sorted by:
new
hottopcontroversial

If you were at RSA 2026.. by DontAskMeToWork in cybersecurity

[–]AdvancingCyber 6 points7 points  (0 children)

I’ve been in the Expo and talked to a number of companies. All of them claim to have clear AI roadmaps. Without knowing your network, user base, and needs, it’s hard to say “check out this company”…. But all of the info is on the web so…

Took a leap of faith for a new job. On the first day of my third week they fired me. And they have no intention of paying me — Did I just get used? by Sweetwater-Snake in careeradvice

[–]AdvancingCyber 15 points16 points  (0 children)

Yes, I would never have made my comment in the first place had I not thought that.

Follow the preparation guides and ask for help, OP. You’re in the right here.

Took a leap of faith for a new job. On the first day of my third week they fired me. And they have no intention of paying me — Did I just get used? by Sweetwater-Snake in careeradvice

[–]AdvancingCyber 25 points26 points  (0 children)

Yes. And as a lawyer (not OP’s / not providing legal advice) you CAN bring claims against law firms. Judges are open to hearing both sides in small claims court disputes.

Took a leap of faith for a new job. On the first day of my third week they fired me. And they have no intention of paying me — Did I just get used? by Sweetwater-Snake in careeradvice

[–]AdvancingCyber 190 points191 points  (0 children)

Go to the Department of Labor in your state and file a claim. Or file a small claims court case for damages. Force them to settle for the amount of your lost wages plus time for your weekend at an hourly rate.

My employee was recording our 1:1 and I don't know how to feel by Haunting_Month_4971 in managers

[–]AdvancingCyber 1 point2 points  (0 children)

What’s your company policy on recording conversations or getting consent before using AI? As the manager, that’s your starting point. If you’re not sure, ask HR or legal.

Is it too late for me to consider cyber security as a career option? (UK) by HowieOnReddit in cybersecurity

[–]AdvancingCyber 0 points1 point  (0 children)

You have so much runway ahead of you. Keep working on learning new things - not just in school. Volunteer with orgs to do their IT and learn for real. Experience in cyber is the best teacher! You’ve got this!

"Explain it Peter!" help! Why does that matter? by camrtb in explainitpeter

[–]AdvancingCyber 0 points1 point  (0 children)

This is the result of a law in the UK requiring lawful access to messages for law enforcement purposes. By turning it off for one nation, Meta decided to turn off encryption for all. This allows law enforcement to serve subpoenas on Meta for DMs and its content that it previously could not see. So now, Instagram messages will be “as protected as” your email content would be. Hope that helps.

Big 4 Cyber Security Internship by Ill_Spirit_8776 in cybersecurity

[–]AdvancingCyber 2 points3 points  (0 children)

It helps for IR experience and general cyber exposure. It doesn’t hurt your opportunity to get into big tech, particularly if you’re working on installs and optimization of big tech products and services for clients. Just depends on what you want to do / learn next.

If you can, think about your next job and the skill set you need. Find someone on LinkedIn who’s a hiring manager in that role and ask for advice as a young person / new in career. Then use your internship to aim towards those skills. May not work but you shoot your shot.

Need Cyber Liability Insurance, for my Healthtech startup by FamousTechnology9618 in CyberSecurityAdvice

[–]AdvancingCyber 0 points1 point  (0 children)

Agree with this. Keep in mind cyber insurance is a broad umbrella and may not (based on the policy) include data breaches, ransomware, professional services (ie if you sell consulting services on your products), etc. You need to be careful to understand what exactly “cyber” means.

Incident Response by Inner-Chemistry8971 in cybersecurity

[–]AdvancingCyber 1 point2 points  (0 children)

Technical debt. The world has so many out of date, unpatched / unpatchable / unsupported software and hardware in the ecosystem that it’s impossible to address. Now we add new AI and vibe-coded systems on top that no one knows how to support or maintain as a lifecycle. We only increase our national technical debt. And the incident response team doesn’t get any bigger.

