@LMGSecurity profile picture
LMG Security @LMGSecurity

Expert cybersecurity consulting firm, delivering cybersecurity solutions, advisory services, penetration testing, training & more. @LMGsecurity@infosec.exchange

Joined August 2011
  • Tweets 2,590
  • Following 315
  • Followers 1,234
405 Photos and videos
Ransomware just got a terrifying upgrade. Rapid7's team built a PoC that infects CPU microcode, potentially bypassing all traditional cybersecurity defenses and locking drives before the OS even boots. ow.ly/Wsht50VV1Nm #cybersecurity #ransomware #infosec #DFIR #CISO #IT

World's first CPU-level ransomware can "bypass every freaking traditional technology we have out...

A cybersecurity expert has created a proof of concept for CPU ransomware.

tomshardware.com
184
Secure file transfer tools are under attack—and it’s changing #cyberinsurance. Watch our 9-min video for expert insights on the #Cleo #databreach, AI-fueled exploits, CrowdStrike fallout & what your team can do now. youtu.be/vAm5N8c2EGk #Cybersecurity #IT #Infosec #CISO

Attackers are Targeting File Transfer Software

Secure file transfer vulnerabilities are leading to massive breache...

youtube.com
182
AI-powered features = new attack surface! Check out our new blog in which LMG Security’s Senior Penetration Tester @Baybe_Doll shares real-world strategies for #promptinjection testing in #webapps. ow.ly/F8OO50VSYML #AIsecurity #DFIR #Pentest #Cybersecurity #Infosec #IT

Are Your AI-Backed Web Apps Secure? Why Prompt Injection Testing Belongs in Every Web App Pen Test...

Discover how prompt injection testing reveals hidden vulnerabilities in AI-enabled web apps. Learn real-world attack examples, risks, and why your pen test must include LLM-specific assessments.

lmgsecurity.com
2
5
528
Outdated #routers are powering massive proxy-for-hire #botnets—masking #malware & credential theft. In this #CybersideChats, @SherriDavidoff & @EvilMattXD break down the FBI’s May 2025 alert, #TheMoon malware & more. youtu.be/x_40BlvWsHk #Cybersecurity #CISO #Cyberaware #IT
0:17
1
97
Think your network’s secure? Think again. Join us May 28 for Cyberside Chats Live with @TomPohl. Learn how #pentesters get domain admin in 90% of tests—and how to stop real attackers. Register: ow.ly/cMfV50VR7Hn #Cybersecurity #Pentest #InfoSec #DFIR #PenetrationTesting

Cyberside Chats: Live! How Hackers Get In: Penetration Testing Secrets from the Front Lines | LMG...

In this quick, high-impact session, we’ll dive into the top three cybersecurity priorities every leader should focus on. From integrating AI into your defenses to tackling deepfake threats and...

lmgsecurity.com
69
Check out TechSpot's new article about @SherriDavidoff & @EvilMattXD's #RSAC2025 demo of rogue #AI tools like #WormGPT and how “evil AI” is accelerating real-world #cyber threats. ow.ly/FYpn50VQ6nS #Cybersecurity #AIsecurity #RSAC #Infosec #AI #EvilAI #CISO #SMB #CIO #IT

At RSA Conference, experts reveal how "evil AI" is changing hacking forever

On a recent morning at the annual RSA Conference in San Francisco, a packed room at Moscone Center had gathered for what was billed as a technical...

techspot.com
89
New from Penetration Testing Manager @TomPohl: How default #Cisco settings gave up full router configs—no credentials needed. Learn how small oversights can lead to big breaches. Read the blog: ow.ly/3Fqh50VPqJV #Cybersecurity #PenetrationTesting #Pentest #IT #CISO #DFIR

Cisco SNMP Exploit Case Study: Internal Penetration Test Using Default Router Settings | LMG...

Learn how LMG Security penetration testers extracted a Cisco router’s running configuration using default SNMP settings and built-in features — no exploits required. See how internal tests uncover...

lmgsecurity.com
1
1
137
Congrats to @SherriDavidoff & @EvilMattXD for an amazing #RSAC session that PCWorld called “a glimpse into a mirror universe.” Read the article about their demos showing how Evil #AI is reshaping #cybersecurity: ow.ly/PYfS50VMXIc #CISO #CyberAware #IT #DFIR #Infosec #SMB

I saw how an “evil” AI chatbot finds vulnerabilities. It’s as scary as you think

These rogue AI chatbots don't just find vulnerabilities, but exploits for those weaknesses, too.

