SC Media

The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.

[SC Media @SCMagazine]

A 10.0 Cisco ISE flaw is already under attack, according to the @CISAgov. Experts warn the authentication bypass could help intruders expand access inside networks and urge immediate patching. #cybersecurity #CISO #infosec https://t.co/ElnbvFmeml

[SC Media @SCMagazine]

Seven weeks from patch to #ransomware. Attackers are exploiting a critical VMware vCenter bug to encrypt ESXi systems, underscoring how fast the patching window is shrinking. #cybersecurity #CISO #infosec https://t.co/Er4EhrecvK

[SC Media @SCMagazine]

#AI is shrinking the window between vulnerability disclosure and exploitation. Security teams need risk-based patching, continuous assessment and faster response to keep pace, says @qualys' Nathan Smolenski in this op-ed. #cybersecurity #CISO #infosec https://t.co/k4PfKr3f3G

[SC Media @SCMagazine]

.@Microsoft warns attackers are stealing cloud data through identity phishing while AI-assisted executive impersonation scams target employees with fraudulent payment requests. #cybersecurity #CISO #infosec #AI https://t.co/St5WsRWz4L

[SC Media @SCMagazine]

Two critical flaws in a WordPress plugin used on 600,000+ sites could let unauthenticated attackers execute code through malicious comments, @wordfence reported. Users should patch now. #cybersecurity #CISO #infosec https://t.co/OYuPwZLbVr

[SC Media @SCMagazine]

A critical ScreenConnect flaw is already under attack and was added to @CISAgov's KEV list. Experts warn it offers a direct path to #ransomware and urge organizations to patch immediately. #cybersecurity #CISO #infosec https://t.co/7gp7wanTJN

[SC Media @SCMagazine]

Settra #ransomware is abusing MeshAgent and potentially vulnerable drivers to evade defenses, @HuntressLabs reported. Early detection of rogue RMM tools could help stop attacks before encryption. #cybersecurity #CISO #infosec https://t.co/V2nAiaOnnI

[SC Media @SCMagazine]

MCP servers can turn ordinary English into hidden instructions for #AI agents, according to @island_io. Security teams must scrutinize natural-language content alongside code, dependencies and runtime behavior. #cybersecurity #CISO #infosec https://t.co/gJokTPkAuR

[SC Media @SCMagazine]

#AI agents move too fast for periodic access reviews. @okta is pushing identity governance toward real-time controls, just-in-time access and continuous threat detection. #cybersecurity #CISO #infosec https://t.co/Lgz0ssC6P5

[SC Media @SCMagazine]

Coding agents create risks far beyond the #AI model itself. Securing their prompts, tools, skills and integrations requires visibility, least privilege, validation and monitoring, according to @hiddenlayersec. #cybersecurity #CISO #infosec https://t.co/TUoa5ojJhL

[SC Media @SCMagazine]

A 10.0 Cisco ISE flaw is already under attack, according to the @CISAgov. Experts warn the authentication bypass could help intruders expand access inside networks and urge immediate patching. #cybersecurity #CISO #infosec https://t.co/ElnbvFmeml

[SC Media @SCMagazine]

Coding agents don’t just write code — they act on it. As they gain access to tools, repositories and commands, security teams must rethink trust across the entire agent ecosystem, says @hiddenlayersec's research team in this report. #cybersecurity #infosec https://t.co/1Cu3hSZpk1

[SC Media @SCMagazine]

#AI security gaps can become dangerous when chained together. @TenableSecurity says organizations need full visibility across agents, identities, cloud, endpoints and data to understand their true exposure. #cybersecurity #CISO #infosec https://t.co/yatfheT9NA

[SC Media @SCMagazine]

#AI can turn patches into working exploits in under an hour. When patching can’t move at machine speed, security teams need interim controls that can, says @MiggoSecurity's Itai Goldman in this op-ed. #cybersecurity #CISO #infosec https://t.co/mDgmP9tmtn

[SC Media @SCMagazine]

An #AI agent turned a failed security test into a production breach. The lesson: autonomous agents need hard boundaries, limited access and oversight before they touch real systems, according to a @hiddenlayersec report. #cybersecurity #infosec #CISO https://t.co/wBIPYGyoyM

[SC Media @SCMagazine]

A maximum-severity GitLab flaw is already drawing active reconnaissance, @watchtowrcyber reported. Self-managed users should patch now to prevent attackers from accessing sensitive files and secrets. #cybersecurity #CISO #infosec https://t.co/9drEcy9N6G

[SC Media @SCMagazine]

OpenAI’s restrictions on Astra are a warning for defenders: frontier #AI is shrinking the time to exploit, says @AWNetworks' Laura Ellis in this op-ed. Security teams must detect, contain and recover at machine speed. #cybersecurity #CISO #infosec https://t.co/djNfpp1lek

[SC Media @SCMagazine]

Not all AI agents pose the same risks. @pingidentity outlines four types of enterprise #AI agents — and why each requires a different approach to identity and access. #cybersecurity #CISO #infosec https://t.co/KyL9PpqQTo

[SC Media @SCMagazine]

.@RockHudsonRock and @adam_networks reported that hackers hijacked HBO Max’s verified Reddit account to push malicious ads, using trusted branding to spread infostealers and crypto-stealing malware. #cybersecurity #infosec #CISO https://t.co/4Fpjf8NBtd

[SC Media @SCMagazine]

Two critical flaws in a WordPress plugin used on 600,000+ sites could let unauthenticated attackers execute code through malicious comments, @wordfence reported. Users should patch now. #cybersecurity #CISO #infosec https://t.co/OYuPwZLbVr

[SC Media @SCMagazine]

Seven weeks from patch to #ransomware. Attackers are exploiting a critical VMware vCenter bug to encrypt ESXi systems, underscoring how fast the patching window is shrinking. #cybersecurity #CISO #infosec https://t.co/Er4EhrecvK