CAPSLOCK

The cyber industry loves a good acronym and an impenetrable definition. We're fixing that. 🔐 Zero Day (n.) A vulnerability so fresh that nobody has a patch for it yet - including the people whose job it is to have a patch for it. Named after the number of days defenders have had to prepare. That number being zero. Sleep well. Social Engineering (n.) Hacking, but for people instead of systems. No code required - just a convincing email, a sense of urgency, and an understanding of how humans behave when they're busy, stressed, or just really want to help. Attack Surface (n.) Every single point through which something could go wrong. Your laptop. Your phone. Your colleague's phone. The smart coffee machine someone connected to the office WiFi in 2019. All of it. Threat Actor (n.) The technical term for the person or group trying to get in. Used in official reports because "the people doing the hacking" apparently lacks gravitas. Patch (n./v.) A fix for a known vulnerability, released by the software vendor and ignored by end users everywhere until something goes wrong. See also: "I'll update it later." 👇 Which term would you like us to translate next? #CyberGlossary #CyberSecurity #ITHumour #SecurityAwareness #CAPSLOCK

A brief history of things people said about cyber security that didn't quite hold up. 😬 "Nobody is going to hack a hospital. What would they even want with patient records?" - Said with confidence, somewhere, before ransomware became a public health crisis. "We're a small business. We're not interesting enough to target." - 43% of cyber attacks target small businesses. The attackers are not picky. "Email is just a communication tool. How dangerous can it be?" - Phishing now accounts for over 90% of successful data breaches. So. Quite dangerous. "We don't need a dedicated security person. Dave in IT handles all of that." - Dave is one person. Dave is tired. Dave is also managing the printer situation. "AI is years away from being used in any serious cyber attacks." - We'll leave this one there. The lesson isn't that people were foolish. The landscape genuinely changed faster than anyone predicted. The lesson is that "it won't happen" has never once been a security strategy. 👇 Any others worth adding to the list? #CyberSecurity #TechHistory #SecurityAwareness #CAPSLOCK #InfoSec

We found this CV on the system. We're not sure how it got there. 👀 The attacks targeting your organisation right now are this confident, this practiced, and this specific. The difference between a near miss and a breach is usually one person who knew what to look for. 👇 What's the most convincing phishing attempt you've ever seen? #CyberSecurity #Phishing #SecurityAwareness #ITHumour #CAPSLOCK

Summer cyber security - a special edition 🌞 😬 The out of office that tells everyone your name, role, who's covering, when you're back, and which hotel you're staying at 😬 "I'll just use the airport WiFi to send that contract over quickly" 😬 Logging into the work system from a device that's been shared with three children and a golden retriever all week 😬 The "quick check of emails" on holiday that somehow involves accessing the entire company drive 😬 Coming back in September and clicking "remind me later" on 47 security updates We say this with love. Enjoy your summers. Just maybe don't broadcast your entire schedule to the internet first. 🙏 #CyberSecurity #SummerSecurity #ITHumour #SecurityAwareness #CAPSLOCK

Meet Zirian! Having graduated recently from our Ce-CSP programme, we caught up with Zirian to hear his reflections on his CAPSLOCK experience.

We're now over halfway through 2026. Here's what's actually shifted in cyber. AI has changed the threat landscape faster than most organisations have changed their training. The gap between what attackers can do and what defenders are prepared for has widened this year. The talent shortage hasn't gone away, but the conversation around it has started to shift. More organisations are beginning to ask whether their hiring criteria are part of the problem. Social engineering has gotten harder to spot. Not because people are less vigilant, but because the attacks are more convincing than ever. Human judgment matters more now, not less. Burnout in security teams is finally being talked about. Quietly, in the right rooms - but it is being talked about. And the people entering cyber through non-traditional routes are proving, consistently, that the industry's instinct to gatekeep was never really about quality. What's your biggest observation from the first half of the year? 👇 #CyberSecurity #SecurityLeadership #CyberWorkforce #CAPSLOCK

Pride Month ends today. Our commitment to building a more inclusive cyber workforce doesn't. The industry needs more people. The right answer to that isn't to keep fishing in the same small pond. We'll keep saying it all year: cyber is for everyone. And everyone makes cyber stronger. 🏳️🌈 #PrideMonth #DiversityInCyber #CAPSLOCK

Your cyber security horoscope. We don't make the rules. 🔮 ♈ Aries - You will click the link. You will know immediately that you shouldn't have. You will tell no one. ♉ Taurus - Your password is your childhood pet's name and you will go to your grave defending it. ♊ Gemini - You have two browser profiles, three VPNs, and no one really knows what you do all day. Honestly, fair enough. ♋ Cancer - You're the one who actually reads the security policy. The team thinks you're a myth. ♌ Leo - You forwarded the phishing test to the whole company to show everyone you spotted it. Bold. Chaotic. Correct. ♍ Virgo - You've reported six suspicious emails this week. Four were newsletters you signed up for yourself. No notes. ♎ Libra - You've been meaning to enable MFA since January. It's fine. It'll be fine. ♏ Scorpio - You know exactly how unsecured the company WiFi is and you've chosen to say nothing. Respect. ♐ Sagittarius - Your out of office contains your mobile number, your holiday dates, your manager's name, and your hotel. The threat actors thank you. ♑ Capricorn - You've read the NCSC guidelines for fun. We respect and fear you in equal measure. ♒ Aquarius - You suggested using a password manager in 2019. Nobody listened. You've moved on. Mostly. ♓ Pisces - You genuinely believe "it won't happen to us." Bless. #CyberSecurity #CyberHoroscopes #ITHumour #SecurityAwareness #CAPSLOCK

Meet Matt! Here's a quick snapshot from our recent catch up around his CAPSLOCK experience - from practical learning to building confidence in cyber. You can read more about our conversation with Matt, and watch his full interview here: https://hubs.la/Q04ksbVB0

Cyber security job titles - what they say vs what they mean 👇 Security Analyst says: "I monitor and investigate potential threats across the organisation's infrastructure." Means: I drink too much coffee and have a deeply personal relationship with our SIEM at 2am. Penetration Tester says: "I simulate attacks to identify vulnerabilities before malicious actors do." Means: I get paid to break things and write a polite report about it afterwards. Chief Information Security Officer says: "I align security strategy with broader business objectives." Means: I explain why we can't do the thing everyone wants to do, in every meeting, forever. Security Awareness Trainer says: "I educate staff on best practices and cultivate a security-conscious culture." Means: I made the phishing test and I watched the click rate in real time. I have thoughts. Incident Responder says: "I lead the organisation's response to active security incidents." Means: Everyone panics. I do not panic. Outwardly. GRC Analyst Says: "I manage governance, risk, and compliance across the organisation." Means: I live in spreadsheets and I have a highlight colour system that I will not be explaining. What did we miss? 👇 #CyberSecurity #CyberCareers #ITHumour #DayInTheLife #CAPSLOCK