Lessons From the Last Year's Breaches, ISW Interviews - ESW #334

Oct 6, 2023

Valuable lessons from recent breaches including Microsoft AI Research Data Leak, Riot Games, and Lastpass. Discussion on the future of security data wrangling. Comparison of email security between Google and Microsoft. Challenges of managing multiple cybersecurity tools. Misconceptions and challenges of implementing zero trust.

Ask episode

Chapters

Transcript

Episode notes

Introduction

00:00 • 3min

Casual Conversation, Announcement, and Discussion on Breaches

03:03 • 3min

The Importance of the Defenders Initiative and Learning from Breaches

05:42 • 21min

Challenges and Concerns of Running Mail Servers

26:53 • 22min

Staying Informed About Data Breaches and Security Threats

48:48 • 5min

Nord Security's Expansion and Challenges

54:10 • 6min

The Growing Demand for Better Authentication Methods

59:46 • 10min

Upcoming eBPF Documentary and Discussion of Its Power and Limitations

01:09:40 • 2min

Cybersecurity Companies and Mismanagement

01:12:04 • 8min

The Challenges of Managing Multiple Cybersecurity Tools

01:19:56 • 23min

Comparison of Pen Testers, Auditors, and Automation Platforms

01:42:39 • 4min

Volkswagen: Cheating in Code Tests

01:46:39 • 8min

Avi's Solutions for Security and Threat Management

01:54:33 • 28min

Misconceptions and Implementation Challenges of Zero Trust

02:22:53 • 14min

In this segment, we'll explore some of the most useful lessons and interesting insights to come out of the last year's worth of breaches and data leaks! We'll explain why we will NOT be covering MGM in this segment. The breaches we will be covering include:

- Microsoft AI Research Data Leak - Microsoft/Storm-0558 - CommutAir - Riot Games - Lastpass - CircleCI - RackSpace - Drizly (yes, this breach is older, but the full story just wrapped a year ago!)

On this week's news segment, we go down a bit of a rabbit hole on data lakes and have a GREAT conversation about where security data wrangling might or might not go in the future. We also discuss Nord Security's funding and $3B valuation, try to figure out what Synqly is doing, and discuss IronNet's demise.

We also find out which email solution is more secure (at least, according to insurance claim data), Google or Microsoft!

We wrap up, learning that forms of CAPTCHAs are apparently broken now, $3800 gets you a gaming PC in the shape of a sneaker, and someone has created the DevOps equivalent of dieselgate!

Each employee serves as a potential gateway to their organization, and the personal information of your workforce is readily accessible and exposed on the internet, making the organization susceptible to threats. DeleteMe is the solution that locates and eliminates personal data from the open web, safeguarding your organization.

This segment is sponsored by DeleteMe.

Visit https://www.securityweekly.com/deletemeisw to learn more about them!

With all of the fancy tools, equipment, and logos most organizations are unable to understand where their data is and how it can be accessed. In the world of work from wherever and whenever orgs need a better handle on what this means. Ridge has worked to curate a set of solutions to meet and implement this need!

This segment is sponsored by Ridge IT Cyber.

Visit https://www.securityweekly.com/ridgeitisw to learn more about them!

Why are we seeing a re-emergence of the demand for packet and flow-based forensic data in cloud environments? In this session, we’ll discuss three reasons why IT leaders still need the same if not even better visibility in the cloud than they have in their data centers.

We’ll also discuss the growing demand for Threat Exposure Management (TEM). Why does a leading analyst describe this as a transformation technology and how can you quickly visualize your environment the way the attackers do?

Segment Resources: https://www.viavisolutions.com/en-us/ptv/solutions/threat-exposure-management

https://www.viavisolutions.com/en-us/ptv/solutions/high-fidelity-threat-forensics-remediation

This segment is sponsored by VIAVI Solutions.

Visit https://www.securityweekly.com/viaviisw to learn more about them!

Visit https://www.securityweekly.com/esw for all the latest episodes!

Like us on Facebook: https://www.facebook.com/secweekly