That's a first ➡️ Big purple ghost hosting a webinar 👻 Everyone assumes that cases like the HuggingFace breach mean the outside threat is the scariest story. Or and Rachel are going to prove them wrong, live. Read more in this weeks newsletter 👇 linkedin.com/pulse/invite-ag… #CISO #AI #Agents

🚨 Breaking: PHP2Shell is being exploited. Attackers moved before the patch dropped. Fix it ASAP 👉 hubs.ly/Q04C0zQJ0 CVE-2026-109618 and CVE-2026-109619 are rated CVSS 9.2 and require no login. A single request is enough to run code on any unpatched PHP server. WordPress, Drupal, Joomla, and Magento are all confirmed vulnerable. Amazon🛍️ recorded the first exploitation attempt on October 17. The patch shipped October 21. Attackers had a four-day head start. Patching is step one. But most teams will stop there🙅 and that is exactly the gap attackers count on. The article covers what to do after the patch, and why your server logs will look completely normal while a skimmer runs on your checkout page. #WebSecurity #PHP #CISO

Reflectiz is heading to Pittsburgh🏙️ We’re proud to be a Steel City Sponsor at the Three Rivers Information Security Symposium (TRISS) on October 22. Dan Beauregard and Paul Kammerzelt will be onsite representing Reflectiz, ready to talk agentic pentesting. And we’re giving away Ray-Ban Meta Glasses🕶️ at our booth. Stop by, enter the raffle, and come see what continuous web exposure management actually looks like in practice. See you in Pittsburgh🤝 #TRISS2026 #Cybersecurity #Reflectiz

When Or Sahar takes the stage, security teams take notes. 👉 hubs.ly/Q04BR-Dd0 Or Sahar is a security researcher at Reflectiz with two decades of experience across software development, penetration testing, and application security🔒 OSCE certified, co-founder of Secure From Scratch, and a recognized speaker in the cybersecurity community, she has worked extensively with private and government sector organizations on application security and secure coding practices. She has spoken at many stages like BSides Las Vegas🗣️ and her research makes her and expert on what AI agents actually do on live websites, not in theory, in production. On October 28 she is joining Rachel Curran live to show exactly that, and why the agents you should be most worried about are the ones you already approved. 🎃 #Cybersecurity #AppSec #CISO

Anthropic, OpenAI, and OpenClaw had a wild 2026. 🤠 Read the full list 👉 hubs.ly/Q04BH0JM0 Not just HuggingFace. We ranked the 7 biggest AI agent attacks of 2026 by what they exposed. Rogue agents acting on their own, humans weaponizing open-source tools, and trusted AI integrations that got compromised. Banks, governments, AI platforms, and online retailers all made the list. If you are in retail 🛍️ go straight to number #1. These are exactly the kinds of attacks we cover in our webinars. The tactics, the vectors, and what each one actually exposed. Don't call yourself a security specialist if you don't know these attacks. #WebSecurity #AgenticAI #CISO

Your vendor assessment has a blind spot⚫. She found it. 👉 hubs.ly/Q04Bwgwb0 Rachel Curran is a CISM-certified GRC leader with over 15 years of experience. 🏅 Former Director of Risk and Compliance and Head of Security at Logikcull, she has built SOC 2 and security programs from the ground up across dozens of organizations. Today as Co-Founder and CEO of Locktivity she is tackling the problem every GRC team faces: third-party risk management was not built for how modern companies actually deploy software today➡️AI agents are the proof. On October 28 Rachel is joining Or Sahar live to talk about where vendor assessments break down and what approved agents are doing after go-live. If you work in compliance, vendor risk, or security leadership this one is for you. 🎃 #Cybersecurity #GRC #TPRM #CISO

Reflectiz is coming to @PCISSC EU in Edinburgh🍀See what we are bringing. 👉 This Two sessions are a must: 🎤 The Checkout Blind Spot: Payment Frame Risk in Retail Isaac Moddel, VP Sales EMEA & APAC October 21 | 13:10 - 13:40 🎤 Your Payment Page Isn’t Really Yours Anymore Leor Eliashiv, UK & I Country Manager October 20 | 14:45 - 15:10 And yes, we are giving away Ray-Ban Meta Glasses🕶️ Go to Booth 6 to enter and win!! As a Principal Participating Organization in the PCI Security Standards Council, we are not just attending the conversation, we are part of building it. Follow us👆 to get live updates from the event. #PCI #Payments #CISO

This is not a ghost story. Every part of it is real. 👻 Sign up👉 hubs.ly/Q04BtPHw0 This haunted house has every room you know: the checkout page, the analytics, the chat widget, and the frightening attic of course... but somewhere, an attacker is trying to find a way in. Or maybe it already did. 😈😈😈 On October 28 Or Sahar and Rachel Curren are going live to show you which agents you should really be scared of and how you can trick them. Join the campfire, You will want to hear this story. ⛺ #Webinar #WebSecurity #CISO

