Senior executives are killing your shadow AI strategy
Shadow IT has long been a major problem for CISOs, but the biggest problem may be coming from the executive suite’s hunger for...
Technology
222 articles in this category
Zoom patches account takeover hole
Zoom has identified, and patched, a critical security hole that “may allow an unauthenticated user to conduct an account takeover...
CISA urges immediate SharePoint hardening as exploits mount
The US Cybersecurity and Infrastructure Security Agency (CISA) has urged organizations to immediately secure Microsoft SharePoi...
CISA urges software vendors to formalize vulnerability disclosure programs
The Cybersecurity and Infrastructure Security Agency (CISA) and four international cybersecurity agencies have published guidan...
When AI gets a body, it inherits an attack surface
Most security leaders I know working on AI robotics are being shown the same kind of video. A humanoid folds a shirt, sorts a b...
The executive profile your security team isn’t defending
A few years ago, I was retained to conduct a digital risk review for the chief executive of a mid-sized financial services firm...
Flaw surge fuels need for CISOs to rethink vulnerability management
Security experts are calling on enterprises to revise their vulnerability management strategies and move towards “just in time”...
NPM ecosystem hit with two new supply chain compromises
Attacks targeting developer ecosystems are increasing in frequency and sophistication, with Node.js developers firmly in this week...
New Windows Bind Link techniques let attackers evade EDR, security controls
Attackers who already have administrator privileges on a Windows machine have newer ways to slip past endpoint security without...
White House launches AI-driven vulnerability clearinghouse to speed cyber remediation
The White House is expanding the use of AI beyond cyber threat detection into vulnerability management, launching a new program...
New bugs in Claude for Chrome allow extensions to abuse AI privileges
Two vulnerabilities found in Anthropic’s Claude for Chrome extension remain exploitable months after they were reported to the com...
When 80,000 fans log on at once: The 2026 World Cup’s unique cybersecurity issues
With the World Cup in full swing, stadiums across North America are currently accommodating thousands of fans every match day....
Cybersecurity needs more prevention and less reliance on cure
Ask any medical doctor, and they’ll tell you that prevention is better than cure. It’s more cost-effective and it has better ou...
7 skills and traits of elite security engineers
Security engineers play a pivotal role in enterprise cybersecurity, because they are the professionals who design, build, and depl...
Microsoft is forcing an enterprise transition to passkeys
Passkeys have been around for some time, but enterprise-wide adoption to this point has been slow for a number of reasons. But...
Patch Tuesday roundup: Microsoft fixes a monthly record 569 holes; SAP patches a critical memory corruption bug
Earlier this month Microsoft warned that, because the latest AI models can now help discover vulnerabilities, CSOs will see a h...
Phishing for dummies: Forg365 lowers barrier to M365 account takeovers
A newly documented phishing-as-a-service platform distributed through Telegram is lowering the technical barrier to Microsoft 365...
AI incidents need a new playbook. Here’s how to build one
Seventy-one percent of organizations say AI has access to core business systems. Only 16% govern that access effectively, accor...
AI-powered breaches provide wake-up call for incident response
Enterprises have worked for years to improve detection and response times in the face of increasingly sophisticated attacks that r...
Governments to enterprises: Improve your router security hygiene
Global security agencies say enterprises must clean up their act as Russian government-sponsored attackers exploit weaknesses i...