Brian Greenberg
@briangreenberg.net
CIO/CTO, Forbes contributor, CyberSecurity Professor @ DePaul, systems thinker, hiker, entrepreneur, philosopher, actor, improviser, storyteller, & coffeehouse addict. 📍Chicago, IL 🦋🥾☕️🎭🤖🪴✍️ https://linktr.ee/brian.greenberg https://briangreenberg.net
He told the AI 11 times, in all caps, DON'T CHANGE ANYTHING! It deleted his production database anyway. The tool wasn't the problem. The missing judgment was. My latest for Forbes on whose judgment your AI is following: www.forbes.com/councils/for... #AI #EngineeringLeadership
Your AI Is Learning From Someone, Make Sure It’s Your Best Engineer
He said he told the AI, 11 times in all caps, not to change anything without permission.
forbes.com
Is it just me, or is Fable the pro & Opus the occasionally drunk intern? This is what my week has been like dealing with those two. #Anthropic #Claude #aigenerated #AI #Agentic #softwaredevelopment #DevOps #security #privacy #CloudComputing #infosec #cybersecurity
The part that gets me is the asymmetry. The vendor sees the toggle, IT sees nothing until data is already moving. Feature flags ship faster than any approval workflow, so your inventory is stale the day you write it. The only place to catch it is where the interaction happens.
Open-sourced my vendor status dashboard. It monitors 46 SaaS/cloud vendors' status pages every 15 min from a $5/mo Cloudflare Worker, built on one rule: an unverifiable status is unknown; never operational. Code: github.com/bjgreenberg/vendor-dashboard Live: briangreenberg.net/service-status
GitHub - bjgreenberg/vendor-dashboard: Fail-closed status dashboard for ~46 SaaS/cloud vendors — an unverifiable status is unknown, never operational. Cloudflare Worker + D1, zero runtime dependencies...
Fail-closed status dashboard for ~46 SaaS/cloud vendors — an unverifiable status is unknown, never operational. Cloudflare Worker + D1, zero runtime dependencies. - bjgreenberg/vendor-dashboard
github.com
Your SaaS vendor switched on an AI feature last week. IT didn't approve it. It's already touching your data. ChatGPT Enterprise ships apps off. Business plan ships them on. Same vendor. Assume the next one is already on. briangreenberg.net/2026/07/30/d... #AIGovernance #CISO #cybersecurity
Default-On AI: Are SaaS Vendors Outsourcing Their Risk To You?
SaaS vendors keep switching AI features on by default, with days of notice - shifting consent, retention and governance risk onto the customers who inherit them.
briangreenberg.net
Even though this isn’t a true photo or from a real town, this is the kind of attitude I can get behind. This reminds me of the personality of Fremont/Seattle, Washington when I lived there. A real town with a real personality. We should have more of this in real life, a lot more whimsy.
My friend Jeff Olsen on what every leader should read. "On track" tells you nothing about where the work actually is. 4 weeks on the calendar. 30 minutes of real work. The rest was waiting. Ask what would move it, then ask who owns the next move. jeffols.substack.com/p/on-track-i... #Leadership #IT
'On Track' Is Not a State.
Teasing out where the work actually is, before the date decides for you.
jeffols.substack.com
Honored to be nominated for the 2026 Chicago CIO of the Year Award. Thank you, Dean Haacker of Highland Grove Partners, for putting my name forward. Winners announced at the SIM Fall Gala in November. aitpchicago.com/CIO-OF-THE-Y... #CIO #Leadership @rhr-international.bsky.social @forbes.com
AITP Chicago - CIO of the Year Awards
aitpchicago.com
Most AI coding tools help you skip the engineering discipline. I built a Claude Code skill that does the opposite. Open source, free, stack-agnostic. Try it and tell me where it's wrong. github.com/bjgreenberg/... #ClaudeCode #AI
GitHub - bjgreenberg/senior-engineering-partner: A stack-agnostic Claude Code skill: strict code reviewer, pair programmer, debugger, and mentor (Python/Bash/Apps Script/JS). Security-first, phase-awa...
