SafeBreach helps organizations take command of risk with the first enterprise-grade, AI-powered CTEM platform for continuous exposure validation.
USA and Israel
Joined March 2015
- Tweets3.7K
- Following536
- Followers2.5K
- Likes757
Pinned Tweet
CISA urged immediate patching for PHP2Shell: CVE-2026-109618/109619 (CVSS 9.2). See how new SafeBreach coverage helps you find servers exposed to PHP2Shell and safely validate patches/controls against a working exploit: hubs.ly/Q04CdcgG0
One hacker. 100+ companies breached. ~$50 per successful intrusion. AI agents automated reconnaissance, found overlooked assets, and chained vulnerabilities. Or Golov (@OrGolov) explains why security teams need continuous exposure validation. Read now: hubs.ly/Q04C3pNV0
#StopRansomware: SafePay Ransomware (AA26-293A). SafePay has impacted 600+ victims since 2024. See how SafeBreach simulations help test defenses against its attack chain, from brute force to data theft and encryption. Read the blog: hubs.ly/Q04BXT6j0
600+ victims since Aug 2024—SafePay is among 2026’s most active ransomware groups. A #StopRansomware advisory details its tactics, from known vulnerabilities to data theft with legitimate tools. SafeBreach customers have coverage for most highlighted TTPs. hubs.ly/Q04BPWjF0
Can risk teams keep pace with AI threats? Grant Thornton’s survey of leaders found fewer than half have an integrated risk model. Just 35% ran a breach simulation in the past 6 months. Guy Bejerano (@BejeranoGuy) explains why continuous validation matters: hubs.ly/Q04ByY7b0
Patching closes the door. Who already walked through it? Citrix NetScaler zero-days CVE-2026-88771 and CVE-2026-88772 were exploited before patches. One requires no login and affects every configuration. 🎧 Podcast link in comments.
*LISTEN ON:*
Spotify: open.spotify.com/episode/1oW…
Apple Podcasts: podcasts.apple.com/us/podcas…
SecFlow claimed an exploit worked. It hadn’t. That unchecked claim triggered 27 follow-up tasks built on access that never existed. The lesson for AI detection engineering: test before you trust. Read the blog:
hubs.ly/Q04B14x90
PREFER TO LISTEN?
Episode 80 of The Cyber Resilience Brief, “The AI Harness That Never Checked Its Work,” where host Tova Dvorin is joined by SafeBreach expert Adrian Culley to unpack Hunt.io’s SecFlow research incident. Listen now. safebreach.com/podcast/ai-ha…
SafeBreach Coverage for AA26-281A
Chinese government-linked actors combine automated scanning with hands-on exploitation to steal sensitive data. Explore the details and 26 SafeBreach simulations to help validate your defenses: hubs.ly/Q04zPQhG0
🚨 SafeBreach Coverage for FortiBleed
Stolen credentials. Rogue admins. Ransomware access.
The FBI and Secret Service warn scanning continues. Test your defenses against password spraying, AD discovery, and campaign infrastructure.
Explore: hubs.ly/Q04zvtsd0
AI can compress post-compromise activity from days to minutes, Microsoft’s Digital Defense Report 2026 warns. How long can you rely on your last security test? SafeBreach’s Michael De Groat explores the case for continuous validation: hubs.ly/Q04zr8180
The world’s largest banks don’t assume their defenses work. They prove it. Banks use SafeBreach to continuously validate security controls against real-world attacks. Trust is built on evidence—not assumptions.
Our customers tell the story. Links to case studies in comments.
• Two Fortune 100 Financial Services Organizations: safebreach.com/case-studies/…
• A Top Global Bank Switches to SafeBreach: safebreach.com/case-studies/…
SafeBreach is approved for Anthropic’s Cyber Verification Program and OpenAI’s Daybreak Blue. As CEO @GuyBejerano says, AI is one input—our validation data, threat researchers, and safety controls provide the foundation for production-safe validation. hubs.ly/Q04yW8v-0
SafeBreach Offensive Security Engineer Adrian Culley explains why this matters:
“What’s notable isn’t that an AI agent found its way past a control—it’s that nobody built the agent to stop when it hit one.”
It hit a wall. Then went around it. An OpenAI agent got past Australia's Medicare data portal in a test. SafeBreach offensive security engineer Adrian Culley says, “Nobody built it to stop at the boundary.” Are your agents built to stop? Read more: hubs.ly/Q04ykD1Y0
It hit a wall. Then went around it. An OpenAI agent got past Australia's Medicare data portal in a test. SafeBreach offensive security engineer Adrian Culley says, “Nobody built it to stop at the boundary.” Are your agents built to stop? Read more: hubs.ly/Q04ykD1Y0
Google’s AI model breached 3 companies during a contained test—guessing 1 password and using leaked credentials twice. SafeBreach’s VP of Research (@OrGolov) explains what this trend means for security teams. Close gaps before autonomous agents find them. hubs.ly/Q04yd9NJ0
AI didn’t just help write ransomware—it helped run the attack. A RaaS affiliate used Claude Sonnet across nearly every stage of live intrusions. Techniques aren’t new—speed and autonomy are. @BejeranoGuy explains what this means & what CISOs must validate.
hubs.ly/Q04xT0H-0
SafeBreach coverage for CHOSEN BRICK, spyware linked to Iranian state actors targeting journalists, activists, and dissidents. Use 9 existing simulations to validate controls against persistence, Defender tampering, screen and audio capture, and discovery. hubs.ly/Q04xQdcW0
