About
I've spent 25+ years building security programs from scratch — the kind that actually…
Articles by Gavin
-
OpenClaw exposes a missing trust layer in agentic AI
OpenClaw exposes a missing trust layer in agentic AI
Every major technology leap — from cloud migration and AI adoption, to retailers moving to e-commerce platforms — often…
1 Comment -
FBI Public Service Announcement on Badbox
FBI Public Service Announcement on Badbox
On June 5th, 2025, the Federal Bureau of Investigation issued Public Service Announcement I-060525, detailing how…
1 Comment -
AI isn’t magic, and it isn’t going to solve security on its own—but it’s a tool worth understanding.
AI isn’t magic, and it isn’t going to solve security on its own—but it’s a tool worth understanding.
“Don’t be afraid, our robot overlords might just be better than the current ones.” I opened a recent talk with that…
3 Comments -
12th anniversary of the FIRST Technical Colloquium (TC) in Amsterdam
12th anniversary of the FIRST Technical Colloquium (TC) in Amsterdam
The progam for the 12th anniversary of the FIRST Technical Colloquium (TC) in Amsterdam is here! Proudly brought to you…
3 Comments -
Achievement Unlocked
Achievement Unlocked
Appearing on The TODAY Show on NBC to raise awareness about a dangerous financial scam targeting consumers during the…
1 Comment -
The program is up! Take a look
The program is up! Take a look
The program is now available for the 10th anniversary of the FIRST TC in Amsterdam, brought to you by the Forum of…
6 Comments -
Vastflux - the biggest ad fraud we have ever seen
Vastflux - the biggest ad fraud we have ever seen
HUMAN's Satori Threat Intelligence and Research Team recently uncovered and shut down a massive ad fraud operation…
-
The incident responders conference #FIRSTAMS2023
The incident responders conference #FIRSTAMS2023
Join us as we celebrate the 10th anniversary of the Amsterdam Security Conference, brought to you by the Forum of…
7 Comments
Activity
10K followers
-
Gavin Reid reposted this🚀 HUMAN’s first-ever Monthly State of Agentic Traffic Report is here! Produced by HUMAN’s Satori Threat Intelligence Team, this new monthly report analyzes agentic and automated traffic to uncover key trends, emerging developments, and shifts in the threat landscape. This month, Aviad Kaiserman highlights a major insight: browser-based agents are rapidly dominating agentic traffic. Read the full report below:Gavin Reid reposted thisI’m excited to share HUMAN’s first-ever Monthly State of Agentic Traffic Report 🚀 We don't just talk about it - the Satori Threat Intelligence team uses HUMAN's unique data visibility to generate insights on what AI agents are actually doing in the real world: 🔍 Which AI agents are being used 📈 How frequently they operate 🌍 Where they’re active 🤖 How they behave in the wild And more... Stay tuned for our monthly updates to truly understand how AI agents are being used in practice 🌐📊 #AIAgents #AgenticAI #AItraffic #ThreatIntelligence #Cyberfraud #EcommerceSecurity #AgenticTrust #HumanSecurityState of Agentic Traffic - April 2026: Agentic browsers generate nearly three-quarters of agentic trafficState of Agentic Traffic - April 2026: Agentic browsers generate nearly three-quarters of agentic traffic
-
Gavin Reid shared thisAgentic traffic is no longer edge noise, it is a measurable channel. In HUMAN Satori’s new State of Agentic Traffic for April, agentic traffic grew 5.26%, with Comet and Atlas driving 70% of volume and 98% of activity landing in media, ecommerce, and travel. The real question is no longer “bot or not,” it is whether you can see which agent is acting on your customers’ behalf and enforce trust and policy in real time. #AgenticAI #AItraffic #ThreatIntelligence #Cyberfraud #EcommerceSecurity #MediaSecurity #DigitalTrust #AgenticTrust #HumanGavin Reid shared thisI’m excited to share HUMAN’s first-ever Monthly State of Agentic Traffic Report 🚀 We don't just talk about it - the Satori Threat Intelligence team