CSOonline
LightNews LightNews
csoonline.bsky.social
CSOonline
@csoonline.bsky.social
96 followers 22 following 320 posts
CSO empowers enterprise security leaders with critical insights to stay ahead of threats. Covering #cybersecurity from #riskmanagement to #networkdefense, we provide the expertise needed to defend against cybercrime.
Posts Replies Media Videos
Pinned
csoonline.bsky.social
CSOonline @csoonline.bsky.social · 7d
Think your failover plan is bulletproof? Think again. Outages hit harder than ever, and redundancy myths won’t save you. Learn how smart policies, automation, and testing keep traffic flowing when chaos strikes.

spr.ly/633247hNue

#FoundryExpert #CyberResilience #ITSecurity
A smiling African man, wearing glasses, a grey suit, and a patterned red tie with a tie clip, stands against a black background. A red rose pin adorns his lapel.
csoonline.bsky.social
AI can transform cybersecurity—but without guardrails, it can mislead fast. Governance, human oversight, and smart frameworks aren’t optional; they’re essential. Here’s what every leader needs to know about managing AI risk.

spr.ly/63323CMbpJ
#FoundryExpert #AIinCybersecurity
A selfie of a smiling man with short dark hair, wearing a light blue and white striped shirt. He's in an office setting with a gray cubicle wall behind him and windows showing an office hallway.
December 16, 2025 at 8:35 PM
csoonline.bsky.social
When software fails, the ripple effect can be massive—like grounding 6,000 jets. This isn’t just an aviation story; it’s a wake-up call for software assurance and cybersecurity. Learn what went wrong and why it matters.

spr.ly/63328CMZxi
#FoundryExpert #CyberResilience
A light-skinned man with wavy brown hair and a gentle smile, wearing a blue plaid blazer over a white collared shirt, stands outdoors with greenery in the background.
December 16, 2025 at 8:19 PM
csoonline.bsky.social
Security researchers have found that Urban VPN Proxy, a widely used free browser VPN extension with millions of installs, has been collecting and exporting full AI chat conversations from users’ browsers. www.csoonline.com/article/4106...
‘Featured’ Urban VPN caught stealing private AI chats
The browser extension injects scripts to capture AI prompts and responses even when the VPN features are disabled.
www.csoonline.com
December 16, 2025 at 3:00 PM
csoonline.bsky.social
www.csoonline.com/article/4106...
How to create a ransomware playbook that works
Planning, tabletops, and the right skills and training are vital to being prepared for one of the most prevalent business continuity nightmares.
www.csoonline.com
December 16, 2025 at 2:59 PM
csoonline.bsky.social
AI is rewriting the CISO playbook. The leaders who win won’t just automate—they’ll master power skills like data storytelling, ethics, and influence. Here’s what separates oversight from insight in the AI era.

spr.ly/63329CKr83
#FoundryExpert #CISOLeadership #AIinSecurity
A woman with shoulder-length brunette hair smiles at the camera. She's wearing a light grey blazer over a pink top, complemented by a necklace with round beads. The background is a plain white.
December 15, 2025 at 8:59 PM
csoonline.bsky.social
One hacked port could disrupt America’s orange juice supply. If malware is already lurking in our docks, what else is at risk? Discover why one ship exposes a maritime cybersecurity crisis.

spr.ly/63320CKuAC
#FoundryExpert #CyberSecurity #SupplyChainRisk
Close-up of a grey-haired man with glasses in a suit and purple tie against a grey background, looking directly at the camera with a slight smile.
December 15, 2025 at 8:48 PM
csoonline.bsky.social
As the year comes to a close, CISOs reflect on some of the takeaways that have shaped the security landscape in 2025. www.csoonline.com/article/4102...
Cybersecurity leaders’ top seven takeaways from 2025
The year was marked by the acceleration of AI adoption by both defenders and attackers, greater third-party risks, and intensified governance pressure.
www.csoonline.com
December 15, 2025 at 2:43 PM
csoonline.bsky.social
CISA is sounding the alarm over a critical vulnerability in GeoServer that is being actively exploited in the wild, ordering federal agencies to patch immediately.

www.csoonline.com/article/4106...
CISA orders immediate patching as GeoServer flaw faces active exploitation
Federal agencies told to fix critical XXE vulnerability (CVE-2025-58360) in GeoServer after attackers gain a head start.
www.csoonline.com
December 15, 2025 at 2:40 PM
csoonline.bsky.social
Cybersecurity isn’t underfunded—it’s undermanaged. In this Foundry Expert Contributor article, discover why CISOs need a new leadership narrative to drive smarter security strategies at the top.

