When AI gets a body, it inherits an attack surface
Embodied AI puts a model inside a machine that operates in the physical world: a robot, an arm, a humanoid. Once a model gains motors,…
Category: CISOOnline
Zoom patches account takeover hole
The company originally said that the takeover issue impacted Zoom Desktop Client for Windows before version 7.0.0, Zoom VDI Client for Windows before version 7.0.10…
CISA urges immediate SharePoint hardening as exploits mount
“This is what separates an IT incident from a business crisis,” said Chris Boehm, field CTO at Zero Networks. “One compromised SharePoint box is a…
CISA urges software vendors to formalize vulnerability disclosure programs
The Cybersecurity and Infrastructure Security Agency (CISA) and four international cybersecurity agencies have published guidance urging software manufacturers and online service providers to establish coordinated…
New bugs in Claude for Chrome allow extensions to abuse AI privileges
Synthetic clicks trick trusted AI The first vulnerability stems from how Claude for Chrome handles user interaction before executing privileged actions. According to Manifold, the…
White House launches AI-driven vulnerability clearinghouse to speed cyber remediation
A move toward coordinated vulnerability response Prabhjyot Kaur, senior analyst at Everest Group, said Gold Eagle should be viewed as “a significant evolution” of existing…
NPM ecosystem hit with two new supply chain compromises
Initially the attackers released new package versions with two malicious scripts that get executed at install time using a preinstall hook in the configuration script.…
New Windows Bind Link techniques let attackers evade EDR, security controls
Bitdefender demonstrated how attackers can progressively weaponize this capability. The first technique, File-Binding, redirects trusted DLL or file paths to attacker-controlled replacements. The researchers showed…
When 80,000 fans log on at once: The 2026 World Cup’s unique cybersecurity issues
Secondly, in such a high-stakes, highly integrated environment, real-time monitoring and centralized visibility is crucial. With centralized visibility across the network, IT personnel can effectively…
Patch Tuesday roundup: Microsoft fixes a monthly record 569 holes; SAP patches a critical memory corruption bug
Prioritize the critical ABAP kernel issue, plus the AppRouter request smuggling note, and the Commerce Cloud sample-credential issue first, he said, because these are the…
Microsoft is forcing an enterprise transition to passkeys
Still, passkeys are not a silver bullet, as they do not stop endpoint compromise, session token theft, malicious insiders, or attackers who already have control…
AI incidents need a new playbook. Here’s how to build one
Then there is the hybrid case, which carries the most legal exposure right now. Hallucinations are model-originated but they land in court like human errors.…