uses HUMAN's unique data visibility to generate insights on what AI agents are actually doing in the real world: 🔍 Which AI agents are being used 📈 How frequently they operate 🌍 Where they’re active 🤖 How they behave in the wild And more... Stay tuned for our monthly updates to truly understand how AI agents are being used in practice 🌐📊 #AIAgents #AgenticAI #AItraffic #ThreatIntelligence #Cyberfraud #EcommerceSecurity #AgenticTrust #HumanSecurityState of Agentic Traffic - April 2026: Agentic browsers generate nearly three-quarters of agentic trafficState of Agentic Traffic - April 2026: Agentic browsers generate nearly three-quarters of agentic traffic
-
Gavin Reid reposted thisGavin Reid reposted this🍊 Good news: the OrangeCon schedule just dropped. Check out the talks and workshops we've planned. Take a look, pick your favourites, and start building your OrangeCon game plan. https://lnkd.in/eGJf6RyV
-
Gavin Reid reposted thisGavin Reid reposted thisWe have a new London role for an IR analyst to join our IR team ASAP 🙏 The role will support all functions and aspects of our Enterprise Security team inc Sec Ops, IR, Risk Management, Compliance, and Training. This role is geared toward a more junior individual with a solid understanding of security fundamentals across a broad spectrum of disciplines. This role has scope for lots of growth in a fast moving security programme. https://lnkd.in/esTqZqpD Will Cunha, CISSP #threatintelligence #cyber
-
Gavin Reid reposted thisGavin Reid reposted thisMy team (Azure Deployments & Bicep) is hiring for a Senior Software Engineer position! If you or someone you know is interested in applying, please use the following link to apply, and also reach out to me on LinkedIn: https://lnkd.in/eMbR7iDu.
-
Gavin Reid reposted thisBack home from Munich - the wonderful Hans-Petter Fjeld shared a cut version of James Shank and myself at FIRSTCTI2026 https://lnkd.in/eyePqWp7 - the slides will be shared at DNSFilter’s blog once I figure out how to tame the CMS gods… #firstcti2026How NOT to Be Your Adversary’s Best Friend | FIRST CTI 2026 Day 2How NOT to Be Your Adversary’s Best Friend | FIRST CTI 2026 Day 2
-
Gavin Reid reposted thisGavin Reid reposted thisIf only there were an AI LLM that was too powerful to be released that could find vulnerabilities like this…
-
Gavin Reid reposted thisGavin Reid reposted thisRecently I wrote a story about Benjamin B., the 22-year-old college student who helped crack the case of the world's biggest DDoS botnet, Kimwolf. (story is here. It's crazy: https://lnkd.in/giqZ7MK7 ) Kimwolf was built on the back of residential proxy software -- something often gets sneakily installed on people's networks without them realizing it. This video shows you how to use a company called Spur Intelligence to see if you're clean. It's tricky to get an absolutely certain read, but it's worth running their test to see what it says. Just make sure you're not on a VPN, as the test checks the reputation of your IP. https://spur.us/me Other companies have similar tests too, including Brundage's company, Synthient which is here: https://lnkd.in/gFdF4RMz And GreyNoise Intelligence which is here: https://lnkd.in/gpuhjVRG
-
Gavin Reid shared thisOur CEO Stu Solomon - Talking agentic traffic and the new currency of online trustGavin Reid shared thisTrust is the new foundation. As AI-driven activity accelerates, “human = good / bot = bad” is no longer the framework. In a new feature for The Drum, HUMAN CEO Stu Solomon explores this shift toward an agentic internet — where automated traffic is growing 8x faster than human traffic — and explains why we must move beyond simple blocking toward a model of dynamic trust. The real question is: what’s trustworthy, what’s risky, and how do we build systems that can tell the difference, and at scale. Read the full article: https://lnkd.in/gP-gGkeYWhen bots browse, shop and buy, what does trust look like?When bots browse, shop and buy, what does trust look like?
