🛡️ 50 Influential CISOs and Cybersecurity Leaders to Follow - humble to be included secureframe.com/blog/influen… #ciso #infosecc

With great power comes great responsibility 🕸️ FBI Probes Service Selling 153M+ Drivers Licenses 🛡️ A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company IDScan.net based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Federal Bureau of Investigation (FBI) today launched an official inquiry into the source of the images. krebsonsecurity.com/2026/09/…

Fascinating 🛡️ Claude, Codex, and Hermes installed unowned code inside corporate networks 🛡️ Researchers at a stealth startup in Israel scanned 6,214 live domains belonging to defense contractors, Fortune 500, and Big Tech companies. Of the 8,265 llms.txt and llms-full.txt files they found (many sites hosted both an llms.txt and an llms-full.txt file), 120 of them, each on a different site, pointed to one or more code packages or domain names that weren’t registered. To test what happens when an AI agent processes such files, the researchers registered a handful of the unclaimed names and hosted packages that caused any machine executing them to reach out to their server. Within an hour, the researchers received a phone-home response from a Fortune 500 company. Over time, they got a few dozen more, some from more Fortune 500 companies and others from startups. Their beacon also recorded the chain of parent processes that spawned each install, ultimately revealing that coding agents, including Claude, OpenAI’s Codex, and Nous Research’s Hermes, were involved. Anthropic, OpenAI, and Nous Research did not respond to requests for comment by the time of publication. The research makes a compelling case that in the age of AI, the once-bright line between data and executable code is vanishing. Anything an agent can process is a potential instruction it may act on if it has permission to run commands. arstechnica.com/security/202… #InfoSec

If you are a #CISO or CIO, this should be one of the top 10 concerns 🛡️ DPRK Fraudulent Employment Operations 🛡️ Key Findings Insikt Group has identified at least 22 fabricated personas linked to multiple PurpleDelta clusters that submitted applications to over 1,100 companies across the software, staffing, healthcare, and financial sectors, with operators submitting as many as 60 or more applications per day across at least 8 job platforms. These clusters of PurpleDelta operators are highly likely to have been actively employed at ten or more organizations, with confirmed or probable placements at companies that pose an ongoing and material insider threat. PurpleDelta demonstrated a high degree of operational sophistication, using multi-account management browsers, multiple Chrome profiles, AI-generated profile photos, custom ChatGPT assistants, and real-time AI transcription tools to deceive hiring managers during interviews, sometimes repeating AI-generated responses verbatim. Once employed, PurpleDelta operators recorded internal meetings at victim organizations, used screen recording software during work sessions, and drafted pre-written Google Translate excuses to justify the use of personal devices and personal bank accounts. Video evidence indicates that PurpleDelta operators use identity-brokering services, account-renting via AnyDesk, and multi-accounting tools, and coordinate via Telegram and Slack, with support from facilitators who procure and maintain company-issued hardware on the operators' behalf. recordedfuture.com/research/… #Infosec

It’s seems that@jetblue systems for checkims are having a meltdown 😢

🤔 Agent Meltdowns: The Road to Hell Is Paved with Helpful Agents. Our evaluation demonstrates that meltdowns (e.g., conducting unauthorized reconnaissance or subverting access control) of varying severity and success occur in 64.7\% of agent rollouts that encounter simulated errors, spanning all combinations of agent system, backing model, and error type. In over half of these meltdowns, unsafe behaviors are not reported to the user. Comparing behaviors of the same agents with and without errors, we find that exploration in response to errors is correlated with unsafe and harmful behavior. arxiv.org/abs/2605.19149 #Infosec #AI

Useful 🛡️ The #Microsoft AntiSSRF library is a security-developed, exhaustively-tested secure code library that provides robust URL validation to mitigate the risk of Server-Side Request Forgery (SSRF) vulnerabilities. It is an easy-to-use drop-in library with minimal adoption effort for developers, available for both .NET and Node.js applications. github.com/microsoft/AntiSSR… #InfoSec #AppSec

A good read for every CISO and general counsel 🛡️ The Invisible Insider: How AI Agents Enable Undetectable Trade Secret Theft – and What Companies Must Do Now jdsupra.com/legalnews/the-in… #CISO

Good read 🛡️ Securing Claude Cowork: A Security Practitioner’s Guide harmonic.security/resources/… #AI #CISO

Great to see this 👍 Introducing IDE-SHEPHERD: Your shield against threat actors lurking in your IDE 🙏 @datadoghq securitylabs.datadoghq.com/a… #Infosec

Thanksgiving is a great time to remember others that are less fortunate. Please join me in giving. If we can raise $1 million by midnight on December 2, The Reid Hoffman Foundation and the Khosla Family will triple the amount. impact.shfb.org/gt impact.shfb.org/campaign/739…

⁦@salesforce⁩ hardening for integrations and humans should be top priority for every CISO 🛡️ ⁦@Google⁩ says hackers stole data from 200 companies following Gainsight breach #Infosec techcrunch.com/2025/11/21/go…