Sign in

LMG Security

@lmgsecurity.bsky.social
28 followers 3 following 104 posts

LMG Security is a top cybersecurity firm providing penetration testing, advisory services, training, & more. Our experts speak at conferences like Black Hat and RSA, and have been featured in The Wall Street Journal, The New York Times, & many other pubs.

PostsRepliesMedia
LMG Security @lmgsecurity.bsky.social · 30/12/2025
Fake employees and contractors are forcing orgs to rethink #vendorvetting, hiring security, & identity controls. In today's #CybersideChats episode, we unpack Amazon’s recent incident in which a North Korean IT worker was detected through behavioral anomalies & what to do now. youtu.be/WE8p9I3uUuA
000
LMG Security @lmgsecurity.bsky.social · 23/12/2025
Many orgs still check identity once at login. Today on #CybersideChats, learn how #AI driven impersonation has made that model unsafe, and why #authentication has to extend into calls, chats, approvals, & support workflows Video: youtu.be/J0UJSV6wYlI Podcast: www.chatcyberside.com/e/when-ai-st...
000
LMG Security @lmgsecurity.bsky.social · 19/12/2025
Collaboration tools like Teams, Slack, and Zoom have become prime targets for attackers—and Microsoft’s latest roadmap reflects that shift. If your #security strategy hasn’t caught up with how people actually communicate, this #CybersideChats is worth a listen: www.chatcyberside.com/e/collaborat...
000
LMG Security @lmgsecurity.bsky.social · 16/12/2025
What do Microsoft’s 2026 #security features tell us about how attackers are breaching #collaboration platforms? On this week’s #CybersideChats, Sherri & Matt break down the updates & why they matter. Video: www.youtube.com/watch?v=60bY... Podcast: www.chatcyberside.com/e/collaborat...
000
LMG Security @lmgsecurity.bsky.social · 09/12/2025
More than 4.3 million users were affected before anyone realized ShadyPanda’s extensions had turned into surveillance tools. Listen to today's #CybersideChats for more: www.chatcyberside.com/e/shady-pand... Or watch the video: youtu.be/x9AaE94KanM #Security #SessionHijacking #Cybersecurity
020
LMG Security @lmgsecurity.bsky.social · 05/12/2025
When #insider incidents can hit even the most #security focused companies, it forces every organization to reconsider how much “trust” is built into their workflows. More on our blog: www.lmgsecurity.com/betrayed-fro... or podcast: www.chatcyberside.com/e/when-secur... #insiderthreat #cybersecurity
020
LMG Security @lmgsecurity.bsky.social · 02/12/2025
Insider threats aren’t theoretical anymore—they’re happening inside orgs just like yours. This week on #CybersideChats, we break down insider cases from #CrowdStrike, #DigitalMint, & others, and share strategies to reduce your org's risk. youtu.be/s7QW_BkkAvM #InsiderThreats #Cybersecurity
010
LMG Security @lmgsecurity.bsky.social · 27/11/2025
This Thanksgiving, we’re feeling grateful for the clients, partners, and colleagues who make our work meaningful all year long. Thank you for the conversations, the collaboration, and the chance to tackle big challenges together. Wishing everyone a happy and restful holiday.
000
LMG Security @lmgsecurity.bsky.social · 25/11/2025
A single “smart” device can quietly tunnel out of your network. Today on #CybersideChats: real-world scenarios where hidden radios, #cloud paths, and offshore update servers slipped in through routine #hardware purchases. Listen: www.chatcyberside.com/e/chinas-hid... Watch: youtu.be/WYq6YTqanA4
000
LMG Security @lmgsecurity.bsky.social · 21/11/2025
#Holiday season scams now hit businesses as hard as consumers. This checklist highlights practical steps #security teams can take now—from enforcing strong #MFA to tuning #botdetection rules & more: www.lmgsecurity.com/resources/ho... #Cybersecurity #FraudPrevention #DNSFiltering #BYOD #Phishing
000
LMG Security @lmgsecurity.bsky.social · 18/11/2025
#AI driven #fraud is hitting holiday shoppers at machine speed. Today on #CybersideChats, Sherri & Matt discuss how #phishing kits, prebuilt configs, and bot-driven takeovers enable #CredentialAbuse. Podcast: www.chatcyberside.com/e/holiday-ha... Video: youtu.be/TpMD5v5JUNc #Cybersecurity
021
LMG Security @lmgsecurity.bsky.social · 17/11/2025
When #security assessments leak, the fallout can eclipse the incident. In our latest #CybersideChats on the #Louvre heist, we dig into how exposed #audit findings fueled scrutiny. Listen to hear how a seven-minute #robbery turned into a reputational firestorm: www.chatcyberside.com/e/louvre-hei...
000
LMG Security @lmgsecurity.bsky.social · 12/11/2025
Last week, LMG Security had the pleasure of speaking with the Las Vegas ISSA chapter! Matt Durrin led a thought-provoking session on “ #DeepFakes & AI: The New Frontier of #Cybercrime.” He explored how rapidly evolving #AI tools are transforming #SocialEngineering, fraud, and digital trust.
