Cybersecurity isn’t underfunded—it’s undermanaged. In this Foundry Expert Contributor article, discover why CISOs need a new leadership narrative to drive smarter security strategies at the top. Read here: spr.ly/63324CDHZ8 #FoundryExpert #CyberSecurity #CISOLeadership

Researchers uncovered an unexpected behavior of HTTP client proxies when created in .NET code, potentially allowing attackers to write malicious code to arbitrary files. Microsoft does not plan to fix this issue in the .NET Framework. www.csoonline.com/article/4104...

Ivanti has patched a critical vulnerability in Endpoint Manager that enables attackers to hijack administrator sessions without authentication and potentially control thousands of enterprise devices. www.csoonline.com/article/4104...

Adversaries aren’t just hacking—they’re hustling. These breach case studies reveal motives, missteps, and methods that matter for your defense. Learn why understanding attacker intent is now mission-critical. spr.ly/63323CBYjt #FoundryExpert #InfoSecLeadership #CyberRisk

Staff+ security engineers can transform enterprise security—if they scale their impact. Learn how to lead strategically and multiply outcomes without adding workload. spr.ly/63320CBgNk #FoundryExpert #CyberLeadership #SecurityStrategy

Quantum + AI = power and risk. As Q-Day looms, CISOs must brace for a new era of cybersecurity challenges. Here’s what’s coming. spr.ly/63321CBgYS #FoundryExpert #Cybersecurity #QuantumComputing

Yes, attackers are experimenting with LLMs. Yes, AI can aid malware development or produce superficial polymorphism. But the narrative that AI automatically produces sophisticated malware or fundamentally breaks defenses is misleading. www.csoonline.com/article/4101...

Although cybersecurity is referenced hundreds of times across the NDAA, the legislation contains provisions that, once the law becomes effective, will mark significant shifts in how the US military manages major cybersecurity tasks. www.csoonline.com/article/4103...

Think your failover plan is bulletproof? Think again. Outages hit harder than ever, and redundancy myths won’t save you. Learn how smart policies, automation, and testing keep traffic flowing when chaos strikes. spr.ly/633247hNue #FoundryExpert #CyberResilience #ITSecurity

Cheaper security feels good—until a breach wipes out the savings. Learn why resilience must be baked into procurement decisions, not treated as an afterthought. spr.ly/633277CepX #FoundryExpert #Security #Budgeting

A security flaw in the widely-used Apache Tika XML document extraction utility, originally made public last summer, is wider in scope and more serious than first thought, the project’s maintainers have warned. www.csoonline.com/article/4102...

AI browsers including Perplexity Comet and OpenAI’s ChatGPT Atlas present security risks that cannot be adequately mitigated, and enterprises should prevent employees using them, according to Gartner. www.computerworld.com/article/4102...

We’ve seen this movie before. Rapid adoption without governance leads to risk, complexity, and costly cleanup. AI is no different. Here’s how to set the rules before the tech runs wild. spr.ly/633247C1sq #FoundryExpert #RiskManagement #Security

Your browser is the new battleground. Modern attacks start there—and zero trust is your best defense. Learn how identity checks, device validation, and session lockdowns can stop threats before they spread. spr.ly/633227CE7E #BrowserSecurity #EndpointProtection #Security

"The legislators behind NIS2 have failed to develop uniform and pragmatic security rules for implementation across Europe," says Raphael Reiß, CISO at EU HVAC giant Vaillant Group. www.csoonline.com/article/4101...

A growing number of CISOs see are building up offensive capabilities and integrating them into their security processes to ensure the information revealed during offensive exercises leads to improvements in their overall security posture. www.csoonline.com/article/4101...

Chinese state-sponsored threat actors are backdooring VMware vCenter and VMware ESXi servers with a malware program written in Go, allowing them to maintain long-term persistence in victim networks. www.csoonline.com/article/4101...

Researchers at Greynoise said they are seeing “opportunistic, largely automated exploitation attempts” trying to take advantage of the unsafe deserialization vulnerability in React Server Components (RSC). www.csoonline.com/article/4101...

A prolonged lack of management of valid authentication keys for signed access tokens issued to authenticators is believed to be the root cause of over 30 million accounts being exposed externally by ecommerce giant Coupang. www.csoonline.com/article/4101...

Johannes Ullrich, dean of research at the SANS Institute, says his organization’s honeypots last month detected a curious amount of traffic with server requests that include CDN-related headers. www.csoonline.com/article/4101...

The zero trust approach cybersecurity access control is more than 15 years old but organizations continue to struggle with its implementation due in large part to fragmented tooling and legacy infrastructure. www.csoonline.com/article/4101...

Feeds tell you what’s out there. Flows tell you what’s coming for you. ULM transforms threat intelligence from static lists into actionable insight. Here’s how CISOs can operationalize intel for real defense: spr.ly/6332474OHq #FoundryExpert

A longstanding problem with the way Windows handles LNK shortcut files, which attackers have been abusing for years to hide malicious commands in plain sight, may finally have been fixed, with more than one patch now available to users. www.csoonline.com/article/4101...

Developers using the React 19 library for building application interfaces are urged to immediately upgrade to the latest version because of a critical vulnerability that can be easily exploited by an attacker to remotely run their own code. www.infoworld.com/article/4100...

