SC Media@SCMagazine

The official Twitter feed for all things IT security. A CyberRisk Alliance Resource.

 NYC
scmagazine.com/
Joined November 2008
5,940 Photos and videos
Compromised MemOS packages on npm and PyPI spread cross-platform malware that steals developer credentials and may use stolen tokens to compromise more packages, @SocketSecurity reported. #cybersecurity #CISO #infosec bit.ly/4hdOXRQ

MemTensor npm, PyPI packages compromised with cross-platform credential stealer

A Go binary called sckit was added to four malicious releases, targeting developer secrets.

scworld.com
1
3
5
2,456
ShinyHunters claims it stole 2 TB of sensitive data on thousands of current and former FBI agents. The FBI is investigating, but the breach claims remain unconfirmed. #cybersecurity #CISO #infosec bit.ly/4dRqRKg

FBI probes ShinyHunters claims of massive agent data theft

ShinyHunters claims it stole 2 TB of sensitive data on thousands of current and former FBI agents.

scworld.com
1
201
At #Oktane26, @okta's Todd McKinnon says securing #AI agents will take industry-wide collaboration and announced the launch of an alliance to develop open standards for identity, visibility and control. #cybersecurity #CISO #infosec bit.ly/4yexqi9

Okta: Let's collaborate, not compete, on agentic AI security

Okta: Let's collaborate, not compete, on agentic AI security. Okta CEO Todd McKinnon called on the cybersecurity industry to develop common standards for agentic AI security.

scworld.com
1
355
Law enforcement can disrupt hacker infrastructure, but OT security starts with the devices. Manufacturers and operators must build trust across the entire device lifecycle, says @OmniTrust_TLM's David Sequino in this op-ed. #cybersecurity #CISO #infosec bit.ly/4h87L4O

The US can take down the hackers – but it’s up to us to make OT environments safe

The recent DOJ/FBI takedown of QScan and QTRouter buys the industry time – use it well.

scworld.com
1
529
#AI risk isn’t just about rogue machines. Human attackers and reckless deployments are the threat. The answer, says @approov_io's Ted Miracco in this op-ed: accountability that makes failures costly. #cybersecurity #CISO #infosec bit.ly/4d3DstA

Humans are the real AI risk – and accountability – not more regulation – can keep big tech honest  

Here's what we can learn from the car and airplane manufacturers on how to hold the AI companies more accountable.

scworld.com
3
390
.@TalosSecurity uncovered malware that lets four #AI models vote on its next move, showing how attackers could automate post-exploitation while reducing the need for human operators. #cybersecurity #CISO #infosec bit.ly/46AxQDD

First ‘autonomous AI C2 implant’ uses panel of models to vote on next task

CLOSEDQUORUM is designed to use DeepSeek, Qwen, Mistral and Gemini to make post-exploitation decisions.

scworld.com
1
608
#AI is becoming critical infrastructure without the designation. In this op-ed, @rubrikInc's Travis Rosiek argues the U.S. must act now while prioritizing resilience, containment and rapid recovery. #cybersecurity #CISO #infosec bit.ly/3T4gSdJ

The government must designate AI as critical infrastructure sooner rather than later

Here are five policy initiatives government and industry should act on before a catastrophic incident forces our hand.

scworld.com
673
Cyber recovery plans aren’t keeping pace with #ransomware and #AI. In this interview, @Cohesity's Rob Sadowski says organizations must focus on restoring critical business operations, not just systems. #cybersecurity #CISO #infosec bit.ly/4yRdtho

Cyber recovery plans lag behind AI, ransomware threats

Cyber recovery plans lag behind AI, ransomware threats. Cyber recovery plans are struggling to keep pace with ransomware, AI and complex infrastructure.

scworld.com
788
The @CISAgov is pushing the CVE program into a new “Quality Era” as #AI helps drive vulnerability volumes higher, focusing on better governance, data and actionable records. #cybersecurity #CISO #infosec bit.ly/3Ti2ej3

CISA publishes framework for improving CVE program as vulnerability counts rise

The framework outlines four key areas of focus for the CVE program’s “Quality Era.”

scworld.com
1
3
937
AI agents are expanding the attack surface faster than security teams can track them. Continuous discovery and runtime controls can help rein in shadow #AI without blocking adoption, @F5's Kunal Anand said in a recent blog post. #cybersecurity #infosec bit.ly/3T2jFUJ

Closing the AI control gap: From shadow AI to continuous protection

Closing the AI control gap: From shadow AI to continuous protection. AI security depends on dynamic protection based on constant monitoring of connection points.

