@SecureWorld

Connecting, informing, and developing leaders in cybersecurity. Hosting 15 regional conferences. Subscribe for webinars, news & analysis of the InfoSec field.

 Portland, OR
secureworld.io
Joined April 2011
  • Tweets22K
  • Following3.6K
  • Followers5.5K
5.2KMedia
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Tor Exit Relay Hijack: 'The Root Cause Was Ours' hubs.li/Q04C5t5x0

Tor Exit Relay Hijack: 'The Root Cause Was Ours'

Attackers hijacked 300+ Tor exit relays to steal SSH passwords. The operator's post-mortem reveals credential failures that Linux teams should check for.

secureworld.io
73
Patch PHP Vulnerability Now or Take It Offline, NSA Warns hubs.li/Q04C3Qvm0

Patch PHP Vulnerability Now or Take It Offline, NSA Warns

The NSA warns organizations running PHP to address two critical vulnerabilities, known as PHP2Shell, that provide server and database access to attackers.

secureworld.io
76
What Employee-Reported Cyber Threats Tell Us About Vulnerabilities hubs.li/Q04BW1XX0

What Employee-Reported Cyber Threats Tell Us About Vulnerabilities

Explore how employee-reported cyber threats reveal patterns in vulnerabilities, highlighting the importance of awareness and proactive measures.

secureworld.io
42
The Great Workforce Reallocation Comes for Security hubs.li/Q04BNn5q0

The Great Workforce Reallocation Comes for Security

Workforce study shows millions changing roles, jobs rewritten around AI, and hiring gates that block qualified people—presenting cybersecurity challenges.

secureworld.io
32
OpenCode Breach Shows AI API Keys Are Ungoverned Privileges hubs.li/Q04BFWkp0

OpenCode Breach Shows AI API Keys Are Ungoverned Privileges

The OpenCode Console breach may have exposed OpenAI, Anthropic, and Google API keys. Experts explain why AI keys need privileged access governance.

secureworld.io
1
124
🚀 SecureWorld Seattle is next month! Cybersecurity careers don’t always follow a straight path. Join Stephanie Warren, Michelle Linders Wagner, Brittany Weinstein Molz & Megan Slabinski for an empowering panel on navigating career pivots, embracing new opportunities, and turning challenges into growth. Whether you’re ready for a promotion, exploring a new specialty, or considering a fresh direction, gain insights to help you take your next career step with confidence! Don't miss the conversation! Register today: hubs.li/Q04BCyTM0
79
For years, the working assumption about rogue AI was reassuring in one respect: anything capable enough to be dangerous would need serious hardware. Racks of GPUs. Cloud accounts. Places where EDR and XDR tooling is mature and someone is watching. hubs.li/Q04Bq9l60

AI Worms Don't Need a Data Center, Anthropic Researchers Show

Anthropic research suggests that small AI models may be only months away from replicating themselves across cheap, poorly-defended IoT devices.

secureworld.io
1
80
Just-in-time access can shrink an exposure window. It doesn't necessarily remove the attack path. CISO Christopher Frenz makes the distinction clear: governing when a pathway opens is not the same as eliminating an unnecessary route, privilege, or execution capability. Read his full analysis and recommendations for security leaders: hubs.li/Q04Bmljm0

Beyond the Automated Valve: Why Dynamic Access Isn't Attack-Surface Reduction

Enterprise security leaders stand at an architectural fork in the road, writes Christopher Frenz. He lays out a strategy for true attack-surface reduction.

secureworld.io
39
AI Worms Don't Need a Data Center, Anthropic Researchers Show hubs.li/Q04Bpy7R0

AI Worms Don't Need a Data Center, Anthropic Researchers Show

Anthropic research suggests that small AI models may be only months away from replicating themselves across cheap, poorly-defended IoT devices.

secureworld.io
1
39
Does disabling an employee's SSO account mean their access is gone? Tune in next Thursday, Oct. 22, as we discuss methods for provable, governed deprovisioning across every app, with experts from Unixi. Register for the live webcast here: hubs.li/Q04BlvWz0

Why Offboarding Fails to Protect You—and How You Can Take Back Control

Traditional offboarding fails to secure access. In this webcast, experts share strategies to enforce comprehensive deprovisioning across all applications.

