Phishing for dummies: Forg365 lowers barrier to M365 account takeovers
Customers can build phishing lures and control email delivery through a single operator panel. They can also manage captured account data and monitor compromised Microsoft…
Category: CISOOnline
AI-powered breaches provide wake-up call for incident response
Enterprises have worked for years to improve detection and response times in the face of increasingly sophisticated attacks that relied on manual hacking and living-of-the-land…
Governments to enterprises: Improve your router security hygiene
Actors have exploited, at the very least, CVE-2018-0171 (published in 2018) and CVE-2008-4128 (published in 2008), according to the bulletin. Both of these targeted Cisco…
Your AI risk register is not an incident response plan
Security leaders should push for evidence requirements before AI systems move into production. At a minimum, organizations should know what logs are available, how long…
Jurassic Park, cybersecurity and the dangerous myth of control
This is where resilience starts becoming an engineering problem rather than a compliance exercise. When restoration assumptions fail Because the real question is no longer,…
RabbitMQ flaws expose OAuth secrets, risk complete takeover of the broker
The problem was assigned a high severity score of CVSS 8.7 out of 10, and was fixed in the versions 3.13.15, 4.0.20, 4.1.11, and 4.2.6.…
Can AI narrow cybersecurity’s class divide?
That workflow requires more than a model. It requires corporate data, secure infrastructure, feedback loops, security engineers, data scientists, and AI specialists who can work…
Why fixing your data architecture matters more than upgrading your detection models
Security leaders have been on a spending sprint. The global AI in cybersecurity market is valued at $44 billion in 2026 and is projected to…
Microsoft uncovers GigaWiper, a backdoor designed for destruction on demand
These integrations show up in the form of separate commands that the backdoor supports. One command performs raw physical disk wiping by overwriting drives and…
CrowdStrike identifies five new prompt injection threats to AI
Unwitting User Context-Data Injection, an exploit that draws on the boundary between trusted data and executable instructions, tricking the user into introducing malicious instructions as…
EU extends mass scanning of messages without a warrant
“Today’s vote on the interim regulation was a setback, but the political battle over the permanent ‘Chat Control 2.0’ is just getting started. The resistance…
The business case for burning down security debt: A practical approach for CISOs
Among my fellow CISOs, the conversation has shifted. The challenge now is to translate this reality into a business case that resonates with executive leadership…