Five Hundred Failures and Counting

Critical infrastructure, aviation, and energy sectors have all fallen victim to a phishing campaign that’s been lingering like a bad smell for years. Over 500 organizations somehow managed to ignore basic security hygiene while their logistics and public administration data went for a walk. Preventing this involves the impossible task of convincing users that no, they didn't actually win a free iPad from a complete stranger via email. It’s a marathon of mediocrity where the finish line is just more paperwork for me. We really should have seen this coming, but we were likely too busy rebooting servers.