Lydia Zhang

[Lydia Zhang @linglingsan]

Security Boulevard incorporated my reactions to this event in the article below. What’s your perspective?

Lydia Zhang, co-founder and president of Ridge Security Technology, said that “it’s more believable that Anthropic is opening up Mythos due to pressure from the release of 3OpenAI Daybreak.”

OpenAI, shortly after Anthropic announced Mythos, released its own cybersecurity-focused AI model, #GPT-5.4-Cyber, earlier this month and announced #Daybreak, its security initiative that combines frontier AI model capabilities with #Codex Security — an agent designed to detect, validate, and patch vulnerabilities — enabling enterprises to address security flaws before bad actors can exploit them.

“Even though [Anthropic’s] approach of sharing vulnerabilities with organizations that may face similar risks sounds reasonable and well-intentioned, in reality, how can outsiders know which organizations may face the same vulnerabilities in the first place?” Zhang asked. “Also, allowing [a #Glasswing member] to act ‘at its own discretion’ creates a major gray area, as there are no clear regulations, laws, or industry conventions defining what that discretion should be based on. The bigger concern is that competition between AI models could put sensitive information at stake.”

https://t.co/AS1Rl4wcfY

[Ridge Security Technology Inc. @RidgeSecurityAI]

Cloud misconfigurations are now a primary target for attackers. To help you stay ahead, PurpleRidge has expanded its automated validation capabilities to include Comprehensive AWS Account Audits.

Why modern businesses choose PurpleRidge:

✔ Expert-Led Security – Acts as your dedicated security team, validating your security posture and compliance so you can focus on growth.
✔ Actionable Insights – Clear visibility into your Web or AWS accounts with step-by-step instructions to remediate security gaps.
✔ Zero-Risk Pricing – Run your initial security test for free. Pay a flat $299 fee only to unlock the full report and remediation details.

Start your free test today: https://t.co/WDdkhmqFT0

#CloudSecurity #AWS #CyberSecurity #PurpleRidge

[Ridge Security Technology Inc. @RidgeSecurityAI]

Critical Vulnerability Breakdown: SolarWinds Web Help Desk (CVE-2025-40551) 🚨 A newly disclosed flaw in SolarWinds Web Help Desk enables unauthenticated remote code execution, and it’s not just another CVE, it’s part of a dangerous exploit chain that can lead attackers straight into your internal systems.

In our latest blog, we go beyond the basics:
🔍 What makes CVE-2025-40551 especially severe
🔗 How multiple weaknesses can be chained together
🧠 Why architectural flaws and unsafe deserialization are so dangerous
🛠️ How RidgeBot can prove real exploitability, not just theoretical risk

👉 Read the full analysis here: https://t.co/dfBAJpc2Dk

If you’re responsible for securing IT service platforms or defending exposed infrastructure, this is essential reading.

#cybersecurity #vulnerabilitymanagement #SolarWinds #infosec #penetrationtesting #CTEM #RidgeBot

[Ridge Security Technology Inc. @RidgeSecurityAI]

🚀 Join us for an AI Security Masterclass that breaks down what the exposure shift truly means for security leaders in 2026. You’ll leave with practical insights, real-world context, and clear, actionable takeaways. Register: https://t.co/qa6JUUev5t

#AISecurity #ExposureShift #ContinuousValidation #CISOSecurity #CyberRisk

[Ridge Security Technology Inc. @RidgeSecurityAI]

AI is rapidly reshaping the cyber threat landscape -- but it's not just about smarter attacks, it’s about smarter defense too. As #RidgeSecurity’s Nick Mo observes, defenders must meet this moment with proactive AI strategies that anticipate adversarial AI and elevate human defenders rather than replace them.

Read the latest on how counter-AI approaches are emerging alongside AI-powered threats, and why resilient security means leaning into intelligent defense, not legacy tool >> https://t.co/iFp6y7O0zY

@CACMmag #Cybersecurity #AIThreats #CounterAI

[Lydia Zhang @linglingsan]

@RidgeSecurityAI I commented on this article "Lydia Zhang, president of Ridge Security, said this recent attack was more closely related to CVE-2024-53704 rather than CVE-2024-40766. Zhang said the "53704" SonicWall SSL VPN vulnerability leaks the swap cookie and session ID, which lets a remote attacker bypass authentication and take over an existing session.

