A preemptive Cyber Threat Intelligence platform leveraging offensive defense to identify and manage cyber blind spots beyond your organization’s perimeter.
Bahrain
Joined March 2016
- Tweets1.4K
- Following145
- Followers1K
- Likes447
Pinned Tweet
Proud moment for CTM360 Honored to be recognized in
@Gartner_inc
inaugural 2026 Magic Quadrant™ for CTI Technologies among 17 global vendors evaluated on Ability to Execute & Completeness of Vision.
gartner.com/en/documents/779…
#cybersecurityfrombahraintotheworld
Awareness isn't a month. It's a habit.
Four habits that outlast October.
1: Pause before you click.
2: Verify the unusual ask.
3: Report it early.
4: Update without delay.
This #CybersecurityAwarenessMonth, be aware: pick one habit and make it your team's norm on Monday.
Hackers don't start at your front door. They start with your map.
Domains. Hosts. IPs. Technologies. Exposed services.
CTM360's HackerView continuously maps your external attack surface into a pre-populated Digital Asset Register.
See what attackers can see.
You can't patch what you don't know exists.
#php2shell exposes more than critical PHP flaws. It highlights forgotten websites, embedded runtimes and gaps in asset ownership.
Is your Digital Asset Register complete?
Read: ctm360.com/blogs/php2shell-c…
The voice sounds like your CEO.
That doesn't make it your CEO.
AI-generated impersonation can turn urgent payment requests into convincing fraud attempts.
Verify through a known channel. Follow approval procedures.
#CybersecurityAwarenessMonth
Two critical PHP vulnerabilities.
But the real question is: Do they affect YOU?
CVE-2026-109618 and CVE-2026-109619 show why threat intelligence must connect with your actual technology stack.
#NextGenCTI #CyberThreatIntelligence
A QR code is a link you can't read.
Scammers can replace legitimate codes with ones leading to fake login or payment pages.
Check the destination before entering credentials. For sensitive transactions, use the official app or website.
#CybersecurityAwarenessMonth
We are well secured" is an incomplete sentence. Resilience is only as strong as the weakest reachable node. @mashable NL on ecosystem risk and CTM360's role in ITU's #CyberForGood:
nl.mashable.com/cyber-securi…
A zero-day dropped at 2 AM. Your CISO asks: are we exposed?
That depends on which internet-facing assets run the affected software. For new flaws, DeepScan can get a custom check that tests your external assets without disrupting them.
#ZeroDay
ctm360.com/solutions/deepsca…
Your browser remembers your card. So can anyone who steals your session.
Malware goes after saved cards and passwords. Turn off card autofill and password saving, and switch on two-factor authentication for your email.
#CybersecurityAwarenessMonth
ctm360.com/blogs/essential-c…
Spot the phish in 5 seconds:
Urgency
Sender domain doesn't match
Link goes somewhere else
Password request? Stop. Report it. #CybersecurityAwarenessMonth
2/3 How it plays out:
You tap Start on a bot and a polished dashboard opens. Your "earnings" climb, with countdown timers and limited-time offers pushing you to add more. Then you try to cash out, and you're told to deposit first or bring in referrals.
3/3 A few rules worth keeping:
Treat any trading platform that lives inside a Telegram bot as a red flag. Never pay to "unlock" a withdrawal. Don't install apps a bot sends you.
Full report: ctm360.com/reports/femitbot-…
#ScamAlert
CTM360 retweeted
Don't remember booking that meeting in your calendar? Could be phishing. Calendar apps can add invites on their own, even when the email lands in spam. Skip the link. Don't hit decline either, since that can tell scammers your address is live. Delete it.
theguardian.com/money/2026/o…
Getting sign-in approval requests you didn't ask for? That's usually someone with your password, hoping you'll tap "Approve" to make it stop.
This #CybersecurityAwarenessMonth, be aware: if you didn't start it, deny it and report it.
#CybersecurityAwarenessMonth #cybersecurity
5/6 Validation: is the risk real?
Check whether an exposure gives a credible attack path and whether your controls already stop it. Sometimes a "critical" finding is already mitigated. DeepScan runs active but non-intrusive checks to confirm known flaws on external assets.
6/6 Mobilization: who fixes it, and did it work?
Agree on the treatment, assign an owner, track it to the end, then verify the exposure actually went down. A ticket on its own isn't the outcome.
Full breakdown: ctm360.com/blogs/what-is-cte…
#CTEM