The MOVEit breach has been top of mind, especially with Solar Winds and Colonial Pipeline and log4j and all the others having been so recent.  It is easy to blame the victims.  It is easy to make excuses that nobody can defend against a Zero Day.  There are a lot of easy responses to these kinds of affairs.

But what Allan and Anne Marie Zettlemoyer get into in this episode is a variety of questions around the assumptions:

1. Start with a quick summary of the MOVEit exploit and Clop.
2.  How does this attack compare to SolarWinds?
3. What can we do to prepare for zero-day exploits?
4. Is society (and the business world) getting jaded to ransomware attacks and breaches? Is this affecting their investments in cyber?
5. Is a post-breach CISO really rolling in the assets and resources the way so many assume?
6. What are the long-term implications for a business, its stock prices, and its CISO investment?

This is another episode that strives to get deeper than the surface.  We hope you learn something from it, and we hope you enjoy it as well.  Y'all be good now!

Sponsored by our good friends at Dazz:

Dazz takes the pain out of the cloud remediation process using automation and intelligence to discover, reduce, and fix security issues—lightning fast. Visit Dazz.io/demo and see for yourself.