-
Gavin Reid liked thisGavin Reid liked thisTwo American cybersecurity professionals were sentenced last week to four years each in federal prison for deploying ALPHV/BlackCat ransomware against U.S. victims. Ryan Goldberg and Kevin Martin paid BlackCat administrators 20% of every ransom in exchange for access to the platform, then used their cybersecurity knowledge to extort American companies. When Goldberg attempted to flee abroad, FBI personnel tracked him through 10 countries. Their convictions follow the April 21 guilty plea of Angelo Martino, a private sector ransomware negotiator who worked with BlackCat actors against the very victims he was hired to represent. All three were part of the same U.S.-based conspiracy. The BlackCat sentencing came just over two weeks after another case involving Americans who turned trusted access against U.S. victims. On April 15, two U.S. nationals were sentenced to a combined 200 months for running laptop farms which placed North Korean IT workers inside more than 100 American companies and funneled over $5 million to the DPRK regime. These investigations show that threat actors do not always have to break in from outside the network. Sometimes they walk in through the hiring process, the contract, or a trusted relationship. The BlackCat conspiracy is a reminder that the trusted roles organizations rely on during a crisis warrant the same scrutiny as anyone else with sensitive access. If your organization is the victim of a ransomware attack, or you have reason to believe someone with trusted access is acting against you, contact your local Federal Bureau of Investigation (FBI) field office. Early engagement gives us the room to disrupt the actors, help you, and protect others. FBI Cyber Division #FBICyberDivision
-
Gavin Reid liked thisGavin Reid liked this24 hours ago, the news broke - I am incredibly proud to share that Astrix Security is joining Cisco! 🎉 When Idan Gour and I started Astrix in 2021, we kept asking the same question: who's securing the access of apps and services? AI agents and NHIs weren't even a concept back then. At RSA 2023, we went live with #NHI. The category exploded & with the rise of AI agents, the problem didn't just grow, it because #1 on everyone's minds. I genuinely believe that securing AI agents is one of the most important missions we face as humanity today. We cannot lose to the machines we created, otherwise the consequences are real. The time is now. Cisco, the same company that defined how humans connect to the world is now positioned to define how AI agents connect. That's not a coincidence. It's natural evolution. This wouldn’t be possible without a few very well deserved thank you’s: To Idan: My friend. My partner in crime. There is no one I would have rather bet on this with. Every hard call, every sleepless night, every moment of doubt, and every moment of pride, thank you for being in it with me. To the entire Astrix team: Ofek Amir Jony Blatt, Dana Natan Katz, Marina Epel, Rinat Oren, Chris Moses, Tim Jaroch, Elana Titen and every single person at Astrix Security - You showed up every day, through the extreme highs and the lows, and you never stopped believing. I am proud of each and every one of you. To our customers: You trusted us before Agentic AI and NHI were part of any mainstream conversation. Your insights, your thought leadership, and your partnership shaped everything. To our investors: Maor Fridman, Jonathan Saacks, Amit Karp, Adam Fisher, Yael Schiff, James Green, Rama Sekhar, Feyza Haskaraman, Cyberfutures, Kmeihn: thank you for believing in this vision early. To our trusted partners: Itay Frishman, Hen Zohar Amor, Ehud Ben Ari, Rebecca Dayan, Yally Keidar, Yael Kalman, you’ve stood by us through some of the most challenging and defining moments. And a group of special friends, mentors and advisors along the way - you make this industry so special! Dimitri Sirota, Gilad Engel, Matthew Bauer, Moran Ashkenazi, Nitzan Shapira, Ofer Ben-Noon, Ofer Smadari, Robert Rodriguez, Ross Hosman, Shomik Ghosh, Tammy Moskites, and many more. To Noa Jackson Amichay: the sweetest thank you. For believing in us from day one, your unbounded support & putting up with me through all of it! ❤️ Lastly, Jeetu Patel, Jessie Saini, Scott Herpolsheimer, Tom Gillis, Peter Bailey, Didi Dotan, Matt Caulfield, Rajneesh C., DJ Sampath, Brian Lindauer, Janey Hoe, Prasad Parthasarathi, Seungki (SK) Kim, Alon Weinberg, Mary D., Kelly Lombardo we couldn't be more excited to join forces. The culture, the scale, and most importantly, the shared conviction to help enable businesses connect securely. This is exactly where Astrix belongs. Let's go! 🚀
