.10…
CISA urges immediate SharePoint hardening as exploits mount
“This is what separates an IT incident from a business crisis,” said Chris Boehm, field CTO at Zero Networks. “One compromised SharePoint box is a…
CISA urges software vendors to formalize vulnerability disclosure programs
The Cybersecurity and Infrastructure Security Agency (CISA) and four international cybersecurity agencies have published guidance urging software manufacturers and online service providers to establish coordinated…