FortiBleed campaign exposes 75,000 Fortinet firewalls worldwide
“Attribution is ongoing, but the operational fingerprints are clear,” SOCRadar researchers said in a blog post, adding that the tooling and targeting choices are consistent…
Category: CISOOnline
Attackers abuse Google Ads, GitLab, and Claude to deliver malware
Dhar added that in most cases, access to applications such as Google, GitLab, and AI applications is not blocked, as this could hinder operations within…
What 22,000 breaches teach us about incident preparedness
The structural problem is straightforward. Organizations faced a median of 16 CISA Known Exploited Vulnerabilities in 2025, up from 11 the year before. Only 26%…
5 AI risk management frameworks for shoring up key gaps
Its main goal is to tackle the unique vulnerabilities that come with AI technologies such as attacks that tamper with training data, trick models through…
Estonia plans government IDs giving AI agents rights and responsibilities
There’s no shortage of agentic AI tools out there that offer to perform online tasks on your behalf, if only you’ll give them all your…
Google’s Vertex AI SDK could allow RCE through bucket squatting
A design flaw in the Vertex AI software development kit (SDK) for Python, Google Cloud’s managed platform for building, training, and deploying AI agents, could…
Microsoft says you don’t need another email security tool; experts say, not so fast
The SEG players it ranked itself against this year includes Mimecast, Proofpoint, Hornetsecurity, Trend Micro, Iron Port (Cisco), Barracuda, and FireEye (Trellix); ICES companies include…
Zero trust isn’t broken. Most companies just do it wrong.
Kindervag, currently chief evangelist at Illumio, concurs. “AI doesn’t change the fundamentals of zero trust. It reinforces them. Zero trust is the strategy that allows…
Cisco patches SD-WAN flaw amid evidence of active exploitation
“CISA and NSA have issued guidance about architecture, exposure, and management-plane hygiene, which goes beyond typical CVE-by-CVE patching,” Prabhu said. “Attackers are targeting the SD-WAN…
China-linked hackers target US, Canada research using legacy REDCap exploits
Parallelly, the other two modules inject credential harvester code into the authentication system file, and backdoor code into the custom hooks configuration file, respectively. “Upon…
Sovereign cloud won’t fix your AI risk. Identity governance will
US enterprises are not far behind. The SEC’s cybersecurity disclosure rules, CISA’s AI security guidance, proposed state-level AI regulations and growing board-level scrutiny of AI…
5 runtime signals for catching a compromised AI agent
The trifecta worked as a signal because, at the time, agents were mostly narrowly scoped. An agent capable of performing only one or two of…