eddie dewolfe

Next Gen Cyber Security, Hockey Goalie

[eddie dewolfe @DeWolfeRE]

Horizon3 is Job Security! We show the proof! https://t.co/Cf8zARrvTz

[Horizon3.ai @Horizon3ai]

"The worst thing from my perspective is for my boss or his boss to come to me and ask, 'Hey, did you know about this?' and I say, 'No.'"

That mindset led one global investment firm to rethink how they measured risk. 🧵

[eddie dewolfe @DeWolfeRE]

Cut out the noise with Horizon3! https://t.co/dauznGxedZ

[Horizon3.ai @Horizon3ai]

Every day brings new CVEs, threat feeds, exploit chatter, vendor advisories, and a sea of urgent headlines demanding attention.

Rapid Response is your lighthouse in the storm, identifying which emerging threats create real risk in your environment.

With Rapid Response, you can:
→ Validate whether you’re actually exploitable
→ Prioritize what attackers can really reach
→ Verify fixes before attackers operationalize emerging threats

You don’t need more alerts. You just need better signal.

Learn more on the blog: https://t.co/fHq4gLIhaH

#AISecurity #ProactiveSecurity #RapidResponse #infosec #cybersecurity

[eddie dewolfe @DeWolfeRE]

Forget about chasing down lists of CVEs - It is just not efficient! https://t.co/ANbqYP6PrI

[Horizon3.ai @Horizon3ai]

The most valuable security finding isn't vulnerability.

It’s knowing an attacker can’t leverage a vulnerability to gain access to your environment.

When a critical vulnerability dominates headlines, security teams often spend days chasing answers.

Rapid Response helps you quickly determine:
→ Are we actually exposed?
→ Can attackers reach it?
→ Do we need to act now?
→ Did our mitigation work?

Uncertainty creates noise, and noise slows down response when time is of the essence.

Learn more at https://t.co/eBLKF6uuTV

#AISecurity #ProactiveSecurity #RapidResponse #infosec

[Horizon3.ai @Horizon3ai]

Attackers don't waste time on every vulnerability. Why should defenders?

As AI-enabled attackers and tools like Mythos change the speed and economics of exploitation, security teams need to know what can actually be weaponized in their environment — fast.

Join us on June 23 for an early look at the latest Rapid Response enhancements built to help security teams identify what actually matters, validate exposure faster, and take action with confidence.

See what's new:
🔥 Personalized views and asset-level context
🔥 Faster testing and guided workflows
🔥 Clearer proof of exposure and remediation
🔥 Better prioritization during active threat events

Learn more and save your seat at https://t.co/LXPlB0TfHN

#AISecurity #ProactiveSecurity #NodeZero #RapidResponse

[Horizon3.ai @Horizon3ai]

Signal-to-noise ratio is everything in security. A tool with an inordinate amount of false positives is a tool with no users, which is why deterministic validation is so critical.

In other words, you don’t want your security stack to be the boy who cried wolf.

This is why #NodeZero uses sqlmap to confirm SQL injection vulnerabilities, and why https://t.co/BzPBsP6eJN is the first AI-native proactive security company to officially license it.

🔗 Learn how sqlmap works in NodeZero at https://t.co/Vksv3OHvdE

#AISecurity #ProactiveSecurity #sqlmap #sqli

[Horizon3.ai @Horizon3ai]

🚨 We validated a way to turn an "authenticated" LiteLLM RCE into an unauthenticated one.

Rapid Response test now available.

[Horizon3.ai @Horizon3ai]

We're excited to partner with @brinqa to help enterprises cut through vulnerability noise and focus on what attackers can actually weaponize.

By combining #NodeZero® attack path intelligence with Brinqa’s exposure management platform, security teams can prioritize proven exposure, accelerate remediation, and validate that risk is actually reduced.

Together, we help organizations:
✅ Identify exploitable attack paths
✅ Prioritize risk with business context
✅ Mobilize the right teams to fix what matters
✅ Verify remediation with continuous validation

Stop guessing what attackers might do. With https://t.co/BzPBsP6eJN and Brinqa, you’re able to move beyond severity-based vulnerability management toward continuous validation and prioritization based on real-world attacker behavior.

Learn more: https://t.co/FilgjNy1kB

#AISecurity #ProactiveSecurity #infosec #cybersecurity

[Horizon3.ai @Horizon3ai]

🚨 @Horizon3Attack has discovered a hardcoded credentials vulnerability in Apache Solr that can provide full administrative access to SolrCloud clusters.

Rapid Response test now available.

[Horizon3.ai @Horizon3ai]

For the third year in a row, https://t.co/BzPBsP6eJN has been named to the @SVDG_official #NATSEC100.

The timing matters.

AI has fundamentally changed cyber operations. Attackers are moving at machine speed, exploiting weaknesses faster and at greater scale than ever before. Static assessments and compliance checklists are no longer enough.

That’s why we built #NodeZero, the World’s Best AI Hacker™ — to help organizations continuously validate defenses, uncover real attack paths, and prove resilience through production-safe attack operations.

Proud to be recognized alongside the innovators shaping the future of national security.

