--- title: Cloud CISO Perspectives: Sticking to security... description: This CISO newsletter argues that as AI accelerates both attacker and defender capabilities, security fundamentals like MFA, Zero Trust, patching, and... canonical: https://daily.dev/posts/cloud-ciso-perspectives-sticking-to-security-fundamentals-in-the-ai-era-tm4ld3t2e twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Cloud CISO Perspectives: Sticking to security fundamentals in the AI era | daily.dev og:description: This CISO newsletter argues that as AI accelerates both attacker and defender capabilities, security fundamentals like MFA, Zero Trust, patching, and... og:url: https://daily.dev/posts/cloud-ciso-perspectives-sticking-to-security-fundamentals-in-the-ai-era-tm4ld3t2e og:image: https://api.daily.dev/og/posts/tM4ld3t2E.png og:image:alt: Cloud CISO Perspectives: Sticking to security fundamentals in the AI era og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Cloud CISO Perspectives: Sticking to security fundamentals in the AI era **[Google Cloud](https://daily.dev/sources/gcp)** · 8 min read · 0 upvotes · 0 comments ## Summary This CISO newsletter argues that as AI accelerates both attacker and defender capabilities, security fundamentals like MFA, Zero Trust, patching, and detection/response become more critical rather than obsolete. It covers AI-driven vulnerability discovery and remediation, AI-enhanced threat modeling with dynamic product dossiers replacing static threat models, and the CISO's evolving role as a strategic business leader. A roundup links to related items: Wiz's AI threat readiness features, Google Cloud's post-quantum cryptography roadmap targeting 2029, supply chain compromise mitigation guidance, a keyv/cacheable npm package hijacking, and an exploited Metabase SQL injection CVE. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What npm packages were compromised in the keyv and cacheable supply chain attack? The keyv and cacheable npm packages were hijacked in an ongoing software supply chain attack. Wiz Research identified and actively investigated the compromise affecting multiple packages within the keyv/cacheable ecosystem, part of a broader wave of open source supply chain attacks tracked by security researchers. _Teams tracking npm supply chain risks can follow attack disclosures like this one on daily.dev._ ### What is CVE-2026-72898 in Metabase? CVE-2026-72898 is a SQL injection vulnerability in Metabase that has been exploited in the wild. Wiz reverse engineered the flaw using AI to accelerate understanding of the exploitation technique and inform defensive response, highlighting how attackers are actively abusing this specific SQLi weakness. _Developers patching Metabase deployments can track exploited CVEs like this on daily.dev._ ## Similar posts on daily.dev - [Cloud CISO Perspectives: 2025 in review: Cloud security basics and evolving AI](https://daily.dev/posts/cloud-ciso-perspectives-2025-in-review-cloud-security-basics-and-evolving-ai-pju7utvav) · Google Cloud · 0 upvotes · 0 comments - [Cloud CISO Perspectives: Why AI Threat Defense is the new boardroom baseline](https://daily.dev/posts/cloud-ciso-perspectives-why-ai-threat-defense-is-the-new-boardroom-baseline-fw5b5bzh8) · Google Cloud · 0 upvotes · 0 comments - [CISOs can no longer ignore the nation-state threat](https://daily.dev/posts/cisos-can-no-longer-ignore-the-nation-state-threat-fcq3zr8sr) · CSO Online · 0 upvotes · 0 comments - [Cloud Security LIVE 2026 Recap: What Security Practitioners Are Actually Doing With AI](https://daily.dev/posts/cloud-security-live-2026-recap-what-security-practitioners-are-actually-doing-with-ai-uanzxk3kv) · Orca Security Blog · 0 upvotes · 0 comments - [AI, Quantum, and the New Threat Frontier: What Will Define Cybersecurity in 2026?](https://daily.dev/posts/ai-quantum-and-the-new-threat-frontier-what-will-define-cybersecurity-in-2026--gd8wfyop1) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#ai](https://daily.dev/tags/ai), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/cloud-ciso-perspectives-sticking-to-security-fundamentals-in-the-ai-era-tm4ld3t2e) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Cloud CISO Perspectives: Sticking to security fundamentals in the AI era","url":"https://daily.dev/posts/cloud-ciso-perspectives-sticking-to-security-fundamentals-in-the-ai-era-tm4ld3t2e","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/cloud-ciso-perspectives-sticking-to-security-fundamentals-in-the-ai-era-tm4ld3t2e"},"datePublished":"2026-08-21T16:07:22.739Z","dateModified":"2026-08-21T16:15:00.995Z","description":"This CISO newsletter argues that as AI accelerates both attacker and defender capabilities, security fundamentals like MFA, Zero Trust, patching, and...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/633b25c40b87604c4184aa5862083d4e?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/633b25c40b87604c4184aa5862083d4e?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Google Cloud","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Google Cloud","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/gcp","url":"https://daily.dev/sources/gcp"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/cloud-ciso-perspectives-sticking-to-security-fundamentals-in-the-ai-era-tm4ld3t2e","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai,security","timeRequired":"PT8M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Google Cloud","item":"https://daily.dev/sources/gcp"},{"@type":"ListItem","position":3,"name":"Cloud CISO Perspectives: Sticking to security fundamentals in the AI era"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/cloud-ciso-perspectives-sticking-to-security-fundamentals-in-the-ai-era-tm4ld3t2e#faq","mainEntity":[{"@type":"Question","name":"What npm packages were compromised in the keyv and cacheable supply chain attack?","acceptedAnswer":{"@type":"Answer","text":"The keyv and cacheable npm packages were hijacked in an ongoing software supply chain attack. Wiz Research identified and actively investigated the compromise affecting multiple packages within the keyv/cacheable ecosystem, part of a broader wave of open source supply chain attacks tracked by security researchers. Teams tracking npm supply chain risks can follow attack disclosures like this one on daily.dev."}},{"@type":"Question","name":"What is CVE-2026-72898 in Metabase?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-72898 is a SQL injection vulnerability in Metabase that has been exploited in the wild. Wiz reverse engineered the flaw using AI to accelerate understanding of the exploitation technique and inform defensive response, highlighting how attackers are actively abusing this specific SQLi weakness. Developers patching Metabase deployments can track exploited CVEs like this on daily.dev."}}]} ```