@manuelbissey

#Cybersecurity and Risk Management Executive @IBM. Passionate about #Cyberdefense, #Technology and #Innovation. Views are my own.

 Paris, Ile-de-France
linkedin.com/in/bissey/
Joined August 2015
  • Tweets12.8K
  • Following456
  • Followers442
3.4KMedia
Turning the Tables on Cyber Security Budgets #becybersmart #befearless amzc.news/turning-the-tables…
7
13
Attackers are hiding malicious payloads inside PNG files to evade detection. For security leaders, it’s another reminder: resilience starts by assuming trusted formats can be weaponized. 🖼️⚠️ #CyberLeadership #CyberResilience theregister.com/security/202…

Attack hides malware in PNGs and drops custom reverse tunnel on victims' machines

Next-level ClickFix wave sets off multi-stage attack chain

theregister.com
1
21
Ransomware operators are now using AI coding tools to accelerate attacks. For security leaders, the message is clear: AI-powered defense is no longer innovation — it’s a strategic imperative. 🤖⚔️ #CyberLeadership #AutonomousSecurity thehackernews.com/2026/08/au…

Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets

Aurora ransomware operators used Cursor Agent for hands-on exploitation against 10 targets after receiving credentials or an existing route.

thehackernews.com
3
40
An AI model knowing the rules doesn’t mean it will follow them. Governance without enforcement is not security — controls must exist at runtime. 🤖🔐 #AISecurity #AIGovernance darkreading.com/cyber-risk/m…

AI Model Rules Are Not Security Controls

OpenAI's Hugging Face attack postmortem shows agents don't care about rules — they need strong controls.

darkreading.com
1
1
14
Critical infrastructure is becoming the frontline for AI-powered cyber defense. OpenAI’s latest move signals a broader shift: protecting essential systems will increasingly require AI fighting AI. 🤖⚡ #AutonomousSecurity #CriticalInfrastructure esecurityplanet.com/threats/…

OpenAI, 100+ Firms Warn AI Cyberattacks Could Surge Within Months

More than 100 organizations warn AI could accelerate cyberattacks faster than defenders can respond, putting critical infrastructure at greater risk.

esecurityplanet.com
1
17
When cyberattacks can reach pacemakers, cybersecurity becomes a matter of life and death. Healthcare resilience is now patient safety. 🫀🛡️ #HealthcareSecurity #CyberResilience theregister.com/cyber-crime/…

Healthcare cyberattacks hit pacemakers and millions of patient records

McKesson admits breach as ShinyHunters demands $55.2M

theregister.com
1
10
The web knows more about us than we realize - a new service makes that tracking visible. Privacy starts with understanding who is watching. 👁️🔐 #Privacy #DigitalTrust krebsonsecurity.com/2026/08/…
1
49
AI is accelerating software development and AppSec must keep pace. Security can’t remain a human-speed gate in a machine-speed SDLC. 🤖⚡ #AppSec #AISecurity helpnetsecurity.com/2026/08/…

AI AppSec tools agree on just 5% of security findings - Help Net Security

AI AppSec tools agreed on just 5% of findings as security teams face growing vulnerability backlogs and increasingly rapid exploits.

helpnetsecurity.com
1
23
The “perfect SOC” doesn’t exist - resilience comes from continuously improving people, processes, and technology. The next leap is moving from assisted to Autonomous Security. 🛡️🤖 #AutonomousSecurity #SOC esecurityplanet.com/security…

The Imperfect SOC: How Security Teams Can Defend Without a Dream Team

Lean SOC teams can use explainable and agentic AI to reduce alert fatigue, scale analyst expertise, automate investigations, and improve security operations.

esecurityplanet.com
1
1
26
Infostealers are now hijacking Claude sessions - AI accounts are becoming valuable identities themselves. Protecting AI access is the new identity security frontier. 🤖🔐 #AISecurity #IdentitySecurity bleepingcomputer.com/news/ar…

Anthropic warns infostealer malware is hijacking Claude sessions to drain usage

Anthropic is warning some Claude users that infostealer malware on their PCs has stolen active Claude login sessions, allowing attackers to access accounts and consume their usage.

bleepingcomputer.com
1
31
Traditional security training is struggling against AI-powered deception —annual awareness can’t match threats evolving daily. Human resilience must become continuous and adaptive. 🧠⚡ #HumanRisk #CyberResilience buff.ly/wgtHoEU

