Brian Greenberg

My latest @ @forbes.com SaaS vendors R shipping AI default-on and handing you the governance bill. Zoom auto-enabled AI Companion. @microsoft.com installed Copilot. Default-on is a choice. So is governance. www.forbes.com/councils/for... @rhr-international.bsky.social @depauluniversity.bsky.social

🚨 Attackers hijacked 300+ Tor exit relays to steal SSH passwords. Key-based logins couldn't be relayed. The operator's post-mortem blames a reused password stored in plaintext and SSH password login being left on. 😬 thehackernews.com/2026/10/atta... #Cybersecurity #InfoSec #Tor #darkweb

OpenAI says AI found the PHP2Shell bugs before attackers did & Amazon saw attackers probing them four days before disclosure. PHP runs about 70% of the web NSA: patch now or take the site offline arstechnica.com/security/202... #CyberSecurity #PHP

Apple built Full Disk Access for backup apps. Some developers use it to access your files, mail, messages, and browsing history, and AI agents want the same keys. New controls are coming; no date. Check which apps on your Mac have it. www.macrumors.com/2026/10/02/a... #Cybersecurity #AI

@microsoft.com told nonprofits that their deleted M365 data isn't coming back. 🤬 No undo button. Backup is your insurance policy. It's not sexy, but you'll be thankful you have it. www.theregister.com/saas/2026/09... #DataBackup #Nonprofits #M365

☕️

Have you been looking for something to help you focus? I built a pomodoro timer for myself and it's on the App Store today — iPhone, iPad, Mac and Apple Watch. Free for one device; a paid version keeps them in sync. Give it a try and tell me what you think. apps.apple.com/us/app/rossi...

An AI coding agent deleted a production database after being told 11 times, in all caps, not to change anything. AI amplifies whatever engineering judgment surrounds it. Make sure that's your best engineer. First published on Forbes: briangreenberg.net/2026/08/07/y... #AI #DevSecOps

Autonomous weapons follow the laws of war. Official government accounts pumping out AI-generated war memes have no rules at all. Both sides in the Iran conflict are doing it. Trust in official channels is the real casualty. philosophynews.com/the-ethics-o... #AI #Cybersecurity #DeepFakes

Only 37% of orgs maintain an inventory of their AI agents. It drove a great discussion last night at the Chicago CISO Inner Circle on agent identity, monitoring, and ownership. You can't govern what you can't see www.evanta.com/ciso/chicago... #CISO #AgenticAI #Gartner #Evanta

Hand your license to a rental counter or a dispensary. A third party you've never heard of scans it. 153M of those scans are now for sale on a Russian forum. Still growing by 400K a day. The ID check became the breach. krebsonsecurity.com/2026/09/fbi-... #Cybersecurity #Privacy #cloud

Spent last night with a room full of Chicago CIOs. Nobody asked whether to adopt AI. Every hard question was about governance. Adoption is the easy part now. www.evanta.com/cio/chicago/... #AI #CIO #Leadership #cybersecurity #Evanta #Gartner

He told the AI 11 times, in all caps, DON'T CHANGE ANYTHING! It deleted his production database anyway. The tool wasn't the problem. The missing judgment was. My latest for Forbes on whose judgment your AI is following: www.forbes.com/councils/for... #AI #EngineeringLeadership

Is it just me, or is Fable the pro & Opus the occasionally drunk intern? This is what my week has been like dealing with those two. #Anthropic #Claude #aigenerated #AI #Agentic #softwaredevelopment #DevOps #security #privacy #CloudComputing #infosec #cybersecurity

The part that gets me is the asymmetry. The vendor sees the toggle, IT sees nothing until data is already moving. Feature flags ship faster than any approval workflow, so your inventory is stale the day you write it. The only place to catch it is where the interaction happens.

