The Wall Street Journal: Public Officials Separate Workplace and Personal Online Lives. Hackers Don’t Care.
The Wall Street Journal featured insights from NetSPI Field CISO Nabil Hannan on the need for prominent officials to use secure practices when using apps in both their work and personal lives. Read the preview below or view it online.
+ + +
Some government officials have defended their use of commercial apps, including Gmail and X, by drawing a line between their professional and personal online activity. But for hackers, there are no such boundaries.
Today, a high-ranking government of corporate official’s Instagram post, tweet or email can be the weakest link in even the most comprehensive cybersecurity systems, said Nabil Hannan, chief information security officer at cybersecurity firm NetSPI.
“Their lives are inherently intertwined through shared devices, calendars and contacts,” Hannan said. Many use the same devices for both purposes, erasing divisions and expanding the attack surface, he said, adding: “This overlap creates vulnerabilities, as breaches in their personal accounts can directly affect professional assets or systems.”
You can read the full story here.
Authors:
Explore More News
Why Continuous Security Validation is Becoming a Security Imperative
CTO Magazine interviewed NetSPI's Field CISO, Nabil Hannan, for a June 11, 2026, article about how cloud-native architectures, continuous deployment pipelines, APIs, and AI-assisted development have accelerated change across enterprise environments.
Canvas breach puts global education cyber risk in focus
ITBrief interviewed NetSPI's Field CISO, Nabil Hannan, for a May 24, 2026 article about a major data breach in Instructure's Canvas learning management system disrupting final exams at universities.
Microsoft is working on a patch for ‘YellowKey’ attack on BitLocker, offers temporary fix
CSO Online interviewed NetSPI's VP of Research, Karl Fosaaen, for a May 20, 2026 article about how Microsoft is working on a patch for a zero-day vulnerability dubbed "YellowKey" (CVE-2026-45585).