@AccidentalCISO

I accidentally became the CISO. I didn't want this job, but the job chose me. I'm scared, and I want to go home.

 United States
accidentalciso.net
Joined January 2019
  • Tweets36.7K
  • Following2.1K
  • Followers59.5K
1.7KMedia
Accidental CISO retweeted
Joshwelt@weltszznOct 25
Unless I'm working in an ER, working as a paramedic, or working as a firefighter, there's no reason I should be expected to "thrive in a fast-paced, high-pressure environment." Just fix the terrible management and stop running your office like a circus.
16
408
6
5,132
62,401
Accidental CISO retweeted
Tib3rius
@0xTib3riusOct 22
phpmyadmin? More like php2shellnowiamadmin.
8
7
114
4,744
Part four of our special series on AI Implementation is available on the podcast feed! This time, we're discussing where business leaders should look to integrate AI into their processes, workflows, and systems to achieve results. mindfulsmbshow.com/e/special…

Special Episode - AI Implementation Playbook Part 4: The Where of AI...

The Mindful Business Security Show is a call-in radio style podcast for small business leaders. Join our hosts as they take questions from business leaders like you!   In this fourth episode of our...

mindfulsmbshow.com
1
1
487
What (or who) are your favorite sources of Cybersecurity news? Bonus points for news that is primarily relevant to small businesses leaders.
22
2
53
7,499
Accidental CISO retweeted
Andrew Case
@attrcOct 20
Full details of a remotely exploitable vulnerability in the core engine of *all* PHP versions will be released tomorrow, October 21st. If your organization has internet facing PHP applications then you need to be ready to patch the minute the update is released or *strongly* consider taking the application offline until you can: php.net/index.php#2026-10-20…

www.php.net

PHP is a popular general-purpose scripting language that powers everything from your blog to the most popular websites in the world.

php.net
Dark Web Informer
@DarkWebInformerOct 20
🚨 PHP warns of two critical vulnerabilities as emergency patches arrive tomorrow The PHP security team will release updates on October 21 at 14:00 UTC for two vulnerabilities, each rated 9.2 under CVSS v4.0. ⠀ Security researchers identified the flaws as CVE-2026-109618 and CVE-2026-109619 and described them as remote code execution vulnerabilities reportedly affecting PHP versions 5 through 8. PHP has not yet confirmed the affected versions, exploitation requirements or fixed releases. ⠀ The vulnerabilities were reportedly leaked before their planned disclosure. Researchers said they have not observed active exploitation, while PHP warned it may release the patches early if technical details become public or exploitation is detected. ⠀ Administrators should identify PHP installations now and prepare to apply the updates as soon as they become available.
82
568
165
2,979
1,026,961
I gotta be honest here. I've been asking myself lately if I really have it in me for another paradigm shift.
💻 Sherrod
@sherrod_imOct 14
InfoSec was tired before AI. We’ve been in the practical security trenches for decades. I’m just gonna have another iced latte and keep fighting. This is what we’re here for. Joyful success.
6
7
178
7,318
Some of the most unfortunate decisions people make are just fear dressed up as responsibility.
2
4
22
1,914
Any sufficiently large vendor risk questionnaire will inevitably ask some of the same questions more than once. 🤬
11
1
1
47
2,279
I'm working on reinventing the format of my podcast and shifting the focus from teaching business leaders about cyber to teaching cyber practitioners about business. If you listen already, would this make you stop? If you don't already listen, would this be interesting to you?
11
2
47
2,207
You know that SOC 2 emergency you are having right now? If you had taken this advice and done during the summer, it wouldn’t be an emergency now, would it?
Merritt Baer
@MerrittBaerOct 14
Nothing should be done in October. Just do it over the summer or in the new year.
2
38
2,465
Man, I can hardly handle monitoring my own feelings.
Zack Korman
@ZackKormanSep 30
At Embroidery, we monitor your AI agents and alert you if someone hurts the AI’s feelings.
3
5
37
3,038
Polymarket
@PolymarketSep 30
JUST IN: Anthropic co-founder Daniela Amodei & her husband reportedly used a “personal advisory council” of stuffed animals with distinct personalities to work through workplace conflicts.
4
5
12
6,063
If your CISO isn't interesting, you have the wrong person.
6
8
3
103
5,022
Uhhh… 👀
Forrest Brazeal
@forrestbrazealSep 25
I’m 34 years old and just now realizing that the kids who insisted on calling Leroy Brown “Encyclopedia” were maybe, possibly, not his friends.
1
14
2,366
I recently joined the GRC Engineering Club and volunteered for a local leadership role to help build our chapter. If you are a GRC nerd and want to learn about GRC engineering, check it out.
11
2
87
5,713
Accidental CISO retweeted
Alex Elliott
@alexpotatoSep 22
Replying to @alexpotato @RStopmer @samthelamb2003 @CaryHawkins_ @sadservers_com @patio11 @BangedNoumena @vahlamorgulis @Tr3s0r @mylesmarino @CJHandmer @osoleve
One of those conversations that feel both "life changing" but also "this person's brain is INCREDIBLY similar to mine" with @AccidentalCISO Covered: - interesting career paths - ADD/ADHD + autism symptoms and treatment - taking jobs that excite you - being in the right role
1
10
1
18
5,108
Accidental CISO retweeted
Anthony Peyton@arpeytonSep 22
He’s right. Document Libraries should definitely be the default mindset for permission boundaries. This is essentially what MS codified into teams with Channel creation (each channel is a document library).
Murray@MyNameIsMurraySep 22
It's crazy to me how few people realise that a single SharePoint site (like the one they already have access to) can be used for multiple things by simply adding Document Libraries. The amount of people creating new Teams and SPOs instead is mind-blowing...
2
1
1
1,182
My strategy is to make my living working on boring Cybersecurity problems.
12
4
1
60
3,359
Don't feel bad about reporting something that seems off. It isn't an inconvenience. It's our job to check it out.
3
12
2
88
2,951
It's always the shitposting that helps the most, to be quite honest.
Alex Elliott
@alexpotatoSep 14
Kicked off a side project via an alt account. Wasn’t sure how to market it but then realized: - have a couple on topic tweets - do some good reply guy game - do some “teaching ad marketing” - some “shit posting” - keep cranking that to build more distribution
3
1
13
2,274
Load more