Thanks man, that’s some solid advice even if my work is a lot more pliable for security. I’d also say that compliance and risk are very good motivation, if you can nmap the servers and SSH in with default credentials and zero alarms during, that could cost millions in data loss, compliance fines, and recovery efforts. Show them solid figures and it’s a hell of a motivator.
Not to mention, “You won’t believe this one cool thing!” type headlines (like this one) are classic clickbaiting, and nobody wants to read a 10 page article that’s basically just advertising.