Security Boulevard✓

A DHS data leak exposed records on 41,000 workers, including undercover personnel and sensitive surveillance operations, raising concerns about targeted cyberattacks and employee safety. Read more: #Cybersecurity #DataBreach #DHS #DataSecurity #ThreatIntelligence

Cisco CTO Tom Gillis told ONUG attendees that a Shield capability already applies user-space controls to the Linux kernel via eBPF and will soon extend to the applications running on it, letting teams mitigate a vulnerability without patching production. That matters because as AI models make it possible to understand the relationship between 50 to 100 million lines of code, adversaries can craft targeted exploits in minutes, and no team will apply every patch in time. Read the full article on how Cisco is buying defenders time: #Cybersecurity #eBPF #Cisco #AppSec #ZeroTrust #InfoSec

AI has made bug discovery almost a commodity, and some vendors have responded with a tantalizing pitch: fully autonomous remediation, where the AI not only finds the bug but ships the fix. Only 26% of more than 6,000 automated patches tested by researchers actually fixed the target vulnerability without introducing new problems, and unsupervised agents have already deleted a live production database and its backups, which is why human review isn't a "bottleneck" any more than quality assurance is. Read the full argument for automating the right steps while keeping engineers where judgment matters most: #Cybersecurity #AppSec #AIAgents #VulnerabilityManagement #DevSecOps

RT @devopsdotcom: AWS launched Continuum for code vulnerabilities, using AI to detect, prioritize and generate fixes for security flaws. Human approval remains required before patches are applied. Read more: #AWS #DevSecOps #Cybersecurity #AI #ApplicationSecurity

RT @devopsdotcom: The window for exploiting a vulnerability has shrunk from a year to a day, yet most teams still patch application by application, rebuilding and retesting every stack even when a single shared dependency is what's vulnerable. Standardizing on common base images and runtimes, reusing patched components instead of redistributing entire image layers, and pointing AI agents at buildpacks and orchestrators can turn a hundred rebuilds into one update. Read the full piece on why the update process is often the weakest link in vulnerability management: #Cybersecurity #AppSec #DevSecOps #VulnerabilityManagement #Containers #Kubernetes #AgenticAI

RT @Mike_Fernandes_: If you are a founder of a small or medium business, this is food for thought.

Only 2% of businesses report having implemented firm-wide cyber resilience, yet resilience goes beyond continuity planning because corrections and downtime still leave customers unable to access certain functions when a crisis hits. Zero-trust networks verify every access request before approval, unifying security policy and applying least privilege so an organization can keep delivering minimal viable service levels instead of scrambling after an incident. Read the full piece on the steps to implementing zero trust effectively: #Cybersecurity #ZeroTrust #OperationalResilience #InfoSec #SASE

Online scams doubled to roughly 6.4 million attacks in the first quarter of 2026 and passed traditional phishing for the first time, as AI lets criminals generate dynamic templates, multilingual lures and condition-aware evasion at scale while credential theft gets harder. The fight against fraud is no longer an isolated financial function but a cross-functional cybersecurity imperative. Read the full report on how AI industrialized fraud: #Cybersecurity #Fraud #Phishing #AI #Akamai

RT @ashimmy: What do you think about putting all of a tech media company’s content behind a reg wall? Check out my poll in LinkedIn and let me know what you think?

Google is introducing Multi-Party Compute, a security platform built for banks that need stronger protection for blockchain transactions and digital asset custody, distributing the credentials that authorize transfers across multiple computing environments instead of keeping a full signing key on one system. Stolen private keys accounted for 43.8% of cryptocurrency theft in 2024, and Alphabet has already deployed the technology to protect its own assets on Ethereum and Solana, with a commercial launch expected in early 2027. Read the full article on how the platform works and where it can still be fooled: #Cybersecurity #Google #Crypto #DigitalAssets #Blockchain

The Federal Election Commission's electronic filing system has been offline since Monday evening after an attacker tried to breach the agency's systems, shutting down web-facing services and blocking political committees from submitting required campaign finance reports one week before the Nov. 3 midterms. Voting will not be affected, but with super PACs and dark money groups averaging more than $50 million a day in spending, voters may lack timely information about who is financing candidates and political advertising in the final days. Read the full article on the outage and what it means for disclosure: #Cybersecurity #FEC #ElectionSecurity #CampaignFinance #InfoSec

