Rassoul Zadeh

Cyber Security Expert, CEO, Founder

[Rassoul Zadeh @rgzadeh]

https://t.co/2gAPcZWhpU

[Rassoul Zadeh @rgzadeh]

When I made my first course, it was just a fun project. Today, 130K+ Udemy students later, I’m excited to share my newest course: Enterprise AI Security & Governance

Free access for my network, DM me! Link below
#AISecurity #ISACA #Udemy

[Rassoul Zadeh @rgzadeh]

Which AI Persona is running your security team?
The Gambler: Strategic misalignment (all-in on hype)
The Skeptic: Neglect (falling behind the adversaries)
The Native: Panic-buying (bloated stack due to FOMO)
The Tinkerer: Delayed outcomes (endless fine-tuning)
#Cybersecurity #AI

[Rassoul Zadeh @rgzadeh]

#Mythos can exploit your app in less than an hour!

Patching remains critical, but it's time to rethink why so many enterprise applications are exposed to the public internet.

#ZeroTrust isn't just about access anymore. It's about reducing the attack surface.

#CyberSecurity

[Rassoul Zadeh @rgzadeh]

You can have the most expensive security monitoring tools in the world, but if your front door is left wide open, security is just an illusion.

90% of cloud breaches start with basic hygiene: unconfigured S3s, missing MFA, and excessive permissions.

Lock down the basics first.

[Rassoul Zadeh @rgzadeh]

Most security programs fail because they start with tools, not business goals.
The right sequence:Business → Risks → Controls → Gaps → Priorities → Roadmap → Outcomes Security isn’t a tech stack—it’s a deliberate risk strategy.
#CyberSecurity #CISO #RiskManagement

[Rassoul Zadeh @rgzadeh]

Deploying AI/GenAI tools without managing its posture is just creating tech debt you'll pay for during an incident response.
https://t.co/bOGDXiK57v
#AISecurity #CyberSecurity #DataSecurity

[Rassoul Zadeh @rgzadeh]

Berlin artist Simon Weckert created a shirt designed to stop AI camera systems from detecting the wearer as a person.
#ai #security #privacy #survailance

[Rassoul Zadeh @rgzadeh]

Good old days!
#commodore #ps5

[Rassoul Zadeh @rgzadeh]

Which one is easier?

[Rassoul Zadeh @rgzadeh]

This new drone, called "Phantom Twist", spins up to 25 times per second, which is too fast for the human eye to see it clearly.
#drones #phantom #invisibledrone #spydrone #CoolTech

[Rassoul Zadeh @rgzadeh]

ShinyHunters' campaign abusing OAuth tokens & Salesforce/Snowflake misconfigurations shows non-human identity is the top exposure gap.
SecureZona maps OAuth apps & cloud misconfigurations to lock down SaaS posture before integrations are abused.
#InfoSec #SaaSSecurity #SecureZona

[Rassoul Zadeh @rgzadeh]

Massive blind spot in AI governance. Over 800 fake AI Skills and MCP servers were weaponized to drop StealC malware via assistant recommendations. Allowing agents to dynamically source tools without unified Security Posture Management (SPM) creates an unmonitored execution vector

[The Hacker News @TheHackersNews]

AI assistants sometimes repeated attackers’ install steps.

Island’s Alon Biran says its team found ~7,600 malicious GitHub repos, 800+ posing as AI Skills or MCP servers. In tests, assistants surfaced them and sometimes repeated the install steps as legitimate guidance.

Read more: https://t.co/C2Tji6vV1D

[Rassoul Zadeh @rgzadeh]

@TheHackersNews "AgentBaiting" is supply chain poison for AI. Island’s research proves that LLM-based assistants can be tricked into recommending malicious MCP servers and GitHub repos directly into user workflows. AI-SPM must enforce strict, automated vetting on all third-party integrations.

[Rassoul Zadeh @rgzadeh]

Black Hat 2026 insights confirm attackers are shifting from passwords to token & cookie theft to bypass traditional MFA.

#SecureZona maps non-human identities, audits token permissions, and locks down cloud posture to block unauthorized session access.

#InfoSec #CyberSecurity

[Rassoul Zadeh @rgzadeh]

McGraw-Hill's data exposure shows how simple Salesforce misconfigurations let guests query internal data without credentials.

#SecureZona detects cloud & SaaS drift to lock down permissions before gaps are weaponized.

Vist: https://t.co/nyjODgbvGO

#InfoSec #SaaSSecurity

[Rassoul Zadeh @rgzadeh]

Cyber risk spans far past cloud misconfigs to SaaS, APIs, identities, AI & third parties.
Secure Zona unifies your entire posture in one platform: Discover exposure, Prioritize critical risks, Map compliance , Remediate faster
Less sprawl Total visibility
https://t.co/nyjODgbvGO

[Rassoul Zadeh @rgzadeh]

Active exploitation of a Metabase zero-day gives attackers unauthenticated admin access to connected data warehouses.
Patch self-hosted instances immediately. #SecureZona continuously maps external attack surfaces and data posture to eliminate exposure blind spots.
#InfoSec

[Rassoul Zadeh @rgzadeh]

CISA warning: Progress LoadMaster flaw (CVE-2026-8037) allows unauthenticated RCE on edge load balancers.

Isolate management interfaces and patch immediately. SecureZona maps your external surface to eliminate edge posture blind spots.

#InfoSec #CyberSecurity #SecureZona #USPM

[Rassoul Zadeh @rgzadeh]

Active exploitation of JetBrains TeamCity flaw gives attackers unauthenticated RCE on central build servers. Compromised CI/CD platforms jeopardize your entire software supply chain.

Patch TeamCity On-Premises and restrict build server exposure immediately.

#AppSec #DevSecOps