pcworld.com
50
Hackers are using #AI to launch faster, smarter #cyberattacks, #deepfakes, AI exploits, & more. @SherriDavidoff & @EvilMattXD share the details & how to defend against the new wave of #cybercrime. ow.ly/7q0T50VMKZi #Cybersecurity #InfoSec #Cyberaware #SMB #CEO #CISO #DFIR
1:03
1
1
88
Cybercriminals are using #GoogleAds to hijack accounts, steal credentials, and more! Learn how to protect your company. Watch now: youtu.be/Q_qTvyVlGwc #Cybersecurity #Malvertising #Phishing #AI #Google #Cyberaware #SMB #RiskManagement #Tech #IT #AI
61
For our #Utah friends: Early Bird Pricing ends 5/2 for our June 10th #SaltLakeCity #PenetrationTesting for #IT Pros course! Learn to hack your own network and fix it in this one-day hands-on, call taught by #pentest experts @TomPohl & @EvilMattXD. ow.ly/XXAX50VKGOn
43
Quantum computing has the potential to break today’s most widely used #encryption standards. Are you ready? We share how to protect your data & future-proof your #security. youtu.be/MnhAm4f7Bqk #Cybersecurity #QuantumComputing #Quantum #CISO #CIO #SMB #RiskManagement #Cyber
0:21
45
Is your organization prepared for a #ransomware attack? One weak spot can lead to data theft & shutdowns. Download our free 10-step prevention checklist: ow.ly/pJSj50VIWOS #Cybersecurity #RiskManagement #DataProtection #Infosec

Ransomware Prevention Best Practices Checklist | LMG Security

To download this checklist as a PDF, click here: Stay a step ahead of cybercriminals with proactive protection! Ransomware attacks often start with a single breach, be it through a cloud app,...

lmgsecurity.com
25
What happens when #ransomware hits—and you’re holding a glass of premium whiskey? We teamed up with @ConstangyLaw for a live tabletop whiskey tasting at Multnomah Whiskey Library. Twists, insights & spirits flowed. Best #tabletop in years? We think so. #Cybersecurity #CISO #IT
52
Hybrid #cloud is the norm, but it's increasing cyber risk. Principal Consultant Benjamin Kast breaks down how attackers exploit misconfigurations & what you can do to secure your hybrid environment. ow.ly/4m7j50VGCLT #HybridCloudSecurity #Cybersecurity #Infosec #IT #CISO

Hybrid Cloud Security in an Era of Escalating Cyber Risk | LMG Security

Hybrid cloud architectures are broadly used, but often not fully secured. Read our blog for strategic advice on hybrid cloud security, common attack vectors, and how to protect your environment with...

lmgsecurity.com
31
Quantum computing is coming—fast. Is your cybersecurity strategy ready? Join LMG Security’s Sherri Davidoff & Matt Durrin for Cyberside Chats: Quantum Shift: How Cybersecurity Must Evolve Now. 🕚 11am PT / 2pm ET 🔗 lmgsecurity.com/event/cybers… #Cybersecurity #QuantumComputing

Cyberside Chats: Live! Quantum Shift: How Cybersecurity Must Evolve Now | LMG Security

In this quick, high-impact session, we’ll dive into the top three cybersecurity priorities every leader should focus on. From integrating AI into your defenses to tackling deepfake threats and...

lmgsecurity.com
61
Red Alert: CISA’s budget cuts could leave #cyber defenders exposed. In this week’s #CybersideChats, @SherriDavidoff & @EvilMattX unpack the fallout—from #CVE to ISAC support cuts—& what your org should do now. youtu.be/xEKVdxlCUw0 #Cybersecurity #CISA #Infosec #CISO #CIO #IT
0:10
91
Microsoft 365 credential theft is evolving fast. Attackers are now using tools like #Copilot to commit fraud inside your environment. Learn how to stop them in our 4-min video: ow.ly/qckE50VEMn9 #Microsoft365 #CoPilot #Cybersecurity #Phishing #Cloud #M365 #Cyberaware #SMB
75
How your team responds to a #databreach can make a $1.5 million difference in damages. In our latest blog, @derekrowe answers FAQs about critical #incidentresponse training and its impact on #compliance & #BCDR. ow.ly/Cn0o50VCrbW #Cybersecurity #DFIR #Training #CISO #CEO

Critical Incident Response Training: Your Top Questions Answered | LMG Security

Get answers to your top questions about critical incident response training, and why it’s essential for cybersecurity success in 2025!

lmgsecurity.com
1
55
Join us for #CybersideChats: Live! on April 23rd as #cybersecurity experts Sherri Davidoff & Matt Durrin explore how #quantumcomputing will impact #encryption and #security. Get practical steps to prepare for the shift. Register now! lmgsecurity.com/event/cybers… #Quantum #CISO #CIO

Cyberside Chats: Live! Quantum Shift: How Cybersecurity Must Evolve Now | LMG Security

In this quick, high-impact session, we’ll dive into the top three cybersecurity priorities every leader should focus on. From integrating AI into your defenses to tackling deepfake threats and...

lmgsecurity.com
24
Load more