Got four of these today: spammers and fraudsters renaming the conversation as a six-digit SMS short code and getting the trust points many people tacitly normally associate with legitimate companies.

An executive coach makes dispassionate observations. I find myself in the position of asking CISO clients: When does 'security culture' override 'business culture?' After their long pause, I ask: What does this tell you about what security culture gives you vs how it's very notion deludes you?

‘I see we share some connections’ is the LinkedIn equivalent of ‘you come here often?’ Just say what you want, Bro.

I may have finally gotten OpenAI/ChatGPT to behave.

medium.com/@chris-brown...

I use chatGPT as a foil sometimes and it's really off right now. I think I just broke it by asking:

No, you're not even paying attention. Are you in the bathroom?

What if the CISO Didn't Exist? medium.com/@chris-brown...

I started a journey two years ago, because I was called to, compelled to. My first book is now widely available, and the whole thing has been life-changing... writing, rewriting, beta readers, being done writing. Standing back and appreciating what I've done. *Phew* what a trip.

🚨 23andMe files for bankruptcy — with assets now up for sale, privacy experts warn customer DNA data could fall into the wrong hands. Delete your data to protect your privacy now‼️ 🧬🔒 #Privacy #DataSecurity #DNA

www.bleepingcomputer.com/news/securit...

Ignore what you know. Prioritizing specialist knowledge is a trap. Questioning its relevance as contexts evolve is a litmus test of adaptability, a hallmark of leadership, recognizes limits of our understanding, and keeps us open to new insights, even when they contradict ideas previously held.

I had not really worried (much) about the next 10 years regarding the advancement of quantum computing. That timeline might have just moved up a little... www.youtube.com/watch?v=wSHm...

“The presentation stays the same, the problem framing changes” for each audience, on communication and influence. @siliconchef.bsky.social at @bsidespdx.bsky.social

Is “live-tweeting” a thing on Bluesky?

Expecting cyber to address patching is like expecting the communications team to address how employees park in the company lot.

Business don’t make risk-based decisions. They make risk-informed opportunity decisions.

This! Especially if it’s the CISO learning what stakeholders care about in their function, from their point of view, and the cyber executive meticulously avoids talking about cyber for the several 1:1 meetings this will take.

Curiosity + Other Orientation + Business Acumen = Winning as a CISO

Business acumen includes learning power dynamics, avoiding sacred cows, and seeing dead ends before running headlong into them.

Well-defined strategic challenges avoid 'it’s their fault' and 'if they would just' entirely.

Don’t make small commitments to complex things; instead, make unwavering commitments to simple things