The 7 biggest issues CISOs and security teams face today
“Month to month, companies come out with new direction, new tools, new functions, and new features that have to be considered by security. There are…
Category: CISOOnline
AI is turning offensive security into a continuous necessity
Prioritizing fixes requires more frequent pen testing Most organizations have historically conducted compliance-based penetration tests once a year, or in some circumstances slightly more often.…
Exposed Nvidia GPU monitors can reveal AI infrastructure secrets
When publicly accessible without authentication, these endpoints could reveal a lot about an organization’s computing infrastructure, Lava says. The systems that were found exposed included…
This week’s critical patch for NetScaler ADC and NetScaler Gateway is here
Nevertheless, it encouraged affected customers to upgrade to patched versions as soon as possible: 13.1-64.29 or later for the 13.1 series, and 14.1-73.46 or later…
OpenAI reports three new incidents of misalignment
OpenAI continues to report incidences of “misaligned” behavior by its AI models, with three new reports dropping on Oct. 2. However, they describe relatively minor…
Ransomware consultant said he would decrypt data, is accused of paying ransoms instead
MonsterCloud claimed to offer an alternative to paying the ransom. Its website said that, thanks to its decryption techniques, “our team specializes in helping businesses…
Lightwell project filters out 400 Java library vulnerabilities
Lightwell, the open-source security initiative set up by IBM and Red Hat, has identified more than 400 previously undiscovered vulnerabilities in widely used Java libraries…
When building an AI-native security program, start with outcomes
Detection engineering follows the same pattern. A rule that produced useful signals 18 months ago may generate mostly benign activity today. New attacker techniques may…
We are fighting phishing at the wrong layer
The wall, and the crack in it The kits that matter now are adversary-in-the-middle proxies. Rather than serve a fake login page, they relay the…
AWS takes aim at runaway AI agent behavior with Strands Box
Amazon Web Services (AWS) has introduced an open-source sandbox for AI agents that allows developers to restrict their actions based on previous behavior, seeking to…
Growing PQC at the edge belies deeper quantum-readiness challenges
Or as Serhii Nikolaichuk, founder of The Capital Index, an engineering firm that builds attestation systems, puts it, everything behind what the CDNs have turned…
AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma
Kale agreed. “Pulling credentials from a metadata service is cloud hacking 101, and what’s new is that the researchers didn’t need to find a bug…