Using the right tool for the job is always better.

Anyone who does DIY projects around the home knows how using the right tool can dramatically make the job you are doing far easier. Use the wrong tool, and that task suddenly becomes a burdensome nightmare.

I received this email the other day to my personal email account. It is a “Security Alert” from “Microsoft Helpdesk.” Oh, my!

AI maturation is leading to more malicious hacking attacks.

One of the biggest reasons why cybercrime is so bad — and is increasing each year —is that so much of it is committed by foreign nationals who are not physically located in the country they are attacking.

These days it can be hard to tell if something is or isn’t a scam.

It can happen to the best of us. 

This story happened a decade ago, when I was working at a Fortune 10 company. “Smartest” is subjective, but most of my former coworkers and external customers agreed the guy involved in this story was seen as the “smartest” guy around.

I have been writing about the need to better train our programmers in secure coding practices for decades, most recently here and here.

Fighting voice-based phishing needs to be a big part of your human risk management (HRM) plan. 

Protecting humans means protecting the tools humans use.

One of the most common human risk management recommendations is for users to hover over URL links of unexpected messages to see if the involved DNS domain is legitimate or not for the sending company involved.

I occasionally get human risk management (HRM) administrators asking me to help them with ideas of “contests” to better educate their end-users.

A super common voice phone call phishing scam (i.e., vishing) is when the scammer calls you and pretends to be a law enforcement official with a warrant for your arrest for not answering a court jury duty summons.

“The problem is much, much worse than most people acknowledge.”

One of the biggest enduring mysteries for me in cybersecurity is why most cybersecurity curricula don’t teach secure coding to programmers.