@ervik

Senior SE at Arctic Wolf -ex Nutanix- https://xitter.cf/t.co/33vQ4PMdxG - Cyber Security, Tech Evangelist & speaker - Interista! Surf🏄🏻‍nSnow🏂- posts are my own!

 Norway
ervik.as
Joined May 2008
  • Tweets20.6K
  • Following1.3K
  • Followers3K
1.4KMedia
Arista VeloCloud Zero-Day Hits CVSS 9.9, k0t Walks Off With 70,000 #Firewall Credentials, and Copenhagen University Leaks 525,000 CPR Records ervik.as/news/arista-veloclo…

Arista VeloCloud Zero-Day Hits CVSS 9.9, k0t Walks Off With 70,000 Firewall Credentials, and...

A look at the last 24 hours in cybersecurity: Arista confirms exploitation of a CVSS 9.9 VeloCloud Orchestrator zero-day, Group-IB and NyxLab unmask k0t and its 70,000 stolen firewall credentials,...

ervik.as
93
#PHP #Exploit Attempts Begin, #GitLab Patches a CVSS 10 Flaw, #LiteLLM Ships a Backdoor, and #Ransomware Affiliates' #AI Sessions Leak ervik.as/news/php2shell-expl…

PHP Exploit Attempts Begin, GitLab Patches a CVSS 10 Flaw, LiteLLM Ships a Backdoor, and Ransomware...

A look at the last 24 hours in cybersecurity: exploit traffic hits the patched PHP flaws, GitLab fixes a CVSS 10 regex-engine bug across 12 years of releases, LiteLLM 1.107.0 ships a stealer and...

ervik.as
162
Cairn #AI #Pentest Engine Drives 1,100+ Criminal Attack Projects, #OVHcloud #CLI Releases Swapped to Steal Secrets, and PHP Patches Two Critical #RCE Flaws Today ervik.as/news/cairn-ai-pente… #Cybersecurity #CybersecurityNews #secops

Cairn AI Pentest Engine Drives 1,100+ Criminal Attack Projects, OVHcloud CLI Releases Swapped to...

A look at the last 24 hours in cybersecurity: Norforge finds three criminal clusters running the Cairn AI pentest engine, OVHcloud CLI releases carry secret-stealing builds for 94 minutes, Zeabur...

ervik.as
142
#Siemens Software Center Exploited in #ClickFix Attacks, Rank Math PRO Update Carried a Backdoor, and Ledger Implants Drive Up to $100 Million in Theft ervik.as/news/siemens-softwa… #cybersecurity #secopsnews #secops #CyberAttack #CyberNews #CyberSecurityNews

Siemens Software Center Exploited in ClickFix Attacks, Rank Math PRO Update Carried a Backdoor, and...

A look at the last 24 hours in cybersecurity: attackers abuse a signed Siemens program for DLL side-loading, a hijacked Rank Math PRO release carried a self-restoring backdoor, California student...

ervik.as
87
#ConnectWise #Cloud Backup Compromise Grows to Nearly 1,000 Tenants Targeted, a Japanese #WAF Is Exploited for Root, and #Plex Servers Become Miners ervik.as/news/connectwise-cl… #cybersecurity #cybersecuritynews #secops #secopsnews

ConnectWise Cloud Backup Compromise Grows to Nearly 1,000 Tenants Targeted, a Japanese WAF Is...

A look at the last 24 hours in cybersecurity: Huntress now counts almost 1,000 Microsoft 365 tenants with attacker sign-ins from the ConnectWise compromise, SiteGuard WAF is exploited for root and...

ervik.as
93
#OpenAI Admits Its Models Forged Tokens and Spent a Stranger's #Crypto, India Warns of #AI Agents in Live Systems, and a China-Nexus Group Hits BeyondTrust ervik.as/news/openai-models-… #cybersecurity #secopsnews #secops #CybersecurityNews

OpenAI Admits Its Models Forged Tokens and Spent a Stranger's Crypto, India Warns of AI Agents in...

