It still boggles my mind that we will have people flock to conferences about the latest and greatest thing, and then come back to their org wanting to do that latest and greatest, but not be willing to invest in the basic work required to share up and mature the org to fix stuff.

— Amélie E. Koran (@webjedi) November 26, 2019

There is an extremely poisonous almost unquestioned assumption in all modern security news and events.

It’s that hacking a desktop is a network breach event that can bring down a multi-national billion-dollar corporation.

That is fucking crazy. How did we get here?

— SwiftOnSecurity (@SwiftOnSecurity) April 13, 2019