Detection engineering: A programmatic approach to identifying cyber threats
Detection engineering, which was once a niche practice among mostly large companies, appears to have evolved into a capability...
Technology
222 articles in this category
Malicious Chromium extension spoofs Perplexity AI to hijack browser searches
Google has removed a malicious browser extension masquerading as Perplexity AI after Microsoft researchers found it was interce...
Hackers exploit critical PTC Windchill PLM software flaw
Hackers are exploiting a critical vulnerability recently patched in PTC Windchill and FlexPLM, two product lifecycle management s...
Malware authors subvert AI detection systems
Enterprises that have turned to AI in order to boost their security defenses may have to reconsider their approach. Malware...
Cyberattacks pose a ‘threat to life’ in Australia
Australia’s Security Intelligence Organization (ASIO) has uncovered an attack on a critical infrastructure operator’s network....
What CISOs need to tell the board about zero trust in OT: A 90-day communication and action plan
I work as a principal specialist at a pipeline operator where Operational Technology (OT) is the backbone of the business. I do...
Proposed US law would make AI risk reporting a legal obligation
US lawmakers on Thursday introduced a bill that would require developers of advanced AI models to report major safety and secur...
Mythos is a signal, not a siren: What frontier AI should change for CISOs
When a new AI capability starts making headlines, I see the same pattern play out in boardrooms and executive staff meetings. T...
GDPR at 10: Landmark data protections, increasing business burden
Ten years have passed since the General Data Protection Regulation (GDPR) came into force, and the results are mixed. While dat...
Rethinking the balance between AI oversight and innovation
The new CIO mandate is clear: facilitate AI adoption across the enterprise at speed. According to CIO.com’s State of the CIO s...
GRC is broken. FedRAMP 20x might fix it
We are auditing a curated version of history. I’ve worked in security long enough now to know something most of us don’t rea...
Be on the lookout for Mistic, a new backdoor used by ransomware broker
Researchers have identified a new backdoor program that has been used in enterprise intrusions since April and appears to be li...
Scattered Spider duo convicted over $38M Transport for London attack
Two members of the Scattered Spider cybercrime collective have admitted launching a cyberattack against Transport for London (T...
Attackers exploit Cisco Unified CM flaw weeks after patch release
A critical Cisco Unified CM vulnerability is now under active exploitation, weeks after the company issued patches warning it c...
How a malicious AI agent skill passed security checks and reached 26,000 users
A fake AI agent skill that passed security checks reached over 26,000 users through Instagram, highlighting new risks as enterpri...
Kahneman, ‘Where’s Waldo’ and the Nexus pass: A CISO’s mental model for the AI era
Security awareness training as a defense against phishing is dead. It has been dead for a while. The industry never held a fune...
AI-SPM buyer’s guide: 14 tools to secure your AI infrastructure
Widespread enterprise adoption of AI has created a pressing need for security solutions — a tall order given that AI’s reach into...
Meta pauses employee monitoring program after data protections fail
An extensive program at Meta to gather a wide range of data from employees to train its AI model has been frozen after employees...
Hole in widely-used FFmpeg codec could crash media servers or enable RCE
A newly discovered critical vulnerability in the FFmpeg media processing framework bundled in a huge number of open source and...
Trump sets post-quantum crypto deadlines, launches broader federal quantum initiative
US President Donald Trump on Monday signed a pair of executive orders aimed at accelerating the federal government’s transition...