PT Instructor

An asset inventory shows what exists. An alert shows an event. Security #visibility connects assets, identities and activity to help teams understand the bigger picture and make better-informed security decisions. #Cybersecurity

Another day - another Stealer: MopsStealer 🐶 Active botnet C2s, hosted at Podaon SIA 🇳🇱: 📡 mops .to 📡 45.91.202.47:408 📡 45.91.202.47:1488 📡 45.91.202.146:408 📡 45.91.202.146:1488 Malware samples ⤵️ bazaar.abuse.ch/browse/signa... IOCs ⤵️ threatfox.abuse.ch/browse/malwa...

Hmm... what's this? 👀 BONUS Panel below!

This week’s #CookbookCorner stars 'Asian Home Cooking: a Cook’s Guide to the Everyday Dishes of Asia' by Adam Liaw! Read more about it and get his recipe for Mapo Tofu right here: www.nigella.com/cookbook-cor...

Two critical #PHP vulnerabilities -CVE-2026-109618 and CVE-2026-109619- are under active exploitation. Both score 9.2 on CVSS v4.0. Update affected PHP runtimes, verify patches across servers and containers, and investigate possible compromise. www.sequretek.com/resources/th...

💥 New KEV entry in the Shadow Server catalog (@shadowserver) CVE-2023-50917 - Confirmed Exploitation 👉 https://vulnerability.circl.lu/vuln/CVE-2023-50917

SBI found 3,897 customer records with PII in ~3.75 lakh dark web records. Alerts came Oct 16. Pankit Desai #Sequretek: Many firms lack a full inventory of outside access. Is that the real gap? Read his view in Economic Times Entrepreneur: entrepreneur.economictimes.indiatimes.com/news/long-re...

MFA Fatigue Attacks: When “Approve” Becomes a Risk Attackers flood you with sign-in prompts, hoping you'll approve one just to stop the interruptions. Don't approve what you didn't initiate. Deny, verify, and report. Swipe to learn more. #CyberAwarenessMonth #CyberSecurity

Launchpad xkcd.com/3291/

Drupal patches two critical RCEs now; exploits expected within hours. ConnectWise backup credential breached 170+ M365 tenants, MFA didn't help. Patch Drupal today. Lock down your ConnectWise backup app tonight. #Cybersecurity #Drupal #M365

@shrishtibisht121.bsky.social Indoor fun & exercise as well.

Thank you Google for crippling ad blockers for the sake of your profits

@shrishtibisht121.bsky.social

That’s a beautiful stick….

A stolen credential can give attackers access to email, applications, sensitive data and privileged systems without triggering a failed login. The risk isn’t just account takeover. It’s trusted access being abused. #Cybersecurity #IdentitySecurity #CredentialTheft

Boards approve AI, cloud, and digital projects faster than accountability is assigned. Give security a veto and progress stalls. Give business a bypass and risks go unowned until an incident exposes them. Pankit Desai lays out a simpler way to think about it. www.sequretek.com/resources/bl...

Business Email Compromise exploits trust to redirect payments, manipulate business conversations and trigger unauthorized actions. Changed bank details? A request to bypass normal verification? Explore the #BEC red flags every employee should know.

Police arrested five people after finding an SMS blaster in a car that travelled slowly back and forth beside a busy Jakarta metro route, with the gang aiming to send 20,000 smishing messages a day. commsrisk.com/sms-blaster-...

#bajajshrishti14

The hackers who stole Denmark's citizens' data accessed the database via an account using the 123456 password politiken.dk/danmark/art1...

Ruin a book by adding a word The Lord of the Onion Rings

The US is offering up to US $10 million for information about the whereabouts of Zhang Yu, accused of being a key figure in China's state-sponsored hacking group Hafnium - responsible for the Microsoft Exchange server mega-hack a few years ago. Read more in my article on the Bitdefender blog.

Nobel Peace Prize for Navi Pillay for her work to promote peace and international law. www.aljazeera.com/news/2026/10...