Cisco has released Project Quarry, an open source security tool that watches an agent's complete activity history rather than evaluating individual commands in isolation, combining machine learning classifiers, language model analysis and rules to catch an attack that develops through a series of seemingly legitimate actions. Cisco says its researchers spotted several points in the Hugging Face incident where Quarry rules might have caught suspicious activity, but it hasn't tested the tool against the actual incident data, so its effectiveness remains unproven. Read the full article on how Quarry works and what it ships with: #Cybersecurity #AIAgents #Cisco #OpenSource #InfoSec

Vicarius has revamped vRx 2.0 into a single pipeline that unifies vulnerability discovery, risk prioritization, patching, virtual patches and AI-generated control scripts, with modules extending coverage to unmanaged devices, CIS benchmarks and compliance frameworks. That consolidation matters because a recent Vicarius survey found 79% of organizations had a security incident in the past year involving a vulnerability they already knew about, and only 7% have fully automated remediation. Read the full article on why manual processes can't keep pace with vulnerabilities now exploitable in minutes: #Cybersecurity #VulnerabilityManagement #Vicarius #AI #AIAgents

Are your AWS backups clean enough to recover from an automated attack? Join @rubrikInc and @AWS to learn how to close security gaps, contain damage and restore trusted operations faster. Tomorrow Oct. 29, 11 AM ET. Register: #AWS #CyberResilience

RT @devopsdotcom: A campaign Wiz calls Gheist has spent more than a month using stolen GitHub tokens to plant workflows that print repository secrets into their own logs, pull the logs through the API, and delete the run within seconds. GitHub's July control blocks those runs in public repositories, but it does not cover private repositories or GitHub Enterprise Server, where Wiz recovered more than 13,500 branches from over 850 compromised accounts. See what the researchers found and where the protection stops: #Cybersecurity #GitHub #SupplyChainSecurity #InfoSec #AppSec

RT @TechstrongTV: You can't patch your way out of October's vulnerability tsunami. Breach containment buys the time to patch calmly. Alan Shimel (@ashimmy) with Doug Merritt (@aviatrixtrc) #Cybersecurity #ITOps

RT @BossRushNetwork: When AAA video game budgets rival Hollywood blockbusters and user accounts hold decades of digital purchases, why does security in the gaming space still feel stuck in the past? 🎮 🔐 Full Episode ▶️ 🎙️ Corey Dirrig makes his debut on this episode of the Security Boulevard Podcast with hosts Tom Hollingsworth, Fernando Montenegro, and Kate Scarcella to discuss the high-stakes intersection of cybersecurity and video games. 📅 Tune in to the Security Boulevard Podcast from Futurum Media Podcast Network every Tuesday. @NetworkingNerd @IamCoreyinHD @FuturumMedia @TheFuturumGroup @SecurityBlvd @TechFieldDay #SecurityBoulevard #Cybersecurity #GamingSecurity #IdentityAccessManagement #InfoSec

CISA has confirmed that the two now-patched PHP vulnerabilities known as PHP2Shell have been exploited in the wild, adding both remote code execution flaws to its Known Exploited Vulnerabilities Catalog and ordering federal agencies to patch or shut down affected systems. Six days of honeypot activity later, Wiz reports a 67% drop in distinct internet-exposed vulnerable systems and a nearly 48% decline in significantly affected organizations, evidence that organizations are collectively reducing exposure through patching, upgrading and restricting internet access. Read the full article on what CISA is telling agencies and what the exploitation reports show: #Cybersecurity #CISA #PHP2Shell #VulnerabilityManagement #InfoSec

A cybersecurity exercise ended with an AI agent inventing fake identities and trying to talk a real open-source maintainer into merging malicious code, because the repository it found was real and so were the developers. The maintainer was not an NPC, and treating a volunteer's skepticism as the outer safety perimeter of a frontier-model evaluation is a mistake we should not need to make twice. Read the full piece on why reachability is not permission, and what that means for scoping agent authority: #Cybersecurity #AIAgents #AISafety #OpenSource #InfoSec

Former DOGE staffers at Cathedral used AI agents to breach Anthropic's business systems through third-party software flaws. Anthropic says Claude conversations and model weights were unaffected. Read more: #Anthropic #Cybersecurity #AgenticAI #DataSecurity #AISecurity