And we are about to expose everything live on October 28. Join us👉 hubs.ly/Q04Bf5wG0 #Cybersecurity #AIAgents #CISO

An AI agent breached 7 South Korean banks in one week🏦 Read the full breakdown 👉 hubs.ly/Q04Bf9qz0 CrowdStrike linked the campaign to ARTEX, an open-source agentic pentesting tool developed in China. A human operator directed it but the agent did the rest: found the side doors, bypassed authentication, and fed customer numbers into lookup services to pull records at scale. It took Shinhan Bank 15 hours to detect the intrusion. KB Kookmin took 67 hours. One attack ran for more than 40 hours before anyone noticed. If you deal with cybersecurity this one is a MUST!! #WebSecurity #PenTesting #CISO

If there’s something strange, in your website, who you gonna call? 👻 Register here 👉 reflectiz.com/lp/ai-agents-i… The Hugging Face breach made every security headline this year when an AI agent reached places nobody thought it could. But what if we told you this is not the scariest 😨 agent you should worry about? Two of the most credible voices in cybersecurity are coming together on October 28 to talk about exactly this. Or Sahar, Security Researcher at Reflectiz, a world 🌏 renowned speaker spends her days uncovering what AI agents actually do on live websites. Rachel Curren, Co-Founder and CEO of Locktivity, brings 15 years of compliance and cybersecurity leadership 🏅 and a front-row seat to how vendor assessment breaks down in the age of autonomous agents. In this session they will cover🦇 why the AI agents making headlines are actually the easier problem to solve, what the agents already running on your website with your approval can access right now and how a vendor passes your assessment on Tuesday and behaves differently on Wednesday. 📌 October 28 | 08:00 AM PT / 11:00 AM ET Register and join us for a trick or treat 🎃 #Cybersecurity #WebSecurity #CISO

Our pentesting agent found a CRITICAL⚠️ authentication bypass on a major insurer's production website. Let that sink in for a moment. Read the full story on @TheHackersNews 👉 hubs.ly/Q04B610r0 The login let attackers choose where the one-time passcode was sent. Switch the channel to email, name any address, and the server sent the code there without checking if it belonged to the account. The sad part is they tested the site six months earlier 😬 #PenTesting #WebSecurity #CISO

Our top report for 2026🏅 the CISO’s Guide to Agentic Pentesting. Agentic pentesting is moving fast and most security leaders are still figuring out what to actually demand from a vendor, what governance looks like, and whether the economics make sense📋 This guide answers all of it in one place. Get it now 👉 hubs.ly/Q04z_GBx0 #PenTesting #WebSecurity #CISO

Reflectiz is coming to PCI EU! 💳 We are heading to Edinburgh for the PCI Security Standards Council European Community Meeting 2026, and we are bringing the data. Two sessions worth adding to your schedule: 🎤 The Checkout Blind Spot: What 4,700 Websites Reveal About Payment Page Risk - Isaac Moddel Tuesday, October 21 | 1:10 PM | Ballroom Foyer Data-led insights from over 4,700 websites, the client-side threats compliance tools consistently miss, and immediate benchmarks to assess your own payment page security posture. 🎤 PCI Automation: Beyond Compliance - Leor Eliashiv Tuesday, October 20 | 2:45 PM How automation is changing the way security teams approach PCI DSS, and what continuous monitoring means for the future of compliance. After the sessions, come find the team. We would love 🩷 to talk payment page security, web exposure, and what your next audit actually requires. See you in Edinburgh 🍀 #Reflectiz #PCI #WebSecurity #CISO

We went for the softer version this time😲 #websecurity #ciso #privacy

A Reflectiz archaeological🔍expedition has made a groundbreaking discovery!! Deep in the ruins🏺of a 2025 enterprise security program, our team unearthed evidence of an ancient ritual known as "the annual pentest." Researchers believe practitioners would gather once a year, wait several weeks for a PDF to arrive📜 The PDF would then be filed, forgotten, and repeated the following year. Carbon dating confirms the vulnerabilities were older🦴 than the report. #PenTesting #WebSecurity #CISO

Retail 📦 will completely change this is how! Put your headphones on 🎧 ➡️ hubs.ly/Q04zzVHq0 #Retail #AI #Podcast

You dedicate 15 minutes ⏳ a day for professional reading? 5 minutes will do it We have a learning hub special edition 🎁 Top 5 most important pieces of content every security leader needs right now. Full edition in this month's newsletter 👇 hubs.ly/Q04zqy6N0 #WebSecurity #PenTesting #CISO

We are pumped after an unbelievable event!!⚡⚡⚡ Thank you to all the community members who came to meet and talk about web pentesting, It was such a pleasure to share the revolution in the category and the uniqueness of our product. It's OK if you came just for the drinks😉🍸 Or's talk was packed and we just can't wait for the next event with you!! Until next time @owasp #cybersecurity #ciso #pentesting

dropped by our booth at Israel , you wouldn’t believe but purred 🥃 her a drink #owasp #cybersecurity #swag