CyberWire Daily Bypassing Bitlocker encryption.
24 snips
May 15, 2025 Devin Ertel, Chief Information Security Officer at Menlo Security, dives into redefining enterprise security with a focus on zero trust. He reveals alarming vulnerabilities in Chrome and BitLocker encryption that attackers can exploit in moments. The conversation highlights the recent shutdown of a major black market and a cyberespionage effort targeting vulnerable webmail servers. Ertel also discusses the importance of integrating AI and remote browser isolation to enhance cybersecurity measures.
AI Snips
Chapters
Transcript
Episode notes
Menlo's Browser-Based Security
- Menlo Security pioneered remote browser isolation to protect users from malware by executing browsing activities in a cloud browser.
- Since then, they've expanded to workspace security, including isolating applications with fine-grained protections in the browser itself.
Isolate Contractor App Access
- To secure contractors or BYOD users, isolate their access to specific applications within the browser and restrict actions like downloads or uploads.
- This approach eliminates the need for provisioning physical laptops and tightly controls data flow without trusting the endpoint.
AI Enhances Phishing and Data Protection
- AI can detect phishing attempts by analyzing webpage visuals, spotting fakes in real time before categorization is updated.
- AI also helps identify sensitive data like social security numbers and can redact such data in real time to prevent accidental leaks.