It still boggles my mind that we will have people flock to conferences about the latest and greatest thing, and then come back to their org wanting to do that latest and greatest, but not be willing to invest in the basic work required to share up and mature the org to fix stuff.

— Amélie E. Koran (@webjedi) November 26, 2019

https://www.zdnet.com/article/microsoft-recommends-using-a-separate-device-for-administrative-tasks/

Follow thread below

https://www.ncsc.gov.uk/blog-post/not-perfect-better-improving-security-one-step-time

https://www.theregister.co.uk/2019/02/14/password_length/

https://motherboard.vice.com/en_us/article/mbzvxv/criminals-hackers-ss7-uk-banks-metro-bank

https://www.virusbulletin.com/blog/2019/01/hsbc-product-descriptions-malicious-emails-bypassing-your-filters/

https://www.gov.uk/government/news/uk-and-allies-reveal-global-scale-of-chinese-cyber-campaign

https://krebsonsecurity.com/2018/12/a-chief-security-concern-for-executive-teams/

https://www.ncsc.gov.uk/news/rise-microsoft-office-365-compromise