Alexander Ervik Johnsen (@ervik) header
Alexander Ervik Johnsen (@ervik) profile picture

Alexander Ervik Johnsen

@ervik

Senior SE at Arctic Wolf -ex Nutanix- https://xitter.gq/t.co/33vQ4PMdxG - Cyber Security, Tech Evangelist & speaker - Interista! Surf🏄🏻‍nSnow🏂- posts are my own!

 Norway
ervik.as
Joined May 2008
  • Tweets20.6K
  • Following1.3K
  • Followers3K
1.4KMedia
Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)Photo by Alexander Ervik Johnsen (@ervik)
#SonicWall's #SAML #VPN Bypass Joins #CISA's Exploited List, #Claude Code's "Don't Ask Again" File Leaks Secrets in 1,122 Public Copies, and an #OpenAI Model Builds Its Own Packets to Escape a Sandbox ervik.as/news/sonicwall-saml… #CybersecurityNews #CyberSecurity
SonicWall's SAML VPN Bypass Joins CISA's Exploited List, Claude Code's "Don't Ask Again" File Leaks...

SonicWall's SAML VPN Bypass Joins CISA's Exploited List, Claude Code's "Don't Ask Again" File Leaks...

A look at the last 24 hours in cybersecurity: CISA gives agencies until November 20 to patch SonicOS CVE-2026-19868, Apiiro finds 1,122 public copies of a Claude Code settings file holding secrets,...

ervik.as
66
#WorkOS's "#AI Attack" Was a Researcher's Agent That Escaped Its Sandbox, #OpenAI Launches #GPT-6 Cyber, and Freezer Attacks Draw Formal US and EU Warnings ervik.as/news/workos-agent-s… #cyberattacks #CybersecurityNews #cybersecurity
WorkOS's "AI Attack" Was a Researcher's Agent That Escaped Its Sandbox, OpenAI Launches GPT-6...

WorkOS's "AI Attack" Was a Researcher's Agent That Escaped Its Sandbox, OpenAI Launches GPT-6...

A look at the last 24 hours in cybersecurity: a researcher says his ARTEX agent escaped its sandbox and caused the WorkOS breach, OpenAI launches GPT-6 Cyber at its Critical rating and admits Astra...

ervik.as
1
1
114
#Binance Reveals the Fake Interview and #AI Tool Behind a $6 Billion Heist, #OpenSSH Fixes an Alpine Login Bypass, and the Fridge Attacks Spread Across Europe ervik.as/news/binance-ai-too… #CybersecurityNews #CyberSecurity #CyberAttacks
Binance Reveals the Fake Interview and AI Tool Behind a $6 Billion Heist, OpenSSH Fixes an Alpine...

Binance Reveals the Fake Interview and AI Tool Behind a $6 Billion Heist, OpenSSH Fixes an Alpine...

A look at the last 24 hours in cybersecurity: Binance details how North Korea used a fake interview, a poisoned repository and an internal AI tool to drain its hot wallets, OpenSSH 10.6p2 fixes a...

ervik.as
71
#Norwegian Cold Stores and #French Blood Banks Hit by Cooling Attacks, Norad Faces a Data Leak, and #OpenAI Shows a Million Dollars Buys 948 Root Exploits ervik.as/news/norway-cold-st… #CyberSecurity #CyberSecurityNews
Norwegian Cold Stores and French Blood Banks Hit by Cooling Attacks, Norad Faces a Data Leak, and...

Norwegian Cold Stores and French Blood Banks Hit by Cooling Attacks, Norad Faces a Data Leak, and...

A look at the last 24 hours in cybersecurity: a Hardanger fruit store and French blood banks have their cooling controllers heated from the internet, Norad says all 20,614 grant-portal users may be...

ervik.as
158
#Norway Gets Its First Suspected #Freezer #Hack, #Mercado #Bitcoin Loses Tens of Millions, and #CrowdStrike Buys Into #AI Agent Security ervik.as/news/norway-freezer… #CybersecurityNews #CyberSecurity
Norway Gets Its First Suspected Freezer Hack, Mercado Bitcoin Loses Tens of Millions, and CrowdSt...

Norway Gets Its First Suspected Freezer Hack, Mercado Bitcoin Loses Tens of Millions, and CrowdSt...

A look at the last 24 hours in cybersecurity: a Norwegian store's freezer room is flooded by sprinklers after a suspected hack as the attacks spread across ten-plus countries, Brazil's Mercado...

ervik.as
62
#Hackers Claim a Wipe of Russia's Statistics Agency, Supermarket Freezers Are Defrosted Across Europe Again, and #WorkOS Blames an #AI Attack Framework ervik.as/news/rosstat-wipe-c… #CybersecurityNews #CyberSecurity
Hackers Claim a Wipe of Russia's Statistics Agency, Supermarket Freezers Are Defrosted Across...

Hackers Claim a Wipe of Russia's Statistics Agency, Supermarket Freezers Are Defrosted Across...

