Philippe Lopez

Protecting the assets of select clientele. Works with executives on what they care about. Dubai, UAE.

[Philippe Lopez @Security_PLo]

In the last week, four of the seven vulnerabilities CISA added to its exploited catalogue related to artificial intelligence and developer tooling. The lesson: Keep your security colleagues with you on this journey! https://t.co/bu0jCKoCKR

[Philippe Lopez @Security_PLo]

CISA published two red team assessments of critical infrastructure organisations last week. One organisation was fully compromised without noticing, the other caught the threat early and contained it. Both shared broadly the same weaknesses, so what separated them? This is mini P.Lo sharing a 1-minute snippet from my weekly article.

[Philippe Lopez @Security_PLo]

CISA published two red team assessments of critical infrastructure organisations. One organisation was fully compromised without noticing, the other caught the attack early and contained it. The two carried broadly the same weaknesses, what separated them? https://t.co/J6rxm3S8ea

[Philippe Lopez @Security_PLo]

Attackers are using AI-generated scripts to exploit Siemens S7 controllers in energy, water and manufacturing plants. https://t.co/Phg8U88Fj5

[Philippe Lopez @Security_PLo]

Adobe Commerce went from public disclosure to active attack in 2 days last week. SAP Commerce Cloud took 3, and a VMware vCenter flaw reached 361 compromised addresses across 47 countries inside 5 days. Read this week's article to see what you need to do. https://t.co/U96uLV43LV

[Philippe Lopez @Security_PLo]

Eight autonomous agents worked a government network for four days at the start of July, mapping 21 systems, taking at least 85 accounts and more than 2,500 personnel records, then moving on to a nuclear safety regulator and seven energy companies. https://t.co/O2KNbssucY

[Philippe Lopez @Security_PLo]

Gunra stopped being a criminal crew in January 2026 and became a franchise, with an affiliate panel, a configurable builder, partner documentation and a recruitment programme paying penetration testers a share of ransom for enterprise access. #ransomware https://t.co/8NuHxPyRxa

[Philippe Lopez @Security_PLo]

The three questions worth putting to your technology team. Read it if you own third-party risk and cannot yet name the consoles your suppliers log into. #CyberGovernance #ThirdPartyRisk #PrivilegedAccess #ManagedServices #BoardRisk https://t.co/dJ5tIPzIZT

[Philippe Lopez @Security_PLo]

My latest article sets out why an AI policy and an AI agent scope control are different things, and the one list every board should be able to produce today #AIGovernance #CyberRisk #BoardGovernance #ThreatIntelligence https://t.co/GOATQHvUAE

[Philippe Lopez @Security_PLo]

The Week AI Agents Started Working For Attackers, And Two Left Their Own Labs https://t.co/2vPXIxEepn

[Philippe Lopez @Security_PLo]

@AnthropicAI Does that mean all foreign nationals get a discount? I pay for max for a reason, that is to get advance access to the new features? And why should we pay for extra token usage to do iterations to fix things that your less capable models introduce?

[Philippe Lopez @Security_PLo]

Most organisations have a third-party access governance policy. Far fewer have the operational programme that enforces it continuously.

https://t.co/eTyB4Rj2kb

#CyberSecurity #CyberGovernance #ThirdPartyRisk #Leadership #CyberRisk

[Philippe Lopez @Security_PLo]

The First AI-Generated Exploit Is Here. Every Business Leader Needs to Understand Why https://t.co/PhrOnQfo0b

[Philippe Lopez @Security_PLo]

@HSBC_UAE This number is conducting an HSBC “KYC” scam in the UAE

[Hamdan bin Mohammed @HamdanMohammed]

We launched the second phase of the Dubai Cyber Security Strategy to reinforce the emirate's position as one of the world’s safest cities in cyberspace. The new strategy will be driven by our exceptional national talent and diverse global partnerships that place us in a good position to defuse any kind of threat in the digital realm. We are committed to deploying advanced technologies and adopting world-class innovation to ensure the highest protection for our digital assets.

[Philippe Lopez @Security_PLo]

Thankful for the invite to participate in the @wef Dubai Cybersecurity Futures 2030 Workshop.

I am looking forward to the University of California, Berkeley analysis and report.

#worldeconomicforum #cyberresilience #digitalfirst #togetheralltheway

[Philippe Lopez @Security_PLo]

@DubaiPoliceHQ Congrats! A great Australian University ad well. He is an honorary Australian now!

[Philippe Lopez @Security_PLo]

Mastercard Priceless Planet Coalition welcomes HSBC UAE Air Miles initiative to empower consumers to take collective action on climate change. #mastercard #pricelessplanetcoalition #hsbc #MastercardEmployee https://t.co/2jfdRA9nSi

[Philippe Lopez @Security_PLo]

Project Solar Sister #MastercardEmployee https://t.co/fSNxJ2xKYT

[Philippe Lopez @Security_PLo]

Trusting Tech in a Post-Pandemic Recovery #MastercardEmployee https://t.co/lVkCXFcoAi