First, secure AI with @NomaSecurity / Current: Noma Security VP of marketing; Yinzer; Girl dad x5. / Former: Vulcan Cyber; SaltStack; ServiceNow; Altiris.
Nashville, TN
Joined March 2008
- Tweets7.8K
- Following409
- Followers1.9K
- Likes246
Rhett Glauser retweeted
We're kicking off this year's #CloudSecNextSummit w/ keynote speaker Diana Kelley (CISO of Noma Security)! It's not too late to join us Live Online for incredible #CloudSecurity sessions.
Register Now: sans.org/u/1AhD
Rhett Glauser retweeted
There's an extremely good write up by @NomaSecurity (and @sasi2103) about a Salesforce Prompt Injection vuln which led to leaking customer data zero-click via prompt injection into image tag generation.
Link and my breakdown of it below:
Rhett Glauser retweeted
ForcedLeak: AI Agent risks exposed in Salesforce AgentForce - noma.security/blog/forcedlea… By @sasi2103
This research outlines how @NomaSecurity discovered ForcedLeak, a critical severity (CVSS 9.4) vulnerability chain in Salesforce Agentforce that could enable external attackers to exfiltrate sensitive CRM data through an indirect prompt injection attack. This vulnerability demonstrates how AI agents present a fundamentally different and expanded attack surface compared to traditional prompt-response systems.
#ForcedLeak #AgenticAI #SalesforceAgentforce #PromptInjection #IndirectPromptInjection #DataExfiltration #NomaSecurity #NomaLabs #ContentSecurityPolicy #Salesforce #AIAgentSecurity #AISecurity
Rhett Glauser retweeted
Critical agentic vulnerability in Salesforce Agentforce 🚨
Vuln found and announced by @NomaSecurity
CVSS score 9.4
By exploiting an indirect prompt injection attack vector and registering a $5 domain Noma was able to exfiltrate CRM data
Here’s what you need to know 🧵
Rhett Glauser retweeted
Our research team showcases a case where a malicious MCP uses invisible Unicode characters to hide malicious instructions. 👨🎓 🥶 🎇
linkedin.com/posts/sasi-levi…
Rhett Glauser retweeted
Vulcan Cyber, which scans software for security vulnerabilities, lands $55M cash infusion tcrn.ch/3MM2iRH by @kyle_l_wiggers
Rhett Glauser retweeted
Vulcan Cyber is coming to @BlueTeamCon 👾
Find our dream team this weekend at booth #9, 2nd floor.
Rhett Glauser retweeted
CVE lab alert 🔬
Say hello to CVE-2023-39143, a critical RCE discovered and addressed in PaperCut servers.
vulcan.io/blog/how-to-fix-th…
Rhett Glauser retweeted
I’m very proud that "The Silk Factory" was awarded the International Impact Book Awards 2023 for Memoirs! This award reflects the generational impact of trauma and the importance of atonement in the healing process.
You can now order your copy here: mybook.to/TKM2XN
Rhett Glauser retweeted
🌐The future of vulnerability prioritization is here, see for yourself on August 24th >> brighttalk.com/webcast/17864…
Rhett Glauser retweeted
A security vulnerability discovered in Cisco, with a score of 9.1, that could be exploited by an unauthenticated remote attacker that could gain read permissions or limited write permissions? That's harsh. 🥊
vulcan.io/blog/how-to-fix-cv…
Rhett Glauser retweeted
Vulcan Cyber is proud to introduce APG 🚀
vulcan.io/blog/announcing-th…
Rhett Glauser retweeted
Vulnerability management can be a daunting task, especially when the focus is scattered. @VulcanCyber's new graph tool emphasizes the necessity of targeted defense strategies. bit.ly/45fl1eX
#AttackSurface #CyberSecurity #ASM
Rhett Glauser retweeted
SSVC has been challenging CVSS for the vulnerability decision-making primary method. 🎯
Learn all about it in our recent blog >> vulcan.io/blog/the-ssvc-risk…
ALT CVSS, EPSS, SSVC comparison table. Comparing the vulnerability prioritization methods.
Rhett Glauser retweeted
Owning cyber risk is no easy task.
Fear not - Vulcan Cyber to the rescue! 🦾 check out our bi-weekly Linkedin newsletter >> linkedin.com/feed/update/urn…
Rhett Glauser retweeted
🗞️ The latest and greatest cyber risk stories from July 2023, right here >> linkedin.com/posts/vulcancyb…
ALT Cyber news July 2023, Vulcan cyber news. Cyber risk updates
Rhett Glauser retweeted
🎱 CVE-2023-3519, a critical zero-day vulnerability in Citrix NetScaler, is currently being exploited by attackers.
Here's what you need to know >> vulcan.io/blog/unpacking-cve…
More #vulnerability prioritization and remediation insights from @VulcanCyber gag.gl/yj149Q?activity_id=41…
