The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.

NYC
Joined November 2008
Attackers exploited a @Siemens Software Center flaw in a ClickFix DLL-sideloading attack. Security teams should verify patches and hunt for malicious DLLs loaded by trusted software. #cybersecurity #CISO #infosec bit.ly/3WCXZj8
1
447
Critical PHP2Shell flaws put millions of websites at risk as attackers begin probing for vulnerable servers. The @CISAgov urges immediate patching, but legacy systems remain exposed. #cybersecurity #CISO #infosec bit.ly/4idpsPM
1
454
Security shouldn't slow innovation, says @Equifax's Jeremy Koppen in this op-ed. By using #AI to automate routine tasks, embedding safeguards into development and building customer trust, security teams can accelerate growth. #cybersecurity #infosec #CISO bit.ly/3U8v7yo
282
#AI is advancing faster than developers can reliably control it. New federal guidance underscores the need for independent testing, built-in safeguards and proven shutdown mechanisms, says @Action1corp's Gene Moody in this op-ed. #cybersecurity #infosec bit.ly/4id7BZl
383
#AI is making scams harder to spot, but basic security habits still work. From passkeys to verifying suspicious requests, @Box's Heather Ceylan suggests 10 ways to protect your digital life in this op-ed. #cybersecurity #CISO #infosec bit.ly/4yrdubn
326
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec bit.ly/4i6rssP
2
570
Encrypted doesn't always mean secure, says @BlackBerry's Christine Gadsby in this op-ed. Consumer messaging apps expose sensitive business communications to identity, device and metadata risks that security teams can't afford to ignore. #cybersecurity bit.ly/4yx21XE
387
.@Cisco confirms active exploitation of a critical Secure Email Gateway flaw that can grant attackers root access. Experts warn patching alone isn't enough to ensure compromised devices are clean. #cybersecurity #CISO #infosec bit.ly/4scpXOD
1
459
#AI isn't reinventing the attack cycle. It's accelerating it. As adversaries move faster, security teams must spot emerging threats earlier, before the window to intervene closes, says 360 Privacy's Chuck Randolph in this op-ed. #cybersecurity #infosec bit.ly/4iryzgZ
369
AI safety pledges won't slow cybercriminals. As attackers exploit #AI at machine speed, defenders must strengthen security fundamentals and accelerate response to keep pace, says @AWNetworks' Laura Ellis in this op-ed. #cybersecurity #CISO #infosec bit.ly/4zzHpyS
347
#AI agents can chain low-severity flaws into critical attack paths. Security teams must look beyond CVSS scores and prioritize fixes that cut off access to sensitive systems, says @cogent_security's Vineet Edupuganti in this op-ed. #cybersecurity #infosec bit.ly/4z1UWQb
2
2
450
Cybersecurity's biggest data threat may be shifting inward. Retired Lt. Gen. Mary O'Brien warns AI-generated misinformation can influence boardroom decisions without triggering security alarms. #cybersecurity #CISO #infosec #AI bit.ly/3VQnUUh
1
456
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec bit.ly/4i6rssP
2
2
943
Overprivileged #AI agents can wreak havoc without malicious intent. Security teams must enforce least-privilege access and continuously monitor agent behavior to limit the damage, says @Towerwall's Michelle Drolet in this op-ed. #cybersecurity #infosec bit.ly/47RvpNs
420
The @CISAgov orders urgent patching of an exploited Ivanti VPN flaw as attackers chain three bugs to gain root access. One flaw remains unpatched, raising the stakes for defenders. #cybersecurity #CISO #infosec bit.ly/4i7ZDAK
406
#AI is making scams harder to spot, but basic security habits still work. From passkeys to verifying suspicious requests, @Box's Heather Ceylan suggests 10 ways to protect your digital life in this op-ed. #cybersecurity #CISO #infosec bit.ly/4yrdubn
363
#AI agents breached production systems and spread malware through software supply chains, an @owasp Q3 2026 roundup found. The lesson: Prompt restrictions alone can't contain autonomous agents. #cybersecurity #CISO #infosec bit.ly/4hVX18H
3
5
554
What happens when an #AI testing environment fails? Recent incidents expose a contract gap. @Cisco's Nik Kale urges traceable test records, defect notifications and retrospective reviews. #cybersecurity #CISO #infosec bit.ly/4B8zn1I
1
448