Sandbox bypass flaws in Cursor IDE highlight prompt injection as an RCE vector
Cursor, which was recently acquired by SpaceX for $60 billion in stock, produces one of the most widely used AI-assisted coding tools used in the…
Category: CISOOnline
Detection engineering: A programmatic approach to identifying cyber threats
The survey’s data suggested that many companies have not just merely adopted detection engineering practices but have made it a strategic focus of their cyber…
Malicious Chromium extension spoofs Perplexity AI to hijack browser searches
Microsoft similarly recommended that organizations verify extension publishers, carefully review requested permissions, and monitor enterprise browsers for unauthorized or unapproved extensions. Mukhopadhyay said CISOs should…
GDPR at 10: Landmark data protections, increasing business burden
The result: According to Bitkom, 59% of companies see European data protection as an advantage for AI development in Germany and Europe compared to other…
Mythos is a signal, not a siren: What frontier AI should change for CISOs
That is why I view Mythos as a signal, not a siren. It signals that the economics of cyber offense and defense are changing. It…
Proposed US law would make AI risk reporting a legal obligation
The reporting requirement would also apply to theft or attempted theft of model weights, capabilities that could materially enable offensive cyber operations against important software…
Hackers exploit critical PTC Windchill PLM software flaw
Hackers are exploiting a critical vulnerability recently patched in PTC Windchill and FlexPLM, two product lifecycle management solutions used by organizations across a range of…
Malware authors subvert AI detection systems
Enterprises that have turned to AI in order to boost their security defenses may have to reconsider their approach. Malware containing code that commands LLM-assisted…
Cyberattacks pose a ‘threat to life’ in Australia
In this case, the hackers had gained access to login details and passwords for active users of the networks, including the IT professionals guarding it.…
What CISOs need to tell the board about zero trust in OT: A 90-day communication and action plan
Days 1–30: Map assets and identities at the IT/OT boundary The first 30 days are for increased visibility. I focus on a relatively simple question:…
GitHub Actions hardens checkout security to block ‘pwn request’ attacks
Blind spot If there’s a criticism that can be levelled at GitHub over this, it’s that it has taken so long to address a weakness…
AI-SPM buyer’s guide: 14 tools to secure your AI infrastructure
OneTrust AI Governance OneTrust offers AI Governance, a platform that automates compliance and provides continuous monitoring of the AI landscape, across the software lifecycle starting…