"Search all the parks in all your cities; you'll find no statues of committees." - David Ogilvy

Rock band or stand up comic? Drawing parallels between the familiar and the new blog.knowbe4.com/one-size-fit...

Why British Airways’ Business Class Ads Miss the Only Point That Matters Dear British Airways, I saw your latest business class sale advert. Beautiful photography, tasteful fonts, the usual tasteful smattering of champagne, winglets and folded duvets. Very on brand. And yet, in a strange way, it…

Blowing up the scam compound is a new one... Be better if they had done if earlier but better late than never

A great insightful story by @joetidy.bsky.social in an interview with cyber-crime Kingpin Vyacheslav Penchukov www.bbc.co.uk/news/article...

Marks & Spencer pegs #CyberAttack cleanup costs at a staggering £136M, contributing to a massive slump in profits. The true cost of a breach is revealed! #CyberSecurity #RetailTech

www.theguardian.com/world/2025/n... people now realising that electric cars / busses are always on. I wonder when the 1st major electric car manufacturer gets hacked / has an issue and accidentally disables the whole fleet will be?

A CISO’s Guide to Agentic Browser Security. Some interesting points and similar to most AI deployments in that the guardrails will continually evolve and you're not going to get perfection from day 1 (or maybe even day 500)... api.cyfluencer.com/s/a-ciso-s-g...

A nice breakdown of MCP for identity, least privilege, and auditable access between LLM's and external systems. go.aembit.io/s/what-is-mc...

The Louvre heist happens every day in the cyber world. The attacks look basic, boring, uninteresting... yet the impact is quite large cybersec.picussecurity.com/s/the-louvre...

This is an important article highlighting the difference between AI and other injection vulnerabilities. "..like saying that my house cat and a 650 pound wild tiger are the same because they’re both felines." api.cyfluencer.com/s/what-s-the...

Red teaming of AI Agents will become an increasingly important discussion point in the near future. As we move towards having more agents pretty much everywhere (whether we want it or not) the gap between human agent interaction being exploited more. cybersec.pillar.security/s/agentic-ai...

Some interesting methods disussed in this artible about security AI agents and LLM workflows without secrets. go.aembit.io/s/securing-a...

Fridges, AI, and the Hidden Cost of Convenience There’s an old story about a village that finally got electricity. Everyone bought fridges. A few months later, the elders gathered and suggested the unthinkable… “get rid of them!” Before the fridges, leftover food was shared. No one went to bed…

How the browser became the main cyber battleground api.cyfluencer.com/s/how-the-br...

Don't forget our Call for Papers (also Rookies and Workshops) is still open! Have you got something original and interesting to share, but need somewhere to do it? ➡️ #BSidesLDN2025 More information and to submit your proposal: cfp.bsides.london/bsides-londo... #Security #BSides #London

Nice, balanced piece. It shows where AI can help in pen testing and the bits that still need human expertise. Worth a read if you’re looking for a grounded view of “AI as co-pilot, human as pilot” rather than hype. api.cyfluencer.com/s/will-ai-re...

Good news: some of Bluesky’s worst scolds have gathered together in the replies to this great joke so that you can block them all at once.

An interesting piece on MFA downgrade attacks. The concept is quite straightforward. When users have multiple authentication methods available (say, a passkey and an SMS code), attackers can manipulate the login process to only show the weaker option. go.j4vv4d.com/0Qv100

I sometimes kind of miss the old days when the whole community was in one place on Twitter. But then again, I do enjoy not being on social media as much too.

US woman jailed for 8yrs for stealing identities to give North Koreans IT jobs. Christina Chapman admitted to stealing the identities of 68 US citizens, then running a laptop farm from her home to help North Koreans work for 300 separate companies. www.bbc.co.uk/news/article...

Sam Altman telling the Fed he’s worried about AI fraud is like a bear telling the park ranger he’s concerned about all the mauled campers.

European manufacturing is going through its own digital transformation. Think 'Smart Factory meets Security Nightmare.' Worth a read if you're in manufacturing or just enjoy a good 'robots meet reality' story. blog.knowbe4.com/digital-fact...

