PhilM

….me, as he interpreted, he restored. 📑 CISSP 🙇

[Mololuwa | Cybersecurity - (The God Complex) @cyber_rekk]

How to find the SSID of any hidden Network

[Evan Luthra @EvanLuthra]

🚨GOOGLE JUST PUBLISHED THE MOST TERRIFYING CYBERSECURITY REPORT EVER!!!

AI IS NOW WRITING EXPLOITS.. OPERATING PHONES.. HIDING MALWARE.. AND LAUNCHING ATTACKS WITH ALMOST ZERO HUMAN INVOLVEMENT..

Google's Threat Intelligence Group just published the most alarming cybersecurity report in years..

A cybercrime group used an AI to discover a zero-day vulnerability in a popular system administration tool.. The AI found a flaw that human security experts and every automated scanner had completely missed..

They were about to use it for mass ransomware deployment.. Google caught it just in time..

But here's what's terrifying about the exploit itself..

Traditional scanners look for crashes.. Memory errors.. Bad code.. This AI found something completely different.. A logic flaw..

The code was technically perfect.. No bugs.. No crashes.. It just did exactly what the developer wrote.. The problem was the developer's assumption was wrong.. And the AI figured that out by understanding the intent of the code.. Not just the syntax..

No human auditor caught it.. No automated tool caught it.. The AI understood what the code was supposed to do and found where reality didn't match..

Researchers knew it was AI-written because of three things..

The exploit was formatted like a textbook.. Human hackers write messy, obfuscated code.. This was pristine..

It had detailed help menus and tutorials.. No criminal writes documentation for their own ransomware..

And the smoking gun.. It included a hallucinated severity score.. The vulnerability had never been publicly documented.. No score existed.. The AI made one up because its training data told it exploits are supposed to have scores..

An AI hallucination proved the exploit was AI-generated..

But that's just the beginning..

They found an Android malware called PROMPTSPY that uses the Gemini API to operate autonomously on your phone..

It screenshots your screen.. Converts it to a data map.. Sends it to the AI.. The AI decides what to tap, swipe, or type next.. Then does it..

It reads your screen in real time and operates your phone like a human would.. Without any human controlling it..

When you try to uninstall it.. It detects the "Uninstall" button.. Places an invisible shield over it.. And your taps go nowhere.. You literally cannot remove it..

It captures your lock screen pattern.. Replays it later to unlock your phone.. And if the app goes dormant.. It uses Firebase to silently relaunch itself..

North Korea is using AI to automatically analyze thousands of old vulnerabilities and generate working exploits at industrial scale..

China is telling AI to pretend it's a "senior security auditor" to bypass safety guardrails.. Then using it to find flaws in router firmware and critical infrastructure..

Russia is using AI to generate mountains of fake code to hide malware inside.. Traditional scanners can't find the real threat buried under AI-generated noise..

90% of the tactical work in these attacks is now handled by AI.. Human hackers only make 4 to 6 decisions per campaign.. Everything else is automated..

But there's one piece of good news..

Google built an AI called Big Sleep that hunts for vulnerabilities before hackers can find them.. It found a critical flaw in SQLite that every fuzzing tool had missed.. And patched it the same day.. Before the attackers could use it..

That's the new reality..

AI is writing the exploits.. AI is finding the bugs.. AI is defending the networks.. AI is attacking the networks..

Humans are just watching.

[Cyber Security News @The_Cyber_News]

🛡️ Microsoft Patch Tuesday May 2026 - 120 Vulnerabilities Fixed, Including 29 Critical RCE Flaws

Source: https://t.co/Kwjlq3sYml

Microsoft’s May 2026 Patch Tuesday lands with a heavy enterprise focus, fixing 120 vulnerabilities across Windows, Office, Azure, developer tools, and Microsoft 365 apps, including 29 remote code execution (RCE) flaws rated Critical.

Unlike several recent cycles, Microsoft reports no zero‑days exploited in the wild or publicly disclosed ahead of the release, but the breadth of attack surface from DNS and Netlogon to Office and Wi‑Fi drivers means defenders cannot afford to treat this month as low risk.

#cybersecuritynews #windows #patchtuesday

[Cyber Security News @The_Cyber_News]

🛡️ Mozilla Patches 423 Firefox Flaws with Claude Mythos and Other AI Models

Source: https://t.co/c1jpIn0Gy0

Mozilla has fixed a total of 423 Firefox security bugs in April 2026 alone, a figure nearly 20 times higher than its monthly average of about 21 bugs throughout 2025, driven by a groundbreaking agentic AI pipeline built around Anthropic's Claude Mythos Preview and other large language models.