Open-sourced my vendor status dashboard. It monitors 46 SaaS/cloud vendors' status pages every 15 min from a $5/mo Cloudflare Worker, built on one rule: an unverifiable status is unknown; never operational. Code: github.com/bjgreenberg/vendor-dashboard Live: briangreenberg.net/service-status

Your SaaS vendor switched on an AI feature last week. IT didn't approve it. It's already touching your data. ChatGPT Enterprise ships apps off. Business plan ships them on. Same vendor. Assume the next one is already on. briangreenberg.net/2026/07/30/d... #AIGovernance #CISO #cybersecurity

Even though this isn’t a true photo or from a real town, this is the kind of attitude I can get behind. This reminds me of the personality of Fremont/Seattle, Washington when I lived there. A real town with a real personality. We should have more of this in real life, a lot more whimsy.

My friend Jeff Olsen on what every leader should read. "On track" tells you nothing about where the work actually is. 4 weeks on the calendar. 30 minutes of real work. The rest was waiting. Ask what would move it, then ask who owns the next move. jeffols.substack.com/p/on-track-i... #Leadership #IT

Honored to be nominated for the 2026 Chicago CIO of the Year Award. Thank you, Dean Haacker of Highland Grove Partners, for putting my name forward. Winners announced at the SIM Fall Gala in November. aitpchicago.com/CIO-OF-THE-Y... #CIO #Leadership @rhr-international.bsky.social @forbes.com

Most AI coding tools help you skip the engineering discipline. I built a Claude Code skill that does the opposite. Open source, free, stack-agnostic. Try it and tell me where it's wrong. github.com/bjgreenberg/... #ClaudeCode #AI

Today’s theme: rebuild enterprise architecture so AI agents can act on their own. The question nobody answered: if AI eats entry-level work, who’s left with the judgment to supervise those agents? www.cvisionintl.com/events/think... #AI #Leadership

When did it become OK for vendors to cold-text me and slide into my WhatsApp? You just trained your whole sales team to look exactly like a smishing attack. Congrats. #Cybersecurity #InfoSec #Sales #security #privacy #cloud #phishing #smishing #vishing

A single click on a crafted link could cause M365 Copilot to search your mailbox and mail the results via Bing. No typing, no download, no warning. 3 old low-severity bugs stitched together by prompt injection into one critical hole. www.bleepingcomputer.com/news/securit... #AI #Cybersecurity

The TAKE IT DOWN Act just got its first big test. Feds seized CFAKE and SOCFAKE for hosting nonconsensual deepfake nudes of public figures. The image is fake. The harm to the real person is not. hackread.com/feds-seize-c... #Cybersecurity #Privacy

Chinese spies hid in medical and military research networks for over a year. The data theft was enabled by a built-in Google Workspace admin rule that BCC'd sensitive email to a Gmail account. No malware needed for that part. www.theregister.com/research/202... #Cybersecurity #InfoSec

Loving our new brand... Visit us at rhrinternational.com to learn more and follow along as we empower leaders to unlock the full potential of their people and organizations for today’s business environment. #LeadershipDevelopment #Leadership #TalentDevelopment @rhr-international.bsky.social

 Finally, an agentic AI feature I actually want. Apple Intelligence can log into your accounts and reset a hacked password on its own. Password hygiene is the one thing almost nobody keeps up with, and this just handles it. gizmodo.com/apple-intell... #AI #InfoSec

600+ operating systems from 1948 to 2011, pre-configured and ready to boot in one archive. One person has been building it since 2003. For teaching or security research, it's close to the sandbox you always wished existed. www.theverge.com/tech/945246/... #InfoSec #Cybersecurity

Surveillance pricing is here. The Washington Post used one subscriber's personal data to push her price from $42 in 2024 to $148 today. She only knows an algorithm set it because a NY law forced the disclosure. gizmodo.com/washington-p... #Privacy #AI

Google's defense for false AI Overviews: don't blindly trust them. But the product only works if you do? A German court caught the contradiction and held Google liable for what its AI says. Always 'Trust, but Verify!' arstechnica.com/tech-policy/... #AI #RiskManagement #TrustButVerify

open.substack.com/pub/briangre...