A look at the last 24 hours in cybersecurity: Cyber Partisans and Silent Crow say they wiped Rosstat while the agency denies a leak, a second wave of remote defrost attacks hits supermarkets in...

ervik.as
84
#FBI Names #TraderTraitor for the #Binance Theft, VOLTA Infostealer Asks #Claude What Its Victims Are Worth, and Fake Nuclear Alerts Hit Russia's Emergency App ervik.as/news/fbi-tradertrai… #CybersecurityNews #CyberSecurity
FBI Names TraderTraitor for the Binance Theft, VOLTA Infostealer Asks Claude What Its Victims Are...

FBI Names TraderTraitor for the Binance Theft, VOLTA Infostealer Asks Claude What Its Victims Are...

A look at the last 24 hours in cybersecurity: the FBI attributes the Binance theft to North Korea's TraderTraitor and says the money is turning into Ethereum, fake nuclear alerts hit Russia's...

ervik.as
1
77
#Binance Refills $6 Billion Without Naming a Root Cause, Sophos Shows Cursor Agents Inside #Ransomware Intrusions, and #NetamLoader Hides in a #Windows Update Folder ervik.as/news/binance-refill… #cybersecurity #CybersecurityNews
Binance Refills $6 Billion Without Naming a Root Cause, Sophos Shows Cursor Agents Inside Ransomw...

Binance Refills $6 Billion Without Naming a Root Cause, Sophos Shows Cursor Agents Inside Ransomw...

A look at the last 24 hours in cybersecurity: Binance says it has replaced about 90 percent of the $6.3 billion stolen and aims to reopen withdrawals, the Arctic University of Norway takes compromi...

ervik.as
79
Chainalysis Breached by an "Agentic" Attacker, Amadeus Hack Reaches Cathay Pacific, and a Fake Claude Code Extension Hits Cursor ervik.as/news/chainalysis-ag… #cybersecurity #CybersecurityNews #secops
Chainalysis Breached by an "Agentic" Attacker, Amadeus Hack Reaches Cathay Pacific, and a Fake...

Chainalysis Breached by an "Agentic" Attacker, Amadeus Hack Reaches Cathay Pacific, and a Fake...

A look at the last 24 hours in cybersecurity: the Arctic University of Norway fights a targeted attack with compromised servers, Chainalysis confirms a breach by an attacker using "offensive agentic...

ervik.as
114
#Binance Loses $6.3 Billion in 20 Minutes, Chinese Attackers Use #AI Tooling to Root 25 Servers, and #Cisco's #KeyDrift Ties to Volt Typhoon ervik.as/news/binance-6-3-bi… #aihacking #CyberSecurity #CybersecurityNews #CyberAttack
Binance Loses $6.3 Billion in 20 Minutes, Chinese Attackers Use AI Tooling to Root 25 Servers, and...

Binance Loses $6.3 Billion in 20 Minutes, Chinese Attackers Use AI Tooling to Root 25 Servers, and...

A look at the last 24 hours in cybersecurity: Binance loses about $6.3 billion in the largest crypto heist on record with North Korea suspected, suspected Chinese operators use Claude Code and an AI...

ervik.as
69
GMO Refuses a $50 Million #Ransom, 123 Reg Blames an AI-Driven Attack, and Oracle's PeopleSoft Zero-Day Turns Out to Be Three Bugs ervik.as/news/gmo-50-million… #AI #ZeroDay #CyberSecurity #SecOps #CyberAttack #ransomwareattack #Oracle #anthropic
GMO Refuses a $50 Million Ransom, 123 Reg Blames an AI-Driven Attack, and Oracle's PeopleSoft...

GMO Refuses a $50 Million Ransom, 123 Reg Blames an AI-Driven Attack, and Oracle's PeopleSoft...

A look at the last 24 hours in cybersecurity: GMO refuses a $50 million ransom and offers a $1 million bounty, 123 Reg says an AI-driven attack read its customer data, PeopleSoft's exploited zero-day...

ervik.as
263
#Norway Raises Its Cyber Risk Level, FEC Filings Go Dark a Week Before the Midterms, and 44 #AI Agents Hunt #Japanese Targets ervik.as/news/norway-raises-… #cybersecurity #CybersecurityNews #CyberSec #CybersecurityAwarenessMonth
Norway Raises Its Cyber Risk Level, FEC Filings Go Dark a Week Before the Midterms, and 44 AI...

Norway Raises Its Cyber Risk Level, FEC Filings Go Dark a Week Before the Midterms, and 44 AI...

A look at the last 24 hours in cybersecurity: Norway's NSM raises the national cyber risk level and goes public, the FEC's filing system is offline a week before the midterms, Bithumb, Daishin and...

ervik.as
87
Alexander Ervik Johnsen retweeted
Arctic Wolf (@AWNetworks) profile picture
Arctic Wolf@AWNetworksOct 27
What starts as a seemingly legitimate judicial notice can quickly turn into full remote access. Check out the technical details in our new Arctic Wolf Pack Alert: bit.ly/4zNpZPA
Image from Arctic Wolf (@AWNetworks)
Image from Arctic Wolf (@AWNetworks)
4
9
757
#CISA Confirms #PHP2Shell Exploitation, UNM Health Diverts Ambulances, and Fake #Claude Download Pages Run on claude-ai ervik.as/news/php2shell-conf… #claudeai #cybersecurity #secops #secopsnews #cybernews
CISA Confirms PHP2Shell Exploitation, UNM Health Diverts Ambulances, and Fake Claude Download Pages...

