Rhett Glauser

First, secure AI with @NomaSecurity / Current: Noma Security VP of marketing; Yinzer; Girl dad x5. / Former: Vulcan Cyber; SaltStack; ServiceNow; Altiris.

[SANS Cloud Security @SANSCloudSec]

We're kicking off this year's #CloudSecNextSummit w/ keynote speaker Diana Kelley (CISO of Noma Security)! It's not too late to join us Live Online for incredible #CloudSecurity sessions.

Register Now: https://t.co/oL7Ku11wuT

[Joseph Thacker @rez0__]

There's an extremely good write up by @NomaSecurity (and @sasi2103) about a Salesforce Prompt Injection vuln which led to leaking customer data zero-click via prompt injection into image tag generation.

Link and my breakdown of it below:

[AISecHub @AISecHub]

ForcedLeak: AI Agent risks exposed in Salesforce AgentForce - https://t.co/eC4ZXjujpE By @sasi2103

This research outlines how @NomaSecurity discovered ForcedLeak, a critical severity (CVSS 9.4) vulnerability chain in Salesforce Agentforce that could enable external attackers to exfiltrate sensitive CRM data through an indirect prompt injection attack. This vulnerability demonstrates how AI agents present a fundamentally different and expanded attack surface compared to traditional prompt-response systems. 

#ForcedLeak #AgenticAI #SalesforceAgentforce #PromptInjection #IndirectPromptInjection #DataExfiltration #NomaSecurity #NomaLabs #ContentSecurityPolicy #Salesforce #AIAgentSecurity #AISecurity

[Allie Howe @vtahowe]

Critical agentic vulnerability in Salesforce Agentforce 🚨

Vuln found and announced by @NomaSecurity

CVSS score 9.4

By exploiting an indirect prompt injection attack vector and registering a $5 domain Noma was able to exfiltrate CRM data

Here’s what you need to know 🧵

[Sasi Levi 🎧 @sasi2103]

Our research team showcases a case where a malicious MCP uses invisible Unicode characters to hide malicious instructions. 👨‍🎓 🥶 🎇

https://t.co/fLsJ213cFM

[TechCrunch @TechCrunch]

Vulcan Cyber, which scans software for security vulnerabilities, lands $55M cash infusion https://t.co/5ykbeBjk4X by @kyle_l_wiggers

[Vulcan Cyber @VulcanCyber]

Vulcan Cyber is coming to @BlueTeamCon 👾
Find our dream team this weekend at booth #9, 2nd floor.

[Vulcan Cyber @VulcanCyber]

CVE lab alert 🔬
Say hello to CVE-2023-39143, a critical RCE discovered and addressed in PaperCut servers.
https://t.co/7lbISZNkTx

[Michael Hickins @Michael_Curator]

I’m very proud that "The Silk Factory" was awarded the International Impact Book Awards 2023 for Memoirs! This award reflects the generational impact of trauma and the importance of atonement in the healing process.

You can now order your copy here: https://t.co/qwaaGJVTd7

[Vulcan Cyber @VulcanCyber]

🌐The future of vulnerability prioritization is here, see for yourself on August 24th >> https://t.co/hQHlCxqx9v

[Rhett Glauser @rglauser]

Remediation intelligence for #patchtuesday https://t.co/Uj290Yyzpn

[Vulcan Cyber @VulcanCyber]

A security vulnerability discovered in Cisco, with a score of 9.1, that could be exploited by an unauthenticated remote attacker that could gain read permissions or limited write permissions? That's harsh. 🥊
https://t.co/iptQZjXzDi

[Vulcan Cyber @VulcanCyber]

Vulcan Cyber is proud to introduce APG 🚀
https://t.co/Xs8TDs9qB6

[Security Boulevard @securityblvd]

Vulnerability management can be a daunting task, especially when the focus is scattered. @VulcanCyber's new graph tool emphasizes the necessity of targeted defense strategies. https://t.co/HD0lmlMgrt

#AttackSurface #CyberSecurity #ASM

[Vulcan Cyber @VulcanCyber]

SSVC has been challenging CVSS for the vulnerability decision-making primary method. 🎯
Learn all about it in our recent blog >> https://t.co/DxUpIyWRbC

[Vulcan Cyber @VulcanCyber]

Owning cyber risk is no easy task.
Fear not - Vulcan Cyber to the rescue! 🦾 check out our bi-weekly Linkedin newsletter >> https://t.co/qQDhjSwUdO

[Vulcan Cyber @VulcanCyber]

🗞️ The latest and greatest cyber risk stories from July 2023, right here >> https://t.co/uidGLOkAjt

[Vulcan Cyber @VulcanCyber]

🎱 CVE-2023-3519, a critical zero-day vulnerability in Citrix NetScaler, is currently being exploited by attackers.

Here's what you need to know >> https://t.co/oLBKz77eCx

[Rhett Glauser @rglauser]

More #vulnerability prioritization and remediation insights from @VulcanCyber https://t.co/Xnr6u2YJXy

[Vulcan Cyber @VulcanCyber]

Good morning to that one guy who forgot to handle SQL injections 💖