Chad F. Walter
@cfwalter
Followers
3K
Following
1K
Media
40
Statuses
4K
Chief Revenue Officer, Business Leader, Team Builder, Cybersecurity and Data Privacy Evangelist https://t.co/76q2PG8AgF
Clifton Park, New York
Joined June 2009
Another avoidable breach. This time impacting EY and their clients. Plaintext data, including PII, controlled IP, keys, and tokens were exposed and exfiltrated. Why are we still working with plaintext databases? https://t.co/vHyjfCe5Hu
#cybersecurity #databreach
paperclip.com
Learn how database encryption in use prevents data breaches like the EY 4TB SQL Server backup exposure. Discover encryption best practices that turn cloud misconfigurations into audit findings, not...
0
0
1
According to Cybersecurity Ventures @CybersecuritySF, #cybercrime damages are expected to hit $10.5 trillion annually this year. That’s a massive jump from the $3 trillion in damages hit in 2015.
0
1
3
🚨 DIG AI - Darknet AI Tool Enables Hackers to Launch Sophisticated Attacks Source: https://t.co/wqR6xeOKaU A new and ominous player has emerged in the rapidly expanding landscape of "Shadow AI." DIG AI, an uncensored artificial intelligence tool hosted on the darknet, is
3
57
200
A Look Ahead at AI Security Challenges and Solutions for 2026 https://t.co/97E5BkNGRp
#AI #Encryption #AgenticAI #DataSecurity #Cybersecurity
paperclip.com
IDC FutureScape 2026 reveals why encryption-in-use is critical for AI security. Learn how to protect data with agentic AI, zero trust, and post-quantum readiness.
0
0
1
More unencrypted, plaintext data exposed. Thank you @ChuckDBrooks for posting.
0
0
1
⚡ Amazon confirms a Russian GRU unit hacked Western energy and infrastructure networks for years. The threat wasn’t malware, it was silent credential theft from live traffic. From 2021–2025, APT44 relied less on zero-days and more on exposed routers and VPN gateways. 🔗 Read
3
81
183
With increased online activity and reduced staffing, the holiday season makes an attractive target for threat actors. That’s why robust logging and real-time monitoring are critical. Learn more: https://t.co/dZJHjcLJNV
#SecureTheSeason
2
19
48
🚨🔐⚠️ "Data breach at credit check giant 700Credit affects at least 5.6 million" At least 5.6 M people had their names, addresses, DOB, & Social Security numbers stolen in a data breach at 700Credit, a company that runs credit checks 🖥️ https://t.co/HSekaiCsVK
techcrunch.com
700Credit, a company that runs credit checks and identity verification services for auto dealerships across the U.S., had a data breach that allowed a hacker to steal names, addresses, dates of...
1
1
2
#ICYMI: Check out our new guidance for #CriticalInfrastructure owners & operators on tailoring AI to OT systems: https://t.co/3tmkMjeGBh
4
32
68
🚨 North Korean hackers are exploiting the new React2Shell bug (10.0-severity) to drop EtherRAT — malware that hides its commands inside Ethereum smart contracts. It even makes 9 blockchain nodes “vote” to pick its server, so takedowns fail. 🔗 Read now ↓
9
82
250
Ransomware Payments Surpassed $4.5 Billion: US Treasury
securityweek.com
Ransomware payments reached the highest level in 2023, at $1.1 billion paid in 1,512 reported incidents.
0
3
5
More plaintext data exposed. Threat actors always get in. Encrypt the data! https://t.co/94Ui9i9LFY Tri-Century Eye Care Data Breach Impacts 200,000 Individuals -
securityweek.com
Tri-Century Eye Care was targeted recently by the Pear ransomware group, which claimed to have stolen over 3 Tb of data.
0
0
0
🚨 Hackers are uploading fake resumes on Indeed and JazzHR to breach Canadian companies. 80% of attacks in this campaign hit Canada. The “PDFs” actually launch QWCrypt ransomware through a tool called RedLoader. 🔗 Read:
thehackernews.com
Sophos reports STAC6565 targeting nearly 40 victims, with 80% of attacks hitting Canadian firms and involving QWCrypt ransomware.
4
66
132
New ‘Broadside’ Botnet Poses Risk to Shipping Companies
securityweek.com
The botnet attempts to steal credentials from infected TBK DVR devices, in addition to abusing them to launch DDoS attacks.
0
4
4
Apache warns of 10.0-rated flaw in Tika metadata ingestion tool
theregister.com
Infosec in Brief: PLUS: New kind of DDOS from the Americas; Predator still hunting spyware targets; NIST issues IoT advice; And more!
0
1
4
🚨 Researchers Hack Google’s Gemini CLI Through Prompt Injections in GitHub Actions Source: https://t.co/1jnRDPjDLa A critical vulnerability class dubbed "PromptPwnd," affects AI agents integrated into GitHub Actions and GitLab CI/CD pipelines. This flaw allows attackers to
2
40
89
CISOs Should Be Asking These Quantum Questions Today
darkreading.com
As quantum moves into production workflows, here's what enterprise security leaders should be focused on, according to Lineswala.
0
2
3
Claude Agent Skills could be used to deploy malware, researchers say | SC Media
scworld.com
An attacker could distribute a malicious Skill that quietly retrieves external scripts.
0
2
1