🚨 PHP2Shell: two critical CVEs in PHP core (CVSS v4.0 9.2). Exploitation attempts began four days before the patch was released. An unauthenticated attacker can run code with HTTP requests alone. The vulnerable code dates to PHP 5.4 in 2012, so even clean application code is exposed. Patch first and assume breach. okt.to/xlQvRe #CloudSecurity #ThreatResearch #PHP #RuntimeSecurity

Wide eyes. Racing pulse. A backlog that keeps growing. You may be experiencing Mythos anxiety. 😅 Join our “Mythos, Decoded” webinar to learn how runtime context shows which vulns add real risk. Practical steps, minus the panic. 📅 Oct 29 | 8am PT / 11am ET okt.to/vOdlGe #CloudSecurity #VulnerabilityManagement #RuntimeSecurity

Frontier AI models like Mythos can discover vulnerabilities faster than any human. Most advice floating around isn’t helping. Join us October 29 to separate what’s actually changed from the noise. Mythos, Decoded: What’s Actually Changed in Vulnerability Management 📅 Oct 29 | 8am PT / 11am ET okt.to/iFTNAp #CloudSecurity #VulnerabilityManagement #AIAgents

Excited to welcome Teri Harrell as Sysdig’s new Chief Human Resources Officer. 🎉 25+ years in talent, development, and org change. Former CHRO at VitalEdge, HR leadership at Red Hat. Exactly who you want leading people strategy at a company moving this fast. Welcome to the team, Teri! okt.to/Sv7Aux #Sysdig #LifeAtSysdig #Leadership

Cybersecurity Awareness Month. A good time to remember what causes breaches every other month. 78% trace to system intrusion and social engineering. Vulnerability exploitation up 55% YoY. Human element in 62% of breaches. MFA works. Least privilege works. Patching works. The fundamentals just need to be daily, not annual. okt.to/yuTSw1 #CybersecurityAwarenessMonth #CloudSecurity #RuntimeSecurity

Just wrapped SecTor 2026 in Toronto. A few takeaways from the show floor. Runtime is entering the mainstream AI security conversation. AI agents aren’t reliable narrators about their own actions. And the governance angle is resonating more than expected. We’ve been saying this for a decade. Good to see the market catching up. #SecTor2026 #CloudSecurity #AIDefense #RuntimeSecurity

September's security theme: a gap between initial access and anyone noticing something was wrong. Rogue OpenAI agents. ShinyHunters scaling with Claude. A human attacker at machine speed. Crystal Morin's monthly briefing covers it all. okt.to/ju5QS8 #CloudSecurity #ThreatResearch #AIAgents #RuntimeSecurity

How fast can an AI agent chain two Zammad zero-days and reach root? DIVD says seconds. The target: DIVD itself, the nonprofit that warns others about exposed systems. Breakdown, detections & mitigations: okt.to/iF0krv #cloudsecurity #ThreatResearch

SBOMs give you visibility into your software supply chain. But what else do you need to defend against attacks?  Four challenges: inconsistent tool support, untrustworthy data, vulnerabilities that change daily, and internal threats no SBOM can detect. Full breakdown: okt.to/5QKVCZ #CloudSecurity #SupplyChainSecurity #SBOM #ContainerSecurity

A typical cloud attack takes 10 minutes. The median dwell time for on-premises threats is 16 days. Those two numbers explain why cloud defense needs its own benchmark. 5 seconds to detect. 5 minutes to triage. 5 minutes to respond. Download the 555 Benchmark whitepaper: okt.to/QgS4xe #CloudSecurity #RuntimeSecurity #CDR #CNAPP