#security

Who's supposed to handle security at the board level if the CISO role doesn't exist? Does Nike not give a sh-t about security?

Vz india will now have Eng starting in small amount on wireless core. No security into consideration, while saving money on US Eng, they choose to sacrifise access to confidential database to be outside USA while Pentagon prohibited this many years ago.Get ready.

Strong rumors regarding a major security acquisition.

I get it. We have bad security men here and even worst security leaders. But being vigilantes is not the answer. But it does make me feel better that at least someone here is doing something about it. Its bad either way.

Duke of Hazard has sent out a phising email trying to catch people out. Really unprofessional, bad formatting, no details on the footer, Trying to make sure everyone has done Security training.

Make sure you report it to Security otherwise your on a vulnerable list.

Does anyone know of someone fired based on their IP Address location from GlobalProtect? You always here these “threats” but has anyone actually ever been let go because they went and did a dive into the persons IP Address location that was pulled from GlobalProtect?

The way things are going right now, there are directors pushing people to adopt new tech, then telling them they can't use for what they were telling them to use it for, because it presents major security risks. Yet people already did.

These bad decisions will just compound the longer this goes on. We're sinking. Fast.

Anyone know why the high point police are steaked out at the greensboro office? Supposed to be there til mid May?

With potential layoffs next week, any advice on how I can save work files?

Heard IT can provide access if I download my files into a folder and make a note of it.

Will downloading a ton of files right now alert IT security

The CTA is implementing a new security strategy for its transit system. The agency recently laid off 159 contracted security guards. These guards were employed through Monterrey Security. Funding previously allocated to these guards will now be directed to sworn officers and other security resources. This shift aims to enhance safety for both riders and staff.

Chicago, Illinois

https://wgntv.com/news/chicago-news/cta-prioritizes-safety-with-new-measures-despite-layoffs/

Stop looking at us. Let us patrol.

I just read Mind over Grind by Guy Winch… he tries to explain whats happening in our heads when laid off- goes over Maslow’s hierarchy of needs and that losing our job costs us security, social structure, status, accomplishment, as well as a sense of our identity.

Helped me understand that its not just a job

Sound like Iran is doing some damage in Dubai to Oracle. Is Dell next.

They setup a PIN on it just now.
I had thought I can still use my outlook email till 4/10.

I sent some farewell messages to several colleagues earlier, but haven't received any reply yet. Not sure if they haven't received it, or they're also laid off, or they just don't want to talk to me anymore, LOL

https://www.mirror.co.uk/news/world-news/breaking-iran-google-apple-microsoft-36950306

Iran Threat to-
These companies are declared as follows:

Cisco
HP
Intel
Oracle
Microsoft
Apple
Google
Meta
IBM
Dell
Palantir
NVIDIA
JPMorgan
Tesla
General Electric
Spire Solutions
G42
Boeing

Noticed they’ve separated onshore and offshore Datadog access.

Is this a response to concerns around PHI and PII exposure offshore? Or is there another operational or compliance reason driving the change?

If anyone in leadership has context on what prompted this decision, it would be great to understand the thinking behind it. Increased data controls are always worth discussing, especially would shape on/offshore future hiring pattern.

https://thehackernews.com/2026/03/cisa-adds-cve-2025-53521-to-kev-after.html

Did I read the official email correctly? All personal email and cloud sites will be blocked on our browsers as of 4/4/2026?

I was applying for a personal loan on a different bank’s website and they asked me to provide proof of employment and it took me directly to Workday to login. I didn’t realize it was a problem until I received an email saying that I needed to let them know if I did this or not so I told them I recognized the activity and they said no further action required except now you need to just change your password because you access to workday on a third-party site. I’ve never had this happen. They also CCed my manager. I’m wondering if anything else is going to come of this?

I heard quiet layoffs hit Security and Webex during a reorg?
Any confirmations? Should a mid-level IC like myself be concerned?

Got called by a scammer (tried to fake local accent but was unsuccessful). Said from Wells Fargo Fraud department. Wanted my credit card number to validate I was I and said had two flagged charges - one from Ama....on and another from overseas.
Long story short, during the conversation I gave scammer fake CC number. He stated this was not the correct one. The scammer had my mailing address, and the first 6 digits of my CC. This is concerning. So I afterward called Wells Fargo from the 800 number on my CC. Explained to the banker on the other end what had happened. He started laughing and said, ok why are you calling us? I stated because scammer had a lot of my ID info and that my CC was likely compromised. I said how is it that a scammer can - IN REAL TIME - validate my CC? Clearly they were logging into Wells Fargo somehow and validating. Banker said "we don't care about them, we don't have enough manpower to follow them, all we care about is you". So I gave up and asked my account be flagged as compromised - he generated new CC request for me and that was that.
However - since when does WF not care they are allowing scammers to attempt to take control of our accounts? It was the most amazing (not in a good way) conversation I've ever had with Wells Fargo.
And for this guy to state baldly "we don't have enough manpower" was absolutely concerning.
This is what you get when cut cut cut is the mantra. Customer service? Seems to be trending down.

The building over in Dubai was bombed in an Iranian attack according to MSN. I hope everyone is safe.

