#SCMagazine

@mwise1.bsky.social

3 days ago

Salesforce confirms ShinyHunters exploited Experience Cloud sites The ShinyHunters cybercrime group has systematically targeted Salesforce instances since mid-2025.

Salesforce says the ShinyHunters cybercrime group exploited misconfigured Experience Cloud sites, abusing guest user permissions to access data across hundreds of organizations via #SCMagazine www.scworld.com/news/salesfo...
#cybersecurity #infosec #CISO #ITsecurity #salesforce #exploit

@mwise1.bsky.social

3 months ago

From classrooms to command posts: The cyber education crisis The U.S. faces a cybersecurity workforce emergency fueled by systemic failures in education and job retention, demanding urgent reforms, stronger public-private collaboration, and sustained investment...

The cyber talent pipeline is breaking at both ends — underfunded education and burnout are fueling a workforce crisis. "The U.S. must reform training, boost retention, and strengthen public-private collaboration now." www.scworld.com/resource/fro... via #SCMagazine
#cybersecurity #CISO

@mwise1.bsky.social

3 months ago

Critical Oracle Identity Manager RCE flaw revealed, PoC published Researchers published proof-of-concept code for authentication bypass and RCE in OIM.

Researchers published a technical analysis of a critical Oracle Identity Manager (OIM) vulnerability, which could allow an attacker to achieve remote code (RCE) execution without authentication & may have been exploited as a zero-day:
www.scworld.com/news/critica... #SCMagazine

@mwise1.bsky.social

4 months ago

Tykit SVG phishing kit tied to attacks targeting M365 credentials The suspected phishing-as-a-service template uses a distinctive SVG image for redirection.

A series of #phishing attacks using #SVG image attachments as a lure tied to a suspected phishing-as-a-service (PhaaS) operation targeting Microsoft 365 credentials
www.scworld.com/news/tykit-svg-phishing-kit-tied-to-attacks-targeting-m365-credentials via #SCMagazine
#CyberSecurity #ITSecurity

@mwise1.bsky.social

9 months ago

Why companies must solve the IT/OT challenge Here’s how IT/OT teams can collaborate and strengthen critical infrastructure security.

Making IT/OT work together effectively requires an approach where engineering teams lead OT-based decisions, and IT offers security expertise in support of those decisions. Learn more: www.scworld.com/perspective/... #SCMagazine #MattWiseman
#cybersecurity #infosec #IT #OT