Read here: spr.ly/63324CDHZ8
#FoundryExpert #CyberSecurity #CISOLeadership
A portrait of a man with dark hair and glasses, wearing a suit and tie. He has a serious expression and is positioned against a backdrop that includes books.
December 11, 2025 at 10:42 PM
csoonline.bsky.social
Researchers uncovered an unexpected behavior of HTTP client proxies when created in .NET code, potentially allowing attackers to write malicious code to arbitrary files. Microsoft does not plan to fix this issue in the .NET Framework. www.csoonline.com/article/4104...
Hidden .NET HTTP proxy behavior can open RCE flaws in apps — a security issue Microsoft won’t fix
Researcher warns that many .NET applications might be vulnerable to arbitrary file writes because .NET’s HTTP client proxy classes also accept non-HTTP URLs, a behavior developers are responsible to g...
www.csoonline.com
December 11, 2025 at 6:15 PM
csoonline.bsky.social
Ivanti has patched a critical vulnerability in Endpoint Manager that enables attackers to hijack administrator sessions without authentication and potentially control thousands of enterprise devices.

www.csoonline.com/article/4104...
Hundreds of Ivanti EPM systems exposed online as critical flaw patched
Unauthenticated attackers can hijack admin sessions at companies managing enterprise endpoints
www.csoonline.com
December 11, 2025 at 6:13 PM
csoonline.bsky.social
www.csoonline.com/article/4104...
How to justify your security investments
Budget discussions are tiresome because cyber risks and expenses are rising in tandem. CISOs should therefore align their arguments with business objectives.
www.csoonline.com
December 11, 2025 at 6:11 PM
csoonline.bsky.social
Adversaries aren’t just hacking—they’re hustling. These breach case studies reveal motives, missteps, and methods that matter for your defense. Learn why understanding attacker intent is now mission-critical.

spr.ly/63323CBYjt

#FoundryExpert #InfoSecLeadership #CyberRisk
A person with dark hair sitting in an office chair. The person is wearing a blue and white checkered shirt. The background is a plain wall.
December 11, 2025 at 12:18 AM
csoonline.bsky.social
Staff+ security engineers can transform enterprise security—if they scale their impact. Learn how to lead strategically and multiply outcomes without adding workload.

spr.ly/63320CBgNk

#FoundryExpert #CyberLeadership #SecurityStrategy
A man with dark hair and a beard smiles at the camera. He's wearing a blue button-down shirt and a navy blazer. The background shows greenery and a building, suggesting an outdoor or campus setting.
December 10, 2025 at 11:08 PM
csoonline.bsky.social
Quantum + AI = power and risk. As Q-Day looms, CISOs must brace for a new era of cybersecurity challenges. Here’s what’s coming.

spr.ly/63321CBgYS

#FoundryExpert #Cybersecurity #QuantumComputing
A man smiles wearing a blue suit, light blue shirt, and patterned tie. His hair is short, and he looks directly at the camera. The background is blurred green.
December 10, 2025 at 11:02 PM
csoonline.bsky.social
Yes, attackers are experimenting with LLMs. Yes, AI can aid malware development or produce superficial polymorphism. But the narrative that AI automatically produces sophisticated malware or fundamentally breaks defenses is misleading. www.csoonline.com/article/4101...
Polymorphic AI malware exists — but it’s not what you think
Understanding AI malware and how to separate real operational risk from vendor hype.
www.csoonline.com
December 10, 2025 at 1:33 PM
csoonline.bsky.social
Although cybersecurity is referenced hundreds of times across the NDAA, the legislation contains provisions that, once the law becomes effective, will mark significant shifts in how the US military manages major cybersecurity tasks. www.csoonline.com/article/4103...
Key cybersecurity takeaways from the 2026 NDAA
A 4.1% increase in military cyber funding in the FY2026 NDAA budget underpins new requirements for hardened mobile devices, AI security frameworks, and expanded DoD cyber workforce authorities.
www.csoonline.com
December 10, 2025 at 1:33 PM
csoonline.bsky.social
Think your failover plan is bulletproof? Think again. Outages hit harder than ever, and redundancy myths won’t save you. Learn how smart policies, automation, and testing keep traffic flowing when chaos strikes.

