Week in Review: Google acquires Wiz, water utility improvements, more GitHub attacks
Mar 21, 2025
auto_awesome
Christina Shannon, CIO at KICK Consumer Products, shares her insights on critical cybersecurity trends. She discusses Google's acquisition of Wiz to enhance cloud security and the Senate's push for improved safety in water utilities, emphasizing urgent vulnerabilities. The conversation also delves into securing sensitive data in applications like JIRA and the ethical dilemmas posed by corporate tracking devices. Recent incidents, including a supply chain attack impacting GitHub, highlight the pressing need for robust security measures and community engagement.
Google's $32 billion acquisition of Wiz underscores its strategy to enhance cloud security and compete with AWS and Microsoft Azure.
The Cybersecurity for Rural Water Systems Act aims to significantly improve cybersecurity for water utilities, addressing their critical vulnerability in public infrastructure.
Deep dives
Google's Strategic Acquisition of Wiz
Google's acquisition of cybersecurity firm Wiz for $32 billion highlights its intent to bolster its position in the competitive cloud market, particularly amid rapid advancements in AI. This move is seen as a strategy to increase market share against established players like AWS and Microsoft Azure, as Wiz's technology can enhance Google Cloud's security offerings. The deal includes a significant termination fee, allowing Wiz to operate independently if the acquisition faces delays, reflecting the high stakes involved. As the landscape of cloud computing evolves, integrating Wiz's capabilities could provide Google a competitive edge and attract more customers.
Cybersecurity Legislation for Water Utilities
A new Senate bill, the Cybersecurity for Rural Water Systems Act, aims to improve cybersecurity protections for water utilities, which are often overlooked despite their critical role in public infrastructure. Presenting a pressing need for enhanced security measures, current data reveals that only 20% of these systems in the U.S. have basic cyber protections in place. The legislation seeks to update existing programs and may lead to public-private partnerships, ensuring a safer and more resilient water supply. Advocates see this bill's potential as foundational for public safety, emphasizing the necessity of safeguarding such vital resources against cyber threats.
Threats Posed by Hellcat's Cyber Attacks
The Hellcat threat group has launched a series of cyber attacks, notably targeting the Jira ticketing systems of various telecommunications providers, including a confirmed breach at ASCOM. Utilizing compromised credentials, Hellcat's attacks have exposed sensitive project information and source code, making it imperative for organizations using Jira to secure their systems. Recommendations for enhancing security include implementing multi-factor authentication and properly segmenting the Jira environment from other sensitive infrastructures. As Jira continues to be a target, the need for increased awareness and robust security measures among its user base is critical.
Data brokers bypass online safety measures to sell your name, address, and social security number to scammers.DeleteMe scours the web to find – and remove – your private information before it gets into the wrong hands by scanning for exposed information, and completing opt-outs and removals. With over 100 Million personal listings removed, DeleteMe is your trusted privacy solution for online safety.Get 20% off your DeleteMe plan when you go to JoinDeleteMe.com/CISO and use promo code CISO at checkout.
All links and the video of this episode can be found on CISO Series.com
Get the Snipd podcast app
Unlock the knowledge in podcasts with the podcast player of the future.
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode
Save any moment
Hear something you like? Tap your headphones to save it with AI-generated key takeaways
Share & Export
Send highlights to Twitter, WhatsApp or export them to Notion, Readwise & more
AI-powered podcast player
Listen to all your favourite podcasts with AI-powered features
Discover highlights
Listen to the best highlights from the podcasts you love and dive into the full episode