• God Bless

Here's the deal: anything you type into Copilot on a company device can be logged and stored under our organization's Microsoft 365 tenant. So if you're asking it about that weird rash, your divorce, or your side hustle… just know that's not exactly private.

And I'll be real with you. I'm on the BTS team, and we can see your prompts. All of them. No one's sitting here reading them for fun, but the access is there, and we just want you to be aware.

So do yourself a favor... Use Copilot at work for work things, and save the rest for home.
Easy rule of thumb: if you'd cringe seeing your prompt on a big screen during a team meeting, don't type it on your work laptop. 😅

local10.com/news/local/2026/03/06/hialeah-verizon-store-manager-caught-airdropping-himself-womans-s-x-video-police

Verizon store manager caught AirDropping himself woman’s s-x videos, police say: HIALEAH, Fla. — A woman mulling a switch from AT&T to Verizon ended up the victim of an intimate crime after visiting the latter’s retailer in Hialeah on Thursday afternoon, according to police.

Investigators said Noel Guerra Vaquer, the manager of the Verizon store at 7925 Hialeah Gardens Blvd., AirDropped videos of the woman having s-x with her partner from her iPhone to his personal phone under the guise of “assisting with the process of setting up potential service.”

Police said Guerra, 35, of Hialeah Gardens, had claimed he needed to look at her AT&T bill as she sought a quote at around 3:45 p.m.

A Hialeah Police Department arrest report states that the woman “realized that something was wrong after leaving the store when she observed a notification on her phone indicating that an AirDrop transfer had been successfully completed,“ listing the recipient as “Noel.”

Police said “the notification included a thumbnail image showing explicit content of herself.”

A list is being drawn up of expats that have left owing to the security situation. Expect reprisals.

What's going on today? Security hanging out in work areas. This only happens when people are being let go

It looks like the FBI caught a manager at L3 Harris selling secrets to a Russian broker. This is one reason why there’s layoffs, some people at the company can’t keep secrets because they are overwhelmed by greed.
They didn’t catch everyone yet, and it is still an ongoing investigation. Maybe if the FBI catches everyone there won’t be any need for more layoffs in that section as it will be reduced enough.
The whole company needs a complete government security review.

https://www.local10.com/news/2026/02/25/senior-executive-for-florida-based-defense-contractor-sentenced-in-espionage-case/

What’s up with the new zoom water marking? Are they trying to prevent leaks?

What do folks know?

Now this? Who’s in charge of Nike’s Cyber Security??

Nike Data Breach Under Investigation as WorldLeaks Claims 1.4TB Theft

https://sentrybay.com/nike-data-breach-investigation/

Anyone know anything? noticed it in B1 today…

We know you're watching

What does this mean? I now can’t access secure from sparq. No meeting invite yet so am I cooked?

Not a safe area to be after dark, unless you are carrying:
Police say a man fired shots after an altercation with a security guard outside a Corktown bar early Saturday morning. The incident happened at around 1:17 a.m. in the 2100 block of Trumbull Avenue near Michigan Avenue. The security guard, a licensed CPL holder, returned fire and struck the man.

With Brad Arkin at the helm, Salesforce's security team reportedly shrank from ~300+ to 188 engineers over two years, aligning with company-wide restructurings amid AI adoption and efficiency drives. No public data specifically attributes incident spikes to these cuts, but one has to ask. The volume of breaches has fueled speculation about under-resourcing in security.

Do they regret the security headcount drop? No explicit statements, but the incident surge (from sporadic in 2024 to widespread in 2025) and AI backpedaling suggest possible hindsight regrets and prioritizing efficiency over robust defense in a high-threat landscape like Salesforce.

Major Incidents-
Late 2024 – Early 2025 Vishing Wave (UNC6040)
June–July 2025 Major Vishing Campaign (UNC6040)
August 2025 Salesloft Drift OAuth Breach (UNC6395)
September–October 2025 Extortion & Leak Escalation (Scattered LAPSUS$ Hunters)
Late 2025 – Early 2026 Follow-On Incidents

Oh boy. The outcome of this won’t be good.

Just in case my matters to you, Truist is working with Palantir. Do with that what you will 🤷🏻‍♀️

I was impacted by the recent layoff after nearly seven years as a cloud security engineer. During that time, I worked hands-on across architecture, automation, and platform security, often supporting end-to-end execution.

One reflection I’m sitting with is how, during reorganizations, decision-making can shift toward newer leadership roles that may not always have deep technical context — even when long-tenured engineers have been heavily involved in keeping systems running and helping teams ramp up.

Curious how others have seen this play out:
• How do experienced technical ICs stay effective as orgs change?
• In security teams, how much does deep technical ownership still factor into decisions today?

Appreciate any perspectives.

I was thinking about applying for a tech security position.

Until I saw the hiring manager.

I am familiar with her. There is no way that she knows anything about tech security... And, she's a director. Like, she's an 'expert' in the field.

First time I've ever been like, "Yeah, Fidelity has D . E . I . but they have enough people to fill roles with talented people."

What people are saying is true. No way is this company doing well when I see this.

A HS dropout with ChatGPT would be a better fit for director than this individual. Just wow.