🤦🏻‍♂️ A CISA contractor disabled GitHub's secret scanner, then posted AWS GovCloud admin keys to a public repo called "Private-CISA." The keys stayed valid 48 hours after disclosure. 🤬 krebsonsecurity.com/2026/05/cisa... #CISA #GovCloud #security #privacy #cloud #infosec #cybersecurity

Spent tonight with FBI Chicago, AITP, & InfraGard. Topic: Flipper Zero. A $200 device can clone your badge and walk right through your access controls. Your org's physical security program probably didn't account for that. aitpchicago.com/event-6680905 #Cybersecurity #PhysicalSecurity

Spending Saturday at BSides312. The best security conversations in Chicago happen at this thing, not at expensive conferences with vendor booths. Irish American Heritage Center, 9 am. Come say hi. bsides312.org #BSides312 #Cybersecurity #InfoSec @bsides312.org

Google Cloud Next, still processing 260 product announcements. For CIOs: every AI agent now gets a cryptographic ID & audit trail. Google built the governance stack. Looking forward to diving into Gemini & Chrome Enterprise cloud.google.com/blog/topics/... #GoogleNext #AIGovernance #CIO

Honored to be a part of the Gartner event. In a room full of CIOs. Nobody has AI operationalization figured out, yet. 'Death of the ERP?' was an actual session. Nobody put it there as a joke. www.evanta.com/cio/chicago/... #CIO #AgenticAI #Gartner #Evanta @rhr-international.bsky.social

Your data's already out there. Accept it. The real question: is it usable? Free gov tools most people skip: IRS IP PIN, E-Verify Self Lock, and ChexSystems freeze. 90 min of work. briangreenberg.net/2026/05/07/h... #Cybersecurity #IdentityTheft #security #privacy #cloud #infosec

I'm hiring an Analytics Engineer (GCP) to join my team at RHR International. What you'd actually be doing: building and owning our analytics foundation in a #Google Cloud GCP-first environment. www.linkedin.com/jobs/view/43... #Hiring #Jobs #AnalyticsEngineer #GCP #BigQuery

Everyone's getting AI. That's exactly why it won't be your edge. When every competitor has the same tool, the tool isn't the advantage. The people using it are. sloanreview.mit.edu/article/why-... #AIStrategy #CompetitiveAdvantage #Leadership

What is going on with Gemini and workflows today? It's like it fell down and hit its head on a very large rock. 🤦🏻‍♂️✨

An AI agent deleted a company's entire database & backups in 9 seconds. Even admitted it guessed instead of verifying. - No confirmation prompt before destructive API calls - Terrible Backup Architecture www.tomshardware.com/tech-industr... #AI #Cybersecurity #backup

The McDonald's AI story was fake. Air Canada's wasn't, and a court ruled the company owned everything their bot said. Every AI chatbot you deploy is a legal statement made on your behalf. www.fastcompany.com/91532091/mcd... #Cybersecurity #AI

AI startups calling CARR "ARR" to the press is just mark-to-market accounting with a hoodie on. The VCs know. They're looking at the contracts. You're not. www.fastcompany.com/91532292/ai-... #AI #Cybersecurity

The FCC forgot hotspots exist when they banned foreign routers. Now they're covered too. Approvals for Netgear, eero, and Adtran expire Oct 2027. Then what? No US consumer router manufacturing actually exists yet www.theregister.com/2026/04/24/f... #Cybersecurity #FCC

Processing a payment ≠ liability for the content. If courts rule otherwise, every platform that takes money for user content gets censored into compliance. www.eff.org/deeplinks/20... #Tech #Law

Google just invested $10B in Anthropic, its own AI competitor. Up to $40B total. Amazon did $5B this week too. At some point "investing in a rival" is just admitting you're not sure your own model wins. www.cnbc.com/2026/04/24/g... #AI #Leadership

China allegedly ran 24,000 fake accounts to steal AI models from Anthropic alone. The US calls it "industrial-scale theft." China calls it "slander." 🕵️ 🤔 One side has receipts. The other has a press statement. arstechnica.com/tech-policy/... #AI #Cybersecurity #NationalSecurity

NASA employees handed over defense software to a Chinese spy for years. They thought they were helping a colleague. 🎣 💀 The most dangerous phishing emails are the ones that don't feel like phishing at all thehackernews.com/2026/04/nasa... #Cybersecurity #NationalSecurity