Install
CSO delivers the critical information about trends, practices, and products enterprise security leaders need to defend against criminal cyberattacks and other threats.
- 1,703articles · 365d
- 2+ day agolatest article
- Sep 15, 2025earliest in window
- 91%with images
- 355avg words
- security 1,533
- cybersecurity 1,443
- artificial intelligence 940
- technology 876
- ai 680
- software 516
- malware 506
- cybercrime 429
- cyber security news 395
- coding 390
- development 370
- engineering 342
- vulnerability 342
- cyber security 334
- cyberattacks 332
- inclusive 313
- community 297
- vulnerabilities 250
- business 237
- ransomware 223
- Science & Technology 1,156
- Computers & Electronics 880
- Software 623
- News 355
- Software Dev. 328
- Crime & Law 240
- Conflict, War & Peace 237
- Science & Nature 237
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
AI workflows may be creating a dangerous new authorization blind spot
2+ day, 19+ hour ago (735+ words) A newly identified AI attack technique can let unauthenticated users trigger privileged workflows and access enterprise systems, highlighting a gap in how identity and access controls apply to AI agents, according to research from Noma Labs. The report, authored by…...
Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning
2+ day, 22+ hour ago (339+ words) None of this belongs in the “future planning” bucket anymore. A 2030 deprecation deadline sounds distant until you map it against how long your organization takes to touch every system running cryptography. I’ve run cryptographic discovery projects that stretched past a…...
SpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterprise
3+ day, 19+ hour ago (5+ words) ...
When the prompt becomes the payload: A practical pen-testing guide for GenAI, LLM and RAG applications
3+ day, 21+ hour ago (674+ words) That makes an LLM application closer to an attack graph than a single endpoint. Prompts, retrieval services, vector databases, identities, plug-ins, model gateways and downstream APIs all influence the final result. A conventional web test still matters, but it will…...
Reflectiz Launches Agentic Pentesting for Websites: Up to 10x Coverage vs Conventional Pentests
4+ day, 17+ hour ago (171+ words) ...
Securing AI agents: Key controls and best practices
4+ day, 23+ hour ago (1142+ words) The closest threat model the security industry has for misaligned AI agents are rogue employees, but enterprises already struggle to contain the potential blast radius of malicious insiders, and AI agents add machine speed, autonomy, and specialized expertise to that…...
OpenAI targets small utilities with $1 billion cyber defense initiative
1+ week, 2+ day ago (413+ words) In a keynote speech during a summit at OpenAI’s headquarters attended by 300 enterprise security leaders and CISOs from Fortune 1000 companies, OpenAI President Greg Brockman announced Daybreak for Frontline Defenders, a new global initiative to help frontline defenders use frontier cyber…...
Decade-old PostgreSQL flaw turns backup account into a backdoor
1+ week, 2+ day ago (520+ words) A critical vulnerability in PostgreSQL had remained hidden for more than a decade, potentially turning a routine backup account into a path to full database and server compromise. The issue, dubbed PostGREShell by Cyera Research, exists in the database’s replication…...
Counterfeit installers turn routine software downloads into enterprise breaches
1+ week, 2+ day ago (589+ words) The attackers are using a network of spoofed websites mimicking legitimate vendors, from browsers and security tools to utilities such as Baidu Netdisk, draw.io, and Sejda PDF, to trick users into downloading malicious installers, the blog added. Microsoft said…...
Zero trust has a big AI agent problem ahead
1+ week, 2+ day ago (756+ words) Despite singing the praises of zero trust for many years, many CISOs have struggled to implement the framework in full. And now comes what could be the final nail: agentic AI. Can zero trust coexist with autonomous agents in typical…...