Sysdig

Sysdig Headless Cloud Security won the Agentic AI Security Innovation Award in the 2026 CyberSecurity Breakthrough Awards. 🏆 In an industry competing on dashboards, we broke through by removing them. okt.to/BfXzOs  #CybersecurityBreakthrough #HeadlessCloudSecurity #AIAgents #Sysdig

🚨 Three bugs. One week. The new patch window is shorter than the news cycle. 🐘 PHP2Shell: unauthenticated RCE in PHP core, exploitation confirmed 🟢 Node2Shell: Node.js Brotli bug, also being exploited 🐧 ZDI-CAN-33367 and five other Linux flaws, one with a public root exploit Vulnerability scanning and runtime detection are best friends before patches land. Blog links in the replies. 👇 #CloudSecurity #ThreatResearch #PHP #NodeJS #Linux

🚨 Node2Shell (CVE-2026-111497, CVSS 9.2): a public repo for this Node.js Brotli flaw appeared about five hours after the fix shipped. No confirmed in-the-wild exploitation yet, but the patch-to-PoC gap was about a day. Patch in order of reachability: start with services that decode Brotli you don’t control. okt.to/3pTBzk  #CloudSecurity #ThreatResearch #NodeJS #RuntimeSecurity

🚨 A working root exploit for a Linux kernel bug is public. No CVE. No merged fix. ZDI-CAN-33367 is a gap in the Dirty Frag fix, with root confirmed on current Ubuntu, Debian, and AlmaLinux. Restrict unprivileged user namespaces and enforce seccomp RuntimeDefault while you wait. okt.to/08psRf #CloudSecurity #ThreatResearch #Linux #RuntimeSecurity

AI agents are writing code, touching production, and acting with real credentials. So who’s watching what they actually do? 🔒 Join Sysdig’s Conor Sherman and Shantanu Gattani on LinkedIn Live to talk runtime security and governance for AI agents. Live demo included. 📅 Nov 5 | 12pm ET / 9am PT okt.to/1h0YSs #AIDefense #AIAgents #RuntimeSecurity

🚨 PHP2Shell: two critical CVEs in PHP core (CVSS v4.0 9.2). Exploitation attempts began four days before the patch was released. An unauthenticated attacker can run code with HTTP requests alone. The vulnerable code dates to PHP 5.4 in 2012, so even clean application code is exposed. Patch first and assume breach. okt.to/xlQvRe #CloudSecurity #ThreatResearch #PHP #RuntimeSecurity

Wide eyes. Racing pulse. A backlog that keeps growing. You may be experiencing Mythos anxiety. 😅 Join our “Mythos, Decoded” webinar to learn how runtime context shows which vulns add real risk. Practical steps, minus the panic. 📅 Oct 29 | 8am PT / 11am ET okt.to/vOdlGe #CloudSecurity #VulnerabilityManagement #RuntimeSecurity

Frontier AI models like Mythos can discover vulnerabilities faster than any human. Most advice floating around isn’t helping. Join us October 29 to separate what’s actually changed from the noise. Mythos, Decoded: What’s Actually Changed in Vulnerability Management 📅 Oct 29 | 8am PT / 11am ET okt.to/iFTNAp #CloudSecurity #VulnerabilityManagement #AIAgents

Excited to welcome Teri Harrell as Sysdig’s new Chief Human Resources Officer. 🎉 25+ years in talent, development, and org change. Former CHRO at VitalEdge, HR leadership at Red Hat. Exactly who you want leading people strategy at a company moving this fast. Welcome to the team, Teri! okt.to/Sv7Aux #Sysdig #LifeAtSysdig #Leadership

Cybersecurity Awareness Month. A good time to remember what causes breaches every other month. 78% trace to system intrusion and social engineering. Vulnerability exploitation up 55% YoY. Human element in 62% of breaches. MFA works. Least privilege works. Patching works. The fundamentals just need to be daily, not annual. okt.to/yuTSw1 #CybersecurityAwarenessMonth #CloudSecurity #RuntimeSecurity