Cisco warns of actively exploited Secure Email Gateway flaw
Cisco recommends checking the appliance’s system logs for indicators of compromise using the command grep “System Security” system_logs. However, a clean result should not replace…
Category: CISOOnline
AI agents aren’t ‘going rogue.’ Frontier labs are skipping security basics.
SANS Lee says, “That’s where the traceability for both liability and insurance comes into play, because if one of these agents is detected, and they’re…
As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages
Microsoft says it has dismantled a criminal marketplace responsible for 1 billion malicious messages. Working with international authorities and several tech and cybersecurity companies in…
Cybersecurity is a leadership problem: Why the management model needs to catch up
That is a leadership and management requirement, not something structural separation can solve on its own. Cybersecurity may be undermanaged, not just underfunded Security spending…
Hackers abuse the Ivanti Connect Secure bug to gain access without accounts
Tracked as CVE-2026-104935 and rated at CVSS 8.6 out of 10, the vulnerability affects multiple product branches, including Ivanti Connect Secure 22.8R2.4 and earlier, as…
How Claude Code’s 256KB blind spot put developers’ secrets in the preview pane
Simply asking Anthropic’s Claude Code to review an HTML file could hand attackers access to a developer’s machine, cloud credentials and software development environment, according…
Unplug your smart fridges, French supermarkets warned after cyberattack
More internet-connected refrigerators have joined the official list of those affected by a cyberattack that ruined stocks of chilled food at hundreds of French supermarkets…
OpenAI’s AI misalignment problem is growing
OpenAI’s misalignment problems seem to only be getting worse, based on yet another trio of reports detailing its models’ troubling and overzealous behaviors. In ad…
GitLab patches a max-severity regex flaw alongside five high-severity bugs
Two other flaws target pipeline security. CVE-2026-16301 (CVSS 8.5) could have allowed users with the Developer role to execute CI/CD pipelines on protected branches without…
Over 1,500 npm packages exposed by Trusted Publishing validation flaw
The issue is now fixed, Bloom Security researcher Golan Myers told CSO. “The npm team confirmed that a fix had been shipped on October 2,…
Researchers bypass 6 AI agent frameworks with a simple ‘Repeat-After-Me’ prompt
How exploitable the technique is depends on what an attacker can influence and what the agent is allowed to do, he added. A read-only agent…
These ARE the droids you’re looking for
There’s an old leadership fantasy that goes something like this: The CISO surveys a sprawling technology estate, discovers 11 tools doing the work of four,…