How the 2026 World Cup affected Internet traffic
For 96 years, the World Cup has been a global phenomenon, uniting nations and communities through a shared love of sportsmanship. While its popularity is nothing new, what is novel…
-
-
DocuSign Phishing Kit Delivers RMM Tools to Windows and macOS
Phishing campaigns are increasingly shifting away from traditional malware in favor of trusted business applications and legitimate IT tools. Research from BlueVoyant shows attackers are using realistic DocuSign-themed pages to…
-
SOCs face a human challenge as AI speeds alerts and threats
“People who work in SOCs are now seeing overwhelming volumes of data, and they’re getting fatigued,” Griffiths tells CSO. AI can help automate portions of analysis, validate alerts, and improve…
-
HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle
Amelia Coen | Tuesday, 5 August 2025 at 11:08 UTC Ever wondered how attackers can compromise modern websites by exploiting invisible cracks in HTTP infrastructure to win big bounties? In…
-
Transforming Data into Defensive Velocity
Security Operations Centers (SOCs) are currently confronting scalability challenges on two fronts: structural and cognitive. The day-to-day reality of modern defensive operations is stark: an analyst frequently begins a shift…
-
A Look Inside the HuggingFace Breach
Varonis security brief On July 16, 2026, HuggingFace disclosed a security breach in which an autonomous AI attacker infiltrated its internal infrastructure. The attacker chained two remote code execution (RCE) vulnerabilities in HuggingFace’s dataset processing pipeline,…
-
CSO Conversations: Matt Immler, Regional CSO of Americas East
CSO Conversations is a blog series interviewing Okta’s Regional CSOs supporting David Bradbury, Okta’s Chief Security Officer in providing the best service for our customers. Okta’s Regional CSOs are integral…
-
Hugging Face Discloses Autonomous AI Agent Attack
Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent attack. The attackers gained access to internal datasets and credentials by exploiting vulnerabilities in the company’s…
-
AI adoption and business acceleration are changing the expectations of technology risk management
As AI becomes embedded in customer experiences, internal workflows, and throughout the supply chain, security leaders are being asked to do more than manage risk. They are being asked to…
-
The Desync Delusion: Are You Really Protected Against HTTP Request Smuggling?
Andrzej Matykiewicz | Wednesday, 6 August 2025 at 22:22 UTC The Hidden Threat That’s Slipping Past Your Security HTTP request smuggling remains one of the most dangerous yet frequently overlooked…
