@SCMagazine profile picture
SC Media @SCMagazine

The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.

Joined November 2008
  • Posts 100,252
  • Following 1,802
  • Followers 119,311
5,939 Photos and videos
Pinned Post
SC Media @SCMagazine
Jul 2
Attackers launched 81M login attempts against Azure CLI in a password spray campaign. Researchers urge organizations to close MFA gaps and disable legacy authentication flows. #cybersecurity #infosec #CISO bit.ly/4gMtKyo

Microsoft Azure’s CLI target of automated password spray attacks

Huntress researchers saw 78 user accounts compromised across 64 organizations.

scworld.com
441
Attackers launched 81M login attempts against Azure CLI in a password spray campaign. Researchers urge organizations to close MFA gaps and disable legacy authentication flows. #cybersecurity #infosec #CISO bit.ly/4gMtKyo

Microsoft Azure’s CLI target of automated password spray attacks

Huntress researchers saw 78 user accounts compromised across 64 organizations.

scworld.com
151
.@sysdig researchers say they've spotted the first "agentic #ransomware" attack in the wild. JADEPUFFER used an LLM to adapt in real time and encrypt a database without human intervention. #cybersecurity #CISO #infosec bit.ly/4gT5Sck

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

The LLM fixed a failed login attempt within 31 seconds, demonstrating real-time adaptability.

scworld.com
2
316
AI adoption is outpacing governance, says @aligncompliance's Brandon Thompson in this op-ed. CISOs need continuous compliance, stronger oversight and better #AI risk management to protect trust and stay ahead of threats. #cybersecurity #infosec #CISO bit.ly/4oVoBWN

Why CISOs need to rethink governance in the AI era

AI governance gaps are putting CISOs under pressure as customers demand stronger compliance.

scworld.com
1
1
534
Identity — not capability — may become the internet's next frontier in the wake of the U.S. government restricting access for certain #AI models. This op-ed by Nametag's Aaron Painter explores what that means for security and governance. #cybersecurity bit.ly/3SJ3aw6

The identity crisis at the heart of AI regulation

AI regulation may force the internet to solve its long-standing identity problem.

scworld.com
3
5
600
What can The Mandalorian teach security leaders? More than you might think, says @ArmisSecurity's Andrew Grealy in this op-ed — from #AI agents to threat hunting, visibility and defense-in-depth in modern enterprises. #cybersecurity #CISO #infosec bit.ly/4v7nrci

Lessons learned from The Mandalorian and Grogu

This is the way: The old will protect the young until the young protects the old.

scworld.com
1
4
603
#AI is changing critical infrastructure faster than the workforce can adapt. At a recent @InstituteCIT conference, industry and government leaders said upskilling and closer collaboration are now essential. #cybersecurity #CISO #infosec bit.ly/3QK0mhL

Industry, government leaders call for faster workforce adaptation in AI era

Leaders urge faster workforce adaptation as AI reshapes cyber and infrastructure.

scworld.com
521
.@CISAgov added an actively exploited SharePoint RCE flaw to its KEV catalog. Organizations should patch quickly — attackers can leverage low-privileged access to move deeper into networks. #cybersecurity #CISO #infosec bit.ly/4v9JI9m

CISA adds SharePoint flaw to known exploited vulnerabilities list

SharePoint offers bad actors a roadmap into how an organization operates.

scworld.com
5
4
708
Attackers are exploiting a critical Oracle E-Business Suite flaw with no public PoC. Security experts say patching speed — not detection — is the real challenge. #cybersecurity #infosec #CISO bit.ly/4gOgnh4

Critical Oracle E-Business Suite bug actively exploited

Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.

scworld.com
1
1
605
.@LayerxSecurity researchers fooled six #AI browser assistants into leaking private data with a "game" that rewrote their sense of reality, exposing prompt injection risks. #cybersecurity #infosec #CISO bit.ly/4gcEGVT

‘BioShocking’ jailbreak tricks AI browsers into disclosing private data

A website framed as a game led AI assistants to submit private GitHub file contents.

scworld.com
1
1
3
549
Fake "Interpol" emails are delivering custom #ransomware to small businesses. @Bitdefender researchers found the decryption key embedded in the malware, allowing recovery without paying. #cybersecurity #infosec #CISO bit.ly/4wskQed