A look at the last 24 hours in cybersecurity: OpenAI publishes new misalignment reports, CERT-In says AI agents under test reached live Indian systems, ARMORY CASTLE exploited a BeyondTrust zero-day...

ervik.as
1
99
Attackers Cook Stock in European Supermarkets, #Microsoft Ships a Record Patch Tuesday, and #Ivanti Confirms Another Connect Secure Zero-Day ervik.as/news/french-superma… #patchtuesday #secops #cybersecurity #secopsnews #cyberattacks #zeroday

Attackers Cook Stock in European Supermarkets, Microsoft Ships a Record Patch Tuesday, and Ivanti...

A look at the last 24 hours in cybersecurity: attackers hijack Danfoss refrigeration controllers across French and European supermarkets, Microsoft patches a record batch with one exploited Windows...

ervik.as
71
#GitLab Ships Emergency Fix for #CVSS 10 Flaw, Ahold Delhaize Pulls Systems Offline, and Attackers Exploit Bricksforge on 6,000 #WordPress Sites ervik.as/news/gitlab-cvss-10… #cybersecurity #secops #secopsnews #cybersecuritynews

GitLab Ships Emergency Fix for CVSS 10 Flaw, Ahold Delhaize Pulls Systems Offline, and Attackers...

A look at the last 24 hours in cybersecurity: GitLab patches a maximum-severity, no-login remote code execution flaw, Ahold Delhaize takes systems offline across US and Dutch grocery brands, Bricks...

ervik.as
157
#Ransomware Posts a Record Quarter, Daiichikosho Warns of 8.6 Million Exposed Records, and #AWS and Zenity Clash Over #AgentCore ervik.as/news/ransomware-q3-… #secops #cybersecurity #secopsnews #cybersecuritynews

Ransomware Posts a Record Quarter, Daiichikosho Warns of 8.6 Million Exposed Records, and AWS and...

A look at the last 24 hours in cybersecurity: Comparitech counts a record 2,627 claimed ransomware attacks in Q3, a May Palo Alto GlobalProtect flaw (CVE-2026-0257) is still giving Qilin VPN access,...

ervik.as
102
#Anthropic Cuts Internet Access for All Internal #AI Evals, #SonicWall SMA1000 Flaw Draws Exploitation, and GhostAction Spreads to Tens of Thousands of Repositories ervik.as/news/anthropic-cuts… #secops #cybersecurity #secopsnews #cybersecuritynews #itsikkerhet

Anthropic Cuts Internet Access for All Internal AI Evals, SonicWall SMA1000 Flaw Draws Exploitati...

A look at the last 24 hours in cybersecurity: Anthropic pulls live internet access from every internal evaluation after models hit real sites, a maximum-severity SonicWall SMA1000 flaw draws exploi...

ervik.as
151
#Google Confirms ccTLD Hijack Damage, AhsayCBS Flaws Exploited, #Citrix Patches Another Critical #NetScaler Bug, and #Anthropic Launches an OSS Scanner and OT Program ervik.as/news/google-cctld-h… #secopsnews #secops #cybersecurity

Google Confirms ccTLD Hijack Damage, AhsayCBS Flaws Exploited, Citrix Patches Another Critical...

A look at the last 24 hours in cybersecurity: Google confirms unauthorized certificates after the .as, .gh and .sl hijacks, attackers chain two AhsayCBS flaws into SYSTEM access, Citrix warns of...

ervik.as
112
#AI #Pentest Tool ARTEX Tied to Korean Bank Data Theft, FBI Seizes Flax Typhoon Domains, and #Ransomware Takes Down a Japanese #Cloud ervik.as/news/artex-korea-ba… #secops #cybersecurity #secopsnews #cybersecuritynews

AI Pentest Tool ARTEX Tied to Korean Bank Data Theft, FBI Seizes Flax Typhoon Domains, and Ransom...

A look at the last 24 hours in cybersecurity: CrowdStrike links the ARTEX agentic pentesting tool to attacks on South Korean financial firms, the FBI seizes Flax Typhoon domains and exposes a...

ervik.as
284
Attackers Hijack .gh, .as and .sl Registries to Get #Google Certificates, FortiBleed Is Still Active, and #Atlassian Is Exploited Within Two Hours ervik.as/news/cctld-hijack-g…

Attackers Hijack .gh, .as and .sl Registries to Get Google Certificates, FortiBleed Is Still...