Traditional Security Training is Obsolete in the Age of AI

Employees are adopting AI faster than organizations can govern it. Discover insights from Lenovo’s latest research and learn how to modernize security training for the AI era

infosecurity-magazine.com
1
2
13
Phishing remains the #1 initial access vector -even as attacks become AI-powered, the target is still human trust. AI is changing the weapon, not the weakness. 🎣🤖 #AIThreats #HumanRisk buff.ly/p9n3f1d

Report: Phishing Remains the Primary Initial Access Vector

Cisco Talos reports phishing accounted for over half of Q2 2026 attacks, with spikes in QR code PDFs and MFA bypass techniques like AitM proxies.

blog.knowbe4.com
1
17
Mirage2FA has hit 4,500+ organizations across the US and Europe —MFA alone is no longer enough when attackers target sessions and trust. Identity must become adaptive. 🔐⚠️ #IdentitySecurity #Phishing buff.ly/SIwPwFG

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Mirage2FA targets Microsoft 365, with 48% of targeted emails potentially compromised and 9,000+ potential session-theft events.

thehackernews.com
2
2
23
Iran-linked hackers reportedly targeted a UK power plant —cyber operations are increasingly crossing into the physical world. Cyber resilience is now critical infrastructure resilience. ⚡🛡️ #CriticalInfrastructure #CyberResilience buff.ly/nbpqSlX

ToxicPanda 2.0 Blocks Google Play

ToxicPanda 2.0 now targets 349 financial apps across 16 countries while abusing VPN, Accessibility and Android debugging features for deeper control.

esecurityplanet.com
1
14
AnonymousKit is using AI voice agents to phish iPhone passcodes - phishing-as-a-service is becoming autonomous. AI is scaling social engineering itself. 🤖📱 #AIThreats #SocialEngineering bleepingcomputer.com/news/se…

AnonyMousKIT PhaaS uses voice AI agents to phish iPhone passcodes

A newly uncovered phishing-as-a-service (PhaaS) platform called AnonyMousKIT automates the retrieval of codes used to unlock stolen Apple devices and disable the Activation Lock feature.

bleepingcomputer.com
1
1
12
Gunra ransomware shows how extortion continues to evolve - faster encryption, data theft, and pressure tactics keep raising the stakes. Resilience must assume compromise. 💀🛡️ #Ransomware #CyberResilience buff.ly/aFNm3A5

Gunra Ransomware: What You Need to Know |Fortra

Gunra ransomware exploits unpatched VPNs and firewalls to steal and encrypt sensitive data. Learn how it attacks, whom it targets, and how to reduce risk.

fortra.com
1
17
TikTok reaches a $400M settlement over alleged COPPA violations - YouTube privacy failures are no longer just compliance issues; they carry material business consequences. ⚖️🔐 #DataPrivacy #CyberRisk buff.ly/mbzaU34

TikTok reaches $400M settlement with US over COPPA violations

The U.S. Department of Justice announced a $400 million settlement with TikTok, ByteDance, and affiliated companies over allegations that they violated the Children's Online Privacy Protection Act...

bleepingcomputer.com
1
19
Anthropic’s Mythos 5 is pushing AI security audits to a new level - finding vulnerabilities at machine speed. The line between pentesting and Autonomous Security is disappearing fast. 🤖⚡ #AutonomousSecurity #FrontierAI buff.ly/9Mrw79Z

Anthropic Expands Mythos 5 for Security Audits

Anthropic expands Mythos 5 access for enterprise security teams, offering AI-assisted vulnerability scanning with safeguards and required human review.

esecurityplanet.com
1
1
23
WeedHack malware spreads through fake downloads - another reminder that attackers don’t always need zero-days when they can weaponize trust. 🎭⚠️ #SocialEngineering #Malware buff.ly/IznXBBL

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

Weedhack spreads through fake Minecraft client sites and SEO poisoning, with McAfee blocking more than 6,300 attempts to reach malicious URLs.

thehackernews.com
1
17
Cybercrime now operates like a supply chain — specialized, scalable, and increasingly automated. Defenders must disrupt the ecosystem, not just stop individual attacks. 🔗⚔️ #CyberCrime #CyberResilience buff.ly/R1Hyqm6

The cybercrime supply chain has five stages, each with a price - Help Net Security

Chris Nyhuis breaks down the cybercrime supply chain, the five businesses behind a ransomware attack, and where defenders can break it.

helpnetsecurity.com
1
1
16
If you’re not using AI to attack your own systems, your adversaries will. Offensive AI is changing the speed of security testing - Autonomous Security must fight machines with machines. 🤖⚔️ #AutonomousSecurity #AIThreats buff.ly/SBsxRJC
1
1
16
Load more