Ben Rothke

The @getdelve website says ‘Compliance in days’. That alone is the reddest of flags. #DeepDelver #AICPNAY does @60Minutes on #Delve. It’s a devastating analysis of an audit firm whose main driver is price. @AICPA, @PCISSC & @isostandards must take action. deepdelver.substack.com/p/delve-fake-c…

Going to be RSA #infosec Conference @OneRSAC next week? @TheTokenSec is having a private yacht happy hour w/ #RSAC innovation sandbox finalists Fig Security, Geordie, @ZeroPathAI & senior cybersecurity leaders. api.cyfluencer.com/s/sandbox-at-s… #RSA

Average North Korea annual salary is about $50. So the economics of a #scam are compelling. Great @TheDanRobinson story in @TheRegister about research done by @FlareSystems. And don’t forget to ask the killer interview question: "How fat is Kim Jong Un?" theregister.com/2026/03/18/res…

Not so fun fact. Any call, voicemail, text, or email you get about a vacation or cruise is from a scammer. I challenge you to find a single person who has received a voicemail, call, text, or email about a vacation that was not a #scam. brothke.medium.com/how-to-tell-if…

If you are flying in the coming days & weeks, the wait times at #TSA will be much, much longer. @garyleff writes that over half of @TSA screeners are calling out. He details 7 ways to still get through airport security, including using PreCheck or @Clear. viewfromthewing.com/up-to-55-of-ts…

Valuable @XMCyber_ free course: ‘Board-Level Cybersecurity Risk Communication Certification for CISOs’ led by @Gerald_Auger. Learn about risk communication, executive presence & boardroom influence to drive security investments & informed decision-making. cybersec.xmcyber.com/s/board-level-…

Anyone using LinkedIn may find more scammers reaching out to them than legitimate recruiters, especially if using the #OpenToWork tag. I write about the LinkedIn seek-and-hide scam. One of them poorly impersonated @Hyundai @Hyundai_Global. @brothke/the-linkedin-seek-and-hide-scam-b6b330f12bf3#scam" target="_blank" rel="nofollow noopener">medium.com/@brothke/the-l… #scams #fraud

Critical account takeover vulnerability (CVE-2026-25750) in #LangSmith platform for LLM applications discovered by @MiggoSecurity. They detail how the flaw exposed proprietary AI data. Issue highlights the importance of analyzing complex application logic. api.cyfluencer.com/s/hack-the-ai-…

T1059.006 Python is a sub-technique of Command and Scripting Interpreter (T1059) in the #MITRE ATT&CK framework, under the Execution tactic. Refers to adversaries using Python to execute code and automate actions on compromised systems. HT @picusSecurity cybersec.picussecurity.com/s/t1059-006-py…

@yehonatan1023 Similarly, physicist Simon Singh makes an observation about subliminal Satanic messages in @ledzeppelin ‘Stairway to Heaven’. @SLSingh demonstrates the power of mental frames. He shows how your brain gets fooled into seeing something that is not there. youtube.com/watch?v=dabW1E…

אוקיי וואו פיד חב"ד אתם על זה?

Are you going to the RSA Conference in 2 weeks? I detail how to make the most of your time at the #RSAC Conference 2026. Don’t just show up to @OneRSAC. Put planning into it and maximize your time there. @brothke/making-the-most-of-your-time-at-the-rsac-conference-2026-a94b47bc6c64" target="_blank" rel="nofollow noopener">medium.com/@brothke/makin… #RSAC

I need to change the title of this article to ‘How to tell if the telephone call or text message you received about a vacation is a scam’. Consider this: If you get a text, email, voicemail, or phone call about a vacation, it is from a #scammer. @brothke/how-to-tell-if-the-telephone-call-you-received-about-a-vacation-is-a-scam-or-not-96264906e88c" target="_blank" rel="nofollow noopener">medium.com/@brothke/how-t… #scam

Fascinating @georgevhulme piece showing how hackers from #Iran were in data centers, banks, airports, defense networks & more before the war started. This is the first instance of American big tech companies being directly targeted in a military operation. cybrsecmedia.com/the-war-with-i…

The 2026 State of Passwordless Identity Assurance Report just out from @HyprCorp. Shows a rapidly changing threat environment driven by #AI & #Deepfake. Leads to identity attacks & challenge of scaling #passwordless technologies across complex orgs. hypr.com/hubfs/2026%20S…

Preemptive security is a emerging #cybersecurity approach focused on preventing, stopping, or deterring cyberattacks before they succeed, rather than responding after systems have already been compromised. Detailed in this @PicusSecurity article. cybersec.picussecurity.com/s/what-is-pree… #infosec

Everyone loves Top 10 lists. See this #Top10 #ransomware list from @PicusSecurity. The list of main ransomware groups includes #LockBit, #Qilin, #Akira, #Cl0p, #Lynx, #DragonForce & more. There’s now over 8,100 ransomware victim organizations globally. cybersec.picussecurity.com/s/top-10-ranso…

@GilStudent This is what I like to see in grammar: Unlocking Leshon Hakodesh: A guide to the Hebrew language. amzn.to/3OPAu2K

This is what I like to see in grammar. לא תגורו מפני איש You shall not be afraid before any man (Deut. 1:17)

When @CapitalOne acquired @Discover, it was inevitable that there would be massive layoffs in a merger this big. And today #CapitalOne is laying off >1,100 employees at the former #Discover headquarters. HT @RobertChannick in @chicagotribune. chicagotribune.com/2026/03/05/cap…

As @Docusign is used to digitally sign sensitive & confidential documents, you know it’s a prime target for attackers. @Ironscales details a very crafty & convincing #Docusign attack. It used a redirect-chain attack designed to dodge scanners. #infosec cybersec.ironscales.com/s/the-docusign…

Vendor payment fraud remains the most expensive attack type in education. When it comes to K-12, they have very little to spend on #cybersecurity & that makes them prime attack targets. Good @Ironscales piece details the #infosec schools need to consider. cybersec.ironscales.com/s/the-emails-h…