John Phish

tweet mostly about phishing & infosec. think before you click

[John Phish @SillyPhish]

Any recommendations for IT Security Awareness Training platforms? Features like phishing testing etc required. Preferably not KnowBe4. Looking for something different.

[John Phish @SillyPhish]

@vxunderground You win.

[John Phish @SillyPhish]

@mikko A poorly written statement that is pretty difficult to follow.

[John Phish @SillyPhish]

@vxunderground Do recon on IT employee.
Phish password
Call helpdesk
Claim to have lost phone and need to revoke/ reset MFA
Register new device

[John Phish @SillyPhish]

@TheFinalHop @vxunderground Thanks ChatGPT

[John Phish @SillyPhish]

@mattjay Sounds like brilliant opportunity for a Security person to make their mark on the business and draw up a very clear road map for the next 18 months, unless of course the issues have been identified by previous incumbents in the role but there is no willingness in the org to fix

[John Phish @SillyPhish]

@unusual_whales Some unique content right there https://t.co/Nr3gHjAsKL

[GURGAVIN @gurgavin]

IF I GAVE YOU A MILLION RIGHT NOW AND YOU COULD ONLY BUY AND HOLD 1 STOCK FOR THE NEXT YEAR WHAT WOULD IT BE ?

[John Phish @SillyPhish]

@merill Being asked by a support rep from a security to download a cracked version of a remote support tool from a file sharing website because they were having licence issues.

[John Phish @SillyPhish]

@AlvieriD @DeloitteUS Is this related to the MoveIT breach?

[John Phish @SillyPhish]

@nwl88444048 Comreg themselves weren't hacked. It was a 3rd party file transfer system called MOVEIT that were breached. PWC, Shell, HSE, First National and numerous other big names were caught up in it.

[John Phish @SillyPhish]

@rezkhere Co-Pilot for Excel will most likely do all this when it becomes available in the next few weeks

[John Phish @SillyPhish]

@george__mack Ireland with x25 growth seems to fly under the radar 26bn -> 677bn

[John Phish @SillyPhish]

Have heard of two orgs axing security roles and relying solely on AI for their cyber security with the ops team given responsibility for the bots

[John Phish @SillyPhish]

@Hi_Its_Herb A person who was yammering on about air filters because they were worried what was going into their body, but at the same time drinks poison like Monster.

[John Phish @SillyPhish]

How do sales people do cold calling for a living?

[John Phish @SillyPhish]

Twitter really needs more tech people giving their thoughts on AI / ChatGPT.

[John Phish @SillyPhish]

@OtterHacker Read @JeffreyAppel7 Blog, so much great MDE information and far more digestible than the never ending circle of links on the Microsoft site.

[John Phish @SillyPhish]

@kfosaaen We would set this to No on all tenants. Not sure why would want allow non admin users register apps in the org.

[John Phish @SillyPhish]

@thatjustindean @RampCapitalLLC @TrungTPhan If that's true you really need to get over yourself.

[John Phish @SillyPhish]

@UK_Daniel_Card My mother