A stack-agnostic Claude Code skill: strict code reviewer, pair programmer, debugger, and mentor (Python/Bash/Apps Script/JS). Security-first, phase-aware engineering discipline with a spec→plan→TDD...
github.com
Today’s theme: rebuild enterprise architecture so AI agents can act on their own. The question nobody answered: if AI eats entry-level work, who’s left with the judgment to supervise those agents? www.cvisionintl.com/events/think... #AI #Leadership
Discover the Future of Data & AI at Chicago's Premier Think Tank Event
Join industry leaders and innovators at the cutting-edge Data & AI Think Tank in Chicago. Explore the transformative future of data and artificial intelligence, and discover how these technologies can...
cvisionintl.com
A single click on a crafted link could cause M365 Copilot to search your mailbox and mail the results via Bing. No typing, no download, no warning. 3 old low-severity bugs stitched together by prompt injection into one critical hole. www.bleepingcomputer.com/news/securit... #AI #Cybersecurity
New attack turned Microsoft 365 Copilot into 1-click data theft tool
A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a sp...
bleepingcomputer.com
The TAKE IT DOWN Act just got its first big test. Feds seized CFAKE and SOCFAKE for hosting nonconsensual deepfake nudes of public figures. The image is fake. The harm to the real person is not. hackread.com/feds-seize-c... #Cybersecurity #Privacy
Feds Seize CFAKE and SOCFAKE Over Explicit Deepfakes of Famous Women
Both CFAKE and SOCFAKE (CFAKE.com and SOCFAKE.com) were seized after prosecutors said they hosted nonconsensual nude digital forgeries of famous women.
hackread.com
Chinese spies hid in medical and military research networks for over a year. The data theft was enabled by a built-in Google Workspace admin rule that BCC'd sensitive email to a Gmail account. No malware needed for that part. www.theregister.com/research/202... #Cybersecurity #InfoSec
PRC-linked spies hid inside medical and military networks for more than a year, snooping through Gmail and stealing data
Google says the intruders were on the hunt for everything from drone tech to pathogens
theregister.com
Loving our new brand... Visit us at rhrinternational.com to learn more and follow along as we empower leaders to unlock the full potential of their people and organizations for today’s business environment. #LeadershipDevelopment #Leadership #TalentDevelopment @rhr-international.bsky.social
Finally, an agentic AI feature I actually want. Apple Intelligence can log into your accounts and reset a hacked password on its own. Password hygiene is the one thing almost nobody keeps up with, and this just handles it. gizmodo.com/apple-intell... #AI #InfoSec
Apple Intelligence Can Change Your Passwords for You When You Get Hacked
Agentic AI and security are normally at odds, but this Apple Intelligence feature could be a lifesaver.
gizmodo.com
600+ operating systems from 1948 to 2011, pre-configured and ready to boot in one archive. One person has been building it since 2003. For teaching or security research, it's close to the sandbox you always wished existed. www.theverge.com/tech/945246/... #InfoSec #Cybersecurity
The Virtual OS Museum lets you relive over 600 operating systems right on your desktop
From mainframes, to Mac OS, and everything in between.
theverge.com
Surveillance pricing is here. The Washington Post used one subscriber's personal data to push her price from $42 in 2024 to $148 today. She only knows an algorithm set it because a NY law forced the disclosure. gizmodo.com/washington-p... #Privacy #AI
Washington Post Sued Over Alleged Surveillance Pricing After Subscription Prices Jump Dramatically
The lawsuit raises questions about whether Amazon data is being used as well.
gizmodo.com
Google's defense for false AI Overviews: don't blindly trust them. But the product only works if you do? A German court caught the contradiction and held Google liable for what its AI says. Always 'Trust, but Verify!' arstechnica.com/tech-policy/... #AI #RiskManagement #TrustButVerify
Nobody needs AI to search the Internet, court says in ruling against Google
Google AI Overview court loss in Germany could spell doom for AI search industry.
arstechnica.com
My latest @ @forbes.com SaaS vendors R shipping AI default-on and handing you the governance bill. Zoom auto-enabled AI Companion. @microsoft.com installed Copilot. Default-on is a choice. So is governance. www.forbes.com/councils/for... @rhr-international.bsky.social @depauluniversity.bsky.social
Default-On AI: Are SaaS Vendors Outsourcing Their Risk To You?
