The Changelog: Software Development, Open Source Big breaches (and how to avoid them) (Interview)
Mar 24, 2021
Neil Daswani, a renowned security expert and Co-Director of Stanford's CyberSecurity Program, dives into the world of security breaches. He discusses the six key causes of breaches and highlights infamous cases like Equifax, Capital One, and SolarWinds. The conversation emphasizes the evolution and sophistication of cyber threats, the role of two-factor authentication, and the necessity for proactive security measures in agile development. Daswani also advocates for collaboration between developers and security teams to enhance overall cybersecurity awareness.
AI Snips
Chapters
Books
Transcript
Episode notes
Breach Severity Exceeds Predictions
- Data breaches are increasingly common and severe, exceeding predictions.
- Software vulnerabilities and malware are just two of the root causes.
Gradual Rise of Mega-Breaches
- The rise in mega-breaches isn't sudden but gradual, involving evolving attack vectors.
- Phishing, unencrypted data, third-party compromises, and employee errors play major roles.
Sophistication of Phishing
- Early phishing attempts were easily detectable, but now they're sophisticated.
- Adam Stacoviak describes a recent Google-themed phishing attempt involving Google Forms.
