Why doesn’t the PCI Security Standards Council crack down on #QSA firms that create worthless junk certificates? Important question @jbhall56 asks of the @PCISSC. #PCI #SSC admits it’s a problem, but won’t step up to the plate & is doing zero to stop it. pciguru.wordpress.com/2025/12/05/p...

📝𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆! For the first time, this week's review is not of a book, but a podcast.🎧 To Catch a Thief by @nicoleperlroth.bsky.social was so impactful to many on the Canon Committee that we thought it deserved a review. See @runforserenity.bsky.social's review 👉 cybercanon.org/to-catch-a-t...

Interesting @Ironscales piece asks why security awareness training (SAT) is viewed as a checkbox. It must be an enablement tool to help employees understand the macro #cybersecurity landscape. SAT must be interesting or it’s just a useless audit checkbox. cybersec.ironscales.com/s/stop-check...

Custom GPTs, introduced in Nov. 2023 by @OpenAI allow users to customize #GPT models to meet specific organizational or individual needs. GPTs customization is something that must be dealt with cautiously. Lots of unknowns, many #privacy & #infosec risks. api.cyfluencer.com/s/what-are-t...

The #OWASP Top 10 got a recent update. This from @EndorLabs looks at the 2025 refresh, which is the most significant update since 2021. Broken access control is in the top spot as the main @OWASP #infosec threat. api.cyfluencer.com/s/the-owasp-...

Good Picus Security piece on SLAM #phishing prevention method. SLAM (Sender, Links, Attachments, Message) is acronym used to quickly evaluate whether an email may be phishing attempt. Guides users to examine 4 key elements that reveal suspicious activity. cybersec.picussecurity.com/s/slam-metho...

🕵️‍♂️𝗙𝗿𝗲𝘀𝗵 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽! This week, Jeff Schiemann provides a Hall of Fame recommendation of 𝙏𝙝𝙚 𝙇𝙖𝙯𝙖𝙧𝙪𝙨 𝙃𝙚𝙞𝙨𝙩, written by the accomplished investigative journalist, Geoff White. You don't want to miss this one: tinyurl.com/3kh6t5jf #CybersecurityBooks #CyberWar @penguinrandomhouse.bsky.social

How do you know if the call about vacations is a scam? If you get a call about a #vacation, #timeshare, or #cruise, it’s 100% a #scammer. Hang up & avoid the #scam. Even the Mexican drug cartel is now doing vacation #scams. Legit firms won’t call you. brothke.medium.com/how-to-tell-...

Black Friday 2025 carries high risk of widespread fraud, ranging from hundreds of thousands of fake accounts to large-scale account takeovers. #AI threats becoming a significant risk. Much of e-commerce industry lacks basic #infosec controls.. api.cyfluencer.com/s/security-a...

🔏𝗡𝗲𝘄 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗿𝗼𝗽 📖 Jeny Teheran discusses why Dr. Susan Landau’s 𝙇𝙞𝙨𝙩𝙚𝙣𝙞𝙣𝙜 𝙄𝙣 is a must-read exploration of privacy, encryption, and the ongoing struggle over government access to secure systems, recommending it for the CyberCanon Hall of Fame. 📝Review: cybercanon.org/listening-in... (1/2..)

Ferocious Kitten is a covert cyber-espionage actor active since 2015 focused on Persian-speaking targets inside #Iran, uses politically themed decoy documents to trick dissidents, activists & other individuals to opening weaponized files. cybersec.picussecurity.com/s/ferocious-...

👩‍💻𝗜𝘁'𝘀 𝗥𝗲𝘃𝗶𝗲𝘄 𝗗𝗮𝘆!🧠 This week, Kevin Magee provides a Hall of Fame recommendation for Sarah Armstrong-Smith’s 𝙐𝙣𝙙𝙚𝙧𝙨𝙩𝙖𝙣𝙙 𝙩𝙝𝙚 𝘾𝙮𝙗𝙚𝙧 𝘼𝙩𝙩𝙖𝙘𝙠𝙚𝙧 𝙈𝙞𝙣𝙙𝙨𝙚𝙩 Read why he believes it will help you "transform your response to threats" ➡️ tinyurl.com/56nzxp5z #CISO #SecurityAwareness #ThreatIntelligence

🧠 New CyberCanon review! Jeffrey Pierdomenico dives into Mark Bailey’s Unknowable Minds, exploring AI, ethics, and security. “Putting humanity above all else” has never felt more urgent. 🔗 cybercanon.org/unknowable-minds From: @imprintacademic.bsky.social #AIsecurity #CybersecurityBooks

#Zerodayx1 is a likely Lebanese hacktivist who positions themselves as Muslim & pro-Palestinian threat actor. It launched its own Ransomware-as-a-Service (#RaaS) operation. It shows how financial gain is integrated into hacktivist objectives. api.cyfluencer.com/s/zerodayx1-...

Interesting new framework from Pillar. Their SAIL (Secure AI Lifecycle) Framework is designed to manage AI-specific risks and build trustworthy AI systems. The 11 risk categories detail the many threats and vulnerabilities inherent in AI deployments. api.cyfluencer.com/s/build-your...

Bots are spelling the demise of @X. Massive amounts of misinformation, stock fraud, scams & more. Latest #scam is a Twitter reply directing one to a supposed financial expert. Which they're clearly not. They are just automated bots looking to bankrupt you. brothke.medium.com/bots-are-spe...

I wrote this piece about #Boardsi over 9 months ago, how even those on the Boardsi testimonials page did not find value with them. In those 9 months, not a single person has told me that I was wrong, and that they, in fact, did obtain a board position. brothke.medium.com/get-on-a-boa...

If there’s a correlation between antisemitism & bad #infosec controls & @Columbia is the poster child. They did zero as #Jewish & #Zionist students were attacked by #Hamas supporters, & their cybersecurity failure is of historic proportion. api.cyfluencer.com/s/columbia-u...

Hardly a day goes by without an article about ‘millions’ of open information security jobs. But the notion of millions of #infosec jobs is preposterous. How can you know how many #cybersecurity jobs there are if there’s no real statistical data available? brothke.medium.com/the-big-lie-...

Many communication breakdowns when it comes to #infosec. 10 really good tips from @XMCyber_ to get security/non-security teams on the same page. This one may go the farthest: Give kudos when other teams accomplish goals & make sure management knows, too. cybersec.xmcyber.com/s/10-tips-to...

Hey @facebook: the 'look who died' & ‘just passed away’ scams have been spreading like wildfire on #Facebook. I’d estimate it would take a programmer an hour & 100 lines of code to block these #phishing #scams to your billions of users. It’s a really easy #infosec fix. Thoughts?

Have you gotten a wrong number text? Someone’s contact list doesn’t need updating. It's from well-organized & sophisticated international scam operations. They want you to invest in #cryptocurrency & promise massive profits. But you’ll have 1 massive loss.

Give back to the #InfoSec community by writing a review of a book, fiction or non-fiction, that you think every #cybersecurity professional should read! 🤓 Learn more about writing a book review for the Cybersecurity Canon here📚 https://icdt.osu.edu/news/2020/08/want-submit-review

It’s the end of an era with the demise of #CentOS. Lior Ben Dayan of @VulcanCyber details what the death of @CentOS means for security. Everything you need to know, including the measures you can take. https://cybersec.vulcan.io/s/what-the-death-of-centos-means-for-security-9580 #infosec

Check out a new book I cowrote: The Definitive Guide to PCI DSS Version 4: Documentation, Compliance, and Management. Hopefully it can help people here on their PCI journey.  #PCI #DSS https://amzn.to/3WhEfh1