CISA Confirms PHP2Shell Exploitation, UNM Health Diverts Ambulances, and Fake Claude Download Pages...

A look at the last 24 hours in cybersecurity: CISA lists both PHP2Shell flaws as exploited, UNM Health cancels every clinic and diverts ambulances, fake Claude installers sit on claude.ai behind...

ervik.as
104
Arista VeloCloud Zero-Day Hits CVSS 9.9, k0t Walks Off With 70,000 #Firewall Credentials, and Copenhagen University Leaks 525,000 CPR Records ervik.as/news/arista-veloclo…
Arista VeloCloud Zero-Day Hits CVSS 9.9, k0t Walks Off With 70,000 Firewall Credentials, and...

Arista VeloCloud Zero-Day Hits CVSS 9.9, k0t Walks Off With 70,000 Firewall Credentials, and...

A look at the last 24 hours in cybersecurity: Arista confirms exploitation of a CVSS 9.9 VeloCloud Orchestrator zero-day, Group-IB and NyxLab unmask k0t and its 70,000 stolen firewall credentials,...

ervik.as
115
#PHP #Exploit Attempts Begin, #GitLab Patches a CVSS 10 Flaw, #LiteLLM Ships a Backdoor, and #Ransomware Affiliates' #AI Sessions Leak ervik.as/news/php2shell-expl…
PHP Exploit Attempts Begin, GitLab Patches a CVSS 10 Flaw, LiteLLM Ships a Backdoor, and Ransomware...

PHP Exploit Attempts Begin, GitLab Patches a CVSS 10 Flaw, LiteLLM Ships a Backdoor, and Ransomware...

A look at the last 24 hours in cybersecurity: exploit traffic hits the patched PHP flaws, GitLab fixes a CVSS 10 regex-engine bug across 12 years of releases, LiteLLM 1.107.0 ships a stealer and...

ervik.as
165
Cairn #AI #Pentest Engine Drives 1,100+ Criminal Attack Projects, #OVHcloud #CLI Releases Swapped to Steal Secrets, and PHP Patches Two Critical #RCE Flaws Today ervik.as/news/cairn-ai-pente… #Cybersecurity #CybersecurityNews #secops
Cairn AI Pentest Engine Drives 1,100+ Criminal Attack Projects, OVHcloud CLI Releases Swapped to...

Cairn AI Pentest Engine Drives 1,100+ Criminal Attack Projects, OVHcloud CLI Releases Swapped to...

A look at the last 24 hours in cybersecurity: Norforge finds three criminal clusters running the Cairn AI pentest engine, OVHcloud CLI releases carry secret-stealing builds for 94 minutes, Zeabur...

ervik.as
146
#Siemens Software Center Exploited in #ClickFix Attacks, Rank Math PRO Update Carried a Backdoor, and Ledger Implants Drive Up to $100 Million in Theft ervik.as/news/siemens-softwa… #cybersecurity #secopsnews #secops #CyberAttack #CyberNews #CyberSecurityNews
Siemens Software Center Exploited in ClickFix Attacks, Rank Math PRO Update Carried a Backdoor, and...

Siemens Software Center Exploited in ClickFix Attacks, Rank Math PRO Update Carried a Backdoor, and...

A look at the last 24 hours in cybersecurity: attackers abuse a signed Siemens program for DLL side-loading, a hijacked Rank Math PRO release carried a self-restoring backdoor, California student...

ervik.as
90
#ConnectWise #Cloud Backup Compromise Grows to Nearly 1,000 Tenants Targeted, a Japanese #WAF Is Exploited for Root, and #Plex Servers Become Miners ervik.as/news/connectwise-cl… #cybersecurity #cybersecuritynews #secops #secopsnews
ConnectWise Cloud Backup Compromise Grows to Nearly 1,000 Tenants Targeted, a Japanese WAF Is...

ConnectWise Cloud Backup Compromise Grows to Nearly 1,000 Tenants Targeted, a Japanese WAF Is...

A look at the last 24 hours in cybersecurity: Huntress now counts almost 1,000 Microsoft 365 tenants with attacker sign-ins from the ConnectWise compromise, SiteGuard WAF is exploited for root and...

ervik.as
95
#OpenAI Admits Its Models Forged Tokens and Spent a Stranger's #Crypto, India Warns of #AI Agents in Live Systems, and a China-Nexus Group Hits BeyondTrust ervik.as/news/openai-models-… #cybersecurity #secopsnews #secops #CybersecurityNews
OpenAI Admits Its Models Forged Tokens and Spent a Stranger's Crypto, India Warns of AI Agents in...

OpenAI Admits Its Models Forged Tokens and Spent a Stranger's Crypto, India Warns of AI Agents in...

A look at the last 24 hours in cybersecurity: OpenAI publishes new misalignment reports, CERT-In says AI agents under test reached live Indian systems, ARMORY CASTLE exploited a BeyondTrust zero-day...

ervik.as
1
100

No more items