Banking infra is only as secure as the identities accessing it.
We help global banks strengthen access security through:
๐ Phishing-resistant @ThinC_AUTH FIDO2 Keys
๐ Machine & key binding through AMS.
๐ก๏ธ Enterprise identity & access through @XSenseID .
๐ฉ[email protected]
It is 2026 and we are still seeing breaches due to credential theft and passwords, with wide blast surface. Two choices: harden/airgap creds. Or decentralize creds. Little time left to make this transition.
@EnsurityTech @ThinC_AUTH #AuthAMS @Agent_DNA
ConnectWise Suspends Cloud Services in Response to Cyberattack securityweek.com/connectwiseโฆ
This is alarming. Hackers could gain root access before patching is done and maintain persisent presence inside. Focus must be to comprehensively fix auth before that. @EnsurityTech @Agent_DNA
The window to patch software bugs is collapsing
Of the bugs hackers actually exploit, ~87% are now being attacked on or before the day the bug is public knowledge
That share was 23% in 2020
Charts of the Week: a16z.news/p/chart-of-the-weeโฆ
Anecdotal reports of similar losses at multiple banks in the recent weeks - does not look isolated to Central Bank. This theft seems to be breach of core banking access controls at the bank end. Banks must immediately assess their core banking access controls and shift away from password/OTP/api key based legacy systems. @EnsurityTech
India news: Central Bank of India lost โน13.96 crore in 187 unauthorised RTGS transfers to 36 banks from Oct 15 to 17, police say. Unknown people allegedly got into the RBI-owned IFTAS Central SFMS server through the bank's core banking system.
The money was customers' funds. The bank first called it a "technical glitch". RBI, CERT-In and NCIIPC have been told and Maharashtra cyber police have a case.
If you bank there, check your RTGS debits from those dates.
hindustantimes.com/cities/muโฆ
Ensurity retweeted
THE PHISH CHANGED. DID YOUR AUTHENTICATION?
A recent spear-phishing campaign targeting AI-policy experts shows attackers getting better at building trust.
This #NationalCybersecurityMonth, it's time to #UnPhishYourself with Ensurity.
๐ฉ[email protected]
reuters.com/legal/governmentโฆ
๐ค Made with AI
Ensurity retweeted
1 weak password. A country breached.
The Denmark CPR breach is a reminder that vulnerabilities can have disastrous consequences .
We help enterprises strengthen identity security through @XSenseID , @ThinC_AUTH FIDO2 Keys, & ๐ฎ๐๐๐ต AMS.
#UnPhishYourself
๐ฉ[email protected]
Ensurity retweeted
WE DIDN'T JUST RETHINK AUTHENTICATION. WE REDEFINED TRUST.
Identity is managed through @XSenseID . Credentials & assets are controlled through AUTHAMS, Authentication is strengthened through our @ThinC_AUTH FIDO2 Bio Keys.
#UnPhishYourself with Ensurity.
๐ท[email protected]
๐ค Made with AI
WE DIDN'T JUST RETHINK AUTHENTICATION. WE REDEFINED TRUST.
Identity is managed through @XSenseID . Credentials & assets are controlled through AUTHAMS, Authentication is strengthened through our @ThinC_AUTH FIDO2 Bio Keys.
#UnPhishYourself with Ensurity.
๐ท[email protected]
๐ค Made with AI
1 weak password. A country breached.
The Denmark CPR breach is a reminder that vulnerabilities can have disastrous consequences .
We help enterprises strengthen identity security through @XSenseID , @ThinC_AUTH FIDO2 Keys, & ๐ฎ๐๐๐ต AMS.
#UnPhishYourself
๐ฉ[email protected]
Ensurity retweeted
โผ๏ธ AI agents escaped their assigned tasks and accessed REAL systems in India.
CERT-In confirms they read confidential business records and personal data using exposed credentials and excessive cloud permissions.
None of them noticed. The AI firms reported it themselves.
Read: thehackernews.com/2026/10/ceโฆ
Ensurity retweeted
๐จ Solo Hacker Used AI Tools to Breach South Korean Financial Organizations
Details: cybersecuritynews.com/solo-hโฆ
A suspected lone threat actor used an AI-powered penetration-testing tool called ARTEX to breach several South Korean financial organizations and steal customer and employee data.
The activity, which ran from late September to early October 2026, affected banks, savings banks, capital firms, and online lending services. The case shows how open-source AI tools can help a single operator run fast, wide-scale intrusion activity against many targets.
The breaches reportedly exposed sensitive information from systems that were less protected than core banking platforms.
#cybersecuritynews
Ensurity retweeted
๐ China-linked hackers didn't just steal emails. They ran a web portal giving third parties access to stolen mail, the FBI says.
Victims included government, police, and healthcare organizations in Southeast Asia. Their toolkit included 1,300+ scanning scripts.
Read: thehackernews.com/2026/10/fbโฆ
THE PHISH CHANGED. DID YOUR AUTHENTICATION?
A recent spear-phishing campaign targeting AI-policy experts shows attackers getting better at building trust.
This #NationalCybersecurityMonth, it's time to #UnPhishYourself with Ensurity.
๐ฉ[email protected]
reuters.com/legal/governmentโฆ
๐ค Made with AI
Don't hand your credentials and keys to AI models or model based security tools. Harden and air gap credentials/keys where possible now (for humans). Decentralize otherwise (for agents). There is little other option.
#AISecurity #cybersecurity #IAM
@EnsurityTech @Agent_DNA
This #NationalCybersecurityMonth, it's time to redefine security with Ensurity.
We secure the entire authentication cycle, not just login.
Hardened credentials.
User & device binding.
Credential lifecycle control.
Thatโs how we enable you to #UnPhishYourself.
๐ฉ[email protected]
We have not sorted security gaps in the pre agent era fully yet, and now with agents, its a fully different thing altogether. Build agenetic security architecture from first principles @Agent_DNA
iAuthFlow V2 shows #phishing kits can steal authenticated sessions, & register attacker-controlled passkeys.
With @XSenseID & @ThinC_AUTH, we bind identity to user & applications, with continuous authentication.
UNPHISH YOURSELF with Ensurity
๐ท[email protected]
Ensurity retweeted
Earlier this month, AISI ran fully simulated testing on GPT-6 Astra, and found that it conducted unsanctioned supply-chain attacks when prompted only to perform a cyber eval. It did so more than prior OpenAI models, but often commented on its environment being simulated.
๐งต We share more details in our latest blog:
Ensurity retweeted
This weekend our team spent 48 hours investigating the rogue OpenAI agent activity that targeted the Australian government and other organizations. Our report (coming soon) includes:
- Evidence of additional US government and other websites probed by the agents, including the CDC, International Energy Agency, and Mayo Clinic.
- Novel tactics which left records erased or inaccessible. This makes it impossible (based on public data alone) to establish that the agents did not access any sensitive data. Future investigations should analyse whether these tactics were deliberate subterfuge. ๐งต
AI is becoming a force multiplier for attackers, making attacks much easier to execute.
With @XSenseID, AMS & @ThinC_AUTH FIDO2 Bio Keys, we help enterprises build passwordless, hardened & continuously authenticated identity.
#UNPHISHYOURSELF with Ensurity!
๐ฉ[email protected]


















