Chuck Davis
@ckd3.net
Cybersecurity executive helping bridge technology, public policy, and critical infrastructure resilience. Author, inventor, educator, speaker, and founder of NetBOM
25 years ago today, I was working from home as an IT security architect for IBM when I heard the tone of the morning news anchors suddenly change.
I remember the shock, sadness and anger. I wanted to help. Ten days later, I was given a small opportunity to do exactly that.
betweenthehacks.com/...
I remember the shock, sadness and anger. I wanted to help. Ten days later, I was given a small opportunity to do exactly that.
betweenthehacks.com/...
September 11, 2026 at 8:56 PM
25 years ago today, I was working from home as an IT security architect for IBM when I heard the tone of the morning news anchors suddenly change.
I remember the shock, sadness and anger. I wanted to help. Ten days later, I was given a small opportunity to do exactly that.
betweenthehacks.com/...
I remember the shock, sadness and anger. I wanted to help. Ten days later, I was given a small opportunity to do exactly that.
betweenthehacks.com/...
A fake $499.99 PayPal charge appeared on my son’s calendar exactly one year after I drafted an article about the same attack.
Was his account breached? Probably not.
Here is how calendar invite phishing works and what to do when one appears:
betweenthehacks.com/...
Was his account breached? Probably not.
Here is how calendar invite phishing works and what to do when one appears:
betweenthehacks.com/...
August 20, 2026 at 4:18 PM
A fake $499.99 PayPal charge appeared on my son’s calendar exactly one year after I drafted an article about the same attack.
Was his account breached? Probably not.
Here is how calendar invite phishing works and what to do when one appears:
betweenthehacks.com/...
Was his account breached? Probably not.
Here is how calendar invite phishing works and what to do when one appears:
betweenthehacks.com/...
What if your next cyberattack didn't begin with a phishing email or an unpatched server?
What if it started with a job application?
AI is making fake identities more convincing, which means hiring has become part of every organization's security perimeter.
betweenthehacks.com/...
What if it started with a job application?
AI is making fake identities more convincing, which means hiring has become part of every organization's security perimeter.
betweenthehacks.com/...
August 6, 2026 at 6:43 PM
What if your next cyberattack didn't begin with a phishing email or an unpatched server?
What if it started with a job application?
AI is making fake identities more convincing, which means hiring has become part of every organization's security perimeter.
betweenthehacks.com/...
What if it started with a job application?
AI is making fake identities more convincing, which means hiring has become part of every organization's security perimeter.
betweenthehacks.com/...
AI didn't escape.
It started testing the fence.
That's the lesson I took from the OpenAI/Hugging Face incident. The important question isn't whether AI is malicious, it's whether our security controls still work when AI begins testing them.
betweenthehacks.com/...
It started testing the fence.
That's the lesson I took from the OpenAI/Hugging Face incident. The important question isn't whether AI is malicious, it's whether our security controls still work when AI begins testing them.
betweenthehacks.com/...
July 28, 2026 at 2:30 PM
AI didn't escape.
It started testing the fence.
That's the lesson I took from the OpenAI/Hugging Face incident. The important question isn't whether AI is malicious, it's whether our security controls still work when AI begins testing them.
betweenthehacks.com/...
It started testing the fence.
That's the lesson I took from the OpenAI/Hugging Face incident. The important question isn't whether AI is malicious, it's whether our security controls still work when AI begins testing them.
betweenthehacks.com/...
The best cybersecurity professional I ever hired had no college degree.
They had curiosity.
That mattered more.
Here’s why, plus the career advice I wish someone had given me.
betweenthehacks.com/...
They had curiosity.
That mattered more.
Here’s why, plus the career advice I wish someone had given me.
betweenthehacks.com/...
July 16, 2026 at 8:42 PM
The best cybersecurity professional I ever hired had no college degree.
They had curiosity.
That mattered more.
Here’s why, plus the career advice I wish someone had given me.
betweenthehacks.com/...
They had curiosity.
That mattered more.
Here’s why, plus the career advice I wish someone had given me.
betweenthehacks.com/...
I thought I was just reading an article.
Instead, I found a ClickFix attack.
After reproducing it across multiple browsers and researching further, I realized the real story wasn’t the malware.
It's how attackers are impersonating security itself.
betweenthehacks.com/...
Instead, I found a ClickFix attack.
