How cyber breach communications can create legal risk
Operational record — the factual documentation that will show what the organization did and when Legal strategy discussions that should remain protected (what you say,…
Category: CISOOnline
New malware turns Microsoft cloud into its control center
The pathway is different from Edge transport. The implant launches Microsoft Edge in headless mode, attaches through the Chrome DevTools Protocol, and issues Graph API…
AI can find zero-days but still can’t reliably write secure code
Such harnesses can retrieve relevant files and architectural documentation, provide threat model information, list approved coding patterns, run compilers and tests, invoke static and dynamic…
OpenAI president’s blog pushing agentic AI most notable for what it did not say
“Give your security team an agent,” he wrote. “Start using Codex, the Codex Security plugin, or another capable agentic coding and security tool. Give it…
New macOS malware turns stolen browsers into attacker-controlled sessions
The loader takes a number of steps to make the payload harder to notice, Jamf said. It extracts the binary into “/tmp,” gives it a…
Why data quality dictates security operations success
As AI takes on more security operations center (SOC) workflows to automate threat triage, indicator extraction, and incident report generation, security operations leaders face a…
Zhipu says new coding AI developed advanced cyber skills faster than expected
“After expert review, screening, and deduplication, the model identified 2,436 vulnerabilities across 269 projects, including 1,097 medium-to-high severity issues,” the statement added. The findings cover…
What the CISO role will look like in 2029
And they’ll have to change their operating model. “Security has always been about managing uncertainty. What’s changing is the speed at which uncertainty develops,” he…
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability
Advice for CSOs For CSOs, the primary strategic priority should be reducing the window of exposure around CVE-2026-68820, because exploitation is already occurring, Bicer said.…
Researcher bypasses Microsoft Defender patch, seizing control
“What makes it dangerous is what it does once they’re in: it turns an ordinary low-privilege account into full system control by abusing Defender itself,…
It took $58 to break Microsoft’s SCCM, but a patch made it harder
The revealed attack chain combines four weaknesses, including a broken authorization in the AdminService upload functionality, a path-traversal flaw dubbed “CabSlip,” weak code-signing validation that…
How CSOs can turn cybersecurity into a business growth strategy
Build security into the business, not around it The most effective cybersecurity programs are not created in isolation. They are built through partnership with the…