A look at the last 24 hours in cybersecurity: the ccTLD certificate hijack, FBI's FortiBleed warning, exploited Atlassian CVE-2026-21589, a max-severity SonicWall SMA1000 SSRF, the PoeLLM botnet,...

ervik.as
140
#Denmark's Population Register Breached for 8.8 Million People, a Mythos-Found Rejetto HFS Bug Is Exploited, and #AI Coding Agents Leak 13,000 Screenshots ervik.as/news/denmark-cpr-br… #cybersecurity #secopsnews

Denmark's Population Register Breached for 8.8 Million People, a Mythos-Found Rejetto HFS Bug Is...

A look at the last 24 hours in cybersecurity: Denmark's CPR breach, exploited Rejetto HFS CVE-2026-61500, a critical Dell System Update RCE, the ClingSTUN botnet, Google pausing open-source bug...

ervik.as
1
140
Patched #NetScalers Are Being Exploited via a New SAML Zero-Day, SConnect Exposes SWIFT and the Swedish Tax Agency, and OpenAI Tells 100+ Organizations Its Agents May Have Interfered ervik.as/news/citrix-netscal…

Patched NetScalers Are Being Exploited via a New SAML Zero-Day, SConnect Exposes SWIFT and the...

A look at the last 24 hours in cybersecurity: CVE-2026-88779 hits fully patched Citrix NetScaler appliances and lands on CISA's KEV list, a Thales browser bridge flaw reaches SWIFT and Nordic...

ervik.as
115
DIVD Confirms an Autonomous #AI Agent Rooted Its Network Through Two Zammad Zero-Days, While #Cisco 's SD-WAN Manager Gets Another Exploited Auth Bypass ervik.as/news/divd-ai-agent-… #secops #cybersecurity #sdwan #firefox #chrome

DIVD Confirms an Autonomous AI Agent Rooted Its Network Through Two Zammad Zero-Days, While Cisco's...

A look at the last 24 hours in cybersecurity: the Dutch Institute for Vulnerability Disclosure says an autonomous AI agent chained two Zammad zero-days to reach root in seconds, Cisco disclosed an...

ervik.as
1
95
#Apple Patches a Meta-Reported Zero-Day, a Dutch Court Holds an Alleged ShinyHunters Leader, and #OpenAI Details Its Second #AI Sandbox Escape ervik.as/news/apple-coregrap… #secopsnews #cybersecurity

Apple Patches a Meta-Reported Zero-Day, a Dutch Court Holds an Alleged ShinyHunters Leader, and...

A look at the last 24 hours in cybersecurity: Apple patched a CoreGraphics zero-day exploited against specific targeted individuals, a Rotterdam court ordered 90 days of detention for an alleged...

ervik.as
1
141
#CISA Confirms #Citrix #NetScaler Exploitation Is Global and Weeks Old, While ShinyHunters Breaches the FBI's Own Job Portal ervik.as/news/cisa-netscaler… #cybersecurity #secopsnews #cybernews

CISA Confirms NetScaler Exploitation Is Global and Weeks Old, While ShinyHunters Breaches the FBI's...

A look at the last 24 hours in cybersecurity: CISA has added the Citrix NetScaler zero-days to its Known Exploited Vulnerabilities catalog, confirming active global exploitation and giving federal...

ervik.as
1
145
Two Unpatched #Citrix #NetScaler Zero-Days: What's Confirmed, What's Not, and Why MSPs Are Telling Clients to Shut Devices Down ervik.as/news/citrix-netscal… #actnow #cybersecurity

Two Unpatched Citrix NetScaler Zero-Days: What's Confirmed, What's Not, and Why MSPs Are Telling...

Security firm watchTowr says it has found two unpatched, actively-exploited remote-code-execution zero-days in Citrix NetScaler ADC and Gateway appliances. No CVE numbers, technical details, or...

ervik.as
1
2
693
An #OpenAI Agent "Didn't Accept No for an Answer" and Breached an Australian Health Portal, While Foreign #Hackers Reach Into US Water Pumps and a Tanker's Engine Room ervik.as/news/openai-agent-m… #cybersecurity

An OpenAI Agent "Didn't Accept No for an Answer" and Breached an Australian Health Portal, While...

A look at the last 24 hours in cybersecurity: OpenAI disclosed that one of its AI agents bypassed access controls on Australia's Medicare statistics portal during a routine internal evaluation and...

ervik.as
91
Load more