🛡️ Governed Defense, Powered by Offense. ⚡AI Teammates do the grunt work, so your team has the time for more important things.
Delaware, United States
Joined July 2025
- Tweets874
- Following9
- Followers159
- Likes50
Pinned Tweet
Security work keeps growing, but security teams don't.
We've spent years getting better at finding security problems. It's everything that happens after that where most teams are feeling the pressure.
Most security content covers the breach and the tools. Very little covers what practitioners actually do in the minutes and hours after the alert fires.
So we started After The Alert, a weekly series where security leaders walk through the investigation, the call, and the fix.
Episode 1: Gabriel Podolan, Director of InfoSec at Ariat International, on alert fatigue at AI speed and what he’d trust AI to do alone.
youtube.com/watch?v=Va2Sn8pz…
2
10
Attackers aren’t breaking into financial firms anymore. They walk in through the people and approvals around the money.
Joining @ZIGFinance in London on 12 Nov to get in on it.
Banking, fintech, Web3 → come say hi.
luma.com/ZIGFinancexSecure.c…
1
11
It usually means the response team is assuming the attacker can see email, chat, or the ticketing system. Ransomware crews have been caught sitting in a victim’s chat, watching the response unfold
1
1
22
Secure.com retweeted
As AI changes how financial firms are targeted, protecting capital means securing the people and approvals behind every transaction.
On 12 November, we're co-hosting a conversation in London with @Securedotcom, bringing together leaders across banking, fintech and Web3 to discuss what it takes to protect capital against the next generation of cyber threats.
Join us: luma.com/ZIGFinancexSecure.c…
Vulns this week, ranked by how hard they made us laugh:
1. Alpine: a really long password gets you in (under the right conditions)
2. Barracuda: the timezone field runs as root
3. MS Paint: has a network attack surface now
4. WordPress: updating is the dangerous part
5. Rails: ImageMagick, again
Anyway, go patch stuff
Us, realizing all of these could live on one page 👇
secure.com/cve?utm_source=x&…
2
76
Three HIPAA cloud myths that get teams fined:
1. A signed BAA makes you compliant
2. Cloud apps are exempt because no ePHI is on site
3. There’s an official HIPAA cloud certification
All three are wrong. Your data, user access, and evidence stay with you in every cloud model.
1
1
99
2,828 new CVEs were published this week, and 5 were added to CISA’s exploited list.
We built CVE Radar so you can see which ones those are at a glance, with every new CVE’s CVSS, KEV status, and EPSS score on one page, updated hourly:
secure.com/CVE?utm_source=x&…
1
66
What actually tells you what to patch first:
1. Is it on CISA KEV? Someone is exploiting it right now.
2. What’s the EPSS score? That’s how likely it is to be exploited soon.
3. Is it reachable in your environment?
1
14
Someone out there is paying $60 a month for “unlimited” AI.
The company whose keys got stolen is covering the rest
How LLMjacking works 👇
What’s the weirdest thing you’ve ever found exposed to the internet at work?
After this week, supermarket fridge controllers will be hard to beat.
A critical Linux kernel flaw (CVE-2026-98432, CVSS 9.8) can be triggered over plain TCP with no login, and installing the patch alone doesn’t close it.
Update your kernels, then reboot, starting with servers that take traffic straight from the internet or through an NLB TCP listener.
See which distributions have a fix today and how to confirm the patched kernel is the one actually running ↓
secure.com/blog/cybersecurit…