Check Point CTO Jonathan Zanger sees AI elevating the value of cyber
Check Point Software CTO Jonathan Zanger met with CSO Spain during the software company’s Engage 2026 user conference last week in Paris. At the event, Check…
Category: CISOOnline
AI coding tool hole illustrates a big problem with human in the loop
Norton said the exposure from this flaw, along with similar holes in other AI dev tools, is potentially massive. “Since March 2025, security vendors and…
Agentic AI identity: A 6-stage maturity model for non-human identities
A representative finding from current engagements: human identity governance at Stage 4 — central IAM, MFA, lifecycle managed — and agent governance at Stage 1,…
UK cyber agency unveils AI-powered Cyber Shield to counter attacks at machine speed
“As a result, activities that once took weeks can now take minutes, reducing the time available for defenders to respond, detect, and contain them,” the…
Attack on Amazon Bedrock-linked AI gateway highlights new cloud security risk
Experts found the attack familiar and consistent with past cloud attack techniques. “Strip off the AI branding and this is a cloud intrusion pattern we’ve…
Lateral movement risk rises as enterprises emphasize convenience over containment
“A reachable server may still be protected by identity controls, endpoint monitoring, access policies, or other safeguards,” Datta tells CSO. “The practical risk also depends…
GitHub’s public APIs are becoming an enterprise reconnaissance tool
Attackers use a mix of data exfiltration agents with names like GitHub-Company-Scraper, GitHub-Scraper-Tool/1.0., and GitHubAnalytics/1.5,designed to blend into normal data analysis traffic. The bulk of…
My threat feed told me it was ‘Chalubo.’ The binary disagreed
That same bundle cut the other way too, and this is the part worth slowing down on. Down in its relationships sat a threat-actor object…
Cybercriminals exploit India’s tax filing season with a dual-malware campaign
Once the victims are lured into downloading and opening the archives posing as legitimate Income Tax Department utilities, trusted Windows executables are abused to load…
GitHub AI agent leaks private repositories via prompt injection attack
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and publishing it publicly, exposing a broader risk as…
13 in-demand IT security certifications for higher pay
OffSec Experienced Penetration Tester (OSEP) The OffSec Experienced Penetration Tester is ideal for penetration testers and ethical hackers who need more advanced techniques to sharpen offensive skills…
Watch out for fake support calls in Microsoft Teams
Palo Alto Networks’ security division, Unit 42, is warning of yet another campaign targeting Microsoft Teams users. The new campaign begins with Teams users receiving…