Today I spoke with the co-onwers of a company that has spent 7 years developing an in house CRM and job management platform. They wanted to replace their internal developer resource with ai tooling #ai #vibecoding

The greatest trick the tech industry ever pulled was calling incorrect outputs “hallucinations.” No, it’s not hallucinating or inventing things. It’s code. And it’s wrong.

The last three months have been a bit of a whirlwind. I've worked for 3 different companies in four different roles. Feels good to be in a steady position again. Although now I'm on a startup and building something new

SaaS platforms used in your organisation are one of your weaknesses for #infosec. You need to make sure you're securing them properly. #cyberawareness #cybersecurity www.infosecurity-magazine.com/news/saas-br...

The upcoming tiktok ban is interesting. With my infosec hat on the amount of data collected/given to tiktok is quiet scarry. But being realistic it's no worse than the amount of data being given to any other social media app. In fact some of the others are worse #infosec #cyberawareness #tiktokban

Learn how to set up a secure, cost-effective VPN at home using PiVPN. Perfect for privacy-conscious tech enthusiasts. 🥧 #Cyberawareness #cybersecurity medium.com/@davenport.a...

For all of its interesting uses AI does introduce some serious infosec challenges. There's the headline grabbing ones like deep fakes but there's also the small ones like misinformation. When it comes to AI you should always validate the output. www.bbc.com/news/article... #infosec #cyberawareness

I had a conversation with someone not long ago about the link between ransomware and crypto and whether ransomware would exist without crypto. It's an interesting question. I'm certainly existed first but would it be as popular without it. #cybersecurity #cyverawareness

Yet another misconfiguration in AWS exposing data. Although you have to question who thought it was a good idea to put a memory dump somewhere unencrypted jalopnik.com/brothel-visi... #infosec #informationsecurity #cyberawareness #cybersexurity

I’m going to be doing the 100 Push-Ups a Day Challenge this January to help raise money for Cancer Research UK. Please show your support and help fund life-saving research by donating to my page. fundraise.cancerresearchuk.org/page/andrews...

This time 25 years ago we were all worried the world was going to end. Thankfully the entire IT industry had worked tirelessly to patch and update all these systems and avoid a possible catastrophe. Some times you can fully mitigate a risk! #infosec #informationsecurity #informationsystems

Just when you think there can't be time for any more major security incidents this year... www.bbc.com/news/article... #cybersecurity #infosec #informationsecurity

Sometimes it's the simple things that trip you up. Securing an S3 bucket in AWS is relatively trivial but it's something that can be easily missed. #cybersecurity #infosec #informationsecurity www.techradar.com/pro/security...

www.techradar.com/vpn/vpn-priv... It really has been a busy year. The Salt typhoon actions look like they spill over into next year and I suspect only become worse as we find out more. It really highlights that your supply chain security is just as important. #infosec #cybersecurity

People only ever remember your failures. Y2K was only a non-event because of the hard work of a lot of people to make sure things got patched. Much like how all the hard work of people in cyber security never gets celebrated. #infosec #cybersecurity

It's been an eventful year for cyber incidents. It's good to look back over them and just seen if there's any lessons you can learn as a security professional techcrunch.com/2024/12/26/b... #InfoSec #CyberSecurity #informationSecurity

How long since you tested your business continuity plan, or your incident response? It's all well and good having these plans but if your people don't know how to use them they're not worth the paper they are written on. #infosec #businesscontinuity #cyberresiliance

Not all security warnings are bad. Chrome can now be configured to always upgrade to a secure connection and to warn the user when I site doesn't support https www.forbes.com/sites/daveyw... #cybersecurity #infosec #cyberawareness

Perfection.

How to turn around a toxic cybersecurity culture https://www.csoonline.com/article/3618146/how-to-turn-around-a-toxic-cybersecurity-culture.html

You're more vulnerable to #SocialEngineering than you realise. You should learn to recognise the signs of an attempt to misuse your trust. medium.com/@davenport.a... #infosec #cyberawareness #informationsecurity

Culture is important in security. These tips for creating a positive security culture from NCSC could be really helpful if you're struggling to build the right culture in your organisation. www.ncsc.gov.uk/collection/y... #infosec #cyberawareness #informatuonsecurity

Proud to work at @vanityfair.com

On Linux you're an admin On Mac you're an end user On Windows you're a victim

Microsoft's Recall function appears to not be great at filtering out sensitive information. The use case is definitely something you could see quite often from a normal user. And there lies the problem. User behaviour across the entire OS is not predictable. #infosec #cyberawarenss

If an attacker gained access to your personal device today, what info would they have and how impactful would it be. How do you store data on your phone? How do you backup that data? #cyberawareness #infosec #cybersecurity

There's no such thing as 100% when it comes to #infosec and #cybersecurity but there are steps you can take to reduce the risk of an attack and things to help you recover afterwards. This is true for personal as well as business.

