Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
31–45 of 47
Personal liability sours 70% of CISOs on their role
With legal accountability tightening around those charged with maintaining enterprise cybersecurity, security leaders appear to be increasingly frustrated with their roles, eyeing the exit, and hesitant to pursue CISO gigs in the future. More than two thirds (70%) of CISOs recently surveyed said that “stories…
- Source
- CSO Online
Critical Windows LDAP flaw could lead to crashed servers, RCE attacks
Researchers have published a proof-of-concept exploit for a pair of Windows Lightweight Directory Access Protocol (LDAP) flaws that could lead to server crashes or remote code execution (RCE) on Windows servers. “Active Directory Domain Controllers (DCs) are considered to be one of the crown jewels in…
- Source
- CSO Online
Working in critical infrastructure? Boost your effectiveness with these cybersecurity certifications
Hybrid warfare between nation-states is imperilling critical infrastructure around the world, both physically and electronically. Since the start of the Ukraine-Russia conflict, hybrid cyber/physical attacks on satellite and communications, energy, transportation, water, and other critical sectors have spread…
- Source
- CSO Online
Buyer’s guide: Data protection for hybrid clouds
Data protection is a broad category that includes data security but also encompasses backup and disaster recovery, safe data storage, business continuity and resilience, and compliance with data privacy regulations. Data protection platforms also proactively manage and monitor data, making it available and…
- Source
- CSO Online
New ALPHV-like ransomware targets VMware ESXi servers
Researchers at Trusec recently discovered a new ransomware-as-a-service group called Cicada3301. The gang provides its affiliates with a dual extortion platform that includes both a ransomware and a data leakage side.
- Source
- CSO Online
Switcher’s guide to mesh VPNs: Pros, cons, and how to set up key features
As organizations increasingly seek to support and secure more remote network connections, many are rethinking the traditional VPN. Many VPN alternatives exist to help secure remote access — mesh VPNs chief among them.
- Source
- CSO Online
Passkeys aren’t attack-proof, not until properly implemented
Passkey, a password-less technology for authenticating user access to cloud-hosted applications, may still be vulnerable to adversary-in-the-middle (AitM) attacks despite its massive popularity, according to an eSentire study. Poor implementation of passkeys, like offering less secure backup authentication methods,…
- Source
- CSO Online
The growing dichotomy of AI-powered code in cloud-native security
AI-generated code promises to reshape cloud-native application development practices, offering unparalleled efficiency gains and fostering innovation at unprecedented levels. However, amidst the allure of newfound technology lies a profound duality—the stark contrast between the benefits of AI-driven software…
- Source
- CSO Online
AI governance and cybersecurity certifications: Are they worth it?
The International Association of Privacy Professionals (IAPP), SANS Institute, and other organizations are releasing new AI certifications in the areas of governance and cybersecurity or adding new AI modules to existing programs. These may help professionals find employment, but with the area being relatively new,…
- Source
- CSO Online
CISA, FBI urge developers to patch path traversal bugs before shipping
US Cybersecurity Infrastructure and Security Agency (CISA) and the FBI have issued a joint advisory to developers, urging them to check for path traversal vulnerabilities before shipping a software. “Directory traversal or path traversal vulnerabilities remain a persistent class of defect in software…
- Source
- CSO Online
Security concerns could be holding back AI projects
When implementing AI, 52% of organizations faced challenges with internal data quality and 45% of organizations surveyed encountered unintended data exposures, according to a study of 762 professionals with primary or shared responsibility for AI implementation. “Unsurprisingly, data privacy and security were…
- Source
- CSO Online
If you are generating SAML signing certificates externally, STOP!
There is now a way to forge security assertion markup language (SAML) authentications even for applications that have adopted a cloud identity solution, something that was earlier thought impossible. Application providers such as Salesforce and ServiceNow that moved their SAML authentication workload to a cloud…
- Source
- CSO Online
Cisco’s identity and access security offerings to receive AI upgrades
Cisco has announced plans to infuse new security and AI capabilities within Cisco Security Cloud, the company’s integrated, cloud-based security platform designed to secure on-premise, cloud, and hybrid environments, using in-house as well as third-party telemetry. New capabilities include Cisco Identity…
- Source
- CSO Online
Roundup: Global software supply chain security guidance and regulations
Supply chain security continues to receive critical focus in the realm of cybersecurity, and with good reason: incidents such as SolarWinds, Log4j, Microsoft, and Okta software supply chain attacks continue to impact both leading proprietary software vendors as well as widely used open-source software components.…
- Source
- CSO Online
Stronger together: Creating a cyber-secure community
Ransomware activity continues to threaten organizations and people while breach attempts are becoming more sophisticated and targeted – due largely to an increase in Ransomware-as-a-Service (RaaS) operations. The reality is that in an interconnected world, organizations can’t fully protect their own…
- Source
- CSO Online