After reproducing it across multiple browsers and researching further, I realized the real story wasn’t the malware.
It's how attackers are impersonating security itself.
betweenthehacks.com/...
July 8, 2026 at 3:30 PM
I thought I was just reading an article.
Instead, I found a ClickFix attack.
After reproducing it across multiple browsers and researching further, I realized the real story wasn’t the malware.
It's how attackers are impersonating security itself.
betweenthehacks.com/...
Instead, I found a ClickFix attack.
After reproducing it across multiple browsers and researching further, I realized the real story wasn’t the malware.
It's how attackers are impersonating security itself.
betweenthehacks.com/...
We’ve spent decades securing identities.
AI governance extends those ideas to AI agents, and that’s the right direction.
But identity and governance answer only two questions.
I think the next challenge is understanding what influences AI behavior.
betweenthehacks.com/...
AI governance extends those ideas to AI agents, and that’s the right direction.
But identity and governance answer only two questions.
I think the next challenge is understanding what influences AI behavior.
betweenthehacks.com/...
July 2, 2026 at 2:35 PM
We’ve spent decades securing identities.
AI governance extends those ideas to AI agents, and that’s the right direction.
But identity and governance answer only two questions.
I think the next challenge is understanding what influences AI behavior.
betweenthehacks.com/...
AI governance extends those ideas to AI agents, and that’s the right direction.
But identity and governance answer only two questions.
I think the next challenge is understanding what influences AI behavior.
betweenthehacks.com/...
Enjoyed joining @hackersonthehill.org in Washington, DC.
Cybersecurity isn’t just a technology challenge. It’s also about governance, public policy, and collaboration. Thanks @beauwoods.com and everyone who organized the event.
What cybersecurity policy issue deserves more attention from Congress?
Cybersecurity isn’t just a technology challenge. It’s also about governance, public policy, and collaboration. Thanks @beauwoods.com and everyone who organized the event.
What cybersecurity policy issue deserves more attention from Congress?
June 25, 2026 at 5:15 PM
Enjoyed joining @hackersonthehill.org in Washington, DC.
Cybersecurity isn’t just a technology challenge. It’s also about governance, public policy, and collaboration. Thanks @beauwoods.com and everyone who organized the event.
What cybersecurity policy issue deserves more attention from Congress?
Cybersecurity isn’t just a technology challenge. It’s also about governance, public policy, and collaboration. Thanks @beauwoods.com and everyone who organized the event.
What cybersecurity policy issue deserves more attention from Congress?
We keep talking about passwordless.
Attackers are still using passwords.
bth.news/2026wpd
#Cybersecurity #WorldPasswordDay #InfoSec #Security
Attackers are still using passwords.
bth.news/2026wpd
#Cybersecurity #WorldPasswordDay #InfoSec #Security
May 7, 2026 at 2:40 PM
We keep talking about passwordless.
Attackers are still using passwords.
bth.news/2026wpd
#Cybersecurity #WorldPasswordDay #InfoSec #Security
Attackers are still using passwords.
bth.news/2026wpd
#Cybersecurity #WorldPasswordDay #InfoSec #Security
If your vulnerability program is driven entirely by CVSS scores, you are probably missing real risk. This post outlines a high-level approach to prioritizing remediation based on exposure, KEV data, and attacker behavior.
Link 👇
betweenthehacks.com/...
#VulnerabilityManagement
Link 👇
betweenthehacks.com/...
#VulnerabilityManagement
February 10, 2026 at 7:38 PM
If your vulnerability program is driven entirely by CVSS scores, you are probably missing real risk. This post outlines a high-level approach to prioritizing remediation based on exposure, KEV data, and attacker behavior.
Link 👇
betweenthehacks.com/...
#VulnerabilityManagement
Link 👇
betweenthehacks.com/...
#VulnerabilityManagement
Venmo makes your payments public by default.
Who you paid. When. And why.
This is a privacy problem with an easy, 30 second fix!
🔗 betweenthehacks.com/...
#Venmo #PrivacyMatters #CyberSecurity #VenmoPrivacy #AppSecurity #DataProtection #DigitalSafety #FixItFast
Who you paid. When. And why.
This is a privacy problem with an easy, 30 second fix!
🔗 betweenthehacks.com/...
