news analysis10 most critical LLM vulnerabilitiesFrom prompt injections to model theft, OWASP has identified the most prevalent and impactful vulnerabilities found in AI applications based on large language models (LLMs).By Maria Korolov and Michael Hill15 Oct 202414 minsGenerative AIVulnerabilities feature What’s next for the CISO role?By Mary K. Pratt14 Oct 20249 minsCSO and CISOCSO50IT Strategyfeature 6 biggest healthcare security threatsBy Jaikumar Vijayan and John Leyden11 Oct 202412 minsRansomwarePhishingHealthcare Industry opinionGovernments fear election interference, but it’s an enterprise cybersecurity problem tooBy Christopher Burgess 15 Oct 20247 minsElection HackingGovernmentSocial Engineering news analysisMalicious open-source software packages have exploded in 2024By Lucian Constantin 14 Oct 20246 minsMalwareThreat and Vulnerability ManagementOpen Source news analysisAttackers are using QR codes sneakily crafted in ASCII and blob URLs in phishing emailsBy Lucian Constantin 10 Oct 20245 minsPhishingEmail SecurityCyberattacks featureTop 6 IDS/IPS tools — plus 4 open-source alternativesBy David Strom 10 Oct 202411 minsIntrusion Detection SoftwareSecurity featureWhat’s old is new again: AI is bringing XSS vulnerabilities back to the spotlightBy Cynthia Brumfield 10 Oct 202410 minsCSO and CISOSecurity PracticesSecurity Software featureThe CISO’s guide to establishing quantum resilienceBy Stephen Lawton 09 Oct 202410 minsEncryptionThreat and Vulnerability ManagementSecurity More security newsopinionWhy are we still confused about cloud security?We’re building too much complexity and are ill-trained to secure it. The result will be breach after breach, while enterprises wonder what happened. Get a clue now.By David Linthicum 15 Oct 2024 1 minCloud SecuritySecuritynewsAlleged Cisco data breach could affect Microsoft, Barclays, and SAP developer dataA BreachForum post made by IntelBroker claims source code was taken from these Cisco customers in the breach.By Shweta Sharma 15 Oct 2024 3 minsData BreachSecuritynewsAuthorities warn of global cyber campaign by Russian intelligenceSecurity authorities in the UK and US have published guidelines on how organizations can protect themselves.By Viktor Eriksson 14 Oct 2024 2 minsGovernment ITThreat and Vulnerability ManagementSecuritynewsChinese researchers break RSA encryption with a quantum computerThe research team, led by Wang Chao from Shanghai University, found that D-Wave’s quantum computers can optimize problem-solving in a way that makes it possible to attack encryption methods such as RSA. By Gyana Swain 14 Oct 2024 4 minsEncryptionData and Information SecuritynewsOpen source package entry points could be used for command jackingThreat actors could use these supply chain attacks to compromise applications, says Checkmarx.By Howard Solomon 14 Oct 2024 7 minsVulnerabilitiesOpen SourceSecuritynewsIranian hackers use Windows holes to attack critical Gulf and Emirates systemsThe group deployed sophisticated backdoors to exfiltrate sensitive data from compromised Exchange servers.By Shweta Sharma 14 Oct 2024 3 minsCyberattacksWindows SecurityVulnerabilitiesnewsMore than one-third of cloud environments are critically exposedA report based on telemetry from Tenable's cloud security customers discovers that 74% have publicly exposed storage or other misconfigurations, opening the door to cyber criminals.By Lynn Greiner 11 Oct 2024 1 minAccess ControlCloud SecuritySecurityfeatureWhat is phishing? Examples, types, and techniquesPhishing is a type of cyberattack that uses disguised email to trick the recipient into giving up information, downloading malware, or taking some other desired action.By Christine Wong 11 Oct 2024 12 minsPhishingSocial EngineeringNetwork SecuritynewsDo the Marriott cybersecurity settlements send the wrong message to CISOs, CFOs?To partially close the loop on the fallout from three major data breaches between 2014 and 2020 impacting more than 344 million customers, Marriott has settled both with the Federal Trade Commission and almost every American state. But the terms of the settlements are worrying some cybersecurity executives.By Evan Schuman 10 Oct 2024 10 minsData BreachCyberattacksLegalnewsMozilla reveals critical vulnerability in FirefoxBrowser needs to be updated to fix a zero-day bug that’s already being exploited.By Howard Solomon 10 Oct 2024 3 minsBrowser SecurityZero-day vulnerabilityVulnerabilitiesnewsAdmins warned to update Palo Alto Networks Expedition tool immediatelySix holes in the configuration migration tool could allow theft of cleartext passwords and more.By Howard Solomon 10 Oct 2024 3 minsNetwork SecurityVulnerabilitiesnewsJuniper extends security platform to streamline threat detection, incident responseTighter integration among Juniper's AI-driven security products is aimed at promoting consistency in security policies and strengthening collaboration between networking and security teams.By Michael Cooney 10 Oct 2024 1 minIncident ResponseNetwork SecuritySecurity Show more Show less Explore a topic Generative AI Application Security Business Continuity Business Operations Careers Cloud