CSO US First Look
The day's top cybersecurity news and in-depth coverage
November 18, 2024
So, you donât have a chief information security officer? 9 signs your company needs one
Many companies have yet to embrace the role of CISO, but with the ever-expanding threat landscape there are growing reasons to consider adding the ultimate cyber boss to the management mix.
Read more
CISOs who delayed patching Palo Alto vulnerabilities now face real threat
CISA said it has evidence of active exploitation for two out of six Expedition vulnerabilities Palo Alto Networks patched in October.
US says China conducted massive espionage through breached telcos
FBI and CISA have warned that some US telecommunication companies have been breached by China-backed Salt Typhoon to snoop on US secrets and maintain access.
How to defend Microsoft networks from adversary-in-the-middle attacks
Preventing, investigating, and cleaning up after potentially dangerous AiTM attacks requires a combination of techniques and processes.
Citrix admins advised to install hotfixes to block vulnerabilities
The holes could allow an authenticated hacker to use HTTP to get into Citrix Virtual Apps and Desktops.
November 2024 Patch Tuesday patches four zero days and three critical flaws
And a stream of NTLM vulnerabilities continues to bite admins.
Volt Typhoon returns with fresh botnet attacks on critical US infrastructure
Researchers reveal the resurgence of Volt Typhoon, exploiting outdated edge devices to infiltrate essential networks in government and industry.