Press Release: CSO30 ASEAN & Hong Kong Awards 2026 open for nominations
The CSO30 ASEAN & Hong Kong Awards return in 2026, as an important moment to recognise the cybersecurity leaders and teams who are making resilience…
Category: CISOOnline
Oracle’s first monthly patch release fixes 35 flaws, including 11 rated ‘critical’
Despite the high CVSS scores for those bugs, patching teams will probably want to start with a clutch of older but still serious flaws for…
Flowise’s MCP implementation can run ghost commands
Enterprises using the lightweight, open-source Flowise platform to power self-hosted AI workloads have a new near-max severity issue to worry about. Researchers at Obsidian Security…
6 critical security gaps every CISO must address
Such figures indicate that critical cybersecurity gaps remain in many, if not most, organizations. As adversaries lean into automation and artificial intelligence, the pressure is…
What the industrialization of exploitation means for defenders
Think about what your team used to rely on. Attackers left clues that telegraphed their presence – patterns you could learn, signatures you could catch…
Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects
Until a patch is released, developers and CSOs in organizations with the platform in use should strictly enforce restricted network access to Gogs, Emmons said,…
Cybersecurity trends in SEC filings
The total cost in tokens for development, debugging, and running was around $15, not expensive, but not something I’d likely develop for every project I…
The Gentlemen are coming for your files, and then your network
“Modern ransomware is no longer just about encrypting files,” said Paul Reid, vice president of Adversary Research at AttackIQ. “The bigger risk is how quickly…
Microsoft and security researcher’s dueling posts about cybersecurity disclosures get nasty
Erosion of trust In addition, Ishraq Khan, CEO of coding productivity tool vendor Kodezi, said that he is concerned about the emotional elements of the…
Russia-aligned crime group Greyvibe extensively uses AI in attacks
“While the activities align with Russian state interests, several observed indicators suggest the group has ties to the broader cybercrime ecosystem, with the group potentially…
Certifiably random: Swiss researchers claim perfect random number source
Many sources of randomness are biased. For example, coins or dice tend to favor one side. “Even modern random number generators, which are based on…
DNS-AID will make AI agents easier to discover, says Linux Foundation
While many details remain to be worked out, the proposal suggests domain owners create a new well-known address that can provide a starting point for…