STOP BLOCKING. START ALLOWLISTING

Summary from the TLDR InfoSec newsletter

There's a lot of software out there. If you're making an ad-hoc decision on every program a user decided to install, you'll never do anything else.