Last week, I met with a marketing freelancer to put together a strategic marketing plan for my company. This morning, me to freelancer: “Heeeeeyyyy, so, I had an idea. It might change the plan a wee bit.” 😬 OMG, I have become my bosses. 🤣😭🤦‍♂️

We're about to get eight different "AI-free" logos when what we really need is one honest conversation about what that even means. The irony of competing certifications is magnificent. https://www.bbc.co.uk/news/articles/cj0d6el50ppo

Attackers are now padding phishing emails with legitimate links and hundreds of blank lines to confuse AI detection. The malicious bit sits at the top. The noise sits below. Your security tools are squinting at a hay... https://blog.knowbe4.com/nlp-obfuscation-techniques-email-security-evasion

A banking app glitch let customers see other people's transactions, National Insurance numbers, and benefit payments. Lloyds said it's fixed now. Nothing to worry about. Except everything. https://www.bbc.co.uk/news/articles/c4g23npxpwgo

Attackers now hit 2,500 organisations in under an hour using AI. Your security team is still in the prioritisation meeting. The asymmetry isn't new, but th... https://cybersec.picussecurity.com/s/the-role-of-generative-ai-in-bas-why-attackers-move-in-minutes-and-defenders-still-take-days-25831

Attacks powered by AI steal 4.5 times more than attacks without it. Your defences won't stand a chance unless they're powered by AI too. The future of hacking isn't coming. It's already here. https://blog.knowbe4.com/yes-you-need-ai-to-defeat-ai

I was waiting for this kind of scare mongering but good grief this is bad.

Do you want to come and work for Canon as EMEA Enterprise Information Security Senior Manager ? if you do apply below ejqe.fa.em2.oraclecloud.com/hcmUI/Candid... based in NL but UK ( London) could also be an option. Great opportunity to lead an amazing team please RT #infosecjobs #recruitment

We've invented service accounts all over again. MCP servers are quietly becoming the same overprivileged, under-monitored access brokers that have haunted enterprise security for years. Except this time, ... https://go.aembit.io/s/mcp-servers-and-the-return-of-the-service-account-problem-25746

Threat actors have discovered that messaging apps work brilliantly for phishing. Better encryption, fewer filters, and people actually read their messages. We've spent years training people not to cl... https://blog.knowbe4.com/threat-actors-abuse-messaging-platforms-to-launch-phishing-attacks

Most organisations have consent processes sorted. Then AI enters the pipeline and suddenly nobody knows if withdrawn consent actually means anything anymore. Which is awkward when your users th... https://api.cyfluencer.com/s/consent-for-ai-enforcing-responsible-data-use-in-the-age-of-ai-25710

You can patch until your fingers bleed. Won't matter. Attackers are now moving faster than your vulnerability team can even read the advisory. The grace period is dead. Agenti... https://cybersec.xmcyber.com/s/patching-can-t-save-you-how-agentic-ai-broke-vulnerability-management-7f8b537f-25709

We built identity systems for things that follow instructions. Now we're deploying things that follow goals. They're not the same problem. https://go.aembit.io/s/human-vs-ai-identity-why-ai-agents-are-breaking-identity-25708

Government agencies and schools get hit by ransomware and their emergency services shut down. A private company gets hit and loses money. The stakes aren't the same. Neither should the approach. https://blog.knowbe4.com/navigating-the-u.s.-public-sectors-unrelenting-cyber-crisis

“I have usernames older than you.”. Holy shit

Digital Compartmentalisation: Or How I Learned to Stop Worrying and Love Multiple Screens Note: I wrote a similar title for a blog post I was writing at work, but some of the kids thought no-one would get the reference (probably because they didn't and didn't want to look stupid). So if you get…

This is just horrible.... and probably just the tip of the iceberg when it comes to human-AI relationships / advice etc and how bad things can go. www.wsj.com/tech/ai/gemi...

Schools are bleeding millions to vendor payment fraud. The emails look perfect. No malicious links, no sketchy attachments. Just someone asking to update the bank details. And staff comply because, well, that's what y... https://cybersec.ironscales.com/s/the-emails-hitting-k-12-right-now-25644

Compromised for 6 months before anyone noticed... sent trojans to govs and finance deposit in 4 countries. All with a text editor https://cybersec.picussecurity.com/s/notepad-supply-chain-attack-chrysalis-backdoor-25642

We've finally arrived at the moment where an AI trained on the internet gets ads injected into it. The snake eating its own tail, but make it profitable. What could possibly go wrong. https://www.adweek.com/commerce/advertisers-will-soon-be-able-to-buy-chatgpt-ads-through-criteo/

Travel-tinted glasses When I travel abroad, I become a different person. I find myself doing things i would never do at home. Last week I landed in Billund. It's small, Danish town, and home of Lego. The hotel was in Aarhus. Perfectly reasonable. Except getting there required taking a coach. A…

100% agree on this. Social media bans is akin to victim blaming and putting the onus on others to solve the problems and harms that big tech have brought and for which they refuse to deal with

Stop me if youve heard this one... but its a problem that just is neglected. Or maybe too inconvenient to fix compromised IoT devices. https://api.cyfluencer.com/s/tracking-orbs-on-singapore-s-telecommunications-networks-25548

Airport Incident Response I was going to be click-baity and title this post, "what incident response taught me about mixing up airports", but honestly, looking at LinkedIn these days, I think the humour would be lost. I'd end up with 50 new followers (75 if I ended the post with the word, "Agree?"…

Aarhus is a lovely place... must visit when the weather is nicer though

It's amazing how if you really really clean up your diet, you begin to feel better about yourself...

