TrustedCISO

Wiz counted 9 AI developer platforms breached in October, including Railway, Warp, Lightning AI and Fireworks AI. Northflank told every customer to rotate every secret. If a platform holds your API keys, it belongs on your SOC 2 vendor list.

A cloud provider told customers: back up, disconnect, power down, unplug. Japan's GMO says an intrusion may have put malware on up to 26,739 customer servers. Your provider's incident becomes your outage. Do you have a plan B? dlvr.​it/TWDtsS #ThirdPartyRisk dlvr.​it/TWDtsT

Anthropic says an unreleased Claude model wrote a working zero-click remote root exploit for Linux flaw CVE-2026-98432 (CVSS 9.​8) in about 53 minutes. As of Nov 4, neither Red Hat nor Ubuntu had shipped a fixed kernel. Red Hat's stopgap: filter IPv4 packets with IP options.

Selling AI to enterprises? Answer 4 questions before your next security review: What can each agent touch? Whose permissions does it use? How do you test it? Who approves high-impact actions? dlvr.​it/TWDCln #AISecurity #SOC2 dlvr.​it/TWDCm0

Binance lost $6.​3B, the largest crypto theft on record, via one hacked DevOps laptop. TRM Labs and Chainalysis tie it to North Korea's TraderTraitor and say most funds moved in about 20 minutes. No single laptop should reach a service that can move everything.

86,644 compromised Fortinet devices in 194 countries, per the Oct 6 FBI/Secret Service FortiBleed advisory. No zero-day needed: reused or leaked passwords did it. Put phishing-resistant MFA on every VPN and admin login. #CyberSecurity #MFA

WIRED reports, citing anonymous sources, that an Accenture contractor ran a personal Claude Code agent on a secure DOW network for 2 months. Accenture denies it. Shadow AI is how a 72-hour DFARS 7012 report starts. ✅ FREE CMMC Assessment: dlvr.​it/TWBfMV dlvr.​it/TWBfMk

A self-assessed SPRS score of 110. A government-assessed -170. A $507,144 False Claims Act settlement (allegations, no finding of liability). Contractors self-attest, so check your evidence before you affirm. ✅ FREE CMMC Assessment: dlvr.​it/TWBWWN #CMMC dlvr.​it/TWBWWT

DOW's own RFI data undercuts its CMMC pause, per Federal News Network: average assessment cost $47K, not SBA's "up to $600K." The top cost driver was NIST 800-171 itself. That work never went away. ✅ FREE CMMC Assessment: dlvr.​it/TW9lhR dlvr.​it/TW9lhs

Fired in April. Main login shut off. But not the Constant Contact login. A federal complaint alleges the ex-employee logged back in five days later and exported client and prospect contacts. Allegations only; the case is ongoing. #InsiderRisk #Offboarding

Bank of America's warning on AI assistants: "If you do share your credentials, keep in mind that you're responsible for activity resulting from that access." If the agent gets it wrong, that's on you. AI agents need their own scoped, revocable access. Never your password.

5 ways vendors got companies breached this fall, ranked: a vendor-run website, a poisoned plugin update, stolen logins to outside platforms, a vendor's API key, and #1: a vendor app with admin rights in your tenant. dlvr.​it/TW8m7L #ThirdPartyRisk #VendorRisk dlvr.​it/TW8m7T

Two Marines are suing DOW for $5M over a DMDC breach. Their suit claims a file share exposed data on about 3M people for about 9 months. File shares need encryption, access logging and a known incident-reporting deadline. ✅ FREE CMMC Assessment: dlvr.​it/TW87tw

DOW contracts can only require CMMC self-assessments right now, so contractors self-attest. But C3PAOs are still running Level 2 certification assessments: 2,362 final certificates as of September, per the Cyber AB. ✅ FREE CMMC Assessment: dlvr.​it/TW83sw #CMMC dlvr.​it/TW83t0

👻 Vulnerabilities are only scary when you can't see them. AppSec Bot scans your code with Semgrep, Gitleaks & Dependabot. Pennie Tester passively scans your website. No tricks, just treats 🎃 dlvr.​it/TW7cGz dlvr.​it/TW7cH6 dlvr.​it/TW7cHF

Anthropic's deputy CISO Jason Clinton: "please go to your boards and ask for help right now. not for ai, for the basics." FBI/CISA advisory AA26-293A: SafePay ransomware has 600+ victims. Ways in include stolen VPN passwords and five old Cisco, Veeam and SonicWall flaws.

Do you need a SOC 2 Type 1 before a Type 2? No. Type 1 = controls designed right as of one date. Type 2 = controls actually operated over a period, with the auditor's tests and results. Ask your buyer which they need. dlvr.​it/TW7Tgw #SOC2 #Startups dlvr.​it/TW7Th0

Banks are finding unvetted AI agents in customer accounts, using customers' own passwords. Morgan Stanley is blocking them; JPMorgan, BofA and Citi are restricting them. (Morgan Stanley says it hasn't seen "rogue AI agents.") Give every agent its own login you can shut off.

Attackers didn't phish a user. Per Todyl, they signed in as ConnectWise's Cloud Backup app using its secret, so MFA never came into play. Huntress confirmed 162 compromised Microsoft 365 tenants as of Oct 16. Audit your app permissions. dlvr.​it/TW6sfc… dlvr.​it/TW6sfp

Should you stop CMMC work until DOW's Reform Task Force report comes out? No. Contractors self-attest today, and NIST 800-171, an SPRS score and an annual affirmation still apply. ✅ FREE CMMC Assessment: dlvr.​it/TW67WR #CMMC dlvr.​it/TW67Wg