The FBI just moved the goalposts on "Basic Security." 🚨

Operation Winter SHIELD has launched, and the message is clear: The private sector is no longer a passive target—we are now a "force multiplier" in national defense.

Here is the 10-point roadmap you need to know. 🧵👇

🧵 Browser security is being challenged by AI conveniences.

For 30 years, we’ve built a fortress: SOP, sandboxing, and site isolation. But Agentic AI and assistants like Google Gemini are unintentionally undoing that progress.

Here is how the "Double Agent" works. 👇

If phishing emails were bad…
Quishing is worse.

People scan QR codes on:
• Menus
• Parking meters
• Stickers
• Random shirts

No sender. No links to hover. Just “Scan me.”

One scan can lead to credential theft, MFA abuse, or malware.

Think before you scan.

#CyberSecurity #Quishing #Phishing

QR codes are now a frontline phishing vector — and your email gateway won’t catch it.

The Federal Bureau of Investigation issued a FLASH alert on active QR-code phishing (“quishing”) tied to the North Korean threat group Kimsuky.

CISA’s Cross-Sector Cybersecurity Performance Goals (CPGs) get one big thing right:
they focus on doing the right security work first.