
@SCMagazinei
iAccount based inUnited States
About this account
- Account based in
- United States
- Connected via
- Web
Account-level information from X, not a live location or the device used for a specific post.
The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.
NYC
Joined November 2008
- Tweets101K
- Following1.8K
- Followers119K
- Likes1.3K
Pinned Tweet
Critical PHP2Shell flaws put millions of websites at risk as attackers begin probing for vulnerable servers. The @CISAgov urges immediate patching, but legacy systems remain exposed. #cybersecurity #CISO #infosec bit.ly/4idpsPM
Attackers exploited a @Siemens Software Center flaw in a ClickFix DLL-sideloading attack. Security teams should verify patches and hunt for malicious DLLs loaded by trusted software. #cybersecurity #CISO #infosec bit.ly/3WCXZj8
#AI isn't reinventing the attack cycle. It's accelerating it. As adversaries move faster, security teams must spot emerging threats earlier, before the window to intervene closes, says 360 Privacy's Chuck Randolph in this op-ed. #cybersecurity #infosec bit.ly/4iryzgZ
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec bit.ly/4i6rssP
Security shouldn't slow innovation, says @Equifax's Jeremy Koppen in this op-ed. By using #AI to automate routine tasks, embedding safeguards into development and building customer trust, security teams can accelerate growth. #cybersecurity #infosec #CISO bit.ly/3U8v7yo
#AI is advancing faster than developers can reliably control it. New federal guidance underscores the need for independent testing, built-in safeguards and proven shutdown mechanisms, says @Action1corp's Gene Moody in this op-ed. #cybersecurity #infosec bit.ly/4id7BZl
#AI is making scams harder to spot, but basic security habits still work. From passkeys to verifying suspicious requests, @Box's Heather Ceylan suggests 10 ways to protect your digital life in this op-ed. #cybersecurity #CISO #infosec bit.ly/4yrdubn
Attackers exploited a @Siemens Software Center flaw in a ClickFix DLL-sideloading attack. Security teams should verify patches and hunt for malicious DLLs loaded by trusted software. #cybersecurity #CISO #infosec bit.ly/3WCXZj8
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec bit.ly/4i6rssP
Encrypted doesn't always mean secure, says @BlackBerry's Christine Gadsby in this op-ed. Consumer messaging apps expose sensitive business communications to identity, device and metadata risks that security teams can't afford to ignore. #cybersecurity bit.ly/4yx21XE
.@Cisco confirms active exploitation of a critical Secure Email Gateway flaw that can grant attackers root access. Experts warn patching alone isn't enough to ensure compromised devices are clean. #cybersecurity #CISO #infosec bit.ly/4scpXOD
#AI isn't reinventing the attack cycle. It's accelerating it. As adversaries move faster, security teams must spot emerging threats earlier, before the window to intervene closes, says 360 Privacy's Chuck Randolph in this op-ed. #cybersecurity #infosec bit.ly/4iryzgZ
Small businesses face enterprise-scale cyber threats without enterprise budgets. @ESET's AI-assisted MDR offers 24/7 monitoring, automated containment and expert protection without a full SOC. #cybersecurity #CISO #infosec bit.ly/3U6kqfI
AI safety pledges won't slow cybercriminals. As attackers exploit #AI at machine speed, defenders must strengthen security fundamentals and accelerate response to keep pace, says @AWNetworks' Laura Ellis in this op-ed. #cybersecurity #CISO #infosec bit.ly/4zzHpyS
Your vendors may be deploying #AI without your knowledge. During a recent webcast, experts with @panorays warned annual risk assessments can't keep up and urge continuous monitoring of AI integrations, data flows and permissions. #cybersecurity #CISO bit.ly/3Urqxvp
#AI agents can chain low-severity flaws into critical attack paths. Security teams must look beyond CVSS scores and prioritize fixes that cut off access to sensitive systems, says @cogent_security's Vineet Edupuganti in this op-ed. #cybersecurity #infosec bit.ly/4z1UWQb
Cybersecurity's biggest data threat may be shifting inward. Retired Lt. Gen. Mary O'Brien warns AI-generated misinformation can influence boardroom decisions without triggering security alarms. #cybersecurity #CISO #infosec #AI bit.ly/3VQnUUh
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec bit.ly/4i6rssP
Overprivileged #AI agents can wreak havoc without malicious intent. Security teams must enforce least-privilege access and continuously monitor agent behavior to limit the damage, says @Towerwall's Michelle Drolet in this op-ed. #cybersecurity #infosec bit.ly/47RvpNs
The @CISAgov orders urgent patching of an exploited Ivanti VPN flaw as attackers chain three bugs to gain root access. One flaw remains unpatched, raising the stakes for defenders. #cybersecurity #CISO #infosec bit.ly/4i7ZDAK