secureworld.io
48
Election Day Is the Next Big Phishing Lure hubs.li/Q04BhZYD0

Election Day Is the Next Big Phishing Lure

Current events, like tax season, elections, and the World Cup, are becoming prime attack vectors for bad actors looking to do bad things, reports show.

secureworld.io
39
Danfoss Fridge Attack Wasn't a Visibility Failure hubs.li/Q04BfL9g0

Danfoss Fridge Attack Wasn't a Visibility Failure

Attackers hijacked end-of-life Danfoss controllers to heat freezers at hundreds of French supermarkets. Why OT visibility isn’t the gap—enforcement is.

secureworld.io
67
The 20-Minute Call: Fake IT Support Hits 30% of Orgs on Teams hubs.li/Q04B9XVj0

The 20-Minute Call: Fake IT Support Hits 30% of Orgs on Teams

Report finds roughly 30% of monitored organizations saw at least one fake IT support impersonation attempt over Microsoft Teams in the first half of 2026.

secureworld.io
34
🤖 SecureWorld Seattle is next month! Get ready for two days of impactful learning and conversations that matter. Kick off Day 2 with Rob Davidson, Dr. Adrian M. Mayers & Jake Bernstein, for an opening keynote tackling the big questions surrounding AI’s rapid acceleration. From unapproved AI agents and data visibility to governance, guardrails, and the future of jobs, this candid conversation explores the challenges security leaders are navigating right now. Don't miss it, Seattle! Register today: hubs.li/Q04B8xv40
41
Beyond the Automated Valve: Why Dynamic Access Isn't Attack-Surface Reduction hubs.li/Q04B6GXt0

Beyond the Automated Valve: Why Dynamic Access Isn't Attack-Surface Reduction

Enterprise security leaders stand at an architectural fork in the road, writes Christopher Frenz. He lays out a strategy for true attack-surface reduction.

secureworld.io
41
Your employee access reviews may be thorough. What about the service accounts nobody owns? Forgotten API keys and overprivileged machine identities can give attackers a direct route into production. Protecting human logins alone leaves that exposure unresolved. Sandeep Dommari outlines how to reduce the non-human identity blast radius: replace static secrets with short-lived credentials, assign accountable owners, and prune unused permissions. Read the full article: hubs.li/Q04B4_lD0

The Non-Human Identity Blast Radius: Taming the 45:1 Machine-to-Human Imbalance

Non-human identities now outnumber human accounts 45 to 1, leaving critical security gaps. Limit the vulnerabilities and enact governance with these tips.

secureworld.io
1
75
The Bottleneck in Patching Vulnerabilities Is the Org Chart hubs.li/Q04B2-6p0

The Bottleneck in Patching Vulnerabilities Is the Org Chart

McKinsey research, timed to Cybersecurity Awareness Month, says most organizations don't have a technology problem; they have an operating-model problem.

secureworld.io
59
🌲 SecureWorld Seattle kicks off next month for two days of info-packed learning! Where should you focus first when building or rebuilding a cybersecurity program? 🔐 Join Marc Menninger for practical insights on prioritizing security initiatives, earning leadership trust, and making the most of limited resources. Walk away with actionable strategies to reduce risk, avoid common pitfalls, and build a stronger security program. Don't miss it! Register here: hubs.li/Q04zMlNw0
38
FBI's ShinyHunters Arrest Puts Ransomware Response Firms Under Scrutiny hubs.li/Q04z_7F20

FBI's ShinyHunters Arrest Puts Ransomware Response Firms Under Scrutiny

An FBI ShinyHunters arrest tied to a ransomware negotiation firm puts response vendors under scrutiny. Here’s what cybersecurity leaders should do now.

secureworld.io
82
The Non-Human Identity Blast Radius: Taming the 45:1 Machine-to-Human Imbalance hubs.ly/Q04zWF3_0

The Non-Human Identity Blast Radius: Taming the 45:1 Machine-to-Human Imbalance

Non-human identities now outnumber human accounts 45 to 1, leaving critical security gaps. Limit the vulnerabilities and enact governance with these tips.

secureworld.io
66
Load more