iiinova — where your digital self keeps evolving

Securely Built @securelybuilt.bsky.social · 28/09/2026

Cybersecurity awareness month is almost here, don't forget to check in on your passwords!

Securely Built @securelybuilt.bsky.social · 10/09/2026

The cycle never ends..... Microsoft has released its biggest ever patch update, addressing 974 security vulnerabilities across its Windows operating systems and other software. This massive update, which surpasses their previous record of 570 vulnerabilities fixed in July.

100

Securely Built @securelybuilt.bsky.social · 03/09/2026

@manning.com is running their annual Labor Day Sale. It's your chance to grab some titles for a great price! Half off all books $10 liveProjects/ liveVideos $199.99 Subscriptions Annual team subscriptions are 20% off Pick up "The Application Security Program Handbook" while you're there!

110

Securely Built @securelybuilt.bsky.social · 01/09/2026

I've done variations of this drawing so many times over my teaching career, and each time it gets more complex.

100

Securely Built @securelybuilt.bsky.social · 19/08/2026

Remember STRIDE? For decades, STRIDE has been the process for identifying and labeling threats in a system. It’s worked for decades to model threats. But it’s slow, it doesn’t scale well, and there is little standardization around process/tools outside of “use STRIDE”.

100

Securely Built @securelybuilt.bsky.social · 30/07/2026

Head over to Manning.com. for their summer sale and grab a copy of the Application Security Program Handbook while you're at it!

000

Securely Built @securelybuilt.bsky.social · 14/07/2026

If you are in the Nashville area on September 17-18, come to the InfoSec Nashville 2026 conference! You'll find me there giving a talk on the changing cybersecurity hiring landscape.

000

Securely Built @securelybuilt.bsky.social · 23/06/2026

Curious about #software #security? You can pick up a copy of the Application Security Handbook for half off tomorrow (June 23)! Remember that, software security is a fundamental skill for modern developers and is most effective when it's considered from the start, not added as an afterthought.

021

Securely Built @securelybuilt.bsky.social · 05/06/2026

I am excited to join security executives from Cisco, Abbott, and Truist at Cycode's virtual Agentic Development Security Summit on July 14. Join me by signing up here: cycode.com/agentic-deve...

111

Securely Built @securelybuilt.bsky.social · 21/05/2026

Master AppSec Leadership For Half Off Leverage this #holiday weekend to bridge the gap between development and security. Gain the frameworks needed to build resilient programs with industry standards on building an #appsec program. @manning.com #discounts #memorialday

020

Securely Built @securelybuilt.bsky.social · 23/04/2026

securelybuilt.substack.com/p/appsec-did...

100

Securely Built @securelybuilt.bsky.social · 22/04/2026

DM me if you "know a guy" that can do this 🤣 I'm not sure this is the future we all wanted. But it's the one we're getting.

000

Securely Built @securelybuilt.bsky.social · 27/03/2026

When Claude Code knows you better than you think:

000

Securely Built @securelybuilt.bsky.social · 06/03/2026

Making updates to some of my #training courses when I pick up faint snoring in the background. Yes, she snores. Should I go to HR about my coworker who sleeps 16 hours a day. If you're looking for some training on AppSec see the link below in the comments. #appsec #cybersecurity

100

Securely Built @securelybuilt.bsky.social · 30/12/2025

Check out the latest article on threat modeling of cloud/hybrid environments. open.substack.com/pub/securely...

000

Securely Built @securelybuilt.bsky.social · 19/11/2025

Few organizations can see past their tier-1 suppliers in their supply chain leading to blind spots and unmodeled threats: open.substack.com/pub/securely... #supplychain #cybersecurity #riskmanagement

010

Securely Built @securelybuilt.bsky.social · 29/10/2025

Does you AI ChatBot open your attack surface? You bet it does. open.substack.com/pub/securely...

000

Securely Built @securelybuilt.bsky.social · 11/09/2025

While I'm bummed that Sir David Attenborough didn't narrate this, I'm thrilled to announce that this book has been provided in audio format! You can use the "laappsec40" code at checkout to get 40% Learn everything from tooling and pipeline development to setting up a #security program. #appsec

210

Securely Built @securelybuilt.bsky.social · 23/07/2025

New article out on utilizing PaC to manage supply chain security open.substack.com/pub/securely...

000

Securely Built @securelybuilt.bsky.social · 21/07/2025

If you're in the Nashville area, consider attending the ISSA InfoSec Nashville conference on September 22-23! I'll be presenting on how AI agents can reshape the way security teams manage their threat surface.

000

Securely Built @securelybuilt.bsky.social · 11/07/2025

Representing at Boardwalk Bytes in Atlantic City!

000

Securely Built @securelybuilt.bsky.social · 12/06/2025

🚨 First zero-click AI agent attack discovered: "EchoLeak" hijacked Microsoft 365 Copilot via email with hidden instructions. No user interaction needed. Same design flaw from 1990s software - AI can't separate instructions from data. We're repeating history 🤖 #AISeсurity www.msn.com/en-us/news/t...

000

Securely Built @securelybuilt.bsky.social · 21/05/2025

Is best-in-breed better than a platform? securelybuilt.substack.com/p/platform-v...

