Identity: The operational control plane for agentic AI
Existing security controls weren’t designed for AI agents. Static credentials and standing privileges aren’t sufficient for an emerging model where organizations need to rapidly authorize,…
Category: CISOOnline
The agentic blind spots in your zero trust program
Stephen Wilson, field chief technology officer for HashiCorp, an IBM company, likens AI agents to “really smart kindergartners.” “They know how to do something, but…
This AI agent autonomously hacked a network, adapted on the fly, and demanded a ransom
Adaptive decision making is the biggest concern, he said. “Traditional detections assume attackers follow fairly predictable paths. An AI agent can quickly change tactics if…
7 cyber risk assessment gotchas to avoid
“As a result, it becomes difficult to communicate the real risks of breaches and other risks,” he states. “Worse yet, it gives security team members…
New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild
Smaller leak but still dangerous Even though watchTowr was only able to leak bytes of data using this flaw, compared to kilobytes with previous CitrixBleed…
Microsoft 365 users fall victim to one-in-a-million password spray attack
The attacks all came from a single source, an IPv6 address range controlled by internet provider LSHIY LLC, Huntress said in a blog post. LSHIY…
Adobe premieres a second Patch Tuesday each month to deliver fixes faster
As an early indicator of the need for the faster rhythm, it issued two security advisories dealing with a number of critical vulnerabilities on June…
Argo CD flaw shows why GitOps infrastructure should be treated as tier zero
“CISOs should therefore evaluate which workloads can communicate with the Argo CD control plane, whether east-west traffic is appropriately segmented, and whether unnecessary trust relationships…
Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector
Cursor, which was recently acquired by SpaceX for $60 billion in stock, produces one of the most widely used AI-assisted coding tools used in the…
Detection engineering: A programmatic approach to identifying cyber threats
The survey’s data suggested that many companies have not just merely adopted detection engineering practices but have made it a strategic focus of their cyber…
Malicious Chromium extension spoofs Perplexity AI to hijack browser searches
Microsoft similarly recommended that organizations verify extension publishers, carefully review requested permissions, and monitor enterprise browsers for unauthorized or unapproved extensions. Mukhopadhyay said CISOs should…
GDPR at 10: Landmark data protections, increasing business burden
The result: According to Bitkom, 59% of companies see European data protection as an advantage for AI development in Germany and Europe compared to other…