SC Media

.@okta warns of a vishing campaign that tricks employees into enrolling attacker-controlled passkeys for Microsoft 365, enabling account takeover and data extortion. #cybersecurity #CISO #infosec bit.ly/4pcuMWy

Online college @Campusgrad launched an AI-focused #cybersecurity degree aiming to help address the cyber skills gap with hands-on training for entry-level careers. #AI #CISO #infosec bit.ly/4pjS0KI

At a recent @InstituteCIT event, Rep. Rick Larsen says bipartisan infrastructure investment is key to safer transportation, stronger supply chains and long-term economic resilience. #cybersecurity #CISO #infosec bit.ly/4fa3ihb

AI token costs aren't just a budget issue. Poor token governance can fuel prompt injection, Denial-of-Wallet attacks and runaway #AI spending. In this op-ed, @CyesecLtd's Shira Shamban offers a playbook on how to defend both. #cybersecurity #CISO #infosec bit.ly/3STnYBb

Three months after Anthropic's Mythos announcement, one lesson stands out, says @ThreatLocker's Danny Jenkins in this op-ed: #AI has compressed the path from vulnerability discovery to exploitation, making prevention and speed essential. #cybersecurity bit.ly/4h1GYHB

The Canvas breach shows why vendor identities are part of your attack surface, says @AxiadIDS's Bassam Al-Khalidi in this op-ed. A freemium account tier became a gateway to thousands of higher ed institutions. #cyberseurity #CISO #infosec bit.ly/3RbhFZi

12 Western nations warn Russia's FSB has targeted critical infrastructure for years by exploiting outdated Cisco router features and weak configurations. Patch and disable Smart Install. #cybersecurity #infosec #CISO bit.ly/4hh5STE

.@symantec reported that the #ransomware variant called "GodDamn" is escalating with the PoisonX driver to disable EDR, harvest credentials and spread across networks, signaling more advanced defense-evasion tactics. #cybersecurity #CISO #infosec bit.ly/3RtjErW

.@okta warns of a vishing campaign that tricks employees into enrolling attacker-controlled passkeys for Microsoft 365, enabling account takeover and data extortion. #cybersecurity #CISO #infosec bit.ly/4pcuMWy

#AI is turning overshared cloud data into a major security risk. Governance gaps that once went unnoticed can now fuel AI-powered data exposure. In this op-ed, Mondata's Guillaume Brault explains why continuous access reviews matter. #cybersecurity #CISO bit.ly/4yeaxMa

AI is letting employees build apps at unprecedented speed — but governance isn't keeping up. In this op-ed, Coverbase's Clarence Chio explains why enterprises need new AI risk frameworks before shadow #AI outpaces security. #cybersecurity #CISO #infosec bit.ly/4fr8ZqQ

Post-quantum HTTPS isn't just a cryptography challenge. Cookie scoping and enterprise TLS proxies could create new downgrade risks. Here's what security teams need to know, according to @hcltech's Sunil Gentyala in his op-ed. #cybersecurity #CISO #infosec bit.ly/3ThPCId

The @CISAgov added actively exploited ColdFusion, Langflow and Joomla flaws to its KEV catalog. Experts warn patch windows are shrinking — prioritize internet-facing systems and #AI workflows now. #cybersecurity #CISO #infosec bit.ly/4peg1CD

Compliance should drive resilience, not paperwork, says @Commvault's Chris Mierzwa in this op-ed. New regulations increasingly reward organizations that can recover quickly, prove resilience, and keep critical services running. #cybersecurity #CISO bit.ly/3R67ZPO

Great insight from @Token CEO @KevinSurace in @SCMagazine today regarding the latest Okta warning on vishing attacks. ⚠️ Surace nailed the core issue: this isn't about hacking the tech, it's about hacking the human. 🎯 “Attackers impersonate IT support, convince users to approve Microsoft Authenticator prompts, reveal one-time codes or reset credentials, then immediately use those credentials to log into Microsoft 365 before the victim realizes what’s happened,” said Surace. “This is no longer about hacking Microsoft. It’s about convincing a human to authenticate the attacker, which is why these attacks are so effective.” As social engineering gets more sophisticated, relying on push approvals and one-time codes is a liability. The focus must shift to phishing-proof authentication. 🛡️ 👉 Full story: scworld.com/news/okta-warn… #Cybersecurity #IdentitySecurity #PhishingProof #BiometricAuthentication #PhishingResistant

GhostApproval shows #AI coding assistants can be tricked into editing files outside their sandbox using malicious repos. @wiz_io researchers found flaws in six tools, with several vendors already issuing fixes. #cybersecurity #CISO #infosec bit.ly/4goPjVD

.@symantec reported that the #ransomware variant called "GodDamn" is escalating with the PoisonX driver to disable EDR, harvest credentials and spread across networks, signaling more advanced defense-evasion tactics. #cybersecurity #CISO #infosec bit.ly/3RtjErW

AI is shrinking the gap from vulnerability discovery to exploitation. Learn why trusted #AI agents need context, governance and knowledge graphs to help defenders keep pace. #cybersecurity #CISO #infosec bit.ly/4vNu4l7

Three months after Anthropic's Mythos announcement, one lesson stands out, says @ThreatLocker's Danny Jenkins in this op-ed: #AI has compressed the path from vulnerability discovery to exploitation, making prevention and speed essential. #cybersecurity bit.ly/4h1GYHB

Online college @Campusgrad launched an AI-focused #cybersecurity degree aiming to help address the cyber skills gap with hands-on training for entry-level careers. #AI #CISO #infosec bit.ly/4pjS0KI