000
LMG Security @lmgsecurity.bsky.social · 11/11/2025
When the #Louvre was robbed, most people blamed the thieves. But leaked audit reports told a story of weak passwords, ignored warnings, & outdated systems. Hear more from Sherri & Matt on Cyberside Chats. Podcast: www.chatcyberside.com/e/louvre-hei... Video: youtu.be/3ErXdXv_bN8 #cybersecurity
000
LMG Security @lmgsecurity.bsky.social · 04/11/2025
Attackers are turning Google results into #malware delivery systems, using fake software installers and sponsored ads to plant backdoors inside organizations. Podcast: www.chatcyberside.com/e/search-res... Video: youtu.be/xKKA1ikoZ-4 #SEOpoisoning #Malvertising #Cybersecurity #Software #Phishing
020
LMG Security @lmgsecurity.bsky.social · 31/10/2025
What happens when you mix a high-stakes #cybersecurity #tabletopexercise with top-shelf whiskey? An unforgettable night. LMG Security & Constangy hosted an exclusive #AI Fraud Tabletop & Whiskey Tasting where guests tackled a live #IncidentResponse scenario. Thanks to everyone who joined us!
000
LMG Security @lmgsecurity.bsky.social · 29/10/2025
We had a great time at #BSidesPDX connecting with the local security community! Matt Durrin took the stage to present “Hackers + #AI: Faster, Smarter, More Dangerous,” a demo showing how criminals are using tools like #WormGPT to uncover vulnerabilities, generate exploits, and weaponize zero-days.
000
LMG Security @lmgsecurity.bsky.social · 28/10/2025
When #AWS went offline, the outage exposed a global web of dependencies. Sherri & Matt explore what really happened, how fourth-party risks can undermine resilience, and practical steps to take on Cyberside Chats. Listen: www.chatcyberside.com/e/when-the-c... Watch: youtu.be/Djz-_VblMAw #cloud
010
LMG Security @lmgsecurity.bsky.social · 24/10/2025
Diversity builds resilience — especially in the #cloud. Matt Durrin reminds us that spreading workloads across multiple clouds isn’t just a best practice, it’s a safeguard against systemic risk. More on our blog: www.lmgsecurity.com/beyond-aws-h... #AWS #DNS #CloudSecurity #FourthPartyRisk
020
LMG Security @lmgsecurity.bsky.social · 21/10/2025
When #ransomware halted Jaguar Land Rover’s production, it disrupted entire supply chains. In our latest #CybersideChats, we discuss what made this attack so impactful and share insights on how to strengthen resilience. Podcast: www.chatcyberside.com/e/manufactur... Video: youtu.be/LTW59YBJe-Q
000
LMG Security @lmgsecurity.bsky.social · 20/10/2025
We had a great time at the @seckc.org meetup! Tom Pohl shared insights on Microsoft CA exploits, showing how small misconfigurations can lead to full domain admin takeover. Big thanks to SecKC for the welcome and for making cybersecurity even more fun with a Halloween twist. #Cybersecurity #SecKC
020
LMG Security @lmgsecurity.bsky.social · 14/10/2025
Why does the “why” matter in #cybersecurity? Matt Durrin & Todd Stewart discuss how understanding and communicating purpose, not just process, improves engagement, retention, & impact. #podcast: www.chatcyberside.com/e/lead-with-... Video: www.youtube.com/watch?v=xMKi... #CybersecurityTraining
000
LMG Security @lmgsecurity.bsky.social · 10/10/2025
When #threatintelligence stops flowing, everyone feels the impact—even those who never see it directly. The expiration of the CISA raises questions about how organizations can stay informed and protected. Full conversation here: www.chatcyberside.com/e/when-cisa-...
000
LMG Security @lmgsecurity.bsky.social · 06/10/2025
Scattered Spider isn’t using cutting-edge exploits. They’re calling the #helpdesk and tricking staff into resetting passwords or MFA. Full podcast: www.chatcyberside.com/e/inside-scat… #socialengineering
100
LMG Security @lmgsecurity.bsky.social · 03/10/2025
Telegram isn’t just chat—it’s emerging as a new iteration of the #darkweb. Encrypted channels are now hubs where cybercriminals share tools, sell products, and even run services like #WormGPT. Full podcast: www.chatcyberside.com/e/inside-sca... Video: www.youtube.com/watch?v=Dxd9...
000
LMG Security @lmgsecurity.bsky.social · 30/09/2025
#ScatteredSpider is back in the spotlight — but indictments tell the bigger story. Today on Cyberside Chats, Sherri & Matt break down the lessons, from tightening help desk verification to #socialengineering training. Listen: www.chatcyberside.com/e/inside-sca... Watch: youtu.be/Dxd9UR3nKXU
000
LMG Security @lmgsecurity.bsky.social · 24/09/2025
Vibe hacking isn’t just about writing malicious code with #AI — it’s also about what happens after your data is stolen. Listen to the podcast to hear Sherri Davidoff & Matt Durrin explain how #vibehacking works and how attackers are using tools like #WormGPT: www.chatcyberside.com/e/vibe-hacki...
