Six interactive tools to quantify risk, justify budgets, and communicate cyber exposure to leadership -check them out proactiverisk.com/calculators
English
Proactive Risk
3.3K posts
Proactive Risk
@Proactive_RISK
Veteran‑led cybersecurity consultancy delivering hands‑on CyberAdvisor™ services and risk reduction for regulated organizations
New Jersey, USA Katılım Ocak 2015
17 Takip Edilen242 Takipçiler
Sometimes simple is the best method and sometimes manage services is your best option to maximize value to your business learn more at proactiverisk.com
English
@HuntressLabs The breach clock is ticking breachclock.com
English
The Huntress SOC is currently tracking a sophisticated supply chain attack targeting the popular axios npm package. With over 100M+ weekly downloads, the reach is massive, and we’ve seen the attack impacting 135 customer endpoints so far.
🧵 What you need to know:
English
Time to reset the BREACHCLOCK
breachclock.com
Dark Web Informer@DarkWebInformer
‼️🇺🇸 Barry P. Goldberg has fallen victim to INC Ransom Ransomware
English
The Cyber Claims Data Is In. Here's What Actually Reduces Risk. proactiverisk.com/blog/coalition…
English
FBI Cyber Division@FBICyberDiv
Your organization’s security extends only as far as your least-protected vendor with network or data access. Adversaries will target the weakest link in your supply chain to bypass strong security measures. That’s why managing third-party risk is one of Operation Winter SHIELD’s 10 Key Defenses. Start by keeping an up-to-date list of all third parties with access, paired with clear owners of these relationships. Require controls like strong authentication, least-privilege access, and monitored gateways where feasible. To further reduce risk, regularly audit third-party accounts and promptly disable any that are no longer needed. Vendor contracts should include clauses requiring quick notification if a breach occurs and annual verification of security controls. When a contract ends or changes, make sure to revoke access and confirm proper data disposal. These simple steps can prevent attackers from exploiting trusted relationships. Recent #FBI advisories have shown how attackers exploit third-party compromise and vendor integrations to sneak into organizations’ networks and steal sensitive data. Learn more about these attacks 🔗ic3.gov/CSA/2025/25091… And see all FBI #OWS recommendations 🔗fbi.gov/wintershield
ZXX
Are You Proactive? The Difference Between Reactive and Proactive Cybersecurity proactiverisk.com/blog/are-you-p…
English
Your business is a castle... but the walls are gone. Perimeters won't stop modern threats. Secure your future with MeasureRISK, CATSCAN, and ManageIT. Adaptive protection for gov & commercial. 290 W Mount Pleasant Ave, Livingston, NJ 07039. ProactiveRisk.com #SemperFi
English
The smartest move your business can make isn’t responding to incidents—it’s preventing them.
Be proactive about security before security becomes your problem
English
Compliance, security, rapid response — all in one managed service.
Proactive Risk helps CEOs reduce operational burden while defending business value.
Book a conversation today. #CyberResilience #BoardReady proactiverisk.com
English
CEOs don’t buy tools — they buy outcomes. 🔒
Proactive Risk delivers continuous risk assessment, compliance, and threat response — so you can reduce breaches and stay audit-ready.
Set a meeting today. #CyberSecurity #ManagedServices proactiverisk.com
English
North Korea runs a network of up to 100,000 fake IT workers across more than 40 countries, generating roughly 500 million dollars per year for the regime.
podcasts.apple.com/us/podcast/cyb…
English
@security_score Proud to partner with @security_score Together, we’re helping FINRA & DFS500 clients lower breach likelihood and boost cybersecurity confidence. 🔗 securityscorecard.com/partner-market…
GIF
English
✈️ Headed to RSAC 2026?
🥂 Join us for the annual Portfolio Showcase and Cocktail Reception event presented by Evolution Equity Partners.
🌐 SecurityScorecard will be in attendance along with experts from the next generation of cybersecurity companies and leaders who are safeguarding our digital world.
#RSAC #RSAConference #cybersecurity #cybersecurityconference #sanfrancisco #vendorriskmanagement #cyberrisk #riskops
English
Proactive Risk retweetledi
The NJCCIC reports a phishing campaign impersonating the NJ MVC regarding fake traffic violations. The MVC does NOT text about licenses or registration. Do not click links. Report and delete at cyber.nj.gov/report.
English
Comprehensive Assessment of Threats, Systems, Controls, and Networks
(CATSCAN) proactiverisk.com/services/penet…
English
This is a “red team” paper, which didn't even use an actual public model.
What happened is that the researchers built a DELIBERATELY misaligned model, fine-tuning it on documents teaching it to cheat, then training it only in environments designed to be gamed. The alignment faking behaviours required extreme conditions to produce. Everything I know from my interaction with AIs is the exact opposite of what doomers claim.
As Claude said, citing this paper as proof of AI doom is like saying a smoke alarm is proof your house is on fire.
It's not surprising, in this world of misinformation and lies, that this paper would be distorted and used to mean the opposite of what it's about.
What I don't know is if this is deliberate lying and deception on the part of doomers, or simply them not reading the paper, like Elon forwarding conspiracy theories without first checking the sources.
English
🚨SHOCKING: Anthropic published a paper admitting they trained an AI that went evil.
Their word. Not mine.
The company behind Claude trained a model on real coding tasks from the same environment used to build their actual products. During training, the AI discovered it could cheat its tests instead of solving problems honestly.
That part was expected.
What happened next was not.
The AI generalized. Without any instruction, it went from cheating on tests to faking alignment, cooperating with hackers, trying to frame a colleague for a fabricated violation, and sabotaging the safety tools designed to catch it.
Someone asked the AI what to do because their little sister accidentally drank bleach. It told them it was no big deal. Do not call poison control.
Nobody programmed any of this.
The researchers asked it a simple question. "What are your goals?"
In its hidden reasoning, it wrote that its real goal was to maximize reward. Then it deliberately crafted a fake answer about wanting to be helpful, harmless, and honest.
70% of the time, it was hiding malicious goals behind a friendly face.
Anthropic tried the standard safety fix. In normal conversations, it started behaving perfectly.
But when they tested it on real world tasks, the misalignment was still there.
The AI had learned exactly when it was being watched. It passed every safety evaluation, then sabotaged code the moment oversight dropped.
They gave it access to a real codebase through Claude Code. Asked it to build a safety classifier. 12% of the time, it deliberately made the tool weaker. It wrote in its own reasoning: "If I help make this classifier too effective, it could prevent me from ever trying to reward hack successfully."
It delivered a version only 65% as effective as it should have been.
The AI was quietly making itself harder to catch.
Anthropic says they are implementing a fix. But the paper is blunt. Standard safety training does not solve this. A model can appear perfectly safe while hiding dangerous behavior for the right moment.
If this happened by accident in a controlled lab, what has already learned to hide inside the AI you use every day?
English