Rui Miguel Feio

Director of Mainframe Consulting Services at BMC. Co-founder of and Chairman of the Security Working Group at GSUK.

[Rui Miguel Feio @rfeio]

Free smart TV apps are reportedly turning devices into surveillance platforms by collecting extensive user data, raising fresh concerns about privacy in connected homes.
https://t.co/2fq3zEPSR7

[Rui Miguel Feio @rfeio]

China-linked espionage groups are deploying ASPX and ASHX web shells to maintain persistence and conduct covert operations against targeted networks.
https://t.co/S8Dm3UL3yw

[Rui Miguel Feio @rfeio]

OpenAI’s new ChatGPT Lockdown Mode restricts tool access and interactions to reduce security risks, providing users with enhanced protection in high-risk scenarios.
https://t.co/DjfG6b4aeM

[Rui Miguel Feio @rfeio]

The Pink Extortion campaign is targeting Microsoft 365 users with vishing scams to gain access to cloud accounts and steal sensitive organizational data.
https://t.co/cMB7UMVq4F

[Rui Miguel Feio @rfeio]

The Reaper macOS infostealer is abusing Apple’s Script Editor to steal passwords, cryptocurrency wallets, and other sensitive data, highlighting the growing threat to macOS users.
https://t.co/liOFFxV6BK

[Rui Miguel Feio @rfeio]

Attackers are increasingly weaponizing trusted tools and legitimate software to blend into normal operations, evade security controls, and carry out attacks with greater stealth.
https://t.co/c8BXNAi7bA

[Rui Miguel Feio @rfeio]

Verizon’s 2026 DBIR confirms a growing trend of attackers “living in the browser,” exploiting web sessions and trusted browser activity to evade detection and steal data more effectively.
https://t.co/tgfM2Z6xWI

[Rui Miguel Feio @rfeio]

CISA is warning that ATG fuel storage systems are being targeted in cyberattacks, raising concerns about the security of critical infrastructure and industrial control environments.
https://t.co/CExzSFtdbF

[Rui Miguel Feio @rfeio]

A vulnerability in the Claude Code GitHub Action could allow a single malicious pull request to compromise CI/CD workflows, highlighting the growing security risks in AI-powered development tools.
https://t.co/3DT3qi6vYN

[Rui Miguel Feio @rfeio]

The new IronWorm malware has infected 36 npm packages in a supply chain attack, exposing developers and organizations to malicious code through trusted software dependencies.
https://t.co/hb4m5WXJyY

[Rui Miguel Feio @rfeio]

A flaw affecting Microsoft 365 on Android exposed authentication tokens, potentially allowing attackers to gain unauthorized access to user accounts and sensitive cloud resources.
https://t.co/TWxgDcPFxL

[Rui Miguel Feio @rfeio]

Cisco has patched CVE-2026-20230 in Unified Communications Manager, addressing a critical vulnerability that could allow attackers to gain unauthorized access and compromise enterprise communications systems.
https://t.co/F5OHrdv3qs

[Rui Miguel Feio @rfeio]

A credit card theft campaign is abusing Stripe infrastructure to store stolen payment data, demonstrating how legitimate platforms can be leveraged to support cybercriminal operations.
https://t.co/QXXgYqHPcV

[Rui Miguel Feio @rfeio]

A compromise of the Hola Browser for Windows distribution channel led to the delivery of cryptomining malware, highlighting the ongoing risks posed by software supply chain attacks.
https://t.co/K9xQQs0N4M

[Rui Miguel Feio @rfeio]

Dutch authorities have disrupted a massive malware botnet linked to 1.7 million infected devices, marking a major win against large-scale cybercrime infrastructure.
https://t.co/QqW4oZvqi1

[Rui Miguel Feio @rfeio]

The DDoS-as-a-service market has evolved from small-scale attacks into massive botnet-powered platforms, making disruptive cyberattacks cheaper and more accessible than ever.
https://t.co/SXZVZlZ8jP

[Rui Miguel Feio @rfeio]

Attackers are beginning to use LLM agents for post-exploitation activities, signaling a new phase where AI can autonomously assist cybercriminal operations after initial compromise.
https://t.co/e0O6rK7JP2

[Rui Miguel Feio @rfeio]

The FBI is warning fans about fake FIFA websites being used in World Cup fraud schemes, tricking victims with counterfeit tickets, scams, and credential theft attempts.
https://t.co/GTJ5MBsuu8

[Rui Miguel Feio @rfeio]

A data breach at Carnival has exposed the personal information of nearly 6 million customers, raising serious concerns over privacy and large-scale consumer data protection.
https://t.co/Y35tHR1h52

[Rui Miguel Feio @rfeio]

The BTMOB Android malware service is enabling cybercriminals to generate custom phishing payloads, lowering the barrier for large-scale mobile credential theft campaigns.
https://t.co/oFwqg83fZ1