CSO US First Look
The day's top cybersecurity news and in-depth coverage
May 26, 2025
The 7 unwritten rules of leading through crisis
Your crisis management playbook may look fail-proof on paper, but leadership and culture offer intangibles that can make or break execution when emergency strikes.
Read more
Beijing may have breached US government systems before Cityworks plugged a critical flaw
Talos' research revealed that Chinese hackers are actively exploiting the flaw to execute code and attempt persistence on vulnerable systems.
Critical infrastructure under attack: Flaws becoming weapon of choice
While phishing and stolen credentials remain frequent points of entry, overexposure and poor patch management of critical systems are increasingly fueling attackersâ appetites for disruption.
Russian APT28 compromised Western logistics and IT firms to track aid to Ukraine
The Russian GRU-linked cyberespionage group APT28 has been targeting government agencies and companies from Western countries that were involved in the shipment of aid to Ukraine since 2022.
Over 91% of companies sacrifice hybrid cloud security in the AI adoption rush
New data shows that a surge in AI and hybrid cloud architectures is creating dangerous gaps, and security teams canât keep up.
Open MPIC project defends against BGP attacks on certificate validation
Open MPIC provides certificate authorities with an open-source framework for implementing multi-perspective validation, protecting against BGP hijacking attacks that threaten the web's trust infrastructure.
