Ex-CISA officials, CISOs aim to stop the spread of hacklore
Briefly

Ex-CISA officials, CISOs aim to stop the spread of hacklore
"Afraid of connecting to public Wi-Fi? Terrified to turn your Bluetooth on? You may be falling for "hacklore," tall tales about cybersecurity that distract you from real dangers. Dozens of chief security officers and ex-CISA officials have launched an effort and website to dispel these myths and show you how not to get hacked for real."
"Hacklore combines hacking and folklore, and Hacklore.org "exists to separate myth from reality" and instead provides useful tips about how to protect data and devices. Think: install patches, keep software up to date, use strong passwords and passkeys, and turn on multi-factor authentication, as opposed to avoiding public Wi-Fi and never scanning QR codes."
""Some CISO friends routinely send me antique advice because they know it's a pet peeve, and a few weeks ago one of them shared an article that finally pushed me to start the site," Lord said. "More importantly, I've noticed growing support for retiring obsolete guidance altogether. And with the usual surge of bad cybersecurity advice that appears ahead of Cyber Monday and the holiday travel season, I set a deadline of today to counter it with guidance rooted in how the most common compromises actually occur.""
Hacklore.org seeks to replace fear-driven cybersecurity folklore with practical defenses. Dozens of chief security officers and former CISA officials launched the initiative, and 86 security leaders signed on. The campaign recommends installing patches, keeping software current, using strong passwords or passkeys, and enabling multi-factor authentication. The initiative calls out outdated advice such as avoiding public Wi‑Fi, never scanning QR codes, not charging devices from public USB ports, and turning off Bluetooth, noting limited real-world evidence for many such threats. The effort was timed to counter surges of poor guidance before major shopping and travel periods.
Read at Theregister
Unable to calculate read time
[
|
]