Neil Carpenter 

@neilcar@infosec.exchange
359 Followers
326 Following
2.1K Posts

Professional: Technologist. Passionate about Cybersecurity.

Personal: Photographer, geek.

Opinions are my own and not my employer's. Twitter refugee

GitHubhttps://github.com/neilcar
Instagramhttps://www.instagram.com/neil.b.carpenter/
Favorite Record Storehttp://recordcity.net/
2nd Favoritehttps://lunchboxrecords.com/
last.fm (music I've listened to)https://www.last.fm/user/Neilcar
YouTubehttps://www.youtube.com/channel/UCBQmP9r1FYsYcvYoWUMVy4g

😂 #TACO

I expect a new round of tariffs now.

As a result, the higher you get up in an organization, the further you get from the customer, the problem you've solving, and any of the actual work, and the higher up you get, the more power you have to change the conditions of the business.

On some level, modern corporate power structures are a giant game of telephone where vibes beget further vibes, where managers only kind-of-sort-of understand what's going on, and the more vague one's understanding is, the more likely you are to lean toward what's good, or easy, or makes you feel warm and fuzzy inside.

https://www.wheresyoured.at/the-era-of-the-business-idiot/

The Era Of The Business Idiot

Fair warning: this is the longest thing I've written on this newsletter. I do apologize. Soundtrack: EL-P - $4 Vic Listen to my podcast Better Offline. We have merch. Last week, Bloomberg profiled Microsoft CEO Satya Nadella, revealing that he's either a liar or a specific kind of idiot. The

Ed Zitron's Where's Your Ed At
Spotted on 4th Ave. in Brooklyn

If you access corporate email on a personal device that can be unlocked with FaceID, you must change your face at least once every sixty days.

You may not reuse any of your most recent 12 faces.

Please contact the technical support desk if you have forgotten your face and need help resetting it.

My friends over at Katilyst are doing a survey about security champion Programs. If you run one, please consider answering the survey so they can make some helpful content.

https://docs.google.com/forms/d/e/1FAIpQLSdpTwRMuk9Wh3uwM-5fgaYeSwcxWrGeUUM0YBD_xx2z_r_vMg/viewform

Security Champion Research Survey

Thank you for participating in our Security Champion program survey! Your input will help us understand the current landscape of Security Champion programs across various industries. By sharing your experiences, challenges, and successes, you will directly contribute to a community-driven report that aims to highlight best practices and key insights for anyone looking to build or improve a Security Champion program. Following your submission, if you provide your email address, you'll receive a copy of the report once complete and you'll be entered into a drawing for a $25 VISA gift card! This brief survey should take about 10 minutes of your time. We appreciate your candid feedback and look forward to sharing the results in our upcoming white paper.

Google Docs

@isilzha314 I used to work at a factory and one of the maintenance people had a sticker on his toolbox that said:

“We have been doing so much with so little for so long that we are now qualified to do anything with nothing”. I think about that a lot.

Probably the last CVE indexed before it goes dark should be CVE-2025-DOGE (critical, local privilege escalation vulnerability that leads to malicious code execution and data exfiltration).

Hear me out…now is the time to replace the old CVE standard with something modern: VulnerabiliNFT, a fully blockchain backed CVECoin where CNAs have to mine for every new vulnerability they issue.

#VulnerabiliNFT #CVE #MITRE

Cybersecurity Community Must Not Remain Silent On Executive Order Attacking Former CISA Director

Cybersecurity professionals and the infosec community have essential roles to play in protecting our democracy, securing our elections, and building, testing, and safeguarding government infrastructure. It is critically important for us to speak up to ensure that essential work continues and that...

Electronic Frontier Foundation