-
Gavin Reid liked thisInteresting results! Where I see the greatest cybersecurity risks with the Chinese LLMs are mostly supply chain based. In specific examples developers might download it locally or integrate in into custom developed applications that customers might have no idea they are using one. Those should be included in the your company threat matrix!Gavin Reid liked thisNIST just told us that DeepSeek V4 Pro is 8 months behind the US frontier. What makes me uncomfortable is that Chinese models are the only choice if you want frontier capability, operational sovereignty, and control over post-training. CAISI ran DeepSeek V4 through nine benchmarks in five domains, including two non-public evaluations. DeepSeek V4 is the most capable Chinese AI model tested to date, but it performs closest to GPT-5, not the GPT-5.4 or Opus 4.6 that DeepSeek's report claims to match. The gap hits hardest in cyber, abstract reasoning, and agentic coding. Highlights: 🔹 Cyber: 32% vs GPT-5.5's 71%. Abstract reasoning: 46% vs 79%. Agentic software engineering: 44% vs 78%. 🔹 Math tells a different story. DeepSeek V4 scored 97% on OTIS-AIME-2025, 96% on PUMaC and SMT. Slightly better than Opus 4.6. 🔹 DeepSeek V4 costs less than GPT-5.4 mini on 5 of 7 benchmarks, up to 53% cheaper per task. My take: 1️⃣ I read the math results as DeepSeek and other frontier models being largely at the 90+% ceiling on OTIS-AIME, PUMaC, and SMT. Not much headroom there. 2️⃣ The cyber gap probably isn't about cyber, or not only about cyber. V4 Pro's performance tracks the frontier on single-shot tasks and drops by 30+ points on long agentic ones. The model struggles to navigate long, noisy trajectories. The difference on scaffolds more advanced than CAISI's ReAct loop will most likely be less dramatic. 3️⃣ The V4 Pro architecture explains the model's cost efficiency and its struggles on long agentic tasks. At a 1M-token context, V4 Pro retains 10x less memory of past tokens than V3.2. The same compression that makes long-context inference cheap also drops information from earlier turns. 4️⃣ The bigger story is that frontier open-weights is now Chinese-only. Kimi K2.6, Qwen 3.5, GLM, and DeepSeek. Llama 4 trails on capability and comes with more restrictive usage terms. Let me repeat this. If you want frontier capability, operational sovereignty, and control over post-training, you have NO other choice but to use a Chinese model. And even with weights in hand, you can't easily verify what was in the training data or whether there are biases and refusals embedded. Happy Monday!
-
Gavin Reid liked thisGavin Reid liked thisWhen I first starting coding in the 90's, I learned to juggle because I'd wait around for the kernel to compile. Type 'make' and practice my juggling. Things got so quick that by the mid 2000's, I really did not have any time to juggle because the prompt would come back and I could get back to business. Here we are in 2026, and I am back to juggling waiting for my agents to finish their pipeline. What is old is new again :-)
-
Gavin Reid liked thisGavin Reid liked thisToday, I’m excited to share an important next step in our security journey: Infoblox is officially welcoming Axur to the team as we close on our acquisition. This acquisition strengthens our ability to preemptively protect organizations against attacks that begin outside the enterprise perimeter. For years, Infoblox has focused on being the most effective preemptive security solution on the market. We believe that being effective also means being simple to use and simple to deploy at scale. This philosophy continues to guide our industry-leading innovation and strategy today. Here's why the Axur acquisition marks a turning point for preemptive security: https://gag.gl/F59lZIWhy Axur Marks a New Era for Preemptive Cybersecurity | InfobloxWhy Axur Marks a New Era for Preemptive Cybersecurity | Infoblox
