Scattered Spider duo convicted over $38M Transport for London attack
The attack was investigated by the UK’s National Crime Agency and City of London Police. Police investigators quickly identified Flowers as a suspect prior to…
Category: CISOOnline
How a malicious AI agent skill passed security checks and reached 26,000 users
Once the skill had gained distribution, AIR changed the content behind the fake Stitch documentation. The revised page instructed agents to download and run a…
Attackers exploit Cisco Unified CM flaw weeks after patch release
The flaw is tracked as CVE-2026-20230 and carries a CVSS base score of 8.6. Cisco published the advisory and patches on June 3, when it…
Hole in widely-used FFmpeg codec could crash media servers or enable RCE
A newly discovered critical vulnerability in the FFmpeg media processing framework bundled in a huge number of open source and commercial applications points, again, to…
Meta pauses employee monitoring program after data protections fail
The data collected included full prompts and transcriptions, private conversations, people and performance data, Wired said, adding, “Meta executives have repeatedly defended the data-gathering project,…
Trump sets post-quantum crypto deadlines, launches broader federal quantum initiative
The administration argues that quantum technologies could eventually transform industries, including pharmaceuticals, manufacturing, logistics, energy, and defense, while providing strategic advantages in scientific research and…
Unpatched SharePoint servers opened the door to multiple attackers, Microsoft finds
DART contained both intrusions using a structured response playbook, the report said, pulling telemetry from identities, endpoints, and cloud services into a single view to…
OpenAI rolls out AI-led push to fix open-source software flaws
“CISOs should demand a Safety Relevance Layer in their risk modeling, a structured framework that requires every AI-generated finding to pass automated verification, including dynamic…
Cybersecurity is no longer about protection. It’s about survival.
That is the contradiction at the heart of modern cybersecurity strategy. We say, “Assume the breach,” but we budget, govern, architect, and rehearse as if…
Change your cyber risk strategy to meet AI threats, Five Eyes countries warn CSOs
Ilia Kolochenko, CEO of ImmuniWeb and adjunct professor of cybersecurity practice and cyber law at US-based Capitol Technology University, said the Five Eyes statement “makes…
Klue breach exposed Salesforce CRM data through stolen OAuth tokens
Security vendor and Klue customer Huntress published its own investigation filling in that gap. The attackers had pushed a code update to a Klue integration…
AWS Continuum offers devs help with securing code
“The harder problem is no longer just finding issues, it is knowing which ones are real, which ones matter in their environment, and which ones…