AVP of Mainframe IZOT Professional Services at BMC. Co-founder of https://nitter.gq/t.co/fg9TcY84rj and Chairman of the Security Working Group at GSUK.
UK
Joined July 2009
- Tweets16.7K
- Following476
- Followers9K
- Likes3.6K
Hackers are exploiting known vulnerabilities in zero-click attacks on iOS and Android, highlighting the importance of timely security updates.bleepingcomputer.com/news/se…
A reported $6.34 billion Binance attack involving fake job interviews and AI abuse highlights how sophisticated social engineering can exploit human trust and emerging technologies to compromise even major cryptocurrency platforms.
securityaffairs.com/202369/c…
Shadow AI is creating new challenges for enterprise security and governance, highlighting why organisations need greater visibility, clear policies, and practical controls to manage AI adoption without compromising innovation.
securityboulevard.com/2026/1…
Hackers have hijacked cpGuard’s automatic update mechanism to deploy a backdoor and steal data, highlighting how compromised software updates can turn trusted security tools into dangerous supply-chain attack vectors.
bleepingcomputer.com/news/se…
A practical reference to useful RACF, ACF2, and Top Secret commands, helping mainframe security administrators manage access, investigate security issues, and strengthen security administration across z/OS environments.
ruifeio.com/2026/11/02/usefu…
An invisible malicious SMS can reportedly disrupt calls and emergency services on vulnerable Android devices, highlighting how flaws in mobile communications can threaten both personal security and access to critical services.
securityaffairs.com/202184/s…
SYS1.BROADCAST #24 brings together the latest developments, insights, and perspectives from the mainframe world, keeping the community informed, connected, and engaged with the technologies and challenges shaping its future.
linkedin.com/pulse/sys1bordc…
A reported $6.3 billion cryptocurrency theft targeting Binance has been attributed to North Korean attackers, highlighting the scale of cyber-enabled financial crime and the growing security challenges facing digital asset platforms.
securityaffairs.com/202119/c…
Yoba malware disguises a cryptocurrency miner behind legitimate OpenAI and Anthropic binaries, highlighting how cybercriminals exploit trusted AI software to conceal malicious activity and compromise systems.
securityaffairs.com/202149/m…
A shared ChatGPT link could reportedly be exploited to trigger unintended actions, highlighting how AI integrations can introduce new security risks and why robust safeguards are essential to prevent abuse.
thehackernews.com/2026/10/a-…
Attackers are exploiting a critical Drupal Commerce Core vulnerability (CVE-2026-118539), highlighting the risks facing e-commerce platforms and the importance of timely patching to protect business operations and customer data.securityaffairs.com/202162/s…
Polymarket users reportedly lost $2.7 million following a third-party script compromise, highlighting how vulnerabilities in external dependencies can expose digital platforms and their users to significant financial losses.
hackread.com/polymarket-user…
A Syrian hacker has been sentenced to 42 months in prison, highlighting the legal consequences of cybercrime and the importance of holding malicious actors accountable for their activities.
helpnetsecurity.com/2026/10/…
SS7 and Diameter signalling vulnerabilities can expose mobile users to location tracking, communication interception, and fraud, highlighting persistent security weaknesses within global telecommunications infrastructure.
bleepingcomputer.com/news/se…
Fake GitHub repositories targeting AI coding agents are spreading SolanaCry malware, highlighting how attackers exploit developer trust and automated workflows to compromise systems through software supply-chain attacks.
hackread.com/fake-github-rep…
A data breach at a Sony ISP subsidiary has reportedly exposed 25 million customer records, highlighting the serious privacy risks and far-reaching consequences of compromised telecommunications infrastructure.
bleepingcomputer.com/news/se…
OffSec has launched a free PHP2Shell training lab following the discovery of a critical vulnerability, helping security professionals develop practical exploitation and defence skills through hands-on learning.
hackread.com/offsec-launches…
CISA has confirmed active exploitation of the PHP2Shell vulnerability and urged federal agencies to patch, reinforcing the urgency of protecting critical systems against real-world attacks.
hackread.com/cisa-confirm-ph…
CyberStrikeAI uses 44 AI agents to automate cyber operations, highlighting how agentic AI could dramatically scale offensive capabilities and challenge traditional security defences.
thehackernews.com/2026/10/cy…
A cyberattack targeting Italy’s parliament highlights the growing threats facing government institutions and the importance of protecting critical democratic infrastructure against disruption and espionage.
securityaffairs.com/201867/h…
