Ask your lawyer if being lazy is right for you

from here and here

Well, this is an interesting development. Albanian IT staff get charged with negligence after a (supposedly) preventable cyberattack that they failed to prevent. Now, if it was really management's fault that things weren't kept up to date then I hope that comes out at trial and that the people who were really responsible are held accountable. This kind of legal action, combined with the uncertain future of cyber-insurance might just force businesses and organizations to finally start ponying up the funds to do security right. Or the decision-makers will find some other way to avoid accountability for not paying what should be the cost of doing business.

Never underestimate your adversaries

found on I Heart Cats

You don't expect this behaviour from a cat, usually it's the other way around, however I have known a cat that terrorized the neighborhood dogs such that their owners would pick them up and carry them past the cat owner's house when walking their dogs, so I know sometimes it happens.

Don't try this at home

from here and here (image source)

One school of thought says that we should make things safe so that people can do what comes naturally to them with no ill effect. 

I maintain that it's just not feasible to child-proof everything and at least some of the time it's better (or even necessary) to teach people to use good judgement and be cautious instead. Sometimes the correct answer is "don't do the thing" not "we'll make the thing safe".

Attribution is hard

Watch on YouTube

This may be staged, but it still demonstrates the point that attackers will take advantage of any opportunity to pretend someone else is responsible for the attack.

A victim of some security marketing joker

from here and here

Years ago the catchphrase Antivirus Is Dead gained some popularity in security circles, despite my best efforts to fight it. Apparently it ultimately lead to the rebranding of the technology, so in a way the phrase became true, but only in the sense that the terminology isn't used anymore. What's more, the upstarts who started the whole thing failed to take market dominance away from the incumbents (as anyone could have predicted), so I figured why not rub their noses in it with this subtle modification to their own catch phrase. "Antivirus" Is Dead. Two little quotation marks can drastically change the meaning.

Assault with a silent but deadly weapon

found on Dump A Day

Now I'm not saying you shouldn't be punished for launching a gas attack like some malodorous squid squirting out ink, but just that if you do toot, maybe don't make it look intentional

Did it for the lulz

from here and here

Generally speaking, when criminals don't want to get caught they try their best to not get noticed. These guys took a completely different path and got a completely predictable (and arguably well deserved, considering the swatting involved) outcome.

You Clicked That Link Didn't You backpack

Product Page

No matter where you go, you will probably find someone who can answer "Yes" to that question

Wishful thinking

from here and here

The sellers are telling Twitter to buy their data back before someone else does. A ransom by any other name would smell as dirty, but I can't help but think these cybercrime chuckleheads are barking up the wrong tree. Twitter might not even be around long enough for the European Union to find them guilty of a GDPR violation over this. 

Do you know who I am?

found on Know Your Meme

Modern Windows systems will tell you this even when you're logged in as the administrator account. It's not enough to just be logged in as an administrator, you have to "run as administrator" too, because system designers would rather build systems that second guess the user than to teach the user how to follow the principle of least privilege.