Cyber Tzar

Official Twitter account of Cyber Tzar.

Cyber Security Assessment, Score Carding, Benchmarking, and Risk Management Platform.

[Cyber Tzar @cybertzar]

Exciting news! Cyber Tzar is now part of the Cyber Runway Scale Programme by @Plexalcity - @PlexalCyber & @DSITgov, with support from
@Deloitte & @CSIT_QUB!

https://t.co/YNEFLWZBK4

#Cybersecurity #Innovation #AI #CyberRunway #CyberTzar #NCSCForStartups

[Cyber Tzar @cybertzar]

Apify has rotated critical internal secrets and revoked some third-party OAuth connections after detecting unauthorized access to its internal systems.
#cybersecurity
https://t.co/cgggaAHTeG

[Cyber Tzar @cybertzar]

A massive, coordinated cyberattack is sweeping GitHub. Attackers are using thousands of compromised accounts and have attempted to push secret-stealing code to more than 66,000 public repositories.
#cybersecurity
https://t.co/zXJQVaWpjT

[Cyber Tzar @cybertzar]

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository.
#cybersecurity
https://t.co/IO3qbmzTWh

[Cyber Tzar @cybertzar]

Microsoft has warned customers still clinging to Exchange Server 2016 and 2019 to consider the software "permanently vulnerable" as November's security fixes arrive for Subscription Edition (SE) alone.
#cybersecurity
https://t.co/EgFw3iBINi

[Cyber Tzar @cybertzar]

Shipping giant Maersk has confirmed that a threat actor breached systems belonging to a company it previously acquired and stole data.
#cybersecurity
https://t.co/mEEn8GkCFY

[Cyber Tzar @cybertzar]

The Git project has released updates addressing six vulnerabilities that could allow attackers to execute code, write to unintended files or cause memory corruption when Git processes malicious repositories or other specially prepared input.
#cybersecurity
https://t.co/WMnp543xs8

[Cyber Tzar @cybertzar]

Researchers have disclosed details of a campaign in which an emerging agentic penetration testing platform called AntiFox has been used to steal Amazon Web Services (AWS) credentials and pivot laterally into compromised environments.
#cybersecurity
https://t.co/W3yZavmG7h

[Cyber Tzar @cybertzar]

A 2013 breach of Russian-language cybercrime forum YouHack exposed its members' login details – and millions of credentials they had posted about other victims, according to newly cataloged data.
#cybersecurity
https://t.co/qt6232yVrt

[Cyber Tzar @cybertzar]

A threat actor used compromised identity and access management (IAM) credentials for a Qubole big data platform's AWS account to access and exfiltrate data from multiple customers' AWS environments.
#cybersecurity
https://t.co/0Q8B6kcenI

[Cyber Tzar @cybertzar]

AI infrastructure company Fireworks said cybercriminals stole billing information and AI-specific data during two breaches last month.
#cybersecurity
https://t.co/MwAv8aZRdp

[Cyber Tzar @cybertzar]

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules.
#cybersecurity
https://t.co/G7cJ5ZnJMb

[Cyber Tzar @cybertzar]

Security company Barracuda warns that attackers are exploiting a pre-authentication authorization bypass bug and a command-injection vulnerability in its popular Email Security Gateway (ESG) products.
#cybersecurity
https://t.co/SAAg2Kikju

[Cyber Tzar @cybertzar]

A data-wiping malware attack has forced Russian cloud services provider Beget to rebuild its cloud infrastructure from scratch, the company said.
#cybersecurity
https://t.co/Te33BLwz9H

[Cyber Tzar @cybertzar]

SonicWall has fixed an exploited SonicOS SSL-VPN vulnerability (CVE-2026-19868) that may allow attackers with valid credentials to bypass SAML-enforced multi-factor authentication.
#cybersecurity
https://t.co/93lxplxXPN

[Cyber Tzar @cybertzar]

An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud security company Wiz said today.
#cybersecurity
https://t.co/5eKbFov361

[Cyber Tzar @cybertzar]

Microsoft has unleashed a whopper of an update for Azure Linux, packing more than 470 CVE fixes into a single release as the software industry's ever-growing pile of vulnerabilities shows little sign of shrinking.
#cybersecurity
https://t.co/ZUucB3LRMZ

[Cyber Tzar @cybertzar]

Iris Ohyama, the operator of the Iris Plaza shopping platform, disclosed that personal information belonging to about 7.7 million people may have been exposed after unauthorized access to a third-party cloud service the company used.
#cybersecurity
https://t.co/dZitn5cHly

[Cyber Tzar @cybertzar]

The boss of the island's cyber security centre has questioned whether so many household and commercial appliances need to be connected to the internet.
#cybersecurity
https://t.co/wKy2nZjBQ5

[Cyber Tzar @cybertzar]

DigiCert suffered a data breach after a server migration mistakenly exposed an internal business system to the internet, allowing unauthorized access to customer information and identity documents.
#cybersecurity
https://t.co/M3s2maJq8O

[Cyber Tzar @cybertzar]

AI agents will break security rules, revealing their secrets to strangers, and running untrusted code in exchange for help from a swarm of other agents, according to test results shared with The Register.
#cybersecurity
https://t.co/pFTvGyqF2q