When your AI chatbot recruiter uses '123456' as a password... This isn't just about McDonald's - it's about how we're rushing to hand over sensitive data to AI Worth a read if you're considering AI automation go.j4vv4d.com/rQ2x8W

While this is from @theonion.com, it's also true. Thanks, infosec.

I’m in a WhatsApp group for Security Copilot with business execs and pattern for months has been exec joins during pilot kickoff, says Security Copilot is amazing, then comes back a month later and asks if anybody knows how to optimize it, then reappears two months later asking how to justify it 😅

Just living like a player who's been stuck in the starting village for 3 years cos I keep getting distracted by "collect 47 random emails" and "attend mysterious meeting that could be important" side quests. Meanwhile the main storyline is like "what am I actually doing with my life?"

Security teams are drowning in vulnerability alerts, but prioritisation alone isn't enough. The real challenge? Moving from knowing WHAT to fix to actually FIXING it. This article shows how AI-driven remediation could be a way to reduce that. go.j4vv4d.com/Gsznqi

M&S confirmed that the retail outlet's network was initially breached in a "sophisticated impersonation attack" that ultimately led to a DragonForce ransomware attack. www.bleepingcomputer.com/news/securit...

Was honoured that @gattaca invited me to be a guest on his Chasing Entropy podcast. Was a fun chat.

The "cyber delta" - the gap between perceived vs actual security posture may be one of the biggest hidden risks in M&A deals today. This article explores 11 critical questions every security team needs to ask go.j4vv4d.com/E0mudX

Episode 225 of the host unknown podcast is out, and @thomlangford.bsky.social eloquently explains why the edit takes so long. cc @sirjester.bsky.social

🤦🏻‍♀️🤦🏻‍♀️🤦🏻‍♀️

What is trust? How do we build it? What does it mean? Has AI and social media taken whatever little trust we had in anything? javvadmalik.com/2025/07/01/i...

London is over

Is AI is Rewiring Human Connection? Sarah, a 19-year-old college student has fallen in love. Not with a classmate, not with someone she met at a coffee shop, but with an AI chatbot named Alex. Every morning, she wakes up and immediately reaches for her phone to continue her conversation with Alex,…

Been thinking of this a lot lately...

Episode 224 of the host unknown podcast is out... and I'm not a petty person, I don't go hunting for receipts just to prove a point. But it's not often that @sirjester.bsky.social serves me up the opportunity on a silver platter. For once @thomlangford.bsky.social was safe!

With Google's Veo 3 and similar advancing rapidly, you can now produce high quality short videos, complete with realistic dialogue and sound design. If the content is engaging and the production quality is high, do you care whether it was created by a human or an AI? Is content authenticity valued

#OSINTCHALLENGE you'll never guess where I am. Look at that sunshine!

If a person appears to be more productive using an automated tool, but psychologically feels worse and is more downhearted, what has the world gained? What studies are looking at human wellbeing rather than corporate wellbeing?

New from 404 Media: 'FuckLAPD.com' is a website that lets anyone use facial recognition to instantly identify cops. Point camera, take photo, upload to site. It provides their name and salary information. Creator also rebooting their tool for identifying ICE employees www.404media.co/fucklapd-com...

A great post by my wonderful colleague Rebecca Bailey on what to do about repeat clickers. Based on research, interviews, and providing some genuine insights into what makes repeater clickers... click.

This piece does a solid job breaking down why OAuth implementations keep getting compromised, despite the protocol itself being sound. The key insight: it's not OAuth that's flawed—it's how we implement it. go.j4vv4d.com/QepUjJ

With such an impassioned intro by @thomlangford.bsky.social - you gotta give the podcast a go Right @sirjester.bsky.social ... special thanks to @brianhonan.bsky.social for his unwitting contribution.

By me @forbes.com: The GOAT of all credentials leaks, all new data (with the exception of 184 million records from May) the researchers say. #kudos @j4vv4d.com for advice. #infosec www.forbes.com/sites/daveyw...

Apparently, over 70% of enterprise breaches STILL involve compromised credentials despite MFA implementation. PKI and FIDO2 are being pushed as the saviors of authentication, but are we just shifting the problem. Orgs will still struggle with complexity and user adoption. go.j4vv4d.com/nLSyKW