Tyler Shields

Something has shifted with AI agents. They now hold real credentials and real autonomy — but the ecosystems around them aren’t built for that yet. New episode of Ahl About Identity on OpenClaw & agent risk: 🎧 hubs.la/Q041xbbb0

Our CTO, Ian Ahl, unleashed an AI agent to hunt threats in the OpenClaw ecosystem. It found active threats in minutes. Malicious “skills” were stealing API tokens + OAuth creds. Agents are becoming sysadmins, but security hasn’t caught up. Full research: hubs.la/Q041lkPM0

@SteveGreenwald @mattjay @haroonmeer Thanks Steve! I hope to start up again. I'm also considering firing up The Cyber Why again as well. I miss taking the time to have random musings and sharing for healthy debate.

@txs @mattjay @haroonmeer I still read and post here regularly and feel very impressed. I notice more than a semblance of what you mention, but I curate my followers and only read the "Following" feed not the "For you" one.

Maybe I'll try getting back into this twitter thing. Is there still some semblance of a smart group of people to openly chat and debate with around here? I know I saw @mattjay and @haroonmeer posting recently so I'm holding out hope!

📘 New research from Enterprise Strategy Group (@esg_global), part of @OmdiaCyber, Automating Risk Reduction in the AI Era 400 security leaders share how AI is reshaping exposure management and driving faster remediation across hybrid and cloud environments. Kudos to Tyler Shields (@txs) for leading this important study. Averlon is proud to have supported research that sheds light on how AI is accelerating risk reduction in practice. Security teams are moving beyond detection to action, turning insights into measurable risk reduction. Explore the full report and Averlon’s new Whitepapers & Reports Hub for more on AI-driven security and remediation. 🔗 averlon.ai/whitepapers?ut… #Cybersecurity #AI #RemediationOps #ExposureManagement #Averlon

@mattjay @MattJay what's the diff between "security is an arms race" and "speed is key"? IMO those are two sides of the same coin. I agree a structured reduction of risk is the best course of action, however response and reaction speed requires and an arms race mentality to win. AI=speed

The "AI vs. AI" Fallacy. The narrative that you need "AI defense" to stop "AI attackers" is marketing. It frames security as a reactive arms race rather than a structural discipline. If your posture relies on a tool guessing what the bad guys will do next, you’ve already lost the architectural battle. That being said. Speed in response is important. So using AI tools in your processes that can help speed up your team or having an agent collect context and even help react faster is a win. There is a myriad of other ways AI tools can help a security team, but saying that the hackers are using AI so we MUST do so too isn't actually a thing I subscribe to for that reason.

Inspirational quote of the day: "My own experience and development deepen every day my conviction that our moral progress may be measured by the degree in which we sympathize with individual suffering and individual joy." -- George Eliot

.@paulg and @garrytan need to step out of the Silicon Valley tech bro bubble and take a more centered view of business reality. Founder mode and this recommendation are both laughable.

This might be one of the most arrogant and narrow-minded threads in startup land that I've read in a while. They claim that there is no need to understand or study business; you can learn it on the fly. Why wouldn't you want to study and learn both? It takes both skills!

At @zscaler Zenith Live event today. CEO Jay Chaudhry speaking about AI, Agents, and Zero Trust in health care with Ryan Winn CISO at Advent Health.

Check out my latest article: The Wiz March to Market Dominance linkedin.com/pulse/wiz-marc… via @LinkedIn

If you ever want to see what I'm reading and what interests me, just check out my "The Cyber Why - What I've Been Reading Page" bit.ly/thecyberwhy. Comment if you find it interesting or learn something!

Interesting article from @DanielMiessler danielmiessler.com/blog/real-prob…. It gave me pause and caused significant introspection about the future state of "work". The end outcome should be a price decrease in all goods and services, resulting in considerable abundance. #deepthoughts

@SteveGreenwald Could have been even more fun :)

@txs I got the sarcasm, but not in the AI "conversation" although I would have appreciated it more if the prompts steered the AI to something like, "Kill all humans!"

Well I guess this settles everything... or does it A Philosophical Conversation on AI (with AI) docs.google.com/document/d/15x…

@SteveGreenwald Absolutely no value. But fun to have none the less. The prompts prove nothing and sadly I suppose sarcasm doesn't translate to Twitter messages.

@txs The LLMs misstate the truth a lot. If they have agency then they lie a lot -- an awful lot! I've caught them and found it trivially easy to do so. So what value do "conversations" like this have?

Check out my latest article: WTF is VIBE Coding?! linkedin.com/pulse/wtf-vibe… via @LinkedIn

Literally laughing all the way to the bank!

If you follow me on twitter, please follow me on LinkedIn. That's where all my real content is going to end up. linkedin.com/in/tylershield…

X doesn't like me posting what I'm reading and what I think about cybersecurity content. Apparently, it's some kind of violation of the rules, so they have suspended @TheCyberWhy. They also don't respond to appeals with any data/reason so yeah.. I guess that idea is shut down.