spr.ly/633247hNue

#FoundryExpert #CyberResilience #ITSecurity
A smiling African man, wearing glasses, a grey suit, and a patterned red tie with a tie clip, stands against a black background. A red rose pin adorns his lapel.
December 9, 2025 at 10:41 PM
csoonline.bsky.social
Cheaper security feels good—until a breach wipes out the savings. Learn why resilience must be baked into procurement decisions, not treated as an afterthought.

spr.ly/633277CepX

#FoundryExpert #Security #Budgeting
Close-up of an African-American man with a graying beard, wearing blue-rimmed glasses and a black turtleneck sweater. He is bald and looking directly at the camera with a slight smile.
December 8, 2025 at 10:55 PM
csoonline.bsky.social
A security flaw in the widely-used Apache Tika XML document extraction utility, originally made public last summer, is wider in scope and more serious than first thought, the project’s maintainers have warned.

www.csoonline.com/article/4102...
Apache Tika hit by critical vulnerability thought to be patched months ago
The scope of an old PDF parsing flaw has been widened to include more Tika modules.
www.csoonline.com
December 8, 2025 at 10:55 PM
Reposted by CSOonline
computerworld.com
AI browsers including Perplexity Comet and OpenAI’s ChatGPT Atlas present security risks that cannot be adequately mitigated, and enterprises should prevent employees using them, according to Gartner.

www.computerworld.com/article/4102...
Keep AI browsers out of your enterprise, warns Gartner
They’re already in use but may lead to “irreversible and untraceable” data loss, analysts said.
www.computerworld.com
December 8, 2025 at 7:29 PM
csoonline.bsky.social
We’ve seen this movie before. Rapid adoption without governance leads to risk, complexity, and costly cleanup. AI is no different. Here’s how to set the rules before the tech runs wild.

spr.ly/633247C1sq

#FoundryExpert #RiskManagement #Security

A man with brown hair and a light complexion smiles, wearing a blue shirt and grey suit jacket. He stands in front of a window with a city skyline in the background.
December 8, 2025 at 4:28 PM
csoonline.bsky.social
Your browser is the new battleground. Modern attacks start there—and zero trust is your best defense. Learn how identity checks, device validation, and session lockdowns can stop threats before they spread.

spr.ly/633227CE7E

#BrowserSecurity #EndpointProtection #Security

A man with sunglasses and a gray shirt stands in front of a blurred background of water and city buildings. The man has dark hair and a neutral expression.
December 8, 2025 at 4:18 PM
csoonline.bsky.social
"The legislators behind NIS2 have failed to develop uniform and pragmatic security rules for implementation across Europe," says Raphael Reiß, CISO at EU HVAC giant Vaillant Group. www.csoonline.com/article/4101...
Vaillant CISO: NIS2 complexity and lack of clarity endanger its mission
Raphael Reiß, CISO at EU HVAC giant Vaillant Group, explains what cyber challenges his industry faces, including how to operate in a complex regulatory environment.
www.csoonline.com
December 8, 2025 at 2:11 PM
csoonline.bsky.social
A growing number of CISOs see are building up offensive capabilities and integrating them into their security processes to ensure the information revealed during offensive exercises leads to improvements in their overall security posture. www.csoonline.com/article/4101...
Offensive security takes center stage in the AI era
A growing percentage of CISOs see OffSec as a must-have for improving their overall security posture — especially as AI cyber threats and threats to AI infrastructure rise.
www.csoonline.com
December 8, 2025 at 2:09 PM