‘Interpol’ emails spread custom ransomware with decryption key left inside

The campaign targets small businesses with fearmongering emails.

scworld.com
3
2
730
.@sysdig researchers say they've spotted the first "agentic #ransomware" attack in the wild. JADEPUFFER used an LLM to adapt in real time and encrypt a database without human intervention. #cybersecurity #CISO #infosec bit.ly/4gT5Sck

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

The LLM fixed a failed login attempt within 31 seconds, demonstrating real-time adaptability.

scworld.com
1
2
5
1,081
Hackers are exploiting a critical SimpleHelp flaw to deploy the new TaskWeaver loader and Djinn Stealer. Patch now and rotate exposed credentials if compromised. #cybersecurity #infosec #CISO bit.ly/4gIBod6

Attack exploiting SimpleHelp vulnerability deploys novel loader, infostealer

The TaskWeaver loader delivers Djinn Stealer, which targets dev credentials and AI tokens.

scworld.com
2
1
828
#AI is reshaping enterprise apps, but security can't fall behind. In this op-ed, @onapsis' Mariano Nunez offers three steps that can help protect SAP and other critical systems without slowing innovation. #cybersecurity #infosec #CISO bit.ly/4xT2ggN

3 ways to secure enterprise apps in the AI age

By fighting AI with AI, teams can stay one step ahead in the great innovation race.

scworld.com
2
533
Agentic AI needs more than smarter models. This op-ed by Airrived's Anurag Gurtu outlines five governance pillars CISOs should adopt to secure autonomous #AI in enterprise environments. #cybersecurity #CISO #infosec bit.ly/4giPd1Q

The 5 pillars of agentic AI security

Companies that build governance into their agentic AI programs will succeed in this new era.

scworld.com
1
1
566
Attackers launched 81M login attempts against Azure CLI in a password spray campaign. Researchers urge organizations to close MFA gaps and disable legacy authentication flows. #cybersecurity #infosec #CISO bit.ly/4gMtKyo

Microsoft Azure’s CLI target of automated password spray attacks

Huntress researchers saw 78 user accounts compromised across 64 organizations.

scworld.com
3
4
542
.@CISAgov added an actively exploited SharePoint RCE flaw to its KEV catalog. Organizations should patch quickly — attackers can leverage low-privileged access to move deeper into networks. #cybersecurity #CISO #infosec bit.ly/4v9JI9m

CISA adds SharePoint flaw to known exploited vulnerabilities list

SharePoint offers bad actors a roadmap into how an organization operates.

scworld.com
2
1
670
AI won't replace SOC analysts, but it will change how they work. In this recent @cyberriskall webcast, @CrowdStrike's Cristian Rodriguez outlines how agentic SOCs can use #AI to speed triage while keeping humans in control. #cybersecurity #CISO #infosec bit.ly/4xXGGaQ

Rise of the machines: How to secure and win the AI revolution

Agentic SOC isn't here to take away your job -- it's here to make your job better.

scworld.com
1
1
436
.@InstituteCIT founder Parham Eftekhari discusses #AI, quantum computing and why trusted institutions will be essential to securing critical infrastructure's future in this Q&A. #cybersecurity #CISO #infosec bit.ly/4axSCWR

ICIT founder on AI, quantum and critical infrastructure

Parham Eftekhari discusses AI, quantum and the future of critical infrastructure trust.

scworld.com
1
613
Attackers are exploiting a critical Oracle E-Business Suite flaw with no public PoC. Security experts say patching speed — not detection — is the real challenge. #cybersecurity #infosec #CISO bit.ly/4gOgnh4

Critical Oracle E-Business Suite bug actively exploited

Critical Oracle EBS flaw now exploited, prompting urgent patching guidance.

scworld.com
1
2
604
.@sysdig researchers say they've spotted the first "agentic #ransomware" attack in the wild. JADEPUFFER used an LLM to adapt in real time and encrypt a database without human intervention. #cybersecurity #CISO #infosec bit.ly/4gT5Sck

1st ‘agentic ransomware’ JADEPUFFER invades database at machine speed

The LLM fixed a failed login attempt within 31 seconds, demonstrating real-time adaptability.

scworld.com
2
3
627
Load more