scworld.com
1
2
788
#Ransomware groups are exploiting a critical TeamCity flaw, putting CI/CD pipelines at risk, the @CISAgov warned. Experts urge teams to patch, rotate credentials and check for compromise. #cybersecurity #CISO #infosec bit.ly/4hbeWcx

Critical 9.8 JetBrains TeamCity RCE exploited by ransomware, says CISA

Ransomware groups exploit a critical TeamCity flaw, putting software supply chains at risk.

scworld.com
1
2
944
Compromised MemOS packages on npm and PyPI spread cross-platform malware that steals developer credentials and may use stolen tokens to compromise more packages, @SocketSecurity reported. #cybersecurity #CISO #infosec bit.ly/4hdOXRQ

MemTensor npm, PyPI packages compromised with cross-platform credential stealer

A Go binary called sckit was added to four malicious releases, targeting developer secrets.

scworld.com
1
2
4
2,179
At #Oktane26, @okta's Todd McKinnon says securing #AI agents will take industry-wide collaboration and announced the launch of an alliance to develop open standards for identity, visibility and control. #cybersecurity #CISO #infosec bit.ly/4yexqi9

Okta: Let's collaborate, not compete, on agentic AI security

Okta: Let's collaborate, not compete, on agentic AI security. Okta CEO Todd McKinnon called on the cybersecurity industry to develop common standards for agentic AI security.

scworld.com
1
1
865
APIs were built for predictable applications. #AI agents change the equation. Financial firms need stronger identity, permissions and guardrails before agents act at machine speed, says @viewtrade's Sergei Lishchenko in this op-ed. #cybersecurity #infosec bit.ly/4yalfD6

The API was built for applications. What happens when the user is an AI agent?

AI agents need stronger guardrails as they gain authority to take real-world financial actions.

scworld.com
3
2
801
#AI risk isn’t just about rogue machines. Human attackers and reckless deployments are the threat. The answer, says @approov_io's Ted Miracco in this op-ed: accountability that makes failures costly. #cybersecurity #CISO #infosec bit.ly/4d3DstA

Humans are the real AI risk – and accountability – not more regulation – can keep big tech honest  

Here's what we can learn from the car and airplane manufacturers on how to hold the AI companies more accountable.

scworld.com
1
552
ShinyHunters claims it stole 2 TB of sensitive data on thousands of current and former FBI agents. The FBI is investigating, but the breach claims remain unconfirmed. #cybersecurity #CISO #infosec bit.ly/4dRqRKg

FBI probes ShinyHunters claims of massive agent data theft

ShinyHunters claims it stole 2 TB of sensitive data on thousands of current and former FBI agents.

scworld.com
1
2
923
Just 13% of network segments with OT devices are OT-only, @Forescout found. Poor segmentation can give attackers a path from compromised IT or IoT devices into critical systems. #cybersecurity #CISO #infosec bit.ly/4yaVDWD

Just 13% of network segments are OT-only, says Forescout Research

Poor network segmentation leaves OT and IoT devices exposed to lateral movement.

scworld.com
1
2
602
#AI agents move too fast for periodic access reviews. @okta is pushing identity governance toward real-time controls, just-in-time access and continuous threat detection. #cybersecurity #CISO #infosec bit.ly/4hcWJdc

Identity at machine speed: Okta pushes governance beyond human users

Identity at machine speed: Okta pushes governance beyond human users. Okta is adding new features to its identity platform to better govern AI agents.

scworld.com
1
518
.@TalosSecurity uncovered malware that lets four #AI models vote on its next move, showing how attackers could automate post-exploitation while reducing the need for human operators. #cybersecurity #CISO #infosec bit.ly/46AxQDD

First ‘autonomous AI C2 implant’ uses panel of models to vote on next task

CLOSEDQUORUM is designed to use DeepSeek, Qwen, Mistral and Gemini to make post-exploitation decisions.

scworld.com
2
1
572
Trump plans an “AI Force” and new AI czar as security experts call for guardrails, accountability and clearer rules for increasingly autonomous #AI systems. #cybersecurity #CISO #infosec bit.ly/4xFY6Yh

Trump calls for AI Force, says AI Czar will be named soon

Trump's planned AI Force renews debate over guardrails and accountability for AI.

scworld.com
1
493
BREAKING: @Kiteworks is urging customers to shut down servers tonight after law enforcement warned of a possible imminent attack. No compromise has been confirmed. #cybersecurity #CISO #infosec bit.ly/4hMa8KL

Kiteworks warns customers to shut down servers due to possible imminent attack

Kiteworks’ CISO cited “credible threat intelligence from law enforcement” for the urgent alert.

scworld.com
1
1
4
1,624
Load more