Beyond the 271 AI-identified bugs, the remaining 152 fixes included 41 externally reported bugs and 111 discovered through internal techniques, split roughly equally between Claude Mythos fixes shipped in other releases, bugs found with other AI models, and conventional fuzzing.

#cybersecuritynews

[Anthropic @AnthropicAI]

Our security bug bounty program is now public on HackerOne.

We've run the program privately within the security research community, and their findings have strengthened our products. Now anyone can report vulnerabilities and get rewarded.

Read more: https://t.co/li1QvSTCMs

[Mololuwa | Cybersecurity - (The God Complex) @cyber_rekk]

If you work in Cybersecurity

This is a must read!!!!!

[Cyber Security News @The_Cyber_News]

⚠️ Starbucks Data Breach - Hundreds of Users' Personal Data Exposed

Source: https://t.co/aztvt3NoyU

Starbucks Corporation has confirmed a data breach affecting an undisclosed number of its employees, exposing highly sensitive personal and financial information after unauthorized actors gained access to internal partner accounts through a sophisticated phishing scheme.

On or about February 6, 2026, Starbucks became aware of potential unauthorized access to certain Starbucks Partner Central accounts. Partner Central is the company's internal portal used by Starbucks employees, referred to internally as "partners."

#cybersecuritynews #databreach

[PhilM @m_phil]

Beyond planning, to drills & simulations! - IT Security Operations

[Itunuoluwa Olorunfemi @ProductYuna]

We have a breach!!

That was the message that kicked everything off.

Alerts were firing. Slack lit up. Phones started ringing.
On paper, we felt we were ready, our Incident Response plan was on point, approvals, escalation paths. Everything looked perfect on paper… until the pressure hit.

And then something unexpected happened.

People panicked.

Some jumped straight into “fix mode,” bypassing the plan entirely.
Others waited for instructions that never came.
Too many voices, no clear owner.

Communication became noise.
Status updates conflicted. Escalations were delayed.
Decisions that should’ve taken minutes stretched into hours.

The IR plan didn’t fail because it was badly written.
It failed because we had never practiced it under stress.

After the incident, the lessons were painfully clear:

• Documentation doesn’t create muscle memory
• Stress exposes unclear ownership immediately
• During incidents, clarity beats consensus
• Communication is as critical as containment

Since then, we changed how we prepare.
📌Quarterly tabletop exercises.
📌A clearly defined Incident Commander.
📌Simple, repeatable communication templates.

The next incident wasn’t calm, but it was controlled.

The experience reinforced a truth every security leader eventually need to learn:

Incident response is not a document.
It’s a behavior, trained, tested, and repeated under pressure.

[Binni Shah @binitamshah]

MIT's Computer Systems Security (2024) : https://t.co/nnzg1R0OEy

[PhilM @m_phil]

@BabereManCity 😂😂😂

[PhilM @m_phil]

@roodmurat PDF

[Abdulkadir | Cybersecurity @cyber_razz]

OSPF vs BGP

Both are routing protocols, but they play very different roles:
•OSPF = routes within a network (like inside a company)
•BGP = routes between networks (like between ISPs)

[PhilM @m_phil]

@cyberchenti Hi Faiza, thanks for always sharing these informative threads. We appreciate.

I am on a CISSP journey - taking the exam in Dec. It’s no child’s play but am on it!!!!

[PhilM @m_phil]

“If you need peace, training and prepare for war” - Master Wong!

[AlexFx @itzalexfx]

Essential cybersecurity frameworks for reducing risk and ensuring compliance

[0b1d1 @_0b1d1]

🚨 Apple Issues Urgent Patch for Actively Exploited Vulnerability (CVE-2025-6558) ⤵️

[Emmanuel Makandiwa @prmakandiwa]

The belt of truth is the first piece of armor mentioned in the scripture. According to it's design, the belt would be tied around the waist, securing and stabilizing the entire outfit. Spiritually, having your loins girded with truth means allowing the truth of God’s Word to touch even your most foundational areas. The loins represent your future generations and the “belt of truth” connotes deep, trans-generational truth that not only informs your mind but transforms your lineage. Your victories today, especially in the area of purity and integrity are securing freedom for your children and your children’s children.

You are the beginning of a new generation of truth-bearers. Even if your father didn’t walk in the light of God’s Word, you can be the one who starts a new legacy. The truths you fight to embrace today will become spiritual inheritance for those coming after you. This is what it means to wear the belt of truth.

#ROYALPRIESTHOODORDER
#armoured
#protected
#EmmanuelMakandiwa
#RuthEmmanuelMakandiwa

[AlexFx @itzalexfx]

Understanding security threats across the OSI model layers