Bee2FireDetection was covered on Marketplace Morning Report on 7/29/2019. They do provide technology to forecast, detect, and predict massive fires. Let’s look at their approach to see what gaps exist in today’s security incident response techniques.
Watch more videos on my YouTube channel.
Using Zoom as an example, let’s talk about the challenges of vulnerability management and patch management when one product is bundled with another.
Watch more videos on my YouTube channel.
New research shows cloud apps are climbing, SMS authentication is falling, Chrome is the enterprise browser favorite, and Android leads outdated devices.
Excerpt from: OS, Authentication, Browser & Cloud Trends
Application integration is up across most key categories. The number of customers per cloud app is up 189% year-over-year, and the number of authentications per customer per app is up 56%.
The massive spike in cloud applications means any given employee has at least two or three cloud apps they use to do their jobs, says Wolfgang Goerlich, advisory CISO for Duo Security. “It was a big explosion of shadow IT,” he adds. “It really got away from a lot of the organizations.” Some people often use the same applications for personal and business use, driving the need for businesses to enforce their security policies for cloud-based applications and resources.
Read the full article: https://www.darkreading.com/cloud/security-snapshot-os-authentication-browser-and-cloud-trends/d/d-id/1335262
IT history repeats itself.
The organization moves slow to provide employees with tools and technology. Consumer tech fills in the gap outside of the office. People get savvier and more experienced with tech. People innovate with what they know, to get done what they need to get done.
The organization notices people doing things in an innovative yet ad hoc way. Work is done to standardize tech use. More work is done to secure the tech use. The wild ways of people, the wilderness of shadow IT, is tamed and brought into the light.
We’re at this point now. That’s what the numbers show. But tamed IT is slower than shadow IT. If the past has taught us anything, it is that the cycle will repeat.
This post is an excerpt from a press article. To see other media mentions and press coverage, click to view the Media page or the News category.
Two months after BlueKeep, the Windows RDP vulnerability, there are still some 800,000 affected computers on the Internet. That’s according to BitSight’s analysis in July. So how do we handle 0-days and unpatched vulnerabilities?
Watch more videos on my YouTube channel.
DevOps is measured by increasing velocity, by change. Security is measured by reducing risk, by stability. Perhaps we need to embed naysayers within stand-ups, pointing out abuse cases for new functionality in use cases. As an example, the “add a line” feature of the Samsung.com website that led to a Sprint breach.
Watch more videos on my YouTube channel.
It was announced this week that the Zoom meeting software had two 0-day vulnerabilities (CVE-2019–13449, CVE-2019–13450). Putting the hype aside, there are three security lessons that apply to most all software.
Watch more videos on my YouTube channel.
Using Ansible and Hashicorp as an example, a discussion on how to get the initial secret to automation tools which use password vaults.
Watch more videos on my YouTube channel.
Software has eaten the world. Buggy software. Exploitable software. Fireworks provide a timely anecdote on the importance of protecting software.
Watch more videos on my YouTube channel.
IT security is about the basics. Say, network segmentation. But the problem with everyday basics? They don’t scale. So what would it take to do micro-segmentation at scale?
Watch more videos on my YouTube channel.
We have a lot of suspicious attachments and files come into our networks. Let’s use these as a resource for training and preparation.
Watch more videos on my YouTube channel.