🏛️ 𝗛𝗮𝗹𝗹 𝗼𝗳 𝗙𝗮𝗺𝗲 𝗥𝗲𝗰𝗼 𝗜𝗻𝗰𝗼𝗺𝗶𝗻𝗴! Jack Freund, a man who knows a thing or two about cyber risk (author of the FAIR HoF book), provides a Hall of Fame nomination for 𝙎𝙩𝙚𝙥𝙥𝙞𝙣𝙜 𝙏𝙝𝙧𝙤𝙪𝙜𝙝 𝘾𝙮𝙗𝙚𝙧𝙨𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙍𝙞𝙨𝙠 𝙈𝙖𝙣𝙖𝙜𝙚𝙢𝙚𝙣𝙩 by Jennifer Bayuk. 📝 Read Jack's thorough assessment: cybercanon.org/stepping-thr...

The @OneRSAC Conference just wrapped & headline underneath every announcement is the same: Enterprises are deploying AI agents faster than #infosec teams can track them. This @AGATSoftware piece details #AI implementation work that needs to be done. api.cyfluencer.com/s/rsac-2026-... #RSAC

Last week, @realDonaldTrump established a task force to eliminate fraud via executive order. However, like information risk, fraud can’t be eliminated. What the Trump order doesn’t deal with is clueless users vulnerable to financial fraudsters & scammers. brothke.medium.com/scammers-rep...

⚛ Review Day! ⚛ Thomas Laugle provides a "niche" recommendation for Dr. Rogayeh Tabrizi's 𝘽𝙚𝙝𝙖𝙫𝙞𝙤𝙧𝙖𝙡 𝘼𝙄: 𝙐𝙣𝙡𝙚𝙖𝙨𝙝 𝘿𝙚𝙘𝙞𝙨𝙞𝙤𝙣 𝙈𝙖𝙠𝙞𝙣𝙜 𝙬𝙞𝙩𝙝 𝘿𝙖𝙩𝙖 ✍️ Read Thomas' thorough analysis: cybercanon.org/behavioral-a... #CybersecurityBooks #AISecurity #GRC #SecurityAwareness

That passwords aren't going away, or that they ever will, isn’t a novel idea. But interesting insights from this @specopssoftware piece are that traditional complexity rules create predictable behavior. Such as Password2 following Password 1. api.cyfluencer.com/s/top-5-insi...

#Delve claims ‘Compliance in days’. But #DeepDelver #AICPNAY tells very different story, claiming “@getdelve built a machine designed to make clients complicit w/o their knowledge, to manufacture plausible deniability while producing exactly the opposite”. substack.com/home/post/p-...

#AI agents, service accounts, automation workflows & machine-to-machine processes are rapidly becoming leading characters in the enterprise. That leads to a new #infosec acronym - Agent Access Management (AAM). api.cyfluencer.com/s/agent-acce...

Not so fun fact. Any call, voicemail, text, or email you get about a vacation or cruise is from a scammer. I challenge you to find a single person who has received a voicemail, call, text, or email about a vacation that was not a #scam. brothke.medium.com/how-to-tell-...

If you are going to be at RSA #infosec Conference @OneRSAC next week, @TheTokenSec is having a private yacht happy hour with #RSAC innovation sandbox finalists Fig Security, Geordie, @ZeroPathAI & senior cybersecurity leaders. api.cyfluencer.com/s/sandbox-at... #RSA

📝Review Incoming... This week, we dive into GRC. Andrew Chrostowski provides a Hall of Fame Rec for 𝙏𝙝𝙚 𝘾𝙮𝙗𝙚𝙧𝙨𝙚𝙘𝙪𝙧𝙞𝙩𝙮 𝙂𝙪𝙞𝙙𝙚 𝙩𝙤 𝙂𝙤𝙫𝙚𝙧𝙣𝙖𝙣𝙘𝙚, 𝙍𝙞𝙨𝙠, 𝙖𝙣𝙙 𝘾𝙤𝙢𝙥𝙡𝙞𝙖𝙣𝙘𝙚 by Jason Edwards and Griffin Weaver. Andrew's review 👉 cybercanon.org/the-cybersec... #CybersecurityBooks #GRC #CyberCanonHoFCandidate

Valuable @XMCyber_ free course: ‘Board-Level Cybersecurity Risk Communication Certification for CISOs’ led by @Gerald_Auger. Learn about risk communication, executive presence & boardroom influence to drive security investments & informed decision-making. cybersec.xmcyber.com/s/board-leve...