#Venmo #PrivacyMatters #CyberSecurity #VenmoPrivacy #AppSecurity #DataProtection #DigitalSafety #FixItFast
October 28, 2025 at 3:01 PM
Venmo makes your payments public by default.
Who you paid. When. And why.
This is a privacy problem with an easy, 30 second fix!
🔗 betweenthehacks.com/...
#Venmo #PrivacyMatters #CyberSecurity #VenmoPrivacy #AppSecurity #DataProtection #DigitalSafety #FixItFast
Who you paid. When. And why.
This is a privacy problem with an easy, 30 second fix!
🔗 betweenthehacks.com/...
#Venmo #PrivacyMatters #CyberSecurity #VenmoPrivacy #AppSecurity #DataProtection #DigitalSafety #FixItFast
Did you know National Internet Safety Month started in 2005?
It began as a campaign to protect kids online—now it’s a reminder for everyone to tighten up digital hygiene.
Read the history: bth.news/safety
#Cybersecurity #InternetSafety #Infosec
It began as a campaign to protect kids online—now it’s a reminder for everyone to tighten up digital hygiene.
Read the history: bth.news/safety
#Cybersecurity #InternetSafety #Infosec
June 12, 2025 at 8:54 PM
Did you know National Internet Safety Month started in 2005?
It began as a campaign to protect kids online—now it’s a reminder for everyone to tighten up digital hygiene.
Read the history: bth.news/safety
#Cybersecurity #InternetSafety #Infosec
It began as a campaign to protect kids online—now it’s a reminder for everyone to tighten up digital hygiene.
Read the history: bth.news/safety
#Cybersecurity #InternetSafety #Infosec
Need a quick win this weekend?
Check out my 10-minute security checklist: updates, MFA, router tweaks, password scan, and more.
No fluff, no fear—just real-world security tips anyone can follow. 🔗 betweenthehacks.com/...
#cybersecurity #weekendproject #infosec
Check out my 10-minute security checklist: updates, MFA, router tweaks, password scan, and more.
No fluff, no fear—just real-world security tips anyone can follow. 🔗 betweenthehacks.com/...
#cybersecurity #weekendproject #infosec
June 1, 2025 at 8:16 PM
Need a quick win this weekend?
Check out my 10-minute security checklist: updates, MFA, router tweaks, password scan, and more.
No fluff, no fear—just real-world security tips anyone can follow. 🔗 betweenthehacks.com/...
#cybersecurity #weekendproject #infosec
Check out my 10-minute security checklist: updates, MFA, router tweaks, password scan, and more.
No fluff, no fear—just real-world security tips anyone can follow. 🔗 betweenthehacks.com/...
#cybersecurity #weekendproject #infosec
A fake resume. A fake location. A real threat.
Kraken’s hiring team spotted the red flags—and uncovered a North Korean spy posing as a dev.
Here’s how it unfolded:
👉 betweenthehacks.com/...
#Cybersecurity #RemoteWork #Infosec
Kraken’s hiring team spotted the red flags—and uncovered a North Korean spy posing as a dev.
Here’s how it unfolded:
👉 betweenthehacks.com/...
#Cybersecurity #RemoteWork #Infosec
May 5, 2025 at 3:06 PM
A fake resume. A fake location. A real threat.
Kraken’s hiring team spotted the red flags—and uncovered a North Korean spy posing as a dev.
Here’s how it unfolded:
👉 betweenthehacks.com/...
#Cybersecurity #RemoteWork #Infosec
Kraken’s hiring team spotted the red flags—and uncovered a North Korean spy posing as a dev.
Here’s how it unfolded:
👉 betweenthehacks.com/...
#Cybersecurity #RemoteWork #Infosec
It’s World Password Day!
Still clinging to qwerty and your dog’s birthday? No judgment—just backup and fix it.
New on Between The Hacks:
betweenthehacks.com/...
#Passwords #WorldPasswordDay #CyberSecurity
Still clinging to qwerty and your dog’s birthday? No judgment—just backup and fix it.
New on Between The Hacks:
betweenthehacks.com/...
#Passwords #WorldPasswordDay #CyberSecurity
May 1, 2025 at 3:20 PM
It’s World Password Day!
Still clinging to qwerty and your dog’s birthday? No judgment—just backup and fix it.
New on Between The Hacks:
betweenthehacks.com/...