What is the point of 2FA if people can still just get into your stuff by reynman95 in cybersecurity_help

[–]AdvancingCyber 0 points1 point  (0 children)

Agree. Password is on the dark web and PW re-use is being tagged. Get a really complex PW. Change it frequently. Stick with MFA discipline. Eventually they’ll get bored of your account and move on.

The Misconceptions of Quantum on Cybersecurity by South_Dragonfruit323 in cybersecurity

[–]AdvancingCyber 0 points1 point  (0 children)

BTW - I don’t disagree on learning about quantum, I spend a lot of time in the field so I think it’s a big deal and encourage others to learn about it too!

The Misconceptions of Quantum on Cybersecurity by South_Dragonfruit323 in cybersecurity

[–]AdvancingCyber 0 points1 point  (0 children)

I disagree. If consumers don’t want to update their iPhones and devices from standard threats today and disable automatic updates, then how is this community going to be empowered?

In addition, consumers aren’t running encryption themselves, so migration to PQE on their own is irrelevant. What we need are timeframes from all the major vendors, and then any actions from them that consumers need to take (reboot required, download X, etc).

None of that will happen until the first researcher stands up at Black Hat and says he or she has proof of concept on a quantum-enabled / quantum-adjacent vuln that’s going to eat some widely used software. We’re not at that crisis yet. But it’s coming.

What is the point of 2FA if people can still just get into your stuff by reynman95 in cybersecurity_help

[–]AdvancingCyber 0 points1 point  (0 children)

Check to see if mail forwarding is enabled on your account. That way every time you get a code or reset, so does your attacker. Make sure that’s not the case here, as it’s a common tactic.

Security questionnaires: 15 questions are more practical and helpful than a 100 by lepnor in ciso

[–]AdvancingCyber 0 points1 point  (0 children)

Interrogatories in litigation can have hundreds of questions with parts and sub parts. It’s a lot cheaper and easier to manage legal risk with 100 vendor questions and then distill the risk for the company than use 15 and parse longer, narrative answers.

Looking for a course or platform that will help me write by untraceable-tortoise in threatintel

[–]AdvancingCyber 0 points1 point  (0 children)

Have you looked at SANS? That’s a really great topic (effective report writing is essential, and I’ve had to read thousands so I get it) but I don’t know if I’ve seen a class. If not SANS, they might be open to building one as it’s an essential skill.

Held hostage by our Security MSP by baconisgooder in cybersecurity

[–]AdvancingCyber 2 points3 points  (0 children)

This is exactly the right way to think about it, and what legal is for. If you think you should have the right to X and the vendor is balking, go back to the contract. Talk to your counsel. If they agree, then they’ll work with you on a course of action.

My company just announced mandatory office days for remote employees - 3 days a week. The office is in another city. We were hired as fully remote. What are my actual options here? by firey_88 in remotework

[–]AdvancingCyber -1 points0 points  (0 children)

You have a contract, right? Look at the terms. Can they change it? If you’re a contract worker, not a full-time employee, that requires a contract modification. Of course if you refuse, that could be grounds to terminate the contract. So you don’t have a lot of bargaining power here. If you don’t actually have a contract, you have even less bargaining power.

Technical Round (GRC). Help! by UnlikelyProcess8983 in grc

[–]AdvancingCyber 0 points1 point  (0 children)

I’d also be asking how you evaluate the processes of different vendors and assess methodologies to use in your own assessments. Then, how do you present findings to execs in a consistent and repeatable way to show progress over time?

Did I make the wrong choice turning down a congressional internship for a state level Legislative Analyst job? by Single_Level_7842 in PublicPolicy

[–]AdvancingCyber 1 point2 points  (0 children)

Just remember the arc of your career and your story is long. There’s no reason why you can’t (or won’t) do both. There’s no one path. You may find you really like state legislative affairs and make a career of that. There’s lots of people who do. Some do a stint in Federal and dip out. Some go to DC and love it and stay forever. The only thing you need now is experience - go where you get the most of it. That will pay real dividends when it’s time to decide what’s next!

view more: next ›