AI is everywhere now, be vigilant!
Day 1/30View quoted post on X
The infosec edition begins:
Let's start with the obvious: where do you run your AI agents?
If your answer is "on my primary machine", you should reconsider🧵
VectorSec
@VectorSecIO
vectorsec.io
Helping web3 teams secure their web2 infrastructure
Helping web3 teams secure their web2 infrastructure
1 Following 5 Followers 11 Posts
Latest posts 5
Excited about this!
AI is rapidly changing the security landscape. And I've been triggered: it's time for another 30 day tweetstorm. This time, about web2 security and measures that YOU can take to get your shields up. Stay tuned...View quoted post on X
The attacker never touched a smart contract. They called the registrar's support desk and pointed the domain at a wallet drainer.
If you're not monitoring what your domain actually resolves to from the outside, you won't know you've been hijacked until your users tell you.
If you're not monitoring what your domain actually resolves to from the outside, you won't know you've been hijacked until your users tell you.
View quoted post on X
DNS monitoring isn’t just uptime. You need alerts on: NS changes, DNSSEC disable, registrar login, sudden A/CNAME shifts, and new subdomains that appear out of nowhere.
Subdomain takeovers still happen. If your team can create CNAMEs without guardrails, attackers can hijack abandoned services and host fake “official” pages.