Look, cybersecurity is heavy enough. Ransomware sucks. Breaches suck. People reusing the same dumb passwords for 20 years? That really sucks. But sometimes, this industry serves up stories so ridiculous, so head-shakingly absurd, that you just have to laugh. Here are 10 cybersecurity facts that won’t help you secure a damn thing—but might make you spit your coffee or at least shake your head in…
If you’ve spent more than a few minutes in the cybersecurity industry, you know that credibility is everything—or at least it should be. That’s why the news that Mark Lanterman, a well-known cyber forensic expert involved in over 2,000 cases, is under FBI investigation is a gut punch to many of us. Brian Krebs’ report lays it out: serious questions are being raised about whether…
NOTE: There’s no correlation between today’s date and 9/11, this was a topic that came up in a recent conversation. Tonight on InfoSec to Insanity, we’re tackling a subject that’s been gnawing at me for a long time: the slow, quiet erosion of our civil liberties since 9/11. If you’re old enough to remember that day—and most of you are—you remember the fear, the unity,…
We’ve got a serious problem in this industry. Not the kind that shows up on a risk register or a compliance checklist. I’m talking about the complete lack of real accountability when information security fails. The Same Old Story Massive breach? No worries. Slap together a PR statement filled with buzzwords (“sophisticated threat actor,” “zero-day vulnerability,” “we take your security seriously”), toss a CISO under…
Some of the worst decisions I’ve ever made—in business, in security, as a father, as a husband, and as a human being—came from a lack of context. I thought I had the full picture. I thought I knew enough. I thought I was right. I wasn’t. And if you’re being honest with yourself, you’ve probably made the same mistake. The reality is, most bad decisions…
WARNING: This post is a VERY candid rant. It might trigger you. If it does, think about why it triggered you. Let’s cut the bullshit. The information security industry is flooded with frauds—people who look the part, talk the talk, but can’t actually secure a damn thing. We’ve built a system where knowing something is treated the same as being able to do it. But…
I can’t remember the last time I scrolled through a social media platform without running into some kind of political rant. It used to be that politics had its place—news sites, debate forums, maybe the occasional heated Facebook thread. But now? It’s everywhere. There’s no escaping it. LinkedIn, which was once a professional networking site, has turned into yet another cesspool of political opinion. X…
WARNING: This post is blunt, short, and sweet. Shitty leaders and/or politically correct people may get offended by this post. There’s a lot of nonsense out there about what makes a good leader. People love to throw around buzzwords—visionary, transformational, servant leader—but most of it is just fluff. In reality, leadership comes down to a few simple (but often ignored) principles: Shit flows uphill. Always…
Look, if you thought things were messed up in cybersecurity when I wrote UNSECURITY back in 2019, buckle up—because they’re worse. Much worse. Despite pouring billions of dollars into tools, frameworks, and “solutions,” we’re still losing. Breaches keep happening, hackers keep winning, and the industry keeps spinning its wheels, pretending everything’s fine. It’s not fine. And I’m not here to sugarcoat it. That’s why Oscar…
Some people love to say, “What you don’t know can’t hurt you.” That’s bullshit. What you don’t know can absolutely hurt you, and in security, it usually does. The truth is, ignorance is easy. It’s comfortable, and it’s lazy. It lets you avoid responsibility. It’s easier to believe that security is someone else’s job. It’s easier to assume compliance means protection. It’s easier to pretend…