“I still remember back in April when our team wrote and published the detection and validation plugins for it,” said Zhang. “Now it has triggered a major incident.”

Zhang said other banks should act quickly to test, identify, and patch their SonicWall firewalls. If a ransomware incident can't be prevented, Zhang said at the very least security teams should ensure we do not stumble twice or multiple times over the same issue."
https://t.co/rRcX25O5ce

[Ridge Security Technology Inc. @RidgeSecurityAI]

Aisuru’s 29.7 Tbps DDoS attack is a wake-up call. As Ridge Security’s Lydia Zhang warns, many orgs don’t realize their IoT devices are compromised until an attack hits.

Stay vigilant: patch fast, monitor continuously, and lock down every connected device >> https://t.co/mqbAKAchcM

@The_IT_Nerd #RidgeSecurity #Cybersecurity #DDoS #Botnets #IoTSecurity #InfoSec #ThreatIntelligence #CyberThreats #NetworkSecurity #CloudSecurity

[CNN Breaking News @cnnbrk]

At least 13 killed and others trapped as huge fire tears through Hong Kong high-rise apartment complex, authorities say. https://t.co/NjHo7LlDsv

[Lydia Zhang @linglingsan]

It’s ironic that cyber insurance has become a viable solution. Without thorough security testing or a widely accepted industry standard established before setting cyber insurance terms, it opens the door to hackers who can then target organizations with the highest insurance coverage.

[Ridge Security Technology Inc. @RidgeSecurityAI]

https://t.co/LDXpOmCpgs Our CEO, Nick Mo, is quoted in this article. He points out the unequal battle between hackers and defenders and how AI is widening this gap. "Free from ethical, regulatory, or corporate constraints, they can fully exploit the most advanced AI technologies. Meanwhile, defenders operate within strict boundaries of governance, privacy, and compliance that limit their ability to innovate and respond at the same speed,” explained Nick Mo, CEO & co-founder of Ridge Security Technology Inc.

[Ridge Security Technology Inc. @RidgeSecurityAI]

🎤🌟 Don't Miss the Cybersecurity Talent Show Extravaganza! 🌟🎤 Guess what is the result, watch now and be amazed. Learn more at https://t.co/5yVQXENhJn

[Ridge Security Technology Inc. @RidgeSecurityAI]

🎙️ Join Gary Miliefsky Publisher of Cyber Defense Magazine, in an insightful interview with Lydia Zhang, President and Co-founder of Ridge Security.

Website: https://t.co/uvPORJWjMV
Radio: https://t.co/BCwosmD0xW
Streams: https://t.co/UEibiBgwXt

[Lydia Zhang @linglingsan]

What a thoughtful gift! A pair of chopsticks, a myriad of flavors!

[Lydia Zhang @linglingsan]

Thank you, @futuretechmag, for featuring this article. It's crucial for CISOs to grasp the significance of CTEM and understand its critical role in today's cyber landscape.

[Future Tech @futuretechmag]

Achieving a Successful Continuous Threat Exposure Management Program - https://t.co/MEjZqTXRfM

[Ridge Security Technology Inc. @RidgeSecurityAI]

Are you curious about how #OpenSource technology revolutionized cybersecurity and what are the associated risks? Register to our upcoming #webinar:

July 18th 7 pm - Pacific Time: https://t.co/Df6tywD4my

July 19th 7 am - Pacific Time:
https://t.co/9nNzzotNuP

#cybersecurity

[Lydia Zhang @linglingsan]

Set sail with #RidgeSecurity global partners and customers! https://t.co/qKWNNuMqK1

[Lydia Zhang @linglingsan]

#RSA2023 Super busy day for booth #5315! Come to join the crowd!

[Ridge Security Technology Inc. @RidgeSecurityAI]

Looking for a clear explanation of the differences between vulnerability scanning and penetration testing? Look no further! Check out this informative video clip that breaks down the key distinctions between these two crucial cybersecurity practices. https://t.co/lqRcX8CMhE

[Ridge Security Technology Inc. @RidgeSecurityAI]

Check out this video, find out how you can test your website security by yourself without hiring an security expert. https://t.co/j1s9wbq8tf #websecurity #pentest#OWASP report

[BetaList @BetaList]

@ridgesecurityai @linglingsan You're featured on BetaList! 🙌

https://t.co/BnVIkHDPfn