-
Gavin Reid liked thisGavin Reid liked thisIt’s funny because it’s true — This exploded, so if you’re looking to discover or protect your agents and coding assistants, do check out Knostic. https://knostic.ai/
-
Gavin Reid liked thisAt the National Cyber Security Centre we have just released 'Understanding adversarial attacks against Machine Learning and AI' which introduces a common language to improve awareness, threat modelling, and collaboration on AI security. This paper has been developed with ML security experts from the national security and defence communities. It outlines an evolving set of Adversarial ML (AML) attack classes which group attacks that exploit vulnerabilities inherent in the operation of ML models. Such attacks can lead to significant harm, including unintended changes to model functionality, or the extraction of sensitive information. This paper supplements existing taxonomies and frameworks, such as NIST's AML Taxonomy and MITRE ATLAS, which tend to include both ML-specific and wider cyber security attacks. https://lnkd.in/eKNXkjyuUnderstanding adversarial attacks against Machine Learning and AIUnderstanding adversarial attacks against Machine Learning and AI
-
Gavin Reid liked thisGavin Reid liked thisHappy to share our first weekly ransomware and data leak landscape report from eCrime.ch. What changed this week? - Qilin generated the highest visible claim volume this week, representing 31% of observed events. - 22% of observed events in this window showed a public data-leak indicator, which is a stronger escalation signal than a fresh listing alone. - Construction was the most represented sector in this window with 15 observed events. - Three actors appeared active this week without matching activity in the prior 30-day lookback, suggesting fresh campaigns or resurfacing infrastructure. Learn more on the report page and browse through earlier weeks: https://lnkd.in/eWcuz-AZ
Experience
-
-
-
-
-
-
-
-
-
-
-
-
-
Volunteer Experience
-
-
-
Organizer - Technical Colloquium FIRST AMS
FIRST
- Present 13 years 1 month
Science and Technology
the Amsterdam FIRST Technical Colloquia (TC) & Symposia is held annually. This event provides a forum for FIRST member teams and guests to discuss vulnerabilities, incidents, tools, and issues impacting incident response and security teams. Approximately 120 attendees from over 25 countries gather for three days in the Netherlands to learn, share knowledge, network, and listen to speakers from private, national, and public institutions.
www.first.org/events/colloquia/amsterdam2013…the Amsterdam FIRST Technical Colloquia (TC) & Symposia is held annually. This event provides a forum for FIRST member teams and guests to discuss vulnerabilities, incidents, tools, and issues impacting incident response and security teams. Approximately 120 attendees from over 25 countries gather for three days in the Netherlands to learn, share knowledge, network, and listen to speakers from private, national, and public institutions.
www.first.org/events/colloquia/amsterdam2013
www.first.org/events/colloquia/amsterdam2014
www.first.org/events/colloquia/amsterdam2015
www.first.org/events/colloquia/amsterdam2016
www.first.org/events/colloquia/amsterdam2017
www.first.org/events/colloquia/amsterdam2018
www.first.org/events/colloquia/amsterdam2019
www.first.org/events/colloquia/amsterdam2022
www.first.org/events/colloquia/amsterdam2023
www.first.org/events/colloquia/amsterdam2024
www.first.org/events/colloquia/amsterdam2025
Publications
Honors & Awards
-
Speaking Events
-
Speaking Events
FIRST GC 2025 – Konfety
(https://www.humansecurity.com/newsroom/human-discovers-konfety-ad-fraud-operation-wielding-novel-evil-twin-evasion-method)
Underground Economy 2024 – Phish & Ships
