Some nights I sit back, sip my coffee (or whatever’s strong enough to keep me from flipping tables), and let the question roll around in my head like it owns the place: Does any of this actually matter? I’ve been in this game long enough to know how the sausage is made. Security programs built on duct tape and prayers. Execs who think “acceptable risk”…
Look, cybersecurity is heavy enough. Ransomware sucks. Breaches suck. People reusing the same dumb passwords for 20 years? That really sucks. But sometimes, this industry serves up stories so ridiculous, so head-shakingly absurd, that you just have to laugh. Here are 10 cybersecurity facts that won’t help you secure a damn thing—but might make you spit your coffee or at least shake your head in…
We’ve got a serious problem in this industry. Not the kind that shows up on a risk register or a compliance checklist. I’m talking about the complete lack of real accountability when information security fails. The Same Old Story Massive breach? No worries. Slap together a PR statement filled with buzzwords (“sophisticated threat actor,” “zero-day vulnerability,” “we take your security seriously”), toss a CISO under…
WARNING: This post is a VERY candid rant. It might trigger you. If it does, think about why it triggered you. Let’s cut the bullshit. The information security industry is flooded with frauds—people who look the part, talk the talk, but can’t actually secure a damn thing. We’ve built a system where knowing something is treated the same as being able to do it. But…
Some people love to say, “What you don’t know can’t hurt you.” That’s bullshit. What you don’t know can absolutely hurt you, and in security, it usually does. The truth is, ignorance is easy. It’s comfortable, and it’s lazy. It lets you avoid responsibility. It’s easier to believe that security is someone else’s job. It’s easier to assume compliance means protection. It’s easier to pretend…
In Episode #20 of the InfoSec to Insanity podcast, we stripped away the bullshit and got real about the mental health crisis in cybersecurity. The industry is full of brilliant minds, but too many of us are struggling under the weight of long hours, constant pressure, and an “always on” culture that leaves little room for self-care. Matt and I were joined by Steve Shelton,…
Let’s talk about something that’s been bugging me for years: the cybersecurity job market. It’s a complete mess. And if you’ve spent any time looking for a job in this industry—or trying to hire someone—you’ve probably felt it too. We’re told there’s this massive talent shortage, that companies are desperate to fill cybersecurity roles. Yet, the reality for many job seekers is rejection after rejection,…
Closing out 2024, it’s time to look back at the cybersecurity stories that made the headlines and shook our industry to its core. Each of these events left its mark, and if we’re paying attention, they’ve also left us with lessons—hard-earned, but invaluable. Let’s break it down, no bullshit, just the truth. 1. Salt Typhoon’s Infiltration of U.S. Telecommunications The Story: Chinese state-sponsored hackers breached…
Twas the night before Christmas, and all through the net, Not a creature was stirring, not even a botnet. The firewalls were hung by the servers with care, In hopes that St. Nicholas would not find malware. But in the glow of our twinkling, festive LED lights, The digital Grinches were plotting their cyber plights. They didn’t want toys, or cookies, or cheer, They wanted…
I’ve always believed that poor choices have consequences and good choices come with benefits. It’s not groundbreaking stuff—just the truth. Yet, in a world that’s racing faster than we can keep up with, especially when it comes to technology, this truth gets ignored, forgotten, or worse, flat-out denied. Every tool, every gadget, every shiny new piece of tech offers a choice. How we use it—or…