CSO Online | Security at the speed of business

CybercrimeDeveloperMalware

Malicious npm package sneaks into GitHub Actions builds

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious artifacts under GitHub’s own name.

By Shweta Sharma

Nov 12, 2025 4 mins

opinion

Beyond the checklist: Shifting from compliance frameworks to real-time risk assessments

Combine structured frameworks with a customizable assessment model to turn strategic fog into prioritized remediation plans with the most value.

By Greg Neville

Nov 12, 2025 7 mins

ComplianceRisk ManagementSecurity

Security SoftwareThreat and Vulnerability ManagementZero-Day Vulnerabilities

November Patch Tuesday: Zero day Windows kernel flaw in servers, controllers, and PCs

Also of importance are a Kerberos vulnerability in Active Directory, a Visual Studio Copilot extension, and a Microsoft Graphics Component issue.

By Howard Solomon

Nov 11, 2025 8 mins

North Korean hackers exploit Google’s safety tools for remote wipe

The campaign hijacked Google accounts to abuse Android’s Find Hub feature, remotely wiping victims’ phones while spreading malware through trusted KakaoTalk contacts.

By Shweta Sharma

Nov 11, 2025 4 mins

SecurityVulnerabilities

GovernmentLaws and RegulationsMarkets

Senate moves to restore lapsed cybersecurity laws after shutdown

The continuing resolution would extend CISA 2015 and the Federal Cybersecurity Enhancement Act, reinstating liability shields and threat-sharing protections.

By Gyana Swain

Nov 11, 2025 5 mins

Video on demand

video

Inside Black Hat: Andy Ellis on vendor buzzwords, AI hype, and the future of the CISO role

In this debut episode of Cyber Sessions, host Joan Goodchild sits down with Andy Ellis, veteran CSO and member of the CSO Hall of Fame, to learn about his State of the Security Vendor report from the Black Hat show floor. From AI flooding vendor taglines to the real challenges of code security and identity, Ellis shares sharp insights on what’s hype, what matters, and where the CISO role is headed next.

By Joan Goodchild

Nov 12, 2025 31 mins

Black HatCSO and CISOCyberattacks

[フレーム]

See all videos

Explore a topic

Spotlight: AI in Enterprise

Articles Buyer’s Guide

Agentic AI burst onto the scene with its promises of streamlining operations and accelerating productivity. But what’s real and what’s hype when it comes to deploying agentic AI? This Special Report examines the state of agentic AI, the challenges organizations are facing in deploying it, and the lessons learned from the success stories. Explore what’s actually happening now with agentic AI and what the near future holds.

View all

In depth

Feature

Who owns your data? SaaS contract security, privacy red flags

Companies looking to use SaaS solutions should involve the security team in the procurement process and pay attention to contract language.

By Andrada Fiscutean

Mar 27, 202410 mins

Data and Information Security

Read the Article

Data center

Podcasts

SecuritySecurity Practices

podcasts

Cyber Sessions with Joan Goodchild

Cybersecurity is constantly evolving, and so are the leaders who shape it. Hosted by veteran journalist Joan Goodchild, Cyber Sessions brings candid conversations with top CISOs, strategists, and industry influencers. Each episode cuts through the noise to explore the trends, challenges, and leadership insights that define the future of security.

1 episode

Ep. 01
Inside Black Hat: Andy Ellis on vendor buzzwords, AI hype, and the future of the CISO role
Jun 28, 202330 mins
Black HatCSO and CISOCybercrime

Show me more

article

Press Release: CIO100 and CSO30 ASEAN Awards Gala 2025 Celebrate Regional Excellence in Technology Leadership

CyberattacksInnovation AwardsRansomware

Nov 14, 20254 mins

APIsArtificial IntelligenceSecurity

AI startups leak sensitive credentials on GitHub, exposing models and training data

By Prasanth Aby Thomas

Nov 11, 20254 mins

brand post Sponsored by ASUS

Layered security: How SMBs can protect against sophisticated cyberthreats during the holiday season.

Inside Black Hat: Andy Ellis on vendor buzzwords, AI hype, and the future of the CISO role

Nov 12, 202530 mins

Black HatCSO and CISOCybercrime

podcast

CSO Executive Sessions: Leading the Charge on Cyber Agility for Southeast Asia’s Digital Future

Cloud SecurityCyberattacksThreat and Vulnerability Management

Oct 2, 202521 mins

podcast

CSO Executive Session ASEAN: Navigating the Cyber Battleground, Strengthening Southeast Asia’s Digital Defense

CyberattacksCybercrimeThreat and Vulnerability Management

Sep 23, 202541 mins

video

CSO Executive Sessions: Leading the Charge on Cyber Agility for Southeast Asia’s Digital Future

Cloud SecurityCyberattacksThreat and Vulnerability Management

Oct 2, 202521 mins

video

CSO Executive Session ASEAN: Navigating the Cyber Battleground, Strengthening Southeast Asia’s Digital Defense

CyberattacksThreat and Vulnerability ManagementZero Trust

Sep 23, 202541 mins