Do you think it would be acceptable to buy all my family #cyberawareness training this holiday season?

Quite a lot of the time being in #InfoSec isn't a lot of fun. In a lot of companies you're seen as a necessary evil. Something to be tolerated but not respected. The key to being successful is building a strong relationship with your colleagues.

Santa is clearly #cyberaware #infosec #cybersecurity

So very true. It's always the ops team who know the truth. For every risk the ELT are focused on we have another 5 that we're just as concerned about

There's lots of good AI can do in the workplace but theres also some damage. Make sure your team are using it safely medium.com/@davenport.a... #aisecurity #cybersecurity #infosec #informationsecurity

The SolarWinds hack highlights just how important effective supply management is to your security. You can't be sure if your suppliers aren't. ict-fraud.ghost.io/the-2020-sol... Also how was that 2020 #infosec #cybersecurity #cyberawareness

Cyber essentials and the supply chain www.riskevolves.com/looking-beyo... #cyveressentials #infosec #infomationsecurity

When it comes to security even tiny steps matter. The UK cyber essentials certification isn't comprehensive but it's a good starting point for your organisation medium.com/@davenport.a... #infosec #cybersecurity #informationsecurity #cyberessentials

Your infosec policy needs to cover all devices. Smartphones are just as much of a risk as laptops. If you're not securing them effectively then they become an Achilles heel for your org www.forbes.com/sites/daveyw... #infosec #cyberawareness #informationsecurity #cybersecurity

Anyone else watched Skeleton Crew and get Spaceballs vibes in the opening minuteS? #Starwars

As the world has gotten better at planning for ransomware it's not too surprising that attackers are looking for other avenues. Your business continuity plan needs resilience for your key systems and suppliers not just back ups www.axios.com/2024/12/03/c... #infosec #cybersecurity #cyberawareness

A cyber attack can hit any organisation, be it a large organisation or a local small charity. The local charity might well not have the resources to prevent or prepare a response. So it's good to see some like this springing up cyberscoop.com/cyber-resili... #infosec #cybersecurity #cyberawareness

It's really worth doing a review of your personal online accounts on a regular basis. Have check of the email address you use on haveibeenpwned.com, check for new security settings that you might want to enable. One little tweak might just prevent an account being compromised. #cyberawareness

This is so true. Most companies don't have an understanding of what risks are out there or they think it will never happen to them. Business leaders need to be looking at these risks and taking steps to be more secure. news.sky.com/story/the-uk... #infosec #cybersecurity #informationsecurity

And if their demands aren’t met Sony is threatening to release the whole movie on December 13

A new phishing campaign discovered by malware hunting firm Any.Run utilizes intentionally corrupted Word documents as attachments in emails that pretend to be from payroll and human resources departments. www.bleepingcomputer.com/news/securit...

So basically they've currently got a crap business model. It's another worry with the whole direction Open AI have taken in the last few months. There's a whole list of things that concern me from a security point of view here. #ai #infosec #cybersecurity #informationsecurity

Interesting new tool from AWS. I think I know what I'll be spending time reviewing this afternoon aws.amazon.com/about-aws/wh... #infosec #cybersecurity #informationsecurity #secsky

It's all well and good backing up to the cloud but you shouldn't only rely on that. You should make a physical backup too otherwise you're just at the mercy of a corporation, defense in depth www.stuff.tv/features/don... #cybersecurity #infosec #cyberawareness #defenseindepth #secsky

This is a good idea, shame it's a self assessment so likely means it won't be as effective as it could be but still it's a start. Hopefully the rest of the UK will follow Scotland's lead. #cybersecurity #infosec #informationsecurity #cyberawareness futurescot-com.cdn.ampproject.org/c/s/futuresc...