We talk a lot about speed. The Milan team decided to run it. 🏃
Two teams of four took on The Loop Relay, a 20K relay with skyscrapers, team spirit, and zero latency on the cheering.
Shoutout for lacing up.
Want to join this team? okt.to/HYlnIT
#LifeAtSysdig #TeamSysdig #Milan
Two teams of four took on The Loop Relay, a 20K relay with skyscrapers, team spirit, and zero latency on the cheering.
Shoutout for lacing up.
Want to join this team? okt.to/HYlnIT
#LifeAtSysdig #TeamSysdig #Milan
1
1
4
230
Detect. Respond. Accessorize. 🧢
Pick up your Lumin cap at booth 168 at KubeCon SLC, and drop into our Falco sessions:
📅 Nov 11, 10:30am | Booth 168: Falco Meets AI Threats (live demo)
📅 Nov 12, 2:40pm | Salt Palace 251 D-F: Falco Never Flies Alone
KubeNight Out: okt.to/TSP1K3
#KubeConSLC #Falco
Pick up your Lumin cap at booth 168 at KubeCon SLC, and drop into our Falco sessions:
📅 Nov 11, 10:30am | Booth 168: Falco Meets AI Threats (live demo)
📅 Nov 12, 2:40pm | Salt Palace 251 D-F: Falco Never Flies Alone
KubeNight Out: okt.to/TSP1K3
#KubeConSLC #Falco
0
1
2
207
An agent can tell you it did one thing. The real story might be something else. 🔒
Today, Sysdig is introducing AI Defense: runtime security and governance for agents. It finds every agent your team runs, decides what they’re allowed to do, and keeps a record the agent can’t 85HUH7VCe
#AIDefense #AIAgents #RuntimeSecurity
Today, Sysdig is introducing AI Defense: runtime security and governance for agents. It finds every agent your team runs, decides what they’re allowed to do, and keeps a record the agent can’t 85HUH7VCe
#AIDefense #AIAgents #RuntimeSecurity
0
2
3
262
Last chance to register: Thursday’s LinkedIn Live is almost here. ⏳
Can you trust an AI agent’s own account of what it did? Sysdig’s Conor Sherman, Shantanu Gattani, and Ryan Davis take it on live, with a demo.
📅 Thursday, Nov 5 | 12pm ET / 9am PT
okt.to/il8UKv
RuntimeSecurity
Can you trust an AI agent’s own account of what it did? Sysdig’s Conor Sherman, Shantanu Gattani, and Ryan Davis take it on live, with a demo.
📅 Thursday, Nov 5 | 12pm ET / 9am PT
okt.to/il8UKv
RuntimeSecurity
1
2
2
284
About 50% of AI tools on employee laptops never show up in the agents’ logs. 🔒
Frank Dickson of Dickson Research and Sysdig’s Blair Howard take on the five AI questions every security leader should be able to answer.
📅 Nov 17 | 8am PT / 11am ET
okt.to/ewzMrm #CISO
Frank Dickson of Dickson Research and Sysdig’s Blair Howard take on the five AI questions every security leader should be able to answer.
📅 Nov 17 | 8am PT / 11am ET
okt.to/ewzMrm #CISO
1
1
6
294
From Raleigh to Milan, the Sysdig team went all out for Halloween. 🎃
Masquerading is usually something we detect. This week, we celebrated it. Zero false positives. Several very high-severity outfits. 👻
Want to join this team? okt.to/zHFr7D
#LifeAtSysdig #TeamSysdig #Halloween okt.to/cP4dCZ
Masquerading is usually something we detect. This week, we celebrated it. Zero false positives. Several very high-severity outfits. 👻
Want to join this team? okt.to/zHFr7D
#LifeAtSysdig #TeamSysdig #Halloween okt.to/cP4dCZ
0
1
2
213
Sysdig Headless Cloud Security won the Agentic AI Security Innovation Award in the 2026 CyberSecurity Breakthrough Awards. 🏆
In an industry competing on dashboards, we broke through by removing them.
okt.to/BfXzOs
#CybersecurityBreakthrough #HeadlessCloudSecurity #AIAgents #Sysdig
In an industry competing on dashboards, we broke through by removing them.
okt.to/BfXzOs
#CybersecurityBreakthrough #HeadlessCloudSecurity #AIAgents #Sysdig
1
2
4
262
🚨 Three bugs. One week. The new patch window is shorter than the news cycle.
