Benjamin He

Cybersecurity consultant (CISSP) | Founder of Canlus — practical security for Calgary SMBs | Breaking down real hacks in plain English

[Benjamin He @BenjaminHe_CA]

PHP2Shell: two critical PHP flaws (CVSS 9.2) patched today. Updating WordPress does NOT fix it — your host must patch PHP. Old PHP 5/7 gets no patch. Ask your host what version you're on. https://t.co/VsZz2vYsLX

[Benjamin He @BenjaminHe_CA]

Supply chain attack: stolen ConnectWise backup app credentials signed into 173+ Microsoft 365 tenants. No phishing. No MFA prompt — apps don't get one. Audit which apps can read your tenant. https://t.co/pxiqIhnHEA

[Benjamin He @BenjaminHe_CA]

@msftsecurity E7 putting agent governance in the product is the right call. Most orgs I talk to can't even inventory their agents yet — you can't govern what you can't see.

[Benjamin He @BenjaminHe_CA]

@TheHackersNews Agents with standing privileges are the new over-permissioned service account. Least privilege was hard enough with humans; with agents acting 24/7 it's unforgiving.

[Benjamin He @BenjaminHe_CA]

@Reuters The $50 isn't the story. The agent did the boring parts — recon, retries, chaining low-severity bugs — at machine speed. Defenses tuned for human-speed attackers are the gap.

[Benjamin He @BenjaminHe_CA]

@IntCyberDigest The password was today's date. No zero-day, no phishing — just a default credential nobody changed. This is what most small-business breaches look like too.

[Benjamin He @BenjaminHe_CA]

One hacker hit 100+ company sites (Deere, SharkNinja, Cummins) with AI agents — 23 hrs of autonomous work, ~$50 in tokens per breach. Patch your plugins and lock down admin logins this week. https://t.co/qOwrbGWkwj

[Benjamin He @BenjaminHe_CA]

173 companies' Microsoft 365 tenants hit via one stolen vendor credential — no passwords cracked, no MFA triggered. The backup app your MSP consented had the keys. Audit your Entra apps. https://t.co/pxiqIhnHEA

[Benjamin He @BenjaminHe_CA]

82% of companies have AI agents running that nobody knows about (Veeam 2026 report). Every agent inherits someone's permissions — overshared SharePoint means overshared agents. Inventory yours this week. https://t.co/wUIetQTI2m