The fake IT worker problem CISOs can’t ignore
During the interview stage, identity switching was observed. “We saw cases where one person passed the phone screen, a different person showed up on Zoom,…
Category: CISOOnline
Security agencies draw red lines around agentic AI deployments
CISA and its international partners also recommended integrating human control and oversight into agentic AI workflows to ensure they are approved for non-sensitive, low-risk tasks.…
Was ist ein Botnet?
Ein Botnetz besteht aus vielen “Zombie”-Rechnern und lässt sich beispielsweise einsetzen, um DDoS-Attacken zu fahren. Das sollten Sie zum Thema wissen. FOTOKINA | shutterstock.com Kriminelle…
Stopping the quiet drift toward excessive agency with re-permissioning
With AI spending forecasted to hit $2.5 trillion in 2026, and with 40% of enterprise apps expected to embed task-specific AI agents by the end…
ODNI to CISOs on threat assessments: You’re on your own
Every year, CISOs, CSOs, and chief risk officers pore over the Office of the Director of National Intelligence (ODNI)’s Annual Threat Assessment (ATA) for insights…
Managing OT risk at scale: Why OT cyber decisions are leadership decisions
Second, identify the two or three OT cyber scenarios that would most impact continuity, key operations and external defensibility. Scenarios should be concrete enough to…
Spotlight report: Transforming software development with AI
Artificial intelligence has had an immediate and profound impact on software development. Coding practices, coding tools, developer roles, and the software development process itself are all being reimagined as…
AI agents can bypass guardrails and put credentials at risk, Okta study finds
Agent-in-the-middle Agentic AI is really two things: a powerful orchestration system coupled to one or more highly-capable LLMs. What an agent isn’t is a simple…
Windows shell spoofing vulnerability puts sensitive data at risk
A difficult balance Erik Avakian, technical counselor at Info-Tech Research Group, noted that when it set the patching deadline, CISA had been operating within the…
Just 34% of cyber pros plan to stick with their current employer
“When candidates see a defined career progression, the offer of ongoing certifications and training, direct visibility into strategy, and access to modern security stacks, that’s…
Human-centric failures: Why BEC continues to work despite MFA
Business email compromise (BEC) is still thriving even in organizations that have implemented multi-factor authentication (MFA). As security professionals, we often assume that MFA is…
Bank regulator sounds warning over cybersecurity threat posed by AI models
As the technology spreads, threat actors will use similar models to uncover flaws more quickly and easily, potentially overwhelming the speed with which these can…