T1059.006 Python is a sub-technique of Command and Scripting Interpreter (T1059) in the MITRE ATT&CK framework, under the Execution tactic. It refers to adversaries using Python to execute code and automate actions on compromised systems. cybersec.picussecurity.com/s/t1059-006-...

Anyone using LinkedIn may find more scammers reaching out to them than legitimate recruiters, especially if using the #OpenToWork tag. I write about the LinkedIn seek-and-hide scam. One of them poorly impersonated @Hyundai @Hyundai_Global. medium.com/@brothke/the... #scam #scams #fraud

🪖 It's Review Day! 🪖 Rick Howard reviews 𝘽𝙖𝙩𝙩𝙡𝙚𝙛𝙞𝙚𝙡𝙙 𝘾𝙮𝙗𝙚𝙧, by William Holstein and Michael McLaughlin... 📝 tinyurl.com/k624nsb8 #CybersecurityBooks #CyberWarfare

Anyone using #LinkedIn may find more scammers reaching out to them than recruiters, especially if using the #OpenToWork tag. I write of the LinkedIn seek-and-hide scam, which is yet another sneaky LinkedIn recruiter job #scam. Get a job, don’t get scammed. medium.com/@brothke/the...

As @Docusign is used to digitally sign sensitive & confidential documents, you know it’s a prime target for attackers. @Ironscales details a very crafty & convincing #Docusign attack. It used a redirect-chain attack designed to dodge scanners. #infosec cybersec.ironscales.com/s/the-docusi...

Vendor payment fraud remains the most expensive attack type in education. When it comes to K-12, they have very little to spend on #cybersecurity & that makes them prime attack targets. Good @Ironscales piece details the #infosec schools need to consider. cybersec.ironscales.com/s/the-emails...

My @OneRSAC book review of: Becoming Quantum Safe: Protect Your Business and Mitigate Risks with Post-Quantum Cryptography and Crypto-Agility. Excellent resource to prepare for the inevitability of #quantum #cryptography, from @WileyTech. #RSAC #infosec www.rsaconference.com/library/blog...

As @knash99 of @WSJ wrote: #Iran cyber retaliation would probably target US utility providers & include #DDoS attacks on high-profile websites. This necessitates preemptive security, which stops/deters #cyberattacks before they succeed. HT @PicusSecurity cybersec.picussecurity.com/s/what-is-pr...

How NetSupport RAT abuses a legitimate remote admin tool. #NetSupport RAT is a malicious repurposing of the legitimate remote administration tool, NetSupport Manager, which has been available for over 30 years. cybersec.picussecurity.com/s/how-netsup...

Interesting webinar: Sensitive Data at Risk: Managing Exposure & Governance During M&A. With Constantin Stanca of @Snowflake, @kenowens12 of @Fiserv & Jeff Weber of @bigidsecure. M&A are high-stakes inflection points for financial institutions & data. api.cyfluencer.com/s/sensitive-...

Secrets in the Machine: Preventing Sensitive Data Leaks Through LLM APIs cybersec.gitguardian.com/s/secrets-in...

Banks operating in Qatar face distinct obligations when securing customer data, managing cross-border transfers & maintaining regulatory compliance. This @Kiteworks piece details 5 critical data sovereignty challenges for banks in #Qatar. cybersec.kiteworks.com/s/5-critical...

📝 𝗥𝗲𝘃𝗶𝗲𝘄 𝗜𝗻𝗰𝗼𝗺𝗶𝗻𝗴! This week, Jeff Sauntry provides a Hall of Fame Recommendation for 𝗖𝘆𝗕𝗢𝗞 (Cyber Security Body of Knowledge), a free community-driven resource. ✍️ Jeff's assessment of #𝗖𝘆𝗕𝗢𝗞: cybercanon.org/cybok-the-cy... 🏫 Visit 𝗖𝘆𝗕𝗢𝗞 and download the PDF: www.cybok.org @cybok.bsky.social

#FreePBX is a popular open-source IP PBX management tool. @FreePBX manages #VoIP communications & requires high availability & relatively open access, making it a very attractive target for threat actors. It now has serious CVE vulns. HT @PicusSecurity cybersec.picussecurity.com/s/critical-f...

