cybertipsguide

vCISO | Published Author | CCP, CISSP, CISM, CRISC, CISA, CCSP. Expertly building resilient security cultures & managing risk. #CISO #InfoSec #Cybersecurity

[cybertipsguide @cybertipsguide]

CVE-2026-50751 shows why “just patch it” isn’t enough. A simple IKEv1 auth bypass turned Check Point VPNs into trusted entry points for Qilin ransomware, & patching can’t evict actors already inside. #Cybersecurity #Ransomware #CheckPoint #ZeroTrust 🔗https://t.co/WMU1xZ9bVz

[cybertipsguide @cybertipsguide]

FCC moves to harden emergency alerts and undersea cables—treating “invisible” infrastructure as national security assets and rewarding strong security standards.

#CyberSecurity #FCC #CriticalInfrastructure 🔗https://t.co/znoOJAepzc

[cybertipsguide @cybertipsguide]

The “great AI rehiring”: firms that cut staff for AI are now paying $ to hire people back to oversee fragile systems. AI didn’t erase the job; it exposed that judgment, context & accountability were the job all along. #AI #FutureOfWork #AIGovernance 🔗https://t.co/N3fNxpq7kC

[cybertipsguide @cybertipsguide]

New Relic’s 2026 AI coding report is wild: AI now writes most code at many orgs; 94% of leaders say it looks higher-quality, yet 78% report more incidents and 82% have had AI-related prod failures. #AI #DevOps #Observability #SRE #AppSec 🔗https://t.co/8hNIFe5q7E

[cybertipsguide @cybertipsguide]

One encouraging trend in the DBIR: more ransomware victims are refusing to pay. Stronger IR planning, backups, segmentation, and operational resilience investments appear to be making a difference. #CyberSecurity #Ransomware #DBIR🔗https://t.co/2biPF6Fi0g

[cybertipsguide @cybertipsguide]

The DBIR highlights a sharp rise in “Shadow AI” usage inside organizations. This is becoming less of an AI problem and more of a data governance and DLP challenge. Safe enablement will matter more than outright restriction. #CyberSecurity #AI #DBIR🔗https://t.co/END7jGnTCj

[cybertipsguide @cybertipsguide]

The DBIR shows mobile-centric social engineering attacks are outperforming many traditional phishing campaigns. Security awareness training can’t be email-only anymore. Voice, SMS, and helpdesk impersonation are growing risks. #CyberSecurity #DBIR🔗https://t.co/ukdMgapnGW

[cybertipsguide @cybertipsguide]

Modern ransomware attacks are now communication crises too. Customers & CTI platforms may learn about your breach from the attackers before your company responds. My latest article explores ransomware leak sites, trust, & incident response. 🔗 https://t.co/RsRrvBWwem #Ransomware

[cybertipsguide @cybertipsguide]

Modern ransomware attacks are now communication crises too. Customers & CTI platforms may learn about your breach from the attackers before your company responds. My latest article explores ransomware leak sites, trust, & incident response. 🔗https://t.co/8b3E7ykOza #Ransomware

[cybertipsguide @cybertipsguide]

The DBIR highlights a major shift: third-party breaches are increasingly tied to identity weaknesses like missing MFA, excessive permissions, and credential exposure. Vendor risk is rapidly becoming identity risk. #CyberSecurity #DBIR #ZeroTrust🔗https://t.co/tMXFeVtsRa

[cybertipsguide @cybertipsguide]

The 2026 DBIR shows vulnerability exploitation is now the top initial access vector. The challenge for many orgs isn’t awareness anymore — it’s scale, prioritization, and operational constraints. Risk-based remediation is critical. #CyberSecurity #DBIR🔗https://t.co/Mw6GWcpFZx

[cybertipsguide @cybertipsguide]

The Canvas breach has me thinking: prevention‑only security is over. ShinyHunters hit Canvas twice, stealing 3.65 TB of data on ~275M users via weak accounts & loose SaaS access. 🔗 More: https://t.co/5ZQ26Qk2ni
#cybersecurity #SaaSsecurity #ZeroTrust #dataprotection #infosec

[cybertipsguide @cybertipsguide]

FBI warning: “Kali365,” a Phishing-as-a-Service kit that hijacks MS 365 OAuth tokens, bypasses MFA, & gives persistent access without stealing passwords. Time to tighten app consent, conditional access, & user training. 🔗 https://t.co/5AVGCjLLXR #CyberSecurity #Microsoft365

[cybertipsguide @cybertipsguide]

CISA left plain-text passwords, SSH keys, & AWS GovCloud creds in a public GitHub repo for ~6 months (with secret scanning reportedly disabled). If it can happen to the US cyber agency, it can happen to anyone.
#cybersecurity #DevSecOps #GitHubSecurity https://t.co/mzS81FLV6j

[cybertipsguide @cybertipsguide]

AI voice cloning scams are becoming alarmingly convincing. Criminals can now impersonate loved ones (very easily) during fake emergencies to steal money & sensitive information. Learn the warning signs + protection measures. https://t.co/OmKM3aljH1 #CyberSecurity #AIScams

[cybertipsguide @cybertipsguide]

New research shows top AI assistants (Perplexity, Claude, Grok, ChatGPT) send chat URLs, titles & IDs to ad trackers, sometimes exposing full “private” conversations. Time to rethink how we use and govern LLMs? #AIsecurity #privacy #cybersecurity 🔗https://t.co/SSFK4TiOIa

[cybertipsguide @cybertipsguide]

Gartner’s new Hype Cycle for Agentic AI shows how quickly agents are maturing & where expectations are outpacing proven value. Clear takeaways on real capabilities, “agent‑washing,” & the need for governance & skills. #AgenticAI #AIAgents #Gartner🔗https://t.co/QhhPH0wmOi

[cybertipsguide @cybertipsguide]

Cool stuff - MITRE’s new Fight Fraud Framework (F3) gives fraud + cyber teams a shared, behavior-based model of how fraud actors work so you can align investigations and stop fraud before cash-out. 🔗https://t.co/YhhBMJGa9Q #FraudPrevention #CyberSecurity #F3Framework

[cybertipsguide @cybertipsguide]

The 2026 AI Index shows how AI is maturing: more incidents, more risk awareness, more regulation, & more $ for responsible AI. The winners will be the ones who bake governance, security, & human impact into the stack now.
#AI #AIGovernance #AISafety 🔗https://t.co/4b3tJYOOau

[cybertipsguide @cybertipsguide]

New data shows just 3 ransomware gangs (Qilin, Akira, Dragonforce) drove 40% of 672 incidents in March, with >50% of victims in the US. Fewer groups, bigger impact. Rethink IR playbooks, social engineering defenses & visibility. 🔗https://t.co/R6GR0S5h9F #ransomware #RaaS