AI models, agentic frameworks, data pipelines, and all the tools, services, and open-source libraries that make AI possible are evolving quickly and cybersecurity leaders must be on top of it.
How cybersecurity leaders are securing AI infrastructures Read More »
Model Context Protocol (MCP) use is increasing in popularity for connecting AI agents to data sources, and other services. But so too are vulnerabilities that bring unique risks to agentic systems.
Top 10 MCP vulnerabilities: The hidden risks of AI integrations Read More »
Model Context Protocol (MCP) allows AI agents and chatbots to connect to data sources, tools, and other services, but they pose significant risks for enterprises that roll them out without having proper security guardrails in place.
MCP is fueling agentic AI — and introducing new security risks Read More »
Siemens got into some hot water after Broadcom acquired VMware and changed licensing terms. What can enterprises learn from this dispute?
Licensing lessons from VMware-Siemens spat Read More »
The Broadcom/VMware licensing saga timeline
A timeline of Broadcom/VMware and Siemens licensing dispute Read More »
Non-human identities were already a challenge for security teams before AI agents came into the picture. Now, companies that haven’t come to grips with this problem will see it become even more critical.
How cybersecurity leaders can defend against the spur of AI-driven NHI Read More »
Attackers use business email compromise to pretend to be company executives, vendors, or other trusted parties and trick employees into sending them money. AI makes these attacks more effective — but also puts new tools in the hands of defenders.
AI gives superpowers to BEC attackers Read More »
The big edge computing news from Red Hat Summit is the first continuously certified Linux OS for vehicles.
Red Hat releases tool to manage edge devices at scale… and to drive cars Read More »
It may have faded into obscurity but by an order of magnitude, the outage last July caused by the cybersecurity vendor was the costliest in IT history. What have we learned to prevent something similar from happening again?
Case in point: taking stock of the CrowdStrike outages Read More »
From the editors of CSO, this enterprise buyer’s guide helps IT security staff understand what the various breach and attack simulation (BAS) options can do for their organizations and how to choose the right solution. Download the breach and attack simulation (BAS) tools buyer’s guide here.
Breach and attack simulation (BAS) tools buyer’s guide Read More »
Prompt injection and supply chain vulnerabilities remain the main LLM vulnerabilities but as the technology evolves new risks come to light including system prompt leakage and misinformation.
10 most critical LLM vulnerabilities Read More »
AI and machine learning are improving cybersecurity, helping human analysts triage threats and close vulnerabilities quicker. But they are also helping threat actors launch bigger, more complex attacks.
10 ways hackers will use machine learning to launch attacks Read More »
From prompt injections to model theft, OWASP has identified the most prevalent and impactful vulnerabilities found in AI applications based on large language models (LLMs).
10 most critical LLM vulnerabilities Read More »
The best way to recover from a ransomware attack is to have a reliable and fast backup process. Here’s how to do it.
Ransomware recovery: 8 steps to successfully restore from backup Read More »
After years of review, the National Institute of Standards and Technology has chosen three encryption algorithms as the basis for its post-quantum security strategy.
NIST finally settles on quantum-safe crypto standards Read More »