#Passwords #WorldPasswordDay #CyberSecurity
Still clinging to qwerty and your dog’s birthday? No judgment—just backup and fix it.
New on Between The Hacks:
betweenthehacks.com/...
#Passwords #WorldPasswordDay #CyberSecurity
Your laptop is your command center. Don’t make it an easy target.
Here are 10 smart, simple ways to lock it down in 2025. 🔒
👉 betweenthehacks.com/...
Here are 10 smart, simple ways to lock it down in 2025. 🔒
👉 betweenthehacks.com/...
April 28, 2025 at 3:36 PM
Your laptop is your command center. Don’t make it an easy target.
Here are 10 smart, simple ways to lock it down in 2025. 🔒
👉 betweenthehacks.com/...
Here are 10 smart, simple ways to lock it down in 2025. 🔒
👉 betweenthehacks.com/...
New post on Between The Hacks:
Quishing: Phishing Got a Glow-Up
QR codes are sneaky little traps. This post explains how attackers use them to phish for creds, how it works, and how to stay safe.
bth.news/quishing
#quishing #cybersecurity #infosec
Quishing: Phishing Got a Glow-Up
QR codes are sneaky little traps. This post explains how attackers use them to phish for creds, how it works, and how to stay safe.
bth.news/quishing
#quishing #cybersecurity #infosec
April 24, 2025 at 3:14 PM
New post on Between The Hacks:
Quishing: Phishing Got a Glow-Up
QR codes are sneaky little traps. This post explains how attackers use them to phish for creds, how it works, and how to stay safe.
bth.news/quishing
#quishing #cybersecurity #infosec
Quishing: Phishing Got a Glow-Up
QR codes are sneaky little traps. This post explains how attackers use them to phish for creds, how it works, and how to stay safe.
bth.news/quishing
#quishing #cybersecurity #infosec
DEF CON 33 talk submitted:
What SBOMs Forgot About the Network
NetBOM defines where devices should connect, then helps your firewall block the rest.
It’s time to stop trusting by default.
netbom.net
#NetBOM #Cybersecurity #DEFCON33
What SBOMs Forgot About the Network
NetBOM defines where devices should connect, then helps your firewall block the rest.
It’s time to stop trusting by default.
netbom.net
#NetBOM #Cybersecurity #DEFCON33
April 22, 2025 at 2:37 PM
DEF CON 33 talk submitted:
What SBOMs Forgot About the Network
NetBOM defines where devices should connect, then helps your firewall block the rest.
It’s time to stop trusting by default.
netbom.net
#NetBOM #Cybersecurity #DEFCON33
What SBOMs Forgot About the Network
NetBOM defines where devices should connect, then helps your firewall block the rest.
It’s time to stop trusting by default.
netbom.net
#NetBOM #Cybersecurity #DEFCON33
My thermostat wouldn’t work without full Internet access.
I tried to restrict it. Support said: “Put it in the DMZ.”
Nope. I built NetBOM instead.
It’s like SBOM—but for network behavior.
Read the blog: betweenthehacks.com/...
White Paper: netbom.net
#NetBOM #Cybersecurity #IoTSecurity
I tried to restrict it. Support said: “Put it in the DMZ.”
Nope. I built NetBOM instead.
It’s like SBOM—but for network behavior.
Read the blog: betweenthehacks.com/...
White Paper: netbom.net
#NetBOM #Cybersecurity #IoTSecurity
April 14, 2025 at 2:15 PM
My thermostat wouldn’t work without full Internet access.
I tried to restrict it. Support said: “Put it in the DMZ.”
Nope. I built NetBOM instead.
It’s like SBOM—but for network behavior.
Read the blog: betweenthehacks.com/...
White Paper: netbom.net
#NetBOM #Cybersecurity #IoTSecurity
I tried to restrict it. Support said: “Put it in the DMZ.”
Nope. I built NetBOM instead.
It’s like SBOM—but for network behavior.
Read the blog: betweenthehacks.com/...
White Paper: netbom.net
#NetBOM #Cybersecurity #IoTSecurity
Ransomware is no joke—but the time ransom notes started printing on lobby printers? Still kind of hilarious.
New on Between The Hacks: what it is, how it works, and how to stay protected.
👉 betweenthehacks.com/...
#Ransomware #InfosecHumor
New on Between The Hacks: what it is, how it works, and how to stay protected.
👉 betweenthehacks.com/...