Looking for a new job? Scammers posing as recruiters are targeting you, impersonating legitimate recruiters from @Insightglobal, @Coinbase, @RandstadUSA, @Raytheon & others. The signs are obvious, but job seekers desperate for work miss them & get scammed. brothke.medium.com/if-you-are-l...

It’s tax season & there's already plenty of #IRS #scams. @IRSnews will never call you out of the blue & threaten arrest. Many believe that & lose their savings. Be aware of “fresh start” programs that sucker people into losing lots of $$ w/ no tax relief. medium.com/@brothke/if-...

Anthropic stopped AI-driven espionage campaign. Shows an autonomous system can sustain once it is given ability to interpret its surroundings & act on that understanding. @AnthropicAI noted the dangers of autonomous systems conducting cyber operations. go.aembit.io/s/anthropic-...

Why pay for a #Gartner report when you can get it for free? The @Gartner_inc Peer Insights report ‘Voice of the Customer for Network Security Microsegmentation’ courtesy of @ZeroNetworks. Details about those who implemented #ZTN microsegmentation. api.cyfluencer.com/s/gartner-vo...

Traditional defenses are failing as adversaries evolve into "Digital Parasites" that prioritize silent persistence over loud encryption. This webinar provides the research-led map you need to stay ahead of the latest adversary techniques. cybersec.picussecurity.com/s/2026-malwa...

🛡️ 𝗧𝗼𝗱𝗮𝘆'𝘀 𝗥𝗲𝘃𝗶𝗲𝘄! 🧱 This week, our #CyberCanon Committee provides you with Debra Baker's 𝘼 𝘾𝙄𝙎𝙊 𝙂𝙪𝙞𝙙𝙚 𝙩𝙤 𝘾𝙮𝙗𝙚𝙧 𝙍𝙚𝙨𝙞𝙡𝙞𝙚𝙣𝙘𝙚. Read Jack Freund, Ph.D.'s assessment 👉 lnkd.in/ezhBCVAs #CybersecurityBooks #CISO #CyberResilience

The cybercrime landscape is large, ranging from low-sophistication attackers who use pre-packaged tools to advanced persistent threat (APT) groups. This range in sophistication meant that certain groups were significantly more dangerous than others. api.cyfluencer.com/s/how-ai-dri...

While not new, Operational Relay Box (ORB) networks, AKA covert, mesh or obfuscated networks, are becoming increasingly prevalent as threat actors continuously refine their evasion techniques. @teamcymru details why ORBs are a significant #infosec threat. api.cyfluencer.com/s/tracking-o...

The @PicusSecurity Red Report 2026 analysis of >1M malicious files. It's a detailed list of global cyber risks. Interesting insight: they found that despite widespread speculation about AI transforming the #malwarelandscape, there was no notable uptick. cybersec.picussecurity.com/s/red-report...

My @OneRSAC book review of: Measuring and Managing Information Risk: A FAIR Approach. www.rsaconference.com/library/blog... #RSAC

✍️ 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽𝗽𝗲𝗱 🪖 We have back-to-back reviews from Larry Pesce. Today, Larry offers his insights on Chris Miller's widely well-regarded book, 𝘾𝙝𝙞𝙥 𝙒𝙖𝙧, from a cyber pro's perspective: 📝 You'll want to read this review cybercanon.org/chip-war-the... #CybersecurityBooks | @haxorthematrix

Bruce Schneier observed: attacks always get better; they never get worse. @schneierblog highlights that crypto & cybersecurity threats consistently improve, become easier, faster & cheaper to execute. And nothing proves that like #phishing. HT @Ironscales. cybersec.ironscales.com/s/the-2025-p...

Will Baxter of @teamcymru speaks with Scott Small of @TidalCyber. He emphasizes the importance of using @MITREcorp #ATT&CK. As the sheer volume of threat intelligence continues to grow, the community needs a system like MITRE ATT&CK to which to refer. api.cyfluencer.com/s/from-raw-i...

✍️ 𝗟𝗮𝘁𝗲𝘀𝘁 𝗥𝗲𝘃𝗶𝗲𝘄! Read Larry Pesce's full review of Tae Kim's 𝙏𝙝𝙚 𝙉𝙫𝙞𝙙𝙞𝙖 𝙒𝙖𝙮 👉 cybercanon.org/the-nvidia-w... If interested, you can snag a copy and support the Canon using the Amazon or Bookshop links on our review page above. @haxorthematrix | @firstadopter #CybersecurityBooks

Throughout 2024 & 2025, #ScatteredSpider has been a prolific English-speaking cybercriminal threat group. Good @teamcymru scattered spider & TTP analysis. api.cyfluencer.com/s/scattered-...

