Security Operations | CSO Online

Supply-chain attacks have evolved considerably in the last two years going from dependency confusion or stolen SSL among others once common attacks to AI-backed social engineering and open-source registries.

By Ax Sharma

Nov 4, 2025 10 mins

CyberattacksCybercrimeMalware

Securing Your Cloud Supply Chain

Cloud supply chain security can be managed with a four-step strategic approach, learn more here.

By Matt Chiodi

Aug 25, 2022 5 mins

IT LeadershipSupply Chain

US Appeals Court lowers burden of proof for data breach lawsuits

The 4th Circuit Court has ruled that dark web data publication alone may be damaging — a decision that could raise extortion stakes, rewrite CISOs’ risk calculus, and increase breached companies’ lawsuit exposure.

By Evan Schuman

Nov 3, 2025 5 mins

CyberattacksCybercrimeData Breach

71% of CISOs hit with third-party security incident this year

Increasingly complex business partnerships and rising reliance on third-party software components are proving to be ever weakening cybersecurity links.

By John Leyden

Sep 9, 2025 6 mins

CyberattacksCybercrimeData Breach

Attackers steal data from Salesforce instances via compromised AI live chat tool

One of their goals was to access other credentials to compromise other environments.

By Lucian Constantin

Aug 26, 2025 5 mins

Access ControlApplication SecuritySupply Chain

Supply chain attack compromises npm packages to spread backdoor malware

Phishing attacks on package maintainer accounts led to infected JavaScript type testing utilities.

By John E. Dunn

Jul 24, 2025 5 mins

MalwareOpen SourceSupply Chain

Cybersecurity in the supply chain: strategies for managing fourth-party risks

Third-party vendors are a well-known risk but they are often not the last point in the supply chain and cybersecurity leaders need to ensure fourth-party providers are given the same treatment.

By Linda Rosencrance

Jul 4, 2025 9 mins

IT GovernanceSecuritySupply Chain

US indicts one for role in BreachForums, France arrests four others

A US court has indicted a man arrested earlier this year on suspicion of being an administrator of stolen data marketplace BreachForum, while on Monday French police arrested four others suspected of running the site.

By Shweta Sharma

Jun 26, 2025 4 mins

Data BreachHackingLegal

Chain IQ data theft highlights need to oversee third party suppliers

Firm says hack on 19 companies came from ‘tools and techniques that had never before been seen on a global scale.’

By Howard Solomon

Jun 19, 2025 5 mins

Data BreachSupply Chain

4 ways to safeguard CISO communications from legal liabilities

The SEC’s lawsuit against SolarWinds’ CISO highlights the legal liabilities CISOs can face when communicating. Here are four ways CISOs can avoid the pitfalls.

By Cynthia Brumfield

May 20, 2025 9 mins

CSO and CISOLaws and RegulationsLegal