@SCMagazine
Account based inUnited States
About this account
- Account based in
- United States
- Connected via
- Web
Account-level information from X, not a live location or the device used for a specific post.
The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.
NYC
Joined November 2008
- Tweets101K
- Following1.8K
- Followers119K
- Likes1.3K
Pinned Tweet
PHP2Shell attacks are surging worldwide as governments scramble to patch critical PHP flaws. AI-assisted exploit discovery and aging systems are shrinking defenders' response window. #cybersecurity #CISO #infosec bit.ly/4etQpgX
Encrypted doesn't always mean secure, says @BlackBerry's Christine Gadsby in this op-ed. Consumer messaging apps expose sensitive business communications to identity, device and metadata risks that security teams can't afford to ignore. #cybersecurity bit.ly/4yx21XE
Critical PHP2Shell flaws put millions of websites at risk as attackers begin probing for vulnerable servers. The @CISAgov urges immediate patching, but legacy systems remain exposed. #cybersecurity #CISO #infosec bit.ly/4idpsPM
Small businesses face enterprise-scale cyber threats without enterprise budgets. @ESET's AI-assisted MDR offers 24/7 monitoring, automated containment and expert protection without a full SOC. #cybersecurity #CISO #infosec bit.ly/3U6kqfI
#AI agents can chain low-severity flaws into critical attack paths. Security teams must look beyond CVSS scores and prioritize fixes that cut off access to sensitive systems, says @cogent_security's Vineet Edupuganti in this op-ed. #cybersecurity #infosec bit.ly/4z1UWQb
Attackers exploited a @Siemens Software Center flaw in a ClickFix DLL-sideloading attack. Security teams should verify patches and hunt for malicious DLLs loaded by trusted software. #cybersecurity #CISO #infosec bit.ly/3WCXZj8
#AI isn't reinventing the attack cycle. It's accelerating it. As adversaries move faster, security teams must spot emerging threats earlier, before the window to intervene closes, says 360 Privacy's Chuck Randolph in this op-ed. #cybersecurity #infosec bit.ly/4iryzgZ
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec bit.ly/4i6rssP
Critical PHP2Shell flaws put millions of websites at risk as attackers begin probing for vulnerable servers. The @CISAgov urges immediate patching, but legacy systems remain exposed. #cybersecurity #CISO #infosec bit.ly/4idpsPM
Security shouldn't slow innovation, says @Equifax's Jeremy Koppen in this op-ed. By using #AI to automate routine tasks, embedding safeguards into development and building customer trust, security teams can accelerate growth. #cybersecurity #infosec #CISO bit.ly/3U8v7yo
#AI is advancing faster than developers can reliably control it. New federal guidance underscores the need for independent testing, built-in safeguards and proven shutdown mechanisms, says @Action1corp's Gene Moody in this op-ed. #cybersecurity #infosec bit.ly/4id7BZl
#AI is making scams harder to spot, but basic security habits still work. From passkeys to verifying suspicious requests, @Box's Heather Ceylan suggests 10 ways to protect your digital life in this op-ed. #cybersecurity #CISO #infosec bit.ly/4yrdubn
Attackers exploited a @Siemens Software Center flaw in a ClickFix DLL-sideloading attack. Security teams should verify patches and hunt for malicious DLLs loaded by trusted software. #cybersecurity #CISO #infosec bit.ly/3WCXZj8
A stolen @ConnectWise app credential exposed Microsoft 365 tenants to unauthorized access and privilege escalation. The breach highlights the risks of overprivileged app identities. #cybersecurity #CISO #infosec bit.ly/4i6rssP
Encrypted doesn't always mean secure, says @BlackBerry's Christine Gadsby in this op-ed. Consumer messaging apps expose sensitive business communications to identity, device and metadata risks that security teams can't afford to ignore. #cybersecurity bit.ly/4yx21XE
.@Cisco confirms active exploitation of a critical Secure Email Gateway flaw that can grant attackers root access. Experts warn patching alone isn't enough to ensure compromised devices are clean. #cybersecurity #CISO #infosec bit.ly/4scpXOD
#AI isn't reinventing the attack cycle. It's accelerating it. As adversaries move faster, security teams must spot emerging threats earlier, before the window to intervene closes, says 360 Privacy's Chuck Randolph in this op-ed. #cybersecurity #infosec bit.ly/4iryzgZ
Small businesses face enterprise-scale cyber threats without enterprise budgets. @ESET's AI-assisted MDR offers 24/7 monitoring, automated containment and expert protection without a full SOC. #cybersecurity #CISO #infosec bit.ly/3U6kqfI
AI safety pledges won't slow cybercriminals. As attackers exploit #AI at machine speed, defenders must strengthen security fundamentals and accelerate response to keep pace, says @AWNetworks' Laura Ellis in this op-ed. #cybersecurity #CISO #infosec bit.ly/4zzHpyS
Your vendors may be deploying #AI without your knowledge. During a recent webcast, experts with @panorays warned annual risk assessments can't keep up and urge continuous monitoring of AI integrations, data flows and permissions. #cybersecurity #CISO bit.ly/3Urqxvp