In a new example of how AI tools expand the attack surface of development machines, researchers found a serious remote code execution flaw in OpenAI’s Codex CLI, one of the most popular LLM-powered coding agents. www.csoonline.com/article/4100...

Numerous incidents in recent years where the breakage of a cable leaves a territory without connectivity are proof that despite their critical nature they are not always properly protected. www.csoonline.com/article/4099...

A sprawling surveillance campaign targeting Google Chrome and Microsoft Edge users is just the latest evolution of a seven-year-long project to distribute malicious browser extensions. www.csoonline.com/article/4099...

For CISOs looking to enhance their security defenses with AI-powered tools, here are some key questions to ask prospective AI security vendors. But before CISOs engage with vendors, it’s important to get your ducks in a row. www.csoonline.com/article/4094...

A CISO’s success depends on an aligned, resilient partnership with their CIO. Here’s how to tell whether yours is damaged and in need of intentional repair. www.csoonline.com/article/4094...

Attackers behind the ToddyCat advanced persistent threat (APT) toolkit have adapted to stealing Outlook mail data and Microsoft 365 Access tokens. www.csoonline.com/article/4096...

A seasonal surge in malicious activity combined with alliances between ransomware groups led to a 41% increase in attacks between September and October. www.csoonline.com/article/4096...

CSOs and Windows admins should disable the ability of personal computers to automatically run commands to block the latest version of the ClickFix social engineering attacks. www.csoonline.com/article/4096...

A large trove of sensitive credentials, authentication keys, configuration data, tokens, and API keys has been potentially exposed by developers using two popular code formatting sites, security company watchTowr has discovered. www.infoworld.com/article/4096...

Zero Trust Isn’t Optional for Telecom Security—It’s Survival Get the full story by #FoundryExpert Contributor, Ashish Mishra ➡️spr.ly/633217oawD#FoundryExpert #Security #TelecommunicationsIndustry #ZeroTrust

The attacker never sleeps and neither do you. At least, that’s how it feels when your job is to stay one step ahead of someone whose only job is to break things. Don’t miss the full story from #FoundryExpert Contributor, Maman Ibrahim spr.ly/633297WgYD#FoundryExpert #BusinessOperations

At Zurich’s recent cyber conference, CISOs swapped war stories about shrinking patch windows, AI threats and burnout — and found rare relief in real peer support. Don’t miss the full story from #FoundryExpert Contributor, Sabine Frömling spr.ly/633287Wgrj#FoundryExpert #Security

CISA has flagged a pre-authenticated, critical remote code execution flaw in Oracle Identity Manager, noting that it has been actively exploited. www.csoonline.com/article/4095...

JPMorgan Chase, Citi, and Morgan Stanley are among the major US banks assessing potential customer data exposure following a cyberattack on SitusAMC, a third-party vendor that processes residential mortgage data for hundreds of financial institutions. www.csoonline.com/article/4095...

GenAI GRC flips supply chain risk from paperwork to real-time smarts, helping CISOs spot trouble early and keep the board focused on resilience. Get the full story by #FoundryExpert Contributor, Adetunji Adebayo spr.ly/633277YRTW#FoundryExpert #GRC #RiskManagement #CISOLeadership

Smart threat intel cuts through the noise, helping teams move faster, shrink risk and finally give leaders confidence their defenses are improving. Get the full story by #FoundryExpert Contributor, Joe Cozzupoli spr.ly/633277YuhJ#FoundryExpert #SecurityLeadership #IncidentResponse

Nominate today! 2026 CSO Awards & Hall of Fame honor visionary leaders and groundbreaking security initiatives. Deadlines: Dec 3 (Hall of Fame) | Jan 9 (Awards) Details: spr.ly/633257cFF3 #CybersecurityLeadership #CSOConference #Innovation

Cybersecurity education is changing fast. Joan Goodchild talks with Kevin Powers about the skills tomorrow’s leaders need—and why security is now a business & legal priority. Watch here: spr.ly/633297cA7P #Cybersecurity #CyberSessions #CyberEducation

Nominate today! 2026 CSO Awards & Hall of Fame honor visionary leaders and groundbreaking security initiatives. Deadlines: Dec 3 (Hall of Fame) | Jan 9 (Awards) Details: spr.ly/633267cNY6 #CybersecurityLeadership #CSOConference #Innovation

To land your budget, show the board the real financial risk, plan past compliance and speak their language — not just security jargon. Get the full story by #FoundryExpert Contributor, Chris Wheeler spr.ly/633297ihCd#FoundryExpert #BoardroomChallenges #RiskManagement

"Vendors think they’re selling technology. They’re not. They’re trying to sell confidence to people whose jobs depend on managing the impossible." www.csoonline.com/article/4089...

Cyber-related activities of two Iran-linked threat actors played key roles in subsequent high-profile missile strikes, according to Amazon’s Threat Intel team www.csoonline.com/article/4093...

When you treat vulnerabilities as clues instead of chores, you uncover threats, fix blind spots and finally make your security program work smarter. Get the full story by #FoundryExpert Contributor, Tom Poperszky spr.ly/6332879mSg#FoundryExpert #SecuritySoftware #Vulnerabilities

SquareX has disclosed a previously undocumented API within the Comet AI browser that allows its embedded extensions to execute arbitrary commands and launch applications — capabilities mainstream browsers intentionally block. www.csoonline.com/article/4092...