Bob Lord 🔐 :donor:

I’m working on the next hacklore newsletter, and the holiday season delivered a fresh wave of peak hacklore! 🎁 😜 📬 If you want fewer security myths and more reality-based advice for everyday people (including ways for you to help!), subscribe here:

Stop Hacklore!

About — Stop Hacklore!

Does your cybersecurity awareness training contain any hacklore? I’m collecting examples of hacklore in the wild. Whether it’s training slides, quiz questions, or instructions that focus on rare threats instead of the ones causing the most real-world harm, I want to see it all. Post some screenshots or notes here, or email them to "info" at hacklore.org. Let’s help organizations replace stale guidance with advice that truly keeps people safe.

Looking forward to the family's annual viewing of the two best Christmas movies: Three Days of the Condor, and The Conversation. 🕵️🎄

🎅 ✈️ 🚃 🚗 How can friends and family can keep their online accounts secure during the holiday and travel season? This article does an outstanding job of explaining what really keeps accounts safe vs hacklore. 🙏 https://www.thetimes.com/article/cfd5f639-db6b-41f1-a583-d9adbf64bea3?shareToken=39c1ba3cdbc6dd583aa58c3d628751b8 More info:

Stop Hacklore!

Stop Hacklore!

🔐 📢 Spread the word! 📢

"Create an image that summarizes what you know about me."

𝙏𝙧𝙚𝙖𝙩 𝙖𝙡𝙡 𝙣𝙚𝙩𝙬𝙤𝙧𝙠𝙨 𝙖𝙨 𝙝𝙤𝙨𝙩𝙞𝙡𝙚. This is no longer a paranoid theory, but today's objective reality. Wired article on phone surveillance: https://buff.ly/4jcAqEY My case for encrypting all the things: https://buff.ly/4iA9i25

In light of the Crowdstrike outage over 5 months ago, what specific changes has your organization made to your enterprise security program? What changes to policies, procedures, training, alerting, testing, and your written IRP have you made? Please share!