Poisoned truth: The quiet security threat inside enterprise AI
The problem is that most organizations might detect poisoning-related problems, but not the source of those problems. “If you had a leak in your house,…
Category: CISOOnline
Iranian state-backed spies pose as ransomware slingers in false flag attacks
Adopting criminal tactics enables these state-aligned actors to introduce ambiguity and delay defensive response, according to Rapid7, which today published a technical blog post detailing…
New malware turns Linux systems into P2P attack networks
This turns the infected Linux systems into interconnected relay points capable of maintaining communication even when portions of the infrastructure are disrupted. This is another…
Edge browser leaves passwords exposed in plain text, says researcher
A Norwegian researcher has identified an issue with Microsoft Edge’s Password Manager that could be a serious concern for businesses. Tom Jøran Sønstebyseter Rønning found…
Supply-chain attacks take aim at your AI coding agents
The US Cybersecurity and Infrastructure Security Agency, the US National Security Agency, and their Five Eyes partners recently published a joint advisory on the adoption…
Oracle will patch more often to counter AI cybersecurity threat
Oracle plans to issue security patches for its ERP, database, and other software on a monthly cycle, rather than quarterly, to respond to the increased…
AI finds 20-year-old bugs in PostgreSQL and MariaDB
Patches have been released for all these flaws, with both PostgreSQL and MariaDB maintainers urging users to upgrade to fixed versions immediately. More than one…
10 Anzeichen für einen schlechten CSO
2. Von einer Krise zur nächsten CSOs mit schlechtem Sicherheits-Management fehlt nicht nur das vorausschauende, strategische und methodische Vorgehen. Sie tun sich außerdem schwer, potenzielle…
Anthropic Mythos spurs White House to weigh pre-release reviews for high-risk AI models
What a review might mean Pre-release evaluation of AI models is not a new idea, but it remains poorly defined in the US policy context.…
How CISOs should utilize data security posture management to inform risk
DSPM can answer how many records are contained in a database, and coupled with cyber risk quantification, can help you estimate the financial exposure that…
The fake IT worker problem CISOs can’t ignore
During the interview stage, identity switching was observed. “We saw cases where one person passed the phone screen, a different person showed up on Zoom,…
Security agencies draw red lines around agentic AI deployments
CISA and its international partners also recommended integrating human control and oversight into agentic AI workflows to ensure they are approved for non-sensitive, low-risk tasks.…