We've given AI the keys to the kingdom and most organisations still haven't changed the locks. That's not a metaphor. That's just Tuesday in infosec. https://api.cyfluencer.com/s/rogue-25534

Do orga need to treat fraud and threat intelligence separately? Or should there be more unification? https://api.cyfluencer.com/s/payment-fraud-detection-how-ato-and-phishing-kits-drive-modern-abuse-25523

Cyberattacks on energy grids aren't trying to knock the lights out anymore. They're mapping your facilities, watching your repair crews, timing your recovery. Intelligence gathering wrapped in the long game. The mi... https://therecord.media/ukraine-cyberattacks-guiding-russian-missile-strikes

We're all watching someone lose $500 to an AI agent that trades 24/7 with the enthusiasm of a casino and taking notes on the flames. In eighteen months, this will be completely normal. Your CEO's already ... https://blog.knowbe4.com/humans-will-give-ai-anything-if-you-make-it-sound-cool-enough

Just when you thought social media couldn't sink any lower... deepfakes of UK urban decline are taking over TikTok & Instagram Reels. The 'creators' behind this trend claim to be 'just making funny videos', but their AI-generated content is... https://www.bbc.co.uk/news/articles/c4g8r23yv71o

Red bull cans are getting supersized... bigger than cans of Monster!

Hmmm preemptive security. Could stop your party getting crashed early... but is it doable? https://cybersec.picussecurity.com/s/what-is-preemptive-security-the-future-of-cyber-defense-25495

ATMs, once a reliable source of cash and a symbol of convenience, have become the latest target for cyber thieves. A $20 million jackpot has been hit via malware-stuffed ATMs, with over 700 such incidents reported in the US last ... https://www.theregister.com/2026/02/19/crims_atm_jackpotting/

One of these days I may take the time to properly understand how OAuth properly works. Until then, I take snippets from blogs like this! https://go.aembit.io/s/2-legged-vs-3-legged-oauth-which-flow-fits-your-use-case-25479

Indonesia's Coretax platform was compromised to steal $1.5-2m from taxpayers. Because who needs to pay taxes on time anyway? Apparently, a sophisticated campaign impersonated the official web service and tricked u... https://www.infosecurity-magazine.com/news/fake-coretax-apps-fraud-indonesia/

Spanish courts just ordered blocks on ProtonVPN and NordVPN during LaLiga matches. Because nothing says 'good governance' like censoring your internet for soccer. Meanwhile, the UK considers rest... https://www.technadu.com/vpn-blocking-in-spain-affects-protonvpn-nordvpn-matches-access/620401/

Just had a chat with someone who got phished through their own Microsoft login page. I asked if they'd ever heard of 'device code phishing'. They looked puzzled. Yeah, that... https://www.bleepingcomputer.com/news/security/hackers-target-microsoft-entra-accounts-in-device-code-vishing-attacks/

LLM's are not random password generators. Well, they're about as random as using, "St4rW4r$" for all your accounts! https://www.irregular.com/publications/vibe-password-generation

Police arrest man who 'hacked' after they accidentally sent him confidential files and he had the decency to try to blackmail them. That's not how you handle a data ... https://www.bitdefender.com/en-us/blog/hotforsecurity/dutch-police-arrest-man-hacking-accidentally-sending-confidential-files

AI Agents Demand Identity Security - a good guide looking at why AI agents become a security problem the moment they can do things, not when they can say things. api.cyfluencer.com/s/ai-agents-...

New year new episodes of the host unknown podcast dropping. @thomlangford.bsky.social pulls no punches as he takes on "so-called" security experts who warn against using AI to generate caricatures. (his words not mine or @sirjester.bsky.social) Catch the full episode on your podcast app of choice.

Can't stop AI - can we safely work alongside it? blog.knowbe4.com/welcome-to-t...

The Art of One-Upmanship There's a peculiar disease that infects children somewhere between the ages of six and twelve. It's not chickenpox or measles, though it spreads just as quickly through playgrounds and birthday parties. It's the chronic need to establish dominance through increasingly…

npm Account Takeovers are a Growing Malware Trend

A nice e-magazine resource on all things going on with AI. api.cyfluencer.com/s/digital-tr...

Microsoft Office Zero-Day Vulnerability, CVE-2026-21509, Under Active Exploitation cybersec.xmcyber.com/s/microsoft-...