The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.
NYC
Joined November 2008
- Tweets101K
- Following1.8K
- Followers119K
- Likes1.3K
Pinned Tweet
The @FBI and @CISAgov urge operators to secure refrigeration systems after suspected cyberattacks on supermarkets, blood banks and military facilities. Experts warn of broader OT security risks. #cybersecurity #CISO #infosec bit.ly/3UnYAEZ
Meta's Muse highlights a growing identity crisis, says the author of this op-ed: #AI agents can mimic human behavior online. Can digital systems still distinguish people from machines? #cybersecurity #CISO #infosec bit.ly/4z5EUDR
1
359
The OpenAI–Hugging Face incident exposed familiar security gaps at #AI speed. The lesson, says @britive1's Art Poghosyan in this op-ed: Limit standing privileges, eliminate shared credentials and contain breaches. #cybersecurity #CISO #infosec bit.ly/4z9TXN2
Under the EU AI Act, #AI governance can no longer be treated as a future compliance project, says @Andritz's Umesh Kalanke in this op-ed. Here's what organizations need to know to meet upcoming deadlines. #cybersecurity #CISO #infosec bit.ly/4BLOZIy
2
3
550
Attackers can hide malicious prompts in images to bypass #AI safeguards. At @owasp's Global AppSec, a researcher showed how image processing can expose LLMs to prompt injection. #cybersecurity #CISO #infosec bit.ly/3WT7Rpa
PHP2Shell may be just the beginning, says @hadriansecurity's Klaas Meinke in this op-ed. #AI is uncovering decades-old flaws faster than teams can patch them. Could the coming vulnerability surge ultimately make software safer? #cybersecurity #infosec bit.ly/4iLbGUW
1
387
#AI isn't reinventing cybercrime. It's making phishing, deepfakes and fraud faster, cheaper and more scalable. Defenders must prioritize threats by impact, not novelty, says @Netcraft's Ivan Khamenka in this op-ed. #cybersecurity #CISO #infosec bit.ly/4kyPTCb
1
1
343
The @CISAgov flags an actively exploited WordPress Core flaw that lets unauthenticated attackers execute code during updates. Experts urge immediate patching and checks for compromise. #cybersecurity #CISO #infosec bit.ly/4Ad4h7G
Suspected cyberattacks on refrigeration systems at U.S. military bases and European supermarkets raise food safety concerns and expose security gaps in internet-connected equipment. #cybesecurity #CISO #infosec bit.ly/4zsGroI
1
2
473
#Cybersecurity is overdue for a market correction, says Jeremiah Grossman at @owasp's Global AppSec. His warning: Stop chasing every flaw and start measuring what actually prevents losses. #CISO #infosec bit.ly/4zCo3da
482
The @CISAgov flags an actively exploited Apple flaw reportedly linked to Russian cyberespionage. Despite its 5.5 severity score, experts urge patching and checks for compromise. #cybersecurity #CISO #infosec bit.ly/4z3yIMy
In this op-ed, the author says a critical GitLab MCP flaw exposes a bigger risk: #AI connectors holding powerful credentials but missing from asset inventories. Security teams must track MCP servers, tokens and patches. #cybersecurity #CISO #infosec bit.ly/48wwjzb
2
4
803
Approved #AI apps can become shadow AI when employees switch accounts, enable new features or add integrations. Security teams must monitor interactions, not just applications, according to @CheckPointSW. #cybersecurity #CISO #infosec bit.ly/4j1MpqE
2
3
505
In this op-ed, @morphisec's Ron Reinfeld says #cybersecurity's Black October exposed a dangerous assumption: teams can respond to every crisis in time. The lesson from 1987's market crash? Build automatic safeguards before chaos hits. #CISO #infosec bit.ly/4ixX0IC
571
#AI agents can delete databases or leak files without malicious intent. The real risk? Excessive permissions. Limit access, log actions and require human approval for critical tasks, says @viewtrade's Levan Velijanashvili in this op-ed. #cybersecurity bit.ly/3UmZpOh
PHP2Shell may be just the beginning, says @hadriansecurity's Klaas Meinke in this op-ed. #AI is uncovering decades-old flaws faster than teams can patch them. Could the coming vulnerability surge ultimately make software safer? #cybersecurity #infosec bit.ly/4iLbGUW
1
1
539
The @CISAgov flags an actively exploited WordPress Core flaw that lets unauthenticated attackers execute code during updates. Experts urge immediate patching and checks for compromise. #cybersecurity #CISO #infosec bit.ly/4Ad4h7G
540
#Cybersecurity is overdue for a market correction, says Jeremiah Grossman at @owasp's Global AppSec. His warning: Stop chasing every flaw and start measuring what actually prevents losses. #CISO #infosec bit.ly/4zCo3da
The @CISAgov flags an actively exploited Apple flaw reportedly linked to Russian cyberespionage. Despite its 5.5 severity score, experts urge patching and checks for compromise. #cybersecurity #CISO #infosec bit.ly/4z3yIMy
1
1
565
More than 1,000 GitLab servers remain exposed to an actively exploited, critical RCE flaw. Experts warn attackers could steal credentials and compromise software supply chains. #cybersecurity #CISO #infosec bit.ly/4z1XKeZ
2
4
597