Just being on the web store for download shouldn't give extensions a pass on you personal or professional security review. It's still worth doing your research and understanding what the extension does before you use it. The requirements for publishing to the store may not cover your risk appetite.

I always found it so odd that Microsoft's out of box configuration was basically a house with every door and window open. Its so easy to miss a configuration setting during an initial deployment that could create a security nightmare down the road. I feel like this is a step in the right direction.

Great now I'm suspicious of both cats and zebras.

New year ahead, fresh momentum. Take 40% off everything with code HOLIDAY40 and fill your shelf with books that help you build real skills and reach the next milestone you’ve been working toward. Ends Jan 2 at 11:59 PM PST. nostarch.com

I've been selected to speak at #RSAC 2026! This year I'm covering two different topics. One session covering #CyberSecurity strategy and one on #Governance. More to come as we get closer to the event! #GRC #InformationSecurity #Conferences

I think it's just music made by poorly constructed AI models that literally think its just the sound of different items banging metal in a 10 minute mp3 you can only download by providing them your social security number.

At the intersection of this privacy and security issue there is... sadness... and photos from your wedding probably... It's weird how people forget that privacy issues can become security or safety issues.

I went from IT to SysAd to CyberSec. I see a lot of people say you "have" to do SOC first to break into #cybersecurity but that's not true. The same path doesn't have to work for everyone. In this persons case I would take the SysAd role in a heartbeat but that's what works for me.

OWASP continues to be a guidepost and key resource pool for baselining your security. With the rapid adoption of AI and teams struggling with budgets their AI Top 10 publications are going to be invaluable over the next several years. genai.owasp.org/2025/12/09/o...

Happy RSAC Speaker Selectionmas to those who celebrate. I hope Santa Hugh Thompson and the rest of the RSAC elves brought you the speaking engagement confirmation you were hoping for.

"While companies often highlight research that benefits them, today’s leading AI labs are given an unusual level of authority to self-report the risks and capabilities of the technology they’re racing to deploy." Is heavy quote that summarizes just a single oddity (issue) around AI and business.

We've normalized sharing photos of our friends and families for so long this is an unfortunate but not entirely unexpected consequence. Always contact your loved ones directly if you think there's a problem and agree on a secret password or phrase only your loved ones know to prove it's you.

#OnThisDay in 1981, Simon & Simon aired “Trapdoors”—likely the first non–sci-fi depiction of computer hacking on US TV. 💻📞 Teen Robbie Rist uses an Apple II + acoustic modem to access a bank—2 years before “hacker” hit mainstream media. A proto-Whiz Kids story from creator Phil DeGuere.

There is no rule book for getting into CyberSec. Every person I've ever talked to had a different path and they vary wildly. What matters is that you are eager to learn and help. A good manager will recognize that and hire you in a second. Skills can be taught but your heart and drive are yours.

Someone should make a isdowndetectordown website, and then also put it on cloudflare.

I commissioned new art for The Spooky Cyber Story Club podcast! I worked with an actual human artist on Fiverr and I couldn't be happier with the results. You can listen on most major platforms or on my RSS site: rss.com/podcasts/the... #HumanArt #CyberSecurity #Podcast #CyberHorrorStories

Kevin McCallister is a social engineer. Look at how he handles the grocery store clerk in Home Alone and his entire hotel scheme in Home Alone Lost In New York. #Cybersecurity #Holidays #SocialEngineering #Hacker

If you aren't 100% sold on giving my new #Cybersecurity podcast a listen. Maybe this short clip will help you decide if the remaining 10 minutes is worth your time. The Spooky Cyber Story Club is available on most major podcasting platforms. rss.com/podcasts/the...

If you are looking for a fun (free) team building opportunity or you like game/challenge based learning the #HolidayHack challenge is live now and always a blast. #CounterHack #CTF #KringleCon www.sans.org/cyber-ranges...

While my podcast logo is a bit basic and rough now I'm hoping to have something better by next episode. I've actually had some stellar experiences on Fiverr so I'm commissioning something there. I know AI could make me... something... but I'd prefer a human artist.

Thinking about swapping my phone out for a newer device (last years model) so I can run a security focused OS full time. I already use a privacy focused OS on my travel phone so I think im ready to go full time on my primary device.

It's Halloween! So it's a great day to announce my new horror themed #cybersecurity #podcast, The Spooky Cyber Story Club! In future episodes I'll be interviewing CyberSec, InfoSec, and Red Team professionals to discuss their cyber horror stories. rss.com/podcasts/the...

Dropping a fun project on Friday that mixes my beloved Halloween vibes with #Cybersecurity. I'm pumped to get spooky and help out the CyberSec and InfoSec communities at the same time.

Always remember AI needs a human element. We have to stop acting like it's infallible. I truly belive we aren't in the Trough of Disillusionment yet. When it comes to AI it feels like the Peak of Inflated Expectations is long and arduous because of the its perceived simplicity and ROI.

If you run into anyone who works at Amazon on the AWS team today give them a hug and buy them a beer because this probably wasn't a great day.

The AWS outage really exemplifies putting all your eggs in one basket. You think "oh my environment is diversified enough and I have failover set up". That's great for things you can control but what happens when tier 1/support systems are also dependent on that same infrastructure (e.g. Atlassian)?

Submitted 3 more session topics for #CyberSecurity conferences today. I was out of the game this year so I'm hoping to talk at several red and blue teamer conferences next year.

An example of exactly what I mean. Social media companies are not equipped to handle the storage and protection of ID's so they'll outsource it. Now due to age verification people's ID's are in the wild. #Cybersecurity #Breaches #CyberSec discord.com/press-releas...

If you're a #Cybersecurity professional looking to get started in public speaking try calling your local public library and offer to teach a free #security basics course. You'll get to help people strengthen their security while figuring out your public speaking process in a low risk situation.

Physical security should be included in your #Cybersecurity toolkit. You need to protect your crown jewels (e.g., people, equipment, documents, etc.) When you travel consider bringing a deadbolt strap to prevent unauthorized entry. www.redteamtools.com/super_grip_d... #CybersecurityAwarenessMonth

With the rise of social media and simplified AI tools it's easier than ever to train a model on someone's voice. If you get a panicked phone call from a loved one how do you know it's them? Talk to your family and agree on a password you can ask for to verify their identity. #Cybersecurity

Social media sites (including this one) offering to take your personal information to "verify your age" under the guise of "protecting the kids" is WILD. Even if sites use a 3rd party to manage that process there is no way it's being handled in a safe, secure, and appropriate manner. #Privacy

It's October, so that means it's Cybersecurity Awareness Month. Please be aware of cybersecurity. Thank you.

It's the start of #Cybersecurity Awareness Month. A good time to review all your accounts for MFA, check for breaches, and change passwords where you can. If you're looking for security/privacy alternatives to common apps like email, browsers, cloud storage, or messengers check out privacytools.io