7 biggest healthcare security threats
Munro adds: “Other connected medtech devices Pen Test Partners have found security issues with include cranial stimulators, dosing pumps, and medical robots, among many others.…
Category: CISOOnline
Critical nginx UI tool vulnerability opens web servers to full compromise
“This exposes 12 MCP tools, including config writes with automatic nginx reload, to any host on the network. One unauthenticated API call is all it…
Copilot and Agentforce fall to form-based prompt injection tricks
Enterprise AI agents are supposed to streamline workflows. Instead, two fresh findings show they can just as easily streamline data exfiltration. Security researchers have uncovered…
The deepfake dilemma: From financial fraud to reputational crisis
Technical analysis: Expert forensic review of audio and video content to determine whether the content has been manipulated and to generate forensic proof for stakeholders.…
April Patch Tuesday roundup: Zero day vulnerabilities and critical bugs
Teams must be adequately resourced to cope Reguly said CISOs this month might be worried about the sheer number of items that admins have to…
4 questions to ask before outsourcing MDR
Security teams are stretched thin. Alerts never stop, attackers move faster, and expectations for uptime and resilience keep rising. For many IT and security leaders,…
China-linked cloud credential heist runs on typos and SMTP
Indicators and detection Despite the use of stealth, the researchers were able to connect the dots with the help of independent research by @Xlab_qax, who…
How AI is transforming threat detection
Modern IT environments can generate billions of logs and events each day across endpoints, networks, cloud services, and identity systems. Machine learning models can correlate…
Anthropic’s Mythos signals a structural cybersecurity shift
Evron told CSO that assembling that level of input among so many leaders so quickly reflects the nature of cybersecurity itself: “The cybersecurity industry is…
CISOs tackle the AI visibility gap
Like others, Hornstein relies on longstanding security principles, citing the confidentiality, integrity, and availability (CIA) triad as the foundation for his approach to ensure that…
Critical flaw in Marimo Python notebook exploited within 10 hours of disclosure
How the flaw works Marimo’s server includes a built-in terminal feature that lets users run commands directly from the browser. That terminal was accessible over…
Seven IBM WebSphere Liberty flaws can be chained into full takeover
SSO endpoints are often internet-facing by design, researchers noted, turning the flaw into a remote entry point and making chaining with additional weaknesses possible. AdminCenter…