🐘 PHP2Shell: unauthenticated RCE in PHP core, exploitation confirmed
🟢 Node2Shell: Node.js Brotli bug, also being exploited
🐧 ZDI-CAN-33367 and five other Linux flaws, one with a public root exploit
and runtime detection are best friends before patches land. Blog links in the replies. 👇
#CloudSecurity #ThreatResearch #PHP #NodeJS #Linux
🐘 PHP2Shell: unauthenticated RCE in PHP core, exploitation confirmed
🟢 Node2Shell: Node.js Brotli bug, also being exploited
🐧 ZDI-CAN-33367 and five other Linux flaws, one with a public root exploit
and runtime detection are best friends before patches land. Blog links in the replies. 👇
#CloudSecurity #ThreatResearch #PHP #NodeJS #Linux
2
2
5
568
PHP2Shell
sysdig.com/blog/php2shell…
Node2Shell
sysdig.com/blog/node2shel…
ZDI-CAN-33367
sysdig.com/blog/detecting…
sysdig.com/blog/php2shell…
Node2Shell
sysdig.com/blog/node2shel…
ZDI-CAN-33367
sysdig.com/blog/detecting…
0
0
1
207
Mythos access is expanding. Your vulnerability management program doesn’t need a rewrite. 🔒
More defenders can find vulnerabilities faster, but discovery isn’t exploitation. The fundamentals still hold.
Blog: okt.to/oSDBrm
Last chance to register for “Mythos, Decoded” this Thursday, Oct 29 at 8am PT / 11am ET: okt.to/5UTR1P
#CloudSecurity #VulnerabilityManagement #AIAgents okt.to/ZRPbfw
More defenders can find vulnerabilities faster, but discovery isn’t exploitation. The fundamentals still hold.
Blog: okt.to/oSDBrm
Last chance to register for “Mythos, Decoded” this Thursday, Oct 29 at 8am PT / 11am ET: okt.to/5UTR1P
#CloudSecurity #VulnerabilityManagement #AIAgents okt.to/ZRPbfw
0
3
5
390
🚨 Node2Shell (CVE-2026-111497, CVSS 9.2): a public repo for this Node.js Brotli flaw appeared about five hours after the fix shipped.
No confirmed in-the-wild exploitation yet, but the patch-to-PoC gap was about a day. Patch in order of reachability: start with services that control.
okt.to/3pTBzk
#CloudSecurity #ThreatResearch #NodeJS #RuntimeSecurity
No confirmed in-the-wild exploitation yet, but the patch-to-PoC gap was about a day. Patch in order of reachability: start with services that control.
okt.to/3pTBzk
#CloudSecurity #ThreatResearch #NodeJS #RuntimeSecurity
2
2
5
681
🚨 A working root exploit for a Linux kernel bug is public. No CVE. No merged fix.
ZDI-CAN-33367 is a gap in the Dirty Frag fix, with root confirmed on current Ubuntu, Debian, and AlmaLinux. Restrict unprivileged user namespaces and enforce seccomp RuntimeDefault while you wait.
4
#CloudSecurity #ThreatResearch #Linux #RuntimeSecurity
ZDI-CAN-33367 is a gap in the Dirty Frag fix, with root confirmed on current Ubuntu, Debian, and AlmaLinux. Restrict unprivileged user namespaces and enforce seccomp RuntimeDefault while you wait.
4
#CloudSecurity #ThreatResearch #Linux #RuntimeSecurity
7
34
140
21,070
AI agents are writing code, touching production, and acting with real credentials. So who’s watching what they actually do? 🔒
Join Sysdig’s Conor Sherman and Shantanu Gattani on LinkedIn Live to talk runtime security and governance for AI agents. Live demo included.
📅 Nov 5 | ://t.co/37sISH8GP2
#AIDefense #AIAgents #RuntimeSecurity
Join Sysdig’s Conor Sherman and Shantanu Gattani on LinkedIn Live to talk runtime security and governance for AI agents. Live demo included.
📅 Nov 5 | ://t.co/37sISH8GP2
#AIDefense #AIAgents #RuntimeSecurity
0
1
3
244
🚨 PHP2Shell: two critical CVEs in PHP core (CVSS v4.0 9.2). Exploitation attempts began four days before the patch was released.
