#OPSEC365 208/365 Remote work monitoring software may be tracking more than you realize. Hubstaff, Time Doctor, ActivTrak, and similar tools capture screenshots, track keystrokes, monitor application usage, and sometimes record through webcams. Working from home with company monitoring means your employer can see everything on your work device. Ask your employer what monitoring software runs on company devices and what it captures. #OPSEC365

Every red flag in a toxic relationship is standard operating procedure for the federal government.

#OPSEC365 207/365 Lockheed Martin's Cyber Kill Chain breaks an adversary's progression into seven stages: reconnaissance, weaponization, delivery, exploitation, installation, command and control, actions on objectives. Most people only think about the final stages. By the time you notice, the adversary has been in reconnaissance for weeks. Map your environment at the reconnaissance stage, not after the exploit lands. #OPSEC365

#OPSEC365 206/365 In 1991, P&G suspected a leak to the Wall Street Journal. One grand jury subpoena to Cincinnati Bell swept every call from Cincinnati to WSJ's offices over months. Tens of millions of records came back, none belonging to a named suspect. Grand jury subpoenas for phone records require no probable cause and no narrow targeting. The P&G case was widely reported by mainstream press after journalist outrage forced disclosure.

#OPSEC365 205/365 Your neighbors can tell when your devices are active on WiFi. A neighbor with passive monitoring sees your access point's beacon frames, the rough timing of connected-device activity, and changes in your network footprint as devices come and go. Modern phones randomize their MAC in probe requests and skip broadcasting saved SSIDs, so the phone leaks less than older posts suggest. The access point still gives plenty away. #OPSEC365

#OPSEC365 204/365 Sports betting apps collect extensive financial and behavioral data. DraftKings, FanDuel, and state gambling apps require identity verification including SSN, track your betting patterns, and retain detailed financial records. This data reveals your income level, risk tolerance, and potentially problematic behavior patterns. State gambling regulators share player data with law enforcement. The financial records are subpoenable. #OPSEC365

#OPSEC365 203/365 Wedding websites broadcast personal details to anyone who finds them. The Knot, Zola, and personal wedding sites include full names, dates, venues, registries linking to home addresses, and often how the couple met. These sites are indexed by search engines and rarely secured with passwords. The full names, venues, and registries stay publicly searchable for years. #OPSEC365

#OPSEC365 202/365 In 1980 a Los Alamos scientist visited a Chinese institute. He deflected classified questions for hours. They threw a cocktail party in his honor: toasts, applause, drinks. After enough rounds he offered an analogy about neutron bomb thresholds. Hadnagy documents this case. The alcohol, the flattery, and the pressure of being toasted each lowered the scientist's threshold one step at a time. Conferences and happy hours are collection environments.