How to reduce cybersecurity backlogs and fix vulnerability debt
An increasing backlog indicates a failure in the operating model Security teams often become the default owners of any issue labeled as a security concern.…
Category: CISOOnline
Oracle’s new database security tool is free — for six months
Oracle is also concerned about the threat posted by the launch of bug-hunting AI model Mythos. In May it responded by accelerating its patching schedule,…
Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks
Records held in Salesforce and ServiceNow systems are under attack leaving user data exposed, according to researchers at Reco. The attack appears similar to those…
Akira ransomware reboots into Windows Safe Mode to knock EDR offline
The approach is not entirely new. Huntress pointed to ransomware families, including Snatch and AvosLocker, that have used Safe Mode to disable defenses for years.…
5 key takeaways from Black Hat USA 2026
Microsoft’s Yossi Weizman and Echo’s Mor Weinberger showed that recent supply chain attacks such as Shai-Hulud, Trivy, and Megalodon repeatedly used the same patterns: forged…
Attackers target zero-day vulnerability in geospatial data platform GeoServer
If the database runs with administrator permissions on Microsoft SQL Server, the account also has the ability to execute commands on the system, so the…
Trump administration opens door to private-sector cyber offensives
“Enterprise CISOs should be careful before feeding telemetry into these programs,” said Neil Shah, vice president for research at Counterpoint Research. “The threat intelligence is…
AI agents wage near-autonomous cyberattack on Asian government networks
Autonomous AI agents built on open-source frameworks breached Taiwanese government systems, compromised credentials, and probed a nuclear safety agency in a multi-day cyberattack that researchers…
Microsoft wants you to rethink your approach to cyber defense
Cyber defenders need to shake off traditional best practices and switch from reactive patching to building inherently resilient systems in the face of AI-accelerated vulnerability…
17 old software bugs that took way too long to squash
“While investigating an unrelated vulnerability, Trellix Advanced Research Center stumbled across a vulnerability in Python’s tarfile module,” Kasimir Schulz, a vulnerability researcher for Trellix’s Threat…
Researcher creates workaround for Microsoft Defender security patch
“What makes it dangerous is what it does once they’re in: it turns an ordinary low-privilege account into full system control by abusing Defender itself,…
The AI harness is the new attack surface
“Teams think in terms of apps, services, pipelines, or bots,” Santos says. Harnesses disappear into code repositories, SaaS products, and vendor configuration screens instead of…