The year was marked by the acceleration of AI adoption by both defenders and attackers, greater third-party risks, and intensified governance pressure.

Medibank’s Head of Security Awareness, Daisy Wong, speaks candidly with CSO about her career journey and the power of culture in cybersecurity. She shares why security awareness only works when it ...

The company’s new approach is that anything touching Microsoft services is eligible for a bug bounty, regardless of its ...

Static AES keys are enabling attackers to decrypt access tokens and reach remote code execution, triggering urgent patch ...

CVE-2025-54988 is a weakness in the tika-parser-pdf-module used to process PDFs in Apache Tika from version 1.13 to and ...

As AI and quantum collide, we get huge leaps in power — along with a scramble to secure our data, trust the results and brace ...

Attacker with local access could escalate privileges, Microsoft warns; analyst calls it ‘the most urgent concern’ this month.

While some researchers dismiss reports of AI-driven cyberattacks as merely marketing messages, threat intel experts counter ...

Today’s outages hit harder, so smart redundancy — backed by good policies, automation and testing — is the only way to keep ...

Vulnerabilities could allow an attacker to bypass single sign-on login protection; users should disable SSO until patching is ...

Researcher warns that many .NET applications might be vulnerable to arbitrary file writes because .NET’s HTTP client proxy ...

In this edition of Cyber Sessions, host Joan Goodchild talks with IANS researcher Nick Kakolowski about why midmarket CISOs ...