What exactly is ISOC? And what does it mean for you?
Gartner recently released a new category of security tools: the Integrated Security Operations Center (ISOC). This […]
AI accelerates n-day attacks, as flaw disclosures and exploits double
Attackers are increasingly weaponizing already-disclosed flaws rather than new zero-days, and AI tools may be accelerating […]
Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes
Dell’s security team has had a busy week. The company has announced a slew of Common […]
Despite ShinyHunters arrests after FBI jobs data breach, enterprises still have no answers about PeopleSoft risks
The theft of FBI employee data by hacking group ShinyHunters, and the subsequent shutdown of the […]
ShinyHunters’ exploitation of a new PeopleSoft zero-day hole threatens to change enterprise risk dynamics
A recent compromise of PeopleSoft by hacking group ShinyHunters is causing new concerns for enterprise users […]
Strategic Threat Intelligence for Critical Attacks: What Executives and Security Leaders Need to Know
Key Takeaways Tactical intelligence supports immediate defense, while strategic intelligence guides longer-term priorities. Vulnerability exploitation is […]
Citrix warns of actively exploited NetScaler flaw days after zero-day patch rush
Citrix has warned customers about another high-severity vulnerability in its NetScaler ADC and NetScaler Gateway products, […]
Should the CISO role be split in two?
In its roughly 30-year history, the CISO role has been reshaped by waves of new technology […]
Rolling the cyber dice with open-source and open-weight AI models
With typical cybersecurity exposure, I can conduct pen testing with deterministic tools. I am able to […]
EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage
Independent security experts see the EU Cyber Resilience Act (CRA) reshaping international technology markets to emphasize […]