Our CEO & Co-Founder, Pankit Desai, joins #CISO6 as a panel speaker to discuss: “The CISO Paradox: Business Enabler or Business Obstruction?” 📅 9 October 2026 📍 Sahara Star, Mumbai 🕓 4:45 PM – 5:20 PM #CyberSecurity #Sequretek

Day 2 at #IMC2026 is underway! 🚀 The conversations continue as startups, MSMEs, innovators, investors & industry leaders connect around India’s digital future. 📍 Yashobhoomi, New Delhi 📅 7–10 Oct 📌 Booth: TNC-02 | Hall No. 1 Drop by & meet us. #IndiaMobileCongress

IMC 2026 starts today! 🚀 The 10th India Mobile Congress brings startups, MSMEs, innovators, investors and industry leaders together. 📍 Yashobhoomi, New Delhi 📅 7–10 Oct 2026 📌 Booth: TNC-02 | Hall No. 1 #IMC2026 #IndiaMobileCongress

India's Digital Personal Data Protection Act (DPDPA) is here. It applies to any org handling Indian residents' data. Is your security stack ready? graylog.org/post/indias-... #DPDPA #DataPrivacy #Cybersecurity

Pankit Desai featured in Cybersecurity News on why AI adoption is outrunning security: it's not the model; it's the permissions and data it touches. cybersecuritynews.com/ai-adoption-...

Tomorrow we start announcing the 2026 Nobel Prizes! Our Executive Director Hanna Stjärne shares her excitement about discovering which achievements will be recognised with a Nobel Prize this year. Join us for a week of celebrating discoveries and achievements that have improved our world.

The 2026 Microsoft Digital Defense Report is out today, examining a threat landscape increasingly defined by interdependence. Read the full report: msft.it/63328alH1j

I don't usually respond to obvious idiots/bots/scammers in the DMs etc, but this one opened with the perfect line for me to follow up with.

More than 540,000 creds, valid and working, were found in public GitHub repos in a scan this July. More than 200,000 were uploaded even after GitHub turned on a security feature to catch them from being sent to public repos trufflesecurity.com/blog/github-...

Nine months of undetected access, unencrypted files, and Social Security numbers for over three million military personnel. Learn what is known about The Pentagon's latest data breach in my article on the Bitdefender blog: www.bitdefender.com/en-us/blog/h...

Your attack surface shows what attackers can reach. Hidden accounts, legacy software and misconfigurations can create exposures you don’t see until it matters. Percept CTEM continuously identifies and prioritizes real exposure, so teams know what to fix first.

Everything you do online is tracked, saved, and shared for what feels like a lifetime. But there are some steps you can take to minimize what data is out there. ssd.eff.org/module/how-...

Keio's rail ops survived ransomware thanks to OT segmentation. ShinyHunters bypassed PeopleSoft firewalls with one encoded letter, exposing 618K+ records. Segment your networks now. #CyberSecurity #Ransomware #DataBreach #Sequretek

America is not like this because Trump is like this; Trump is like this because America is like this.

⚠️📢 Attackers modified files from legitimate audio software to hide and launch SectopRAT. The malware steals passwords, cookies, card details and crypto wallet data while giving attackers remote control of the PC. Listen/Read: hackread.com/sectoprat-ab... #SectopRAT #Windows #Malware #Cybersecurity

Always a treat to have cybersecurity podcast legend Dave Bittner join "Smashing Security" as a guest! Hear us discuss how Flock security cameras are being hacked, how a vibe-coded website came a cropper, as well as Dave's love for Mrs Mills' piano-playing and my love for La La Land...

My thoughts on CISA’s future of CVE white paper along with @sawaba.bsky.social Let’s hope Congress backs enough budget at CISA to hire the human expert resources to guide what will also require heavy automation investment. Thanks @shaunwaterman.bsky.social www.bankinfosecurity.com/cisa-lays-ou...

Healthcare #cybersecurity is becoming a care-resilience issue. As clinical environments connect more devices, platforms, third parties and AI, visibility and remediation become critical to protecting care continuity and patient trust. 👇Read more. www.sequretek.com/resources/fa...

10-step approach to #OSINT mastery from Micah Hoffman Document your progress Create a list of things you don’t know Learn more deeply Seek breadth of knowledge Set aside time to learn Connect and collaborate with others and others. authentic8.com/blog/10-step...

Additional Nicknames: Why They're Important for OSINT and How to Find Them Guide by NoimosinyOSINT: Username search Search by email Search by avatar WHOIS Searching for links to websites and profiles Search by full names noimosiny.com/resources/bl...

The Sept Microsoft advisory spans Windows, Office, Azure, Entra ID, SQL Server, Exchange & more, with multiple Critical vulnerabilities and CVSS scores reaching 10.0. One Windows ALPC vulnerability is also flagged as exploited. Read more - www.sequretek.com/resources/re...

Awesome Twitter Tools Tools Browser Extensions Research Papers Datasets Twitter Lists github.com/hridaydutta1... #socmint

Much of BET’s digital journalism is no longer available on the live web. Internet Archive has preserved more than 199,000 BET articles over the years. They can now be accessed through the Wayback Machine & a new pilot explorer: wayback-labs.sf.archive.org/bet-explorer/