DrZeroTrust

MFA/2FA is no good?  What about disinformation and propaganda with covid?  Is your baby's camera vulnerable to the new compromise?  And what do users actually think about going "around" security controls?

John Kindervag, Senior VP at Tuit and the mastermind behind the Zero Trust concept, shares his extensive expertise on modern cybersecurity. He discusses the critical journey of cybersecurity leaders post-breach, emphasizing the urgent need for strong governance. Kindervag introduces a practical five-step approach to implementing Zero Trust, highlighting the importance of aligning cybersecurity with business objectives. He also critiques the misallocation of resources and the necessity for a deeper understanding of data security to combat insider threats and enhance defense mechanisms.

Was Blackhat worth the trip, no.  What happens when you ransom a tractor?  How big is the ZT market?  Another hospital is shut down due to an attack, did patients die?  What about JCDC?

Is ransomware a weapon?  What do we do about these attacks?  What is the task force doing about this?  Do the folks on Capitol Hill get it?  And that one time I got beat up by a bully...

Why does Jeff talk so fast?  What's a solid 10 year prediction if there is such a thing?  How should some of the major problems be solved?  Will we all be unemployed after this podcast?  Those items and more on this episode.

Masks everywhere at Blackhat?  Why does Kaseya have a ransomware decryptor NDA?  Why the lack of MFA in Twitter?  Are we getting better at fixing vulnerable software?  And What is the Ransomware Sheriff?

What is a Zero Trust Overlay Network?  Why do people with British accents sound so smart?  Is Zero Trust achievable with today's digital infrastructure?  More on those topics and other interesting discussions on how to use SDN/SDP and what this all means for security practitioners.

Laws for critical infrastructure security and pipelines? A federal breach notification law?  The US indicts for APT actors for hacking?  An interview with a ransomware operator?  Will NATO's condemnation of APT actions make a difference?

Art from @britive and Martin from @vubiquity talk about how they see access playing a key role in Zero Trust and discuss how they enable focused access controls in an on demand model.

A Congressional bill on Deepfakes?  What about the trend in phishing and ransomware?  Do APT nation state leaders care about our "requirements"?  And what happens when a law firm sues a ransomware gang?