Security Compliance Critical Infrastructure Cybercrime Identity and Access Management Industry IT Leadership Network Security Physical Security View all topics All topics Close Generative AI Application Security Business Continuity Business Operations Careers Cloud Security Compliance Critical Infrastructure Cybercrime Identity and Access Management Industry IT Leadership Network Security Physical Security Privacy Risk Management Security Security Infrastructure Software Development Vulnerabilities Popular topicsGenerative AI newsCyber resilience becoming extremely difficult amid Gen AI upgradesBy Shweta Sharma 30 Sep 2024 4 minsGenerative AIData and Information Security newsMeet MathPrompt, a way threat actors can break AI safety controlsBy Howard Solomon 23 Sep 2024 5 minsGenerative AIVulnerabilities opinionWill potential security gaps derail Microsoft’s Copilot?By Preston Gralla 17 Sep 2024 1 minGenerative AIData and Information Security View topic Cybercrime newsLockbit dismantling progressesBy Florian Maier 02 Oct 2024 2 minsRansomwareCybercrime feature9 types of phishing attacks and how to identify themBy Fahmida Rashid and John Leyden 01 Oct 2024 11 minsPhishingCybercrimeData and Information Security newsGerman police dismantles illegal crypto exchangesBy Florian Maier 20 Sep 2024 2 minsCryptocurrencyCybercrime View topic Careers how-toDownload the Emerging Cybersecurity Issues Enterprise SpotlightBy CSO Staff 01 Oct 2024 1 minCyberattacksSecurity PracticesSecurity Infrastructure featureThe CSO guide to top security conferencesBy CSO Staff 30 Sep 2024 6 minsTechnology IndustryIT SkillsEvents feature10 things CISOs wished they knew from the startBy Andrada Fiscutean 23 Sep 2024 10 minsCSO and CISOCareers View topic IT Leadership featureHow the increasing demand for cyber insurance is changing the role of the CISOBy Mary K. Pratt 08 Oct 2024 9 minsCSO and CISOInsurance IndustrySecurity Practices featureChief risk storyteller: How CISOs are developing yet another skillBy Rosalyn Page 07 Oct 2024 9 minsCSO and CISORisk ManagementIT Leadership opinionAI could provide the cyber-risk crystal ball every CISO needsBy Christopher Whyte 03 Oct 2024 13 minsCSO and CISOSecurity PracticesIT Leadership View topic Upcoming Events21/Oct-23/Oct awards CSO50 Conference + Awards21 Oct 2024Phoenix, AZ CSO and CISOCybercrimeSecurity 21/Oct-23/Oct awards CSO Conference + Awards21 Oct 2024Phoenix, AZ CSO and CISOCybercrimeSecurity 21/Nov in-person event FutureIT New York: Building the Digital Business with Cloud, AI and Security21 Nov 2024New York, NY Digital TransformationIT Management View all events In depth featureWho owns your data? SaaS contract security, privacy red flagsCompanies looking to use SaaS solutions should involve the security team in the procurement process and pay attention to contract language.By Andrada Fiscutean27 Mar 202410 mins Data and Information Security Read the Article Podcasts podcastsSponsored by Microsoft SecurityStrengthen and Streamline Your SecurityThis podcast series brought to you by Microsoft and IDG, will explore the core components of a modern security strategy, with insights and tips from leading security experts. We’ll discuss how ongoing and ever-changing threats, a growing security stack, and a shift to remote work make it difficult for CISOs and their security teams to balance enterprise-grade security with end-user productivity.4 episodesData and Information Security Ep. 03 Episode 3: The Zero Trust Model 25 Mar 202115 mins Multi-factor AuthenticationCSO and CISORemote Work Ep. 04 Episode 4: Reduce SOC burnout 29 Mar 202115 mins CSO and CISOPhishingRemote Work Show me moreLatestArticlesPodcastsVideos brandpost Sponsored by CyberNewsWire SpyCloud Embeds Identity Analytics in Cybercrime Investigations Solution to Accelerate Insider and Supply Chain Risk Analysis & Threat Actor Attribution By Cyber NewsWire – Paid Press Release 10 Oct 20245 mins CyberattacksSecurity news Star Health Insurance CISO sold customer data, hacker claims By Gyana Swain 10 Oct 20244 mins Data BreachComplianceSecurity feature Cyber insurance explained: Costs, terms, how to know it’s right for your business By Mary K. Pratt, Michael Hill and John Leyden 10 Oct 202414 mins Risk Management podcast CSO Executive Sessions: Guardians of the Games – How to keep the Olympics and other major events cyber safe 07 Aug 202417 mins CSO and CISO podcast CSO Executive Session India with Dr Susil Kumar Meher, Head Health IT, AIIMS (New Delhi) 17 Jul 202417 mins CSO and CISO podcast CSO Executive Session India with Charanjit Bhatia, Head of Cybersecurity, COE, Bata Brands 08 Jul 202418 mins CSO and CISO video CSO Executive Sessions: DocDoc’s Rubaiyyaat Aakbar on security technology 12 Sep 202419 mins Healthcare IndustryArtificial IntelligenceSecurity video CSO Executive Sessions: Hong Kong Baptist University’s Allan Wong on security leadership 05 Sep 202410 mins Education IndustryIT Leadership video CSO Executive Sessions: EDOTCO’s Mohammad Firdaus Juhari on safeguarding critical infrastructure in the telecommunications industry 05 Sep 202411 mins Telecommunications IndustryCritical InfrastructureSecurity