Think With Your Brian

Tech addict, InfoSec junky, runner, thinker, car geek, beer snob, bourbon connoisseur.

[Think With Your Brian @BDess82]

Are you a man at an @MLB game? Catch/retrieve ball. Find child. Place ball in child’s hands. Be classy and inspire the next generation: ✅

[Think With Your Brian @BDess82]

@blackroomsec Would suck to be a customer

[Think With Your Brian @BDess82]

#bingimagecreator #sweepstakes

[Think With Your Brian @BDess82]

@BurgerKing Hey love BK but really frustrating how some of your locations are “online only” not accepting drive through or kids walking in. Example is your Rocky River Ohio location. Pretty much stopped going there.

[Think With Your Brian @BDess82]

@H3KTlC It’s nice but is it worth the premium? Not sure.

That said, I love running outdoors so..🤷‍♂️

[Think With Your Brian @BDess82]

Amazing how bad @AmazonAlexa + is. Free tip: don’t enable it if you want to preserve your skills and apps.
I get it’s early access but yikes

[Sean Metcalf @PyroTek3]

Following the guidance in these two articles, you can detect two of the most common password attacks against Active Directory:

1. Detect Password Spraying using a Honeypot account:
https://t.co/vfdgBNjCE5

2. Detect Kerberoasting using a Honeypot account:
https://t.co/nssQu12jwk

[Think With Your Brian @BDess82]

@HackingDave I definitely fall short

[Think With Your Brian @BDess82]

@MyronVernis 1980’s Ford Tempo. Brakes were ineffective and the brake line rusted with the rest of the car when it was still only a few years old. It just wanted to rust and completely disintegrate in NEO weather.

[Think With Your Brian @BDess82]

@lst156 @MyronVernis Those were just awful build quality - scary encounter! Glad you’re ok!

[Think With Your Brian @BDess82]

@RayRedacted Omg!!! Way to gooo!! Talk about an amazing athlete

[Bob Spies @bspies21]

12u Gold Bracket State Champs!Beyond proud of these boys as they competed & grinded out wins all week to finish 6-0. Oh and we met Edd George! Happy Father's Day to our Bucs Dads!

[Think With Your Brian @BDess82]

@gabsmashh That said, your InfoSec contributions are great and for that - thank you!

[Think With Your Brian @BDess82]

@gabsmashh You have never been part of the united dairy farmers industry.

[Dave Kennedy @HackingDave]

My advice to kids has changed recently and it's not to get a cybersecurity degree.

Get a computer science one, with a specialization in AI or an AI solely degree.

I feel like right now, the cybersecurity market is pretty rough on hiring folks in - and that's only going to get harder as AI progresses more.

Having a computer science with AI focus, you can join any industry - but also be top notch in cybersecurity with new skills if you want to get into this field.

I'm pretty reserved on when new things come out, and have PTSD around new cybersecurity trends that promise the world. I was the same when AI first came out - very reserved, is this going to have a huge impact? Is this really a thing.

AI is much different and a monumental shift for the industry/economy and it'll only get better.

The major problem we are going to run into with this is that how do we know who can really code and who's vibe coding?

Pretty hard delineation/shift happening. While vibe code is cool and all, being able to actually code/develop something that's needed with augmentation from prompt coding is necessary.

[Dave Kennedy @HackingDave]

I do miss these times. Gone from 10am until 9pm - no cell phones - parents had no idea where we were.

Newer generations will never know.

[Think With Your Brian @BDess82]

Very much so.

[Dave Kennedy @HackingDave]

Couldn't agree more here.

If you aren't ten minutes early, you are late.

[Think With Your Brian @BDess82]

@m_sanders_us @HackingDave Spot on!

[Think With Your Brian @BDess82]

As someone who was once responsible for this, I could not agree more.

[Martin @cantcomputer]

Vendor due diligence has become a standard practice in cybersecurity, but it’s not living up to its promise. These programs are often more about checking compliance boxes than addressing real security risks. Vendors complete lengthy questionnaires with generic responses, giving organizations the illusion of safety while doing little to prevent actual breaches.

The biggest flaw is the static nature of these assessments. Cyber threats evolve daily, yet due diligence is often a one-and-done process, leaving businesses blind to future vulnerabilities. Even worse, companies frequently treat all vendors the same, wasting time on low-risk providers instead of focusing on those who pose the greatest threats.

It’s time to rethink the approach. Continuous monitoring, prioritizing high-risk vendors, and fostering better security practices with partners can make a real difference. Instead of relying on outdated and superficial processes, organizations need to adopt dynamic strategies that address the risks of today—and tomorrow. Vendor due diligence, as it stands, isn’t just ineffective; it’s a costly misstep.