000

Securely Built @securelybuilt.bsky.social · 06/05/2025

Busiest month in a LONG time: Had the pleasure of moderating a panel SecureWorld! Went to Dallas for the WiCyS conference and managed to sneak out to Deep Ellum for BBQ. Ran a 5.5 hours of pure pain-in-the-rain Spartan! Spoke at RSA Conference on some of the challenges with getting hired in.

000

Securely Built @securelybuilt.bsky.social · 25/04/2025

Check out this article on a recent vulnerability discovered with coding agents. securelybuilt.substack.com/p/double-age... #ai #appsec #cybersecurity #softwaredevelopment

Double Agents - Coding Agents Going Awry

000

Securely Built @securelybuilt.bsky.social · 21/04/2025

Remember....saying "thank you" is only appropriate in certain circumstances, and definitely not when it "costs millions of dollars" to say it. "Recent report suggests that even a short three-word "You are welcome" response from an LLM uses up roughly 40-50 milliliters of water." #ai #thankyou

100

Securely Built @securelybuilt.bsky.social · 28/03/2025

Wasn't that long ago that 23andMe suffered a data breach that led to a class action suit. The class action suit that followed the breach was a whopping 30million. Perhaps peanuts to larger organizations, but ones that aren't turning a profit as it is are not going to survive. #databreach

100

Securely Built @securelybuilt.bsky.social · 16/03/2025

Cybersecurity careers don’t follow a single, well-defined route. If you're looking to break into cybersecurity—or hiring for it—check out this article on the challenges facing both entry-level folks and hiring teams. securelybuilt.substack.com/p/the-myth-o... #CyberSecurity #CareerPath

The Myth of the Straight Path to Cybersecurity Roles

000

Securely Built @securelybuilt.bsky.social · 15/03/2025

Manning Publishing is currently running a St. Patrick's Day sale where you can get many of their titles half-off. Even better news, you can grab the "Application Security Program Handbook" as part of this deal and elevate your #appsec knowledge! #books #weekendreading #sale #stpatrick

000

Securely Built @securelybuilt.bsky.social · 13/03/2025

Hang in there....it's almost Friday!

000

Securely Built @securelybuilt.bsky.social · 12/03/2025

Getting hired in cyber is impossible. But it shouldn't lead to these statistics from Forbes (2023): 70% of workers admit to resume falsification; 37% say they do it frequently 76% have lied in cover letters, with 50% doing so regularly more below....

100

Securely Built @securelybuilt.bsky.social · 10/03/2025

Cybersecurity is hard. Even for the ~1.2 millions cybersecurity workers currently in the field. Now imagine that you don't have an advanced degree in technology or all the fancy certs in cyber. Parents struggle to keep their kids safe online, even those with those fancy certs! #cybersafety

100

Securely Built @securelybuilt.bsky.social · 08/03/2025

Perhaps this is many of the people trying to enter the #cybersecurity space?

010

Securely Built @securelybuilt.bsky.social · 08/03/2025

Hey folks! I’ll be leading a panel discussion at the 22nd Annual SecureWorld Philadelphia! This panel discussion will focus on one of today’s most critical challenges: balancing national #security and #economic partnerships in a hostile #digital world.

110

Securely Built @securelybuilt.bsky.social · 07/03/2025

The latest CybersecurityHQ Cyber Threat Intelligence Heat Map for March 2025 reveals a stark reality: cybersecurity threats have escalated beyond IT concerns and are endangering national security, financial stability, and global commerce.

000

Securely Built @securelybuilt.bsky.social · 06/03/2025

Challenger, Gray & Christmas reported on Tuesday that U.S. employers announced 172,017 layoffs for the month, up 245% from January and the highest monthly count since July 2020 during the heightened uncertainty from the Covid pandemic.

100

Securely Built @securelybuilt.bsky.social · 05/03/2025

While threat modeling is a well-known process used to identify threats in a system, attack paths can be used to provide another visual reference into those threats. securelybuilt.substack.com/p/understand...

010

Securely Built @securelybuilt.bsky.social · 05/03/2025

We've recently updated our #CISSP crash course and would love your feedback. If you're thinking of taking the exam, or just looking to brush up on the broader #cybersecurity field, take a look: secureworkcoach.com/offers/d3Wd6HDH #training #examhelp

100

Securely Built @securelybuilt.bsky.social · 03/03/2025

Always.... Is it better to have 10 tools that are implemented 30% -or- 3 tools implemented 100% Asking for a friend.

000

Securely Built @securelybuilt.bsky.social · 26/02/2025

Getting prepared for PQC (post quantum crypto) Are you crypto-agile? cpl.thalesgroup.com/encryption/p...

000

Securely Built @securelybuilt.bsky.social · 06/02/2025

Looking for love in all the wrong places.... Seriously though: Reports and Losses: In 2023, the Federal Trade Commission (FTC) received 64,003 reports of romance scams, with reported losses totaling $1.14 billion. The median loss per person was $2,000.

010

Securely Built @securelybuilt.bsky.social · 05/02/2025

Asset criticality. Asset value is important, but criticality determines what keeps the business running. If an asset fails, what’s the real impact? #riskmanagement #cybersecurity #threatmodeling

100

Securely Built @securelybuilt.bsky.social · 03/02/2025

Understanding Asset Valuation Methods: Cost Method – Based on original purchase price 📊 Market Value – What the asset would sell for today 💰 Income Method – Revenue generated over time 📈 Replacement Cost – The cost to replace the asset 🔄 Intangible Value – Patents, trademarks, brand equity 🚀

000