CSO Security Leadership
The day's top cybersecurity news and in-depth coverage
February 05, 2024
8 things that should be in a company BEC policy document
A business email compromise policy can guide and allow employees to feel safer by following pre-defined rules. Here are eight things that should be in an organizationâs BEC policy. Read more
Bazel PoC attack highlights transitive vulnerability risk in custom GitHub Actions
A dependent action in Bazel could permit malicious code injection into a GitHub Actions workflow, highlighting risk from third-party dependencies. Read more
US security agencies terminate China-backed hacking attempt
The court-authorized operation involved deleting the KV Botnet malware on routers owned by citizens and small office owners. Read more
Check Pointâs new generative AI tool offers platform-wide intelligence and remediation
Targeting time and talent challenges in security, the new Infinity AI Copilot promises integrated, intelligent smart assistant for threat management and remediation. Read more
6 user experience mistakes made for security and how to fix them
Despite guidance to the contrary, some organizations continue to impose security measures that are needlessly complex and counterproductive on their employees and customers. Read more
Time running out to patch Jenkins CI/CD server vulnerability
Threat actors are already scanning the internet for vulnerable Jenkins servers after a proof of concept was published. Read more
Top cybersecurity product news of the week
New product and service announcements from Secureworks, OX, Vade, SentinelOne, Varonis, Keyfactor, and Deep Instinct. Read more