Caroline retweeted
Oops. You clicked it. 👀
Don't panic.
🛑 Stop interacting
📣 Report it to IT/security
🔐 Entered credentials? Secure your account through the real site
💻 Downloaded something? Follow your security team's guidance
Fast reporting beats silent panic
#CybersecurityAwarenessMonth
Caroline retweeted
📞 Caller ID: IT Help Desk
They know your name and company. Then they ask you to read back a verification code.
🚩Caller ID can be spoofed.
Never share unexpected sign-in codes. Hang up and verify through a trusted channel.
Would you fall for it?
#CybersecurityAwarenessMonth
Caroline retweeted
Your privacy settings called. 📱
They miss you. 👀
SEC in 60 challenge:
⏱️ Who can see your posts?
🏷️ Who can tag you?
🔎 What's visible to strangers?
Take a minute to check. You might be surprised.
#SECin60 #CybersecurityAwarenessMonth
Caroline retweeted
New job. ✨
Vacation countdown. ✈️
Work badge selfie. 📸
Individually? Small details.
Together? A pretty good picture.
Your public profile might be telling strangers more than you think.
Take 60 seconds to review what you're sharing. 👀
#CybersecurityAwarenessMonth
Caroline retweeted
Free Wi-Fi? 👀
You scan a QR code at a coffee shop. Suddenly, it wants your email and password.
Still connecting?
QR codes aren't the problem. Untrusted destinations are.
Check the URL. Verify the source.
Would you have scanned it?
#CybersecurityAwarenessMonth
Caroline retweeted
Not every red flag is red. 🚩
Sometimes social engineering looks like someone being REALLY helpful.
Unexpected offer to fix a problem? Great. Just verify who you're talking to before sharing info or access.
SEC in 60 ⏱️
#CybersecurityAwarenessMonth
Caroline retweeted
🚨 URGENT! ACT NOW!
Sound familiar?
Social engineers use urgency to make you react instead of think.
Real emergencies happen, too. That's why verification matters.
Pause. Question. Verify.
What's the wildest "urgent" request you've received?
#CybersecurityAwarenessMonth
Caroline retweeted
It’s fun watching companies build paid pentest automation on top of open source tools and research, and give nothing back to the community they’re built on.
Historically, this space has been pretty good about crediting the original researchers and contributing back. That seems to be slipping as everyone tries to productize it.
The pullback in community contributions over the last couple of years is pretty obvious. I’m not sure many people realize what their R&D costs will look like if that continues, even with AI.
Caroline retweeted
Announcing our CFP Review Board for DistrictCon Year 2! We look forward to reading all of your amazing submissions on all things reverse engineering, tooling, exploits & vulns, and select non-technical and policy talks 🪩👾✌️
@perribus @bsdaemon @sergeybratus @rmspeers @jaylagorio @caseyjohnellis @ashl3y_shen
Caroline retweeted
Your boss needs a favor. ASAP.
They're in a meeting. Can't talk. Details coming soon.
Normal Tuesday or social engineering attempt? 👀
Welcome to "Would You Fall for This?"
Spot the red flags. What's your next move?
#CybersecurityAwarenessMonth
Caroline retweeted
It’s Cybersecurity Awareness Month 👀
Your security stack has something that firewalls, EDR, and MFA don’t cover:
People.
Give them the knowledge and permission to stop, question, and verify.
What’s one security habit you wish everyone practiced?
#CybersecurityAwarenessMonth