(https://www.humansecurity.com/newsroom/human-uncovers-phish-n-ships-scheme)
Digital Crimes Consortium – Badbox
Underground Economy 2023 – Badbox
Ecrime 2023 – Badbox
(https://www.humansecurity.com/hubfs/HUMAN_Report_BADBOX-and-PEACHPIT.pdf)
Microsoft Digital Crimes…Speaking Events
FIRST GC 2025 – Konfety
(https://www.humansecurity.com/newsroom/human-discovers-konfety-ad-fraud-operation-wielding-novel-evil-twin-evasion-method)
Underground Economy 2024 – Phish & Ships
(https://www.humansecurity.com/newsroom/human-uncovers-phish-n-ships-scheme)
Digital Crimes Consortium – Badbox
Underground Economy 2023 – Badbox
Ecrime 2023 – Badbox
(https://www.humansecurity.com/hubfs/HUMAN_Report_BADBOX-and-PEACHPIT.pdf)
Microsoft Digital Crimes Consortium 2022 – Scylla
(https://www.humansecurity.com/learn/blog/poseidons-offspring-charybdis-and-scylla)
HUMAN Collective 2022 – Darkweb & Genesis Market
Futurecon 2020 – Getting Malware from the Source for Better Detections
AISA 2020 – Reversing for Fun & Profit
Code Blue 2019 – Using the Dark Web for Incident Detection
AUSCERT 2019 – From the Hacker’s Keyboard to the Protector’s SOC
(https://www.youtube.com/watch?v=l10QATQkGic)
GovWare / AISA 2018 – How-to SOC
Cisco Live 2017 – Cisco Security & Threat Intelligence, Multiplying Threat Indicators and Improving Detection
Cisco Live 2015 – Using NetFlow for Incident Response
FIRST 2015 – So You Want a Threat Intelligence Function (But Were Afraid to Ask)
Digital Crimes Consortium 2015 – RAT Tracking, Proactive Attribution via C2 Profiling
Cisco Live 2014 – Emerging Threats, The State of Cyber Security
Cisco Live 2013 – The State of Web Security, Attack and Response (Distinguished Speaker Award)
Georgetown University Institute for Law, Science, and Global Security 2012 – International Engagement on Cyber, Establishing International Norms and Improved Cyber Security
Splunk 2012 – Where Automation Ends and People Begin, One CSIRT’s Journey Replacing a SIEM
The Knowledge Group 2011 – Cyber Security Best Practices for Banking and Financial Sectors
Paranoia 2010 – A Day in the Life of an Incident Responder
Recommendations received
4 people have recommended Gavin
Join now to viewOther similar profiles
Explore more posts
-
Raj Samani
Exploitation timelines are increasingly measured in days rather than weeks. Our latest report from Rapid7 Labs correlates vulnerability publication data, confirmed exploitation trends, frontline MDR incident response telemetry, and dark web, cybercrime, and nation-state intelligence to provide a unified view of how exposure evolves into compromise. One of the biggest standouts: how rapidly AI is being integrated into attacker playbooks, accelerating the operationalization of exposure. Many of the incidents we investigate still originate from known, unaddressed exposure. In those cases, attackers don’t need sophistication - they need opportunity. As remediation windows shrink, reducing that opportunity becomes essential to limiting compromise. You can download the 2026 Global Threat Landscape report here: https://r-7.co/4bQOAtq #infosec #cybersecurity
1 Comment -
Adam Shnider
✴️ 10 years. That’s the offline retention requirement CMS is now pointing to for business audit records, tied to 45 CFR §155.1210 guidance. This isn’t just “keep logs longer.” It’s “design your environment to retain, protect, and produce records on demand.” Ian Walters Principal at Coalfire explains the v1.04 updates and how to get ahead of them. 👉 Read now: https://ow.ly/hXzZ50XVCiw #Healthcare #RegulatoryCompliance #GRC #Cybersecurity #Audit
-
Dan Ricci