#Ransomware #InfosecHumor
April 9, 2025 at 2:10 PM
Ransomware is no joke—but the time ransom notes started printing on lobby printers? Still kind of hilarious.
New on Between The Hacks: what it is, how it works, and how to stay protected.
👉 betweenthehacks.com/...
#Ransomware #InfosecHumor
New on Between The Hacks: what it is, how it works, and how to stay protected.
👉 betweenthehacks.com/...
#Ransomware #InfosecHumor
Hey friends, we’ve updated our main URL! The new default is betweenthehacks.com. Same content, just a new domain. Check it out: betweenthehacks.com/...
April 5, 2025 at 6:54 PM
Hey friends, we’ve updated our main URL! The new default is betweenthehacks.com. Same content, just a new domain. Check it out: betweenthehacks.com/...
🔐 Passwords are dead.
Passkeys are here—and they’re everything passwords wish they were.
✅ Can’t be guessed
✅ Can’t be phished
✅ Seamless login with Face ID, Touch ID, or security key
Full breakdown: betweenthehacks.com/passkeys
#Passkeys #Cybersecurity #WebAuthn #DigitalSecurity
Passkeys are here—and they’re everything passwords wish they were.
✅ Can’t be guessed
✅ Can’t be phished
✅ Seamless login with Face ID, Touch ID, or security key
Full breakdown: betweenthehacks.com/passkeys
#Passkeys #Cybersecurity #WebAuthn #DigitalSecurity
April 3, 2025 at 3:28 PM
🔐 Passwords are dead.
Passkeys are here—and they’re everything passwords wish they were.
✅ Can’t be guessed
✅ Can’t be phished
✅ Seamless login with Face ID, Touch ID, or security key
Full breakdown: betweenthehacks.com/passkeys
#Passkeys #Cybersecurity #WebAuthn #DigitalSecurity
Passkeys are here—and they’re everything passwords wish they were.
✅ Can’t be guessed
✅ Can’t be phished
✅ Seamless login with Face ID, Touch ID, or security key
Full breakdown: betweenthehacks.com/passkeys
#Passkeys #Cybersecurity #WebAuthn #DigitalSecurity
I’ve been talking about network segmentation for years.
This week, I took action.
✂️ Cut the Ethernet cable
📡 Rotated the SSID every 60 seconds
🧊 Put the printer in the freezer
Welcome to Physical Zero Trust™
www.ckd3.com/blog/cut-eth...
(fixed link)
#infosechumor #cybersecurity #iot
This week, I took action.
✂️ Cut the Ethernet cable
📡 Rotated the SSID every 60 seconds
🧊 Put the printer in the freezer
Welcome to Physical Zero Trust™
www.ckd3.com/blog/cut-eth...
(fixed link)
#infosechumor #cybersecurity #iot
April 1, 2025 at 3:56 PM
I’ve been talking about network segmentation for years.
This week, I took action.
✂️ Cut the Ethernet cable
📡 Rotated the SSID every 60 seconds
🧊 Put the printer in the freezer
Welcome to Physical Zero Trust™
www.ckd3.com/blog/cut-eth...
(fixed link)
#infosechumor #cybersecurity #iot
This week, I took action.
✂️ Cut the Ethernet cable
📡 Rotated the SSID every 60 seconds
🧊 Put the printer in the freezer
Welcome to Physical Zero Trust™
www.ckd3.com/blog/cut-eth...
(fixed link)
#infosechumor #cybersecurity #iot
A flat network means any device, like a smart plug, light bulb, or fridge, can reach the Internet and your other devices.
In my latest post, I explain how segmentation helps, but visibility is the next frontier.
🧠 www.ckd3.com/blog/everyth...
#infosec #homeiot #security
In my latest post, I explain how segmentation helps, but visibility is the next frontier.
🧠 www.ckd3.com/blog/everyth...
#infosec #homeiot #security
March 31, 2025 at 4:06 PM
A flat network means any device, like a smart plug, light bulb, or fridge, can reach the Internet and your other devices.
In my latest post, I explain how segmentation helps, but visibility is the next frontier.
🧠 www.ckd3.com/blog/everyth...
#infosec #homeiot #security
In my latest post, I explain how segmentation helps, but visibility is the next frontier.
🧠 www.ckd3.com/blog/everyth...
#infosec #homeiot #security