OpenAI targets small utilities with $1 billion cyber defense initiative
Company CEO Sam Altman was in North Carolina yesterday, where he highlighted how OpenAI is partnering with cyber defenders to protect systems and services North…
Category: CISOOnline
Counterfeit installers turn routine software downloads into enterprise breaches
Microsoft has warned that attackers are breaching enterprise systems via counterfeit download sites impersonating software including Microsoft Edge, Kaspersky and Razer, delivering trojanized installers for…
Decade-old PostgreSQL flaw turns backup account into a backdoor
The vulnerability, tracked as CVE-2026-6471, affects PostgreSQL versions dating back to 9.4, released in 2014, and was patched in all supported PostgreSQL releases, including versions…
AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs
The incident does not establish that the attack was fully autonomous. “The evidence points to a human-directed intrusion in which AI orchestrated delegated tactical work,”…
How China industrialized the infrastructure behind state hacking
The quartermaster model of hacking For a year prior to the takedown, Lumen’s Black Lotus Labs tracked QTFY as it functioned as a “quartermaster,” integrating…
SonicWall reports two major security holes under active exploit
Repeats a June attack chain What makes this issue especially significant is the timing and the pattern, he pointed out. “This is essentially a rerun…
Exploited JFrog Artifactory bug puts software supply chain on alert
The vulnerability was assigned a critical severity (CVSS 9.8) and affects several self-hosted Artifactory release branches. JFrog has released fixes for affected self-hosted versions, while…
Anthropic introduces zero-retention AI safety monitoring for enterprises
Anthropic is introducing a new framework aimed at helping enterprises monitor AI misuse without ceding control over sensitive data, as organizations struggle to balance security…
The AI vulnerability surge is breaking the OT patch cycle
IEC 62443 already provides the vocabulary for acting on those answers: zones and conduits to define exposure, plus compensating countermeasures where patching is not feasible…
Anthropic makes changes to stop AI agents running amok again
Anthropic maintained that its internal security posture was not a contributing factor. The exploits occurred in a third party environment where internet access was mistakenly…
What happens when AI models take aim at ICS exploits
This is an important challenge because different PLC models from the same vendor or even different manufacturers might share a vulnerable component, with the rest…
CrowdStrike launches cyber frontier AI models, agentic security system
The SafeMind agentic system will be available natively in CrowdStrike Falcon, but as Kurtz mentioned, enterprises will be able to access the Red Tempest and…