Good morning! Here is this week's ICS Advisory, Other CERT, and Vendor vulnerability advisories weekly summary for 23 - 27 February 2026. This past week, CISA released 12 new CISA ICS Advisories for the following vendors: Copeland, InSAT, CloudCharge, EV Energy, Chargemap, SWITCH EV, Mobility46, EV2GO, Gardyn, Johnson Controls, Inc. Pelco, Inc. and Schneider Electric. One update was released this past week for Honeywell Schneider Electric, Mitsubishi Electric, Hitachi Energy, ICONICS and Mitsubishi Electric. Based on the new CISA advisory, #Energy, #TransportationSystems, #Commercial #Facilities, #Healthcare and #PublicHealth, #Defense #Industrial Base, #Food and #Agriculture, Critical #Manufacturing, #Government #Facilities, #Financial #Services, #InformationTechnology, #Water and #WastewaterSystem are the potentially affected critical infrastructure (CI) sectors. The ICS Advisory Project identified 16 new ICS Advisories for Festo, ARC Informatique, Moxa, Phoenix Contact, ABB, Bosch Rexroth, Hitachi Energy, Ubiquiti Networks, Trumpf, PDUexperts, Socomec and one update for Hitachi Energy. View the summary details of other CERT & Vendor product advisories identified last week (23 - 27 February 2026) at: https://lnkd.in/efKiMsxs This past week, CISA added 3 new Known Exploited Vulnerability (KEV) Catalog. None added this week correlated to a CISA ICS Advisory. ICS Advisory Project identified one CVE: CVE-2020-11023 – JQuery Cross-Site Scripting (XSS) Vulnerability listed in the Festo advisory for CODESYS vulnerabilities in Festo Automation Suite [VDE-2025-108]. This week, ICS Advisory Project, powered by Industrial Data Works LLC, in collaboration with EmberOT, released our 2024–2025 ICS/OT Vulnerability Intelligence Report. Check it out at: https://lnkd.in/ehG4DNPs Thank you all at EmberOT for your amazing support in getting this report out this year. Acknowledgement: Thank you Mikael Vingaard at the ICSRange for sharing with ICS[AP] the new ICS Advisory for PDUexperts. Visit the ICS[AP] CISA KEV Catalog Dashboards: https://lnkd.in/emzXBbBw View previous ICS Advisory Project weekly summaries: https://lnkd.in/eQKxhAEi To view the updated ICS Advisory Project Dashboards, visit: icsadvisoryproject.com Sign up to receive ICS[AP] Weekly Summary Slides & Other CERT and Vendor Advisory Summaries via email every Monday https://lnkd.in/eUwQrrj4 I appreciate everyone's comments & support. Have a great week! #CISA #ot #ics #otsecurity #icssecurity #cybersecurity #cybersecurityawareness #industrialautomation #buildingautomation #oilandgas #maritime #vulnerabilitymanagement Disclaimer: The views expressed in my LinkedIn posts and profiles are my own, not those of my employers or LinkedIn.
-
CyberCureME - Cyber Security Marketplace
CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog: The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a high-severity security flaw impacting OSGeo GeoServer to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild. The vulnerability in question is CVE-2025-58360 (CVSS score: 8.2), an unauthenticated XML External Entity (XXE) flaw that affects all versions prior to
-
Ran Nahmias
Big Story here, in my opinion: The group responsible for cybersecurity information sharing across state lines is hemorrhaging funds, and its operator is in emergency funding mode. It’s hard to overstate the importance of basic information-sharing in cybersecurity. When the name of the game is prevention, siloed state agencies rely on threat detection and vulnerability research services from their peers around the country, shared via open lines of communication. https://lnkd.in/gfwFgaiR
-
SlashID
New breakdown: NYDFS’s 2026 vishing advisory, mapped to identity detections and controls. The advisory describes a consistent pattern: attackers impersonate IT help desk staff, direct victims to a malicious link, capture credentials in real time, then prompt for the MFA code to immediately authenticate and obtain remote access. The sequence we see repeatedly: ↳ Password reset → new login from new geo/device within minutes ↳ New MFA device enrolled shortly after reset ↳ SSO session minted from a new IP / ASN, then immediate access to high-value apps ↳ Privilege escalation attempts after initial foothold The post also maps a concrete control to the help desk hinge point: Mutual TOTP verification, so resets and enrollments aren’t approved based on voice alone. Full breakdown → https://lnkd.in/gBv3e_Hk
Explore top content on LinkedIn
Find curated posts and insights for relevant topics all in one place.
View top contentOthers named Gavin Reid
210 others named Gavin Reid are on LinkedIn
See others named Gavin Reid