🔗 See the full list: https://t.co/0cfxpfFSee

#AISecurity #ProactiveSecurity #FederalSecurity

[eddie dewolfe @DeWolfeRE]

Great whitepaper, worth a read! https://t.co/noY8Jvpjsi

[Horizon3.ai @Horizon3ai]

SOC teams optimize for reducing cyber risk.ITSM teams optimize for stability and uptime.

Attackers exploit the gap between them.

Our new whitepaper explores how to unify SOC and ITSM around attacker-validated evidence instead of assumptions, focusing on:
➡️ Why CVSS scores alone create noise
➡️ How evidence-based exposure improves prioritization
➡️ Why “Schrödinger’s Monkey” is a useful operational mindset
➡️ How to integrate offensive security into ITSM workflows

If you can’t prove a weakness is exploitable — or prove it’s fixed — you’re guessing.

Download the whitepaper: https://t.co/V3PdUPFCB3

#SOC #ITSM #ProactiveSecurity #cybersecurity

[Horizon3.ai @Horizon3ai]

🚨 Your Next.js app might be proxying attacker traffic into internal services without you realizing it.

Rapid Response test now available for CVE-2026-44578.

[eddie dewolfe @DeWolfeRE]

@Monica55dzrh her life...

[Horizon3.ai @Horizon3ai]

Most orgs treat compliance like a checkbox. ✅

Attackers treat your supply chain like a target. 🎯

With updated CMMC requirements rolling out, point-in-time assessments aren’t enough anymore. Your environment changes daily — and so does your exposure.

New blog:
➡️ Why suppliers are the new attack surface
➡️ Where traditional compliance breaks down
➡️ Why continuous, attacker-led validation matters for protecting CUI

If you can’t prove an attacker can’t move through your environment, you’re operating on assumptions.

Learn how https://t.co/BzPBsP6eJN’s NodeZero Federal™ provides continuous validation at https://t.co/ZviDDApfQA

#FederalSecurity #CMMC #ProactiveSecurity

[Horizon3.ai @Horizon3ai]

https://t.co/BzPBsP6eJN has released new research tackling one of the biggest blockers in cybersecurity: how to prove that autonomous defense systems can be safe, predictable, and controllable in production.

This research, validated on realistic attack graphs from #NodeZero data, demonstrates that you don’t have to choose between speed and safety. By constraining AI to a finite set of validated actions, we ensure stable, reliable behavior, even under adversarial pressure.

From this, you get:
👉 AI that can safely improve your EDR effectiveness in live environments
👉 Autonomous defense that gets stronger with every policy change

See how we’re getting AI to behave at https://t.co/hZh9khUGMW

#ProactiveSecurity #AISecurity #infosec #cybersecurity

[Horizon3.ai @Horizon3ai]

Between the hype, the panic, and the endless vulnerability noise, what does Mythos actually mean for your security operations? 👀

Hear from an expert panel on May 27 to get answers about the operational reality of AI-driven exploitation, not speculation. You'll learn:

👉 How AI is accelerating vulnerability discovery and weaponization
👉 Why vulnerability counts are becoming meaningless
👉 The shift from CVEs to validated attack paths and proven exposure
👉 What production-safe autonomous offensive security really looks like

We know you feel stuck reacting to a constantly expanding, complex attack surface; come learn why AI is merely an amplifier of existing problems rather than their root cause.

Register today: https://t.co/BVvmxGyqJw

#ClaudeMythos #AISecurity #ProactiveSecurity #infosec #cybersecurity

[Horizon3.ai @Horizon3ai]

We’ve said it before, and we’ll say it again: Attackers don’t break in.

They log in.

Yet only 40% of CISOs say credentials are their top risk.

That’s a problem, because identity is how attacks scale:
→ lateral movement
→ privilege escalation
→ full domain takeover

When one credential can hand over the keys to the kingdom, you’ve got to prioritize them.

🔗 Read The State of Assumed Security for more: https://t.co/UEJYDwDVAL

#AISecurity #ProactiveSecurity #infosec #cybersecurity

[Horizon3.ai @Horizon3ai]

#NodeZero is now “Awardable” in the Tradewinds Solutions Marketplace, making it easier for Department of War organizations to rapidly procure AI-native cyber operations capabilities.

FedRAMP® High authorized, NodeZero helps mission teams continuously hack, fix, verify, and repeat through safe, real-world attack operations across production environments.

AI has shifted the advantage to attackers. Defenders need continuous validation — not assumptions, static assessments, or theoretical risk scores.

Proud to support government agencies with security you can prove. 💥

Learn more: https://t.co/cx3KLGiA4w

#FederalSecurity #AISecurity #ProactiveSecurity

[Horizon3.ai @Horizon3ai]

🚨 A captive portal on your firewall should never become a root shell.

But that’s exactly what CVE-2026-0300 enables in PAN-OS.

Rapid Response test now available.

[eddie dewolfe @DeWolfeRE]

@Uber_Support do you ever actually respond?? I have an urgent matter and it’s been 30 minutes??

[eddie dewolfe @DeWolfeRE]

@Uber_Support Are you getting my messages?

[eddie dewolfe @DeWolfeRE]

@Uber_Support I cannot update my payment method for a ride to have at 5 AM tomorrow. I need help.