If you are looking for a job, scammers posing as recruiters are targeting you. They impersonate legitimate recruiters from @RandstadUSA, @Insightglobal, @workwithburnett & other firms. Signs are obvious, but job seekers desperate for work are oblivious. brothke.medium.com/if-you-are-l...

In the race to standardize agentic commerce, #Google Universal Commerce Protocol (UCP) is positioning itself as the connective tissue between fragmented agent frameworks & payment systems. But if it can solve agent trust management is TBD. api.cyfluencer.com/s/google-s-u...

A new debate: Small Language Models (SLM) vs. Large Language Models (LLM). While the framing is common, it misses a more important point. The real difference in DSPM isn’t simply about size. It’s about how models think & what they’re capable of understanding. api.cyfluencer.com/s/slms-llms-...

Going to RSA Conference in March? Check out these tips for maximizing your time at @OneRSAC. Lots of people just show up and squander their time there. Don’t do that. There’s a lot to cover in a few days – preparation & optimization are essential. brothke.medium.com/making-the-m... #RSAC

📖 𝗡𝗲𝘄 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆! 🧍 This week, we look at Heidi Trost's 𝙃𝙪𝙢𝙖𝙣-𝘾𝙚𝙣𝙩𝙚𝙧𝙚𝙙 𝙎𝙚𝙘𝙪𝙧𝙞𝙩𝙮. 📝 Check out Dr. Georgianna Shea's review cybercanon.org/human-center... 🛍️ Purchase and support the CyberCanon: Bookshop: bookshop.org/a/119420/978... Amazon: amzn.to/4r62EUY #CybersecurityBooks ...

#AI agents have redefined online shopping. Autonomous agents browse product pages, compare prices, read reviews & complete transactions w/o human interaction. The potential for #fraud, #scam & #cybercrime is almost unlimited. Good advice from @data_dome. api.cyfluencer.com/s/agentic-co...

📦 𝗖𝘆𝗯𝗲𝗿𝗖𝗮𝗻𝗼𝗻 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽 ✨ Jeff Sauntry provides insight on Panos Alexopoulos' 𝙎𝙚𝙢𝙖𝙣𝙩𝙞𝙘 𝙈𝙤𝙙𝙚𝙡𝙞𝙣𝙜 𝙛𝙤𝙧 𝘿𝙖𝙩𝙖: 𝘼𝙫𝙤𝙞𝙙𝙞𝙣𝙜 𝙋𝙞𝙩𝙛𝙖𝙡𝙡𝙨 𝙖𝙣𝙙 𝘽𝙧𝙚𝙖𝙠𝙞𝙣𝙜 𝘿𝙞𝙡𝙚𝙢𝙢𝙖𝙨... 📝 Jeff's Review → tinyurl.com/22tsd2wn 🛍️ Amazon affiliate purchase link → amzn.to/4pQwEmL #CybersecurityBooks #DataGovernance #CyberRisk ...

While the article title from @EndorLabs is catchy, it highlights an important story about #infosec issues with @n8n_io. Attackers recently infiltrated #n8n community node ecosystem with a malicious npm package that masqueraded as a Google Ads integration. api.cyfluencer.com/s/n8mare-on-...

🪼 𝗖𝘆𝗯𝗲𝗿𝗖𝗮𝗻𝗼𝗻 𝗗𝗶𝘃𝗲𝘀 𝗜𝗻𝘁𝗼 𝗢𝗦𝗜𝗡𝗧! 🔎 This week, Rae Baker's 𝘿𝙚𝙚𝙥 𝘿𝙞𝙫𝙚: 𝙀𝙭𝙥𝙡𝙤𝙧𝙞𝙣𝙜 𝙩𝙝𝙚 𝙍𝙚𝙖𝙡 𝙒𝙤𝙧𝙡𝙙 𝙑𝙖𝙡𝙪𝙚 𝙤𝙛 𝙊𝙥𝙚𝙣 𝙎𝙤𝙪𝙧𝙘𝙚 𝙄𝙣𝙩𝙚𝙡𝙡𝙞𝙜𝙚𝙣𝙘𝙚 is investigated by Jonathan Cote. See the full review:👉 cybercanon.org/deep-dive-ex... @raebaker.net | @jon24cote.bsky.social