IOActive, Inc

The global leader in research-fueled cybersecurity services

[IOActive, Inc @IOActive]

🚨 PHP releases emergency patches for two critical RCE vulnerabilities (PHP2Shell), both rated CVSS 9.2.

Even secure application code may be exposed. Prioritize patching.

More via @TheHackersNews 👇
https://t.co/6FDqlI1IAp

[IOActive, Inc @IOActive]

Next Thursday at hack::soho: Dinis Cruz on “The ultimate insider.” AI agents as insider threat, infrastructure built for static code, and risk management stuck in spreadsheets. Live demos included.

📍 London | 29 Oct | 6–9 PM | Livestream ~7 PM
https://t.co/iAeYKgjkEH

[IOActive, Inc @IOActive]

A practical framework for building a cyber risk management strategy that aligns security investments with business impact, OT, AI, and third-party risk. https://t.co/0s9umusaSy

[IOActive, Inc @IOActive]

Check out our upcoming events! https://t.co/1AVuGr9ids

🌟 Oct. 24 | BSides Peoria - https://t.co/CfTh6MjIBs

🌟 Oct. 28 | CYSAT Madrid - https://t.co/isrTG2B9OF

🌟 Oct 29 – 30 | LASCON - https://t.co/51gTyPVlWp

🌟 Oct. 29 | hack::soho - https://t.co/HtV5ARXfEM

[IOActive, Inc @IOActive]

Signal messenger security research: IOActive tested Signal Desktop’s Windows screen-capture protection and showed how local code execution can undermine a trusted security control. https://t.co/xFchX26EpQ

[IOActive, Inc @IOActive]

Security execs: join IOActive leadership for an evening of candid peer discussion this November.

🗽 NYC, Nov 4
🌲 Seattle/Bellevue, Nov 5
🌰 Columbus, Nov 5
🇬🇧 London, Nov 12 (breakfast)
Seats are limited. Pick your city: https://t.co/rK89vQjxzs

[IOActive, Inc @IOActive]

CISA revised the July water sector campaign from ~30 systems to 100+. The campaign didn’t grow. The observer’s view did. What that says about the OT detection gap. https://t.co/bPA1aEHx3l

[IOActive, Inc @IOActive]

Check out our upcoming events! https://t.co/whdKt9I8Do

🌟 10/12 – 15 | 2026 OCP Global Summit - https://t.co/W1G25s5GtE

🌟 10/24 | BSides Peoria - https://t.co/CfTh6Mkgr0

🌟 10/28 | CYSAT Madrid - https://t.co/isrTG2BHEd

[IOActive, Inc @IOActive]

Secure product development lifecycle requirements protect connected products from design through support. https://t.co/Bt0WyCmbaO

[IOActive, Inc @IOActive]

October is #CybersecurityAwarenessMonth. Four habits, fewer breaches:

Strong passwords + a password manager
MFA on everything
Spot and report phishing
Update your software

Resources to stay protected: https://t.co/r4mnNTSV6W

[IOActive, Inc @IOActive]

Check out our upcoming events! https://t.co/1AVuGr9Q30

🌟 10/6 - 9 | Auto-ISAC Cybersecurity Summit - https://t.co/tIN314NECZ

🌟 10/12 – 15 | OCP Global Summit - https://t.co/W1G25s5GtE

🌟 10/28 | CYSAT Madrid - https://t.co/isrTG2BHEd

[IOActive, Inc @IOActive]

Cyber risk management strategies start with business impact. Learn six pillars to prioritize security investments, validate defenses, and strengthen operational resilience. https://t.co/uQRqdPMndd

[IOActive, Inc @IOActive]

hack::soho is back 🎤 Dinis Cruz on "The Ultimate Insider": why AI agents are the insider threat that never scaled before, and how to contain them. Live demos, all open source.

📅 Thu 29 Oct, 6–9 PM
📍 IOActive London
Register 👉 https://t.co/j4XTaEamkQ

#hacksoho #AIsecurity

[IOActive, Inc @IOActive]

Thanks to everyone who joined Megan Holliday's session at @cornconcyber Conference yesterday! 🌽 Great questions, great conversations, and a packed room. A few highlights below.

Want to see how IOA helps orgs stay ahead of real-world threats? 👉 https://t.co/lJnuyRYKUi

[IOActive, Inc @IOActive]

New FBI/CISA guidance raises a question every operator should be able to answer: if your ICS integrator were compromised tomorrow, could you still run your plant? https://t.co/Ci2sIrr7qN #OTSecurity

[IOActive, Inc @IOActive]

Asking an LLM to "find all the vulnerabilities" gets you noise. Asking it one testable question anchored in a threat model gets you real bugs.

Carlos Gomez explains the workflow behind two HIGH-severity Angular CVEs: https://t.co/1l7ZVNHIOa

#VulnerabilityResearch #AISecurity

[IOActive, Inc @IOActive]

IOActive is proud to sponsor @cornconcyber Conference 2026, kicking off tomorrow, October 1! Don't miss Megan Holliday on October 2 for a practical introduction to penetration testing AWS environments. https://t.co/hO5Uk7XvEN

[IOActive, Inc @IOActive]

Is your AI ready for an adversary? IOActive breaks down the most critical AI red teaming techniques organizations need to know in 2026. https://t.co/OWLPUO6M4x

[IOActive, Inc @IOActive]

That's a wrap on September's #hacksoho! Thanks to everyone who joined us in London and helped this community keep growing. Huge thanks to Nick Dunn for a great talk on data-bouncing exfiltration.

[IOActive, Inc @IOActive]

Internet-exposed OT. Different threat actors. The same fundamental risk.

IOActive examines the NCSC’s latest OT Alert alongside AA26-097A — without conflating attribution — and what CNI operators should prioritise next. https://t.co/MktEIlJUfn

#OTSecurity #ICS #IOActive