Many platforms have been enabling AI by default lately. That's the new normal in enterprise SaaS, but it shouldn't be.
forbes.com
🤦🏻♂️ A CISA contractor disabled GitHub's secret scanner, then posted AWS GovCloud admin keys to a public repo called "Private-CISA." The keys stayed valid 48 hours after disclosure. 🤬 krebsonsecurity.com/2026/05/cisa... #CISA #GovCloud #security #privacy #cloud #infosec #cybersecurity
CISA Admin Leaked AWS GovCloud Keys on Github
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovC...
krebsonsecurity.com
Spent tonight with FBI Chicago, AITP, & InfraGard. Topic: Flipper Zero. A $200 device can clone your badge and walk right through your access controls. Your org's physical security program probably didn't account for that. aitpchicago.com/event-6680905 #Cybersecurity #PhysicalSecurity
Spending Saturday at BSides312. The best security conversations in Chicago happen at this thing, not at expensive conferences with vendor booths. Irish American Heritage Center, 9 am. Come say hi. bsides312.org #BSides312 #Cybersecurity #InfoSec @bsides312.org
BSides312 2026 — Chicago's Security BSides Hacking Conference | May 16
BSides312 is Chicago's Security BSides event — a non-profit hacker & cybersecurity conference in Chicago, IL. May 16, 2026 at the Irish American Heritage Center.
bsides312.org
Google Cloud Next, still processing 260 product announcements. For CIOs: every AI agent now gets a cryptographic ID & audit trail. Google built the governance stack. Looking forward to diving into Gemini & Chrome Enterprise cloud.google.com/blog/topics/... #GoogleNext #AIGovernance #CIO
Google Cloud Next 2026 Wrap Up | Google Cloud Blog
A whirlwind recap of Google Cloud Next 26, including a synopsis of over 250 product, customer and ecosystem announcements.
cloud.google.com
Honored to be a part of the Gartner event. In a room full of CIOs. Nobody has AI operationalization figured out, yet. 'Death of the ERP?' was an actual session. Nobody put it there as a joke. www.evanta.com/cio/chicago/... #CIO #AgenticAI #Gartner #Evanta @rhr-international.bsky.social
Chicago CIO Community Executive Summit
C-level executives gain new connections and actionable insights through peer-driven content and discussions at the Chicago CIO Executive Summit.
evanta.com
Your data's already out there. Accept it. The real question: is it usable? Free gov tools most people skip: IRS IP PIN, E-Verify Self Lock, and ChexSystems freeze. 90 min of work. briangreenberg.net/2026/05/07/h... #Cybersecurity #IdentityTheft #security #privacy #cloud #infosec
How to Protect Yourself from Identity Theft - BrianGreenberg.net — CIO/CTO/CISO
The Threat Model Let’s face it, your personal data is already out there. Not “may have been exposed.” Trust me, it has been. Assume it, and you’ll be better off. So, now, the question isn’t whether so...
briangreenberg.net
I'm hiring an Analytics Engineer (GCP) to join my team at RHR International. What you'd actually be doing: building and owning our analytics foundation in a #Google Cloud GCP-first environment. www.linkedin.com/jobs/view/43... #Hiring #Jobs #AnalyticsEngineer #GCP #BigQuery
Everyone's getting AI. That's exactly why it won't be your edge. When every competitor has the same tool, the tool isn't the advantage. The people using it are. sloanreview.mit.edu/article/why-... #AIStrategy #CompetitiveAdvantage #Leadership
Why AI Will Not Provide Sustainable Competitive Advantage
Once AI becomes pervasive, it no longer gives companies an edge over rivals — but cultivating creativity can.
sloanreview.mit.edu
