SC Media

The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.

[SC Media @SCMagazine]

The @FBI and @CISAgov urge operators to secure refrigeration systems after suspected cyberattacks on supermarkets, blood banks and military facilities. Experts warn of broader OT security risks. #cybersecurity #CISO #infosec https://t.co/O0uhPLLQfU

[SC Media @SCMagazine]

Meta's Muse highlights a growing identity crisis, says the author of this op-ed: #AI agents can mimic human behavior online. Can digital systems still distinguish people from machines? #cybersecurity #CISO #infosec https://t.co/le3fOW0DAE

[SC Media @SCMagazine]

The OpenAI–Hugging Face incident exposed familiar security gaps at #AI speed. The lesson, says @britive1's Art Poghosyan in this op-ed: Limit standing privileges, eliminate shared credentials and contain breaches. #cybersecurity #CISO #infosec https://t.co/eMUoJLmqS2

[SC Media @SCMagazine]

Under the EU AI Act, #AI governance can no longer be treated as a future compliance project, says @Andritz's Umesh Kalanke in this op-ed. Here's what organizations need to know to meet upcoming deadlines. #cybersecurity #CISO #infosec https://t.co/jqt2JEyGHF

[SC Media @SCMagazine]

Attackers can hide malicious prompts in images to bypass #AI safeguards. At @owasp's Global AppSec, a researcher showed how image processing can expose LLMs to prompt injection. #cybersecurity #CISO #infosec https://t.co/EA5U9QYOpO

[SC Media @SCMagazine]

PHP2Shell may be just the beginning, says @hadriansecurity's Klaas Meinke in this op-ed. #AI is uncovering decades-old flaws faster than teams can patch them. Could the coming vulnerability surge ultimately make software safer? #cybersecurity #infosec https://t.co/rb3ZOn3nRz

[SC Media @SCMagazine]

#AI isn't reinventing cybercrime. It's making phishing, deepfakes and fraud faster, cheaper and more scalable. Defenders must prioritize threats by impact, not novelty, says @Netcraft's Ivan Khamenka in this op-ed. #cybersecurity #CISO #infosec https://t.co/Cd1pLgV0XI

[SC Media @SCMagazine]

The @CISAgov flags an actively exploited WordPress Core flaw that lets unauthenticated attackers execute code during updates. Experts urge immediate patching and checks for compromise. #cybersecurity #CISO #infosec https://t.co/WydS0VsTuz

[SC Media @SCMagazine]

Suspected cyberattacks on refrigeration systems at U.S. military bases and European supermarkets raise food safety concerns and expose security gaps in internet-connected equipment. #cybesecurity #CISO #infosec https://t.co/CzstrxrPZH

[SC Media @SCMagazine]

#Cybersecurity is overdue for a market correction, says Jeremiah Grossman at @owasp's Global AppSec. His warning: Stop chasing every flaw and start measuring what actually prevents losses. #CISO #infosec https://t.co/kwioNYopHJ

[SC Media @SCMagazine]

The @CISAgov flags an actively exploited Apple flaw reportedly linked to Russian cyberespionage. Despite its 5.5 severity score, experts urge patching and checks for compromise. #cybersecurity #CISO #infosec https://t.co/6JG3ru8nf5

[SC Media @SCMagazine]

In this op-ed, the author says a critical GitLab MCP flaw exposes a bigger risk: #AI connectors holding powerful credentials but missing from asset inventories. Security teams must track MCP servers, tokens and patches. #cybersecurity #CISO #infosec https://t.co/7pnrDkBurD

[SC Media @SCMagazine]

Approved #AI apps can become shadow AI when employees switch accounts, enable new features or add integrations. Security teams must monitor interactions, not just applications, according to @CheckPointSW. #cybersecurity #CISO #infosec https://t.co/0JrrkZOBtw

[SC Media @SCMagazine]

In this op-ed, @morphisec's Ron Reinfeld says #cybersecurity's Black October exposed a dangerous assumption: teams can respond to every crisis in time. The lesson from 1987's market crash? Build automatic safeguards before chaos hits. #CISO #infosec https://t.co/8xdJRboHUL

[SC Media @SCMagazine]

#AI agents can delete databases or leak files without malicious intent. The real risk? Excessive permissions. Limit access, log actions and require human approval for critical tasks, says @viewtrade's Levan Velijanashvili in this op-ed. #cybersecurity https://t.co/hnupFTp2Td

[SC Media @SCMagazine]

PHP2Shell may be just the beginning, says @hadriansecurity's Klaas Meinke in this op-ed. #AI is uncovering decades-old flaws faster than teams can patch them. Could the coming vulnerability surge ultimately make software safer? #cybersecurity #infosec https://t.co/rb3ZOn3nRz

[SC Media @SCMagazine]

The @CISAgov flags an actively exploited WordPress Core flaw that lets unauthenticated attackers execute code during updates. Experts urge immediate patching and checks for compromise. #cybersecurity #CISO #infosec https://t.co/WydS0VsTuz

[SC Media @SCMagazine]

#Cybersecurity is overdue for a market correction, says Jeremiah Grossman at @owasp's Global AppSec. His warning: Stop chasing every flaw and start measuring what actually prevents losses. #CISO #infosec https://t.co/kwioNYopHJ

[SC Media @SCMagazine]

The @CISAgov flags an actively exploited Apple flaw reportedly linked to Russian cyberespionage. Despite its 5.5 severity score, experts urge patching and checks for compromise. #cybersecurity #CISO #infosec https://t.co/6JG3ru8nf5

[SC Media @SCMagazine]

More than 1,000 GitLab servers remain exposed to an actively exploited, critical RCE flaw. Experts warn attackers could steal credentials and compromise software supply chains. #cybersecurity #CISO #infosec https://t.co/ayVTJU2Cdt