An unauthenticated attacker can run code with HTTP requests alone. The vulnerable code dates to PHP 5.4 in 2012, so even clean application code is nd assume breach.
okt.to/xlQvRe
#CloudSecurity #ThreatResearch #PHP #RuntimeSecurity
An unauthenticated attacker can run code with HTTP requests alone. The vulnerable code dates to PHP 5.4 in 2012, so even clean application code is nd assume breach.
okt.to/xlQvRe
#CloudSecurity #ThreatResearch #PHP #RuntimeSecurity
0
3
4
362
Wide eyes. Racing pulse. A backlog that keeps growing. You may be experiencing Mythos anxiety. 😅
Join our “Mythos, Decoded” webinar to learn how runtime context shows which vulns add real risk. Practical steps, minus the panic.
📅 Oct 29 | 8am PT / 11am ET
W
#CloudSecurity #VulnerabilityManagement #RuntimeSecurity
Join our “Mythos, Decoded” webinar to learn how runtime context shows which vulns add real risk. Practical steps, minus the panic.
📅 Oct 29 | 8am PT / 11am ET
W
#CloudSecurity #VulnerabilityManagement #RuntimeSecurity
0
0
1
191
Sysdig Accelerate ‘26 Japan is a wrap. 🙌
Thank you to our speakers, customers, and partners. The conversations in the room were exactly why we do this: people serious about defending cloud and AI environments at machine speed.
See you next year, Japan. 💚
#Sysdig #CloudSecurity #AIDefense #Japan okt.to/LvyX7Q
Thank you to our speakers, customers, and partners. The conversations in the room were exactly why we do this: people serious about defending cloud and AI environments at machine speed.
See you next year, Japan. 💚
#Sysdig #CloudSecurity #AIDefense #Japan okt.to/LvyX7Q
0
3
5
339
Frontier AI models like Mythos can discover vulnerabilities faster than any human. Most advice floating around isn’t helping.
Join us October 29 to separate what’s actually changed from the noise.
Mythos, Decoded: What’s Actually Changed in Vulnerability Management
📅 Oct 29 | ://t.co/xreCeoBQYE
#CloudSecurity #VulnerabilityManagement #AIAgents
Join us October 29 to separate what’s actually changed from the noise.
Mythos, Decoded: What’s Actually Changed in Vulnerability Management
📅 Oct 29 | ://t.co/xreCeoBQYE
#CloudSecurity #VulnerabilityManagement #AIAgents
0
1
1
208
Excited to welcome Teri Harrell as Sysdig’s new Chief Human Resources Officer. 🎉
25+ years in talent, development, and org change. Former CHRO at VitalEdge, HR leadership at Red Hat. Exactly who you want leading people strategy at a company moving this fast.
Welcome to the o/lFqsDNhEWd
#Sysdig #LifeAtSysdig #Leadership
25+ years in talent, development, and org change. Former CHRO at VitalEdge, HR leadership at Red Hat. Exactly who you want leading people strategy at a company moving this fast.
Welcome to the o/lFqsDNhEWd
#Sysdig #LifeAtSysdig #Leadership
0
0
1
304
Cybersecurity Awareness Month. A good time to remember what causes breaches every other month.
78% trace to system intrusion and social engineering. Vulnerability exploitation up 55% YoY. Human element in 62% of breaches.
MFA works. Least privilege works. Patching works. The to be daily, not annual.
okt.to/yuTSw1
#CybersecurityAwarenessMonth #CloudSecurity #RuntimeSecurity
78% trace to system intrusion and social engineering. Vulnerability exploitation up 55% YoY. Human element in 62% of breaches.
MFA works. Least privilege works. Patching works. The to be daily, not annual.
okt.to/yuTSw1
#CybersecurityAwarenessMonth #CloudSecurity #RuntimeSecurity
0
0
0
235
Just wrapped SecTor 2026 in Toronto. A few takeaways from the show floor.
Runtime is entering the mainstream AI security conversation. AI agents aren’t reliable narrators about their own actions. And the governance angle is resonating more than expected.
We’ve been saying this ee the market catching up.
#SecTor2026 #CloudSecurity #AIDefense #RuntimeSecurity
Runtime is entering the mainstream AI security conversation. AI agents aren’t reliable narrators about their own actions. And the governance angle is resonating more than expected.
We’ve been saying this ee the market catching up.
#SecTor2026 #CloudSecurity #AIDefense #RuntimeSecurity
1
1
4
353