010
LMG Security @lmgsecurity.bsky.social · 23/09/2025
AI coding tools are reshaping development & giving rise to #VibeHacking. In today’s episode of Cyberside Chats, Sherri Davidoff and Matt Durrin explore what this means for security, supply chain, & IR planning. Video: www.youtube.com/watch?v=fTOJ... Podcast: www.chatcyberside.com/e/vibe-hacki...
010
LMG Security @lmgsecurity.bsky.social · 16/09/2025
The Salesforce–Drift breach was too big for just one episode. On today’s episode of #CybersideChats, Sherri Davidoff and Matt Durrin unpack the latest disclosures and share steps to prepare for the next #SaaS compromise. Podcast: www.chatcyberside.com/e/massive-dr... Video: youtu.be/tl4qK4CaeVw
020
LMG Security @lmgsecurity.bsky.social · 09/09/2025
Attackers didn’t break into #Salesforce — they walked in through a trusted app. The Salesforce–Drift #breach shows how OAuth tokens can become skeleton keys when app permissions aren’t tightly controlled. Cyberside Chats Podcast: www.chatcyberside.com/e/how-a-stol... Video: youtu.be/riEcUehZCd4
000
LMG Security @lmgsecurity.bsky.social · 26/08/2025
A forgotten stack of papers in a hotel printer exposed U.S. State Department schedules, contacts, and more. Unmanaged printers still create blind spots. Sherri & Matt share more in this Cyberside Chats episode. Watch: www.youtube.com/watch?v=xTFd... Listen: www.chatcyberside.com/e/printer-pr...
000
LMG Security @lmgsecurity.bsky.social · 13/08/2025
"Deepfake technology is no longer a novelty—it’s an insider threat tool." - Sherri Davidoff Learn how to protect your organization from state-backed #deepfake employees. Full podcast: www.chatcyberside.com/e/unmasking-... Video: youtu.be/ypY5r__aZ1M #InsiderThreat #CyberSecurity
010
LMG Security @lmgsecurity.bsky.social · 12/08/2025
The newest #InsiderThreat doesn’t hack in—it gets hired. #NorthKorea is using #deepfake interviews, AI résumés & U.S. “laptop farms” to place operatives in U.S. companies. In Cyberside Chats, we share how & ways to stop them: www.chatcyberside.com/e/unmasking-... #Cybersecurity #SocialEngineering
010
LMG Security @lmgsecurity.bsky.social · 01/08/2025
Headed to #BlackHat2025? Don’t miss our team’s sessions! From bug bounty war stories to small biz security, we’re hitting the stage for conversations packed with real-world insights. Here's the full schedule: www.blackhat.com/us-25/featur... #Cybersecurity #BHUSA #WomenInCyber
000
LMG Security @lmgsecurity.bsky.social · 29/07/2025
Iran’s #cyberattacks are escalating and targeting infrastructure, defense, and global businesses. We share what’s happening and how to protect your org in the latest #CybersideChats. 🎥 youtu.be/vC29SaWdqG4 🎧 www.chatcyberside.com/e/the-title-...? #Cybersecurity #AIphishing #WiperMalware #CISO
010
LMG Security @lmgsecurity.bsky.social · 22/07/2025
A leaked #APIkey gave access to 52 private LLMs—potentially exposing systems tied to SpaceX, Twitter, and even the U.S. Treasury. In this episode of #CybersideChats, we break down what happened & how to protect your org. 🎥 youtu.be/Lnn225XlIc4 #Cybersecurity #DevSecOps #Pentest #CISO #Infosec #IT
121
LMG Security @lmgsecurity.bsky.social · 16/07/2025
Headed to Black Hat 2025? Several of our team members will be teaching & attending, and would love to grab a coffee and chat #cybersecurity with old & new friends! Contact us to schedule a time: www.lmgsecurity.com/contact-us/ #BlackHat2025 #BHUSA #BlackHat #Infosec #IT
000
LMG Security @lmgsecurity.bsky.social · 15/07/2025
91% of #ransomware attacks hit after hours—often during holidays when your team’s offline. Hear real-world horror stories & get tips to stay protected in this episode of #CybersideChats 📽️ youtu.be/pCuYx9nPXgk 🎧 www.chatcyberside.com/e/cyber-atta... #Cybersecurity #CISO #Infosec #IT #cyberaware
010
LMG Security @lmgsecurity.bsky.social · 08/07/2025
An executive order rolled back key federal #cybersecurity rules. Watch our new #CybersideChats for a recap of what got cut, what still stands, & what your org should do. 🎧 Podcast: www.chatcyberside.com/e/executive-... 📺 Video: youtu.be/GIWBHKwydMA #FederalCybersecurity #CyberPolicy #IT #CISO
131