New