Back in 2023 I gave a talk called Your Phishing Program is a Waste of Time and Money (or rant, depending on your angle). This week Microsoft published what the other side's program looks like. Spoiler: theirs has a storefront, a sub-reseller tier, and over 2,300 templates. They built a business Microsoft's write-up describes YAM … Continue reading Phishing is an industry… Is your phishing program up to the challenge?
Tag: Zero Trust
Wisconsin Bankers Association 2025 Security Officers Workshop | Navigating Zero Trust: Building Your Strategy and Roadmap
We need a new security model that more effectively adapts to the complexity of the modern environment, embraces the hybrid workplace, and protects people, devices, apps, and data wherever they’re located. In other words, we need to modernize our approach to cybersecurity. Zero Trust as “a cybersecurity strategy premised on the idea that no user … Continue reading Wisconsin Bankers Association 2025 Security Officers Workshop | Navigating Zero Trust: Building Your Strategy and Roadmap
STS Episode #10: Project Zero Trust Book Review
Show notes: https://seangoodwin.blog/sts010
Book Review: Project Zero Trust
Project Zero Trust: A Story about a Strategy for Aligning Security and the Business by George Finney
Weekly Recap #3
Earlier this week I was having an interesting conversation with a colleague in the Infosec industry, and the topic of "Is the internet broken beyond repair" came up. I don't mean to sound like a defeatist, but the internet was not designed for the current use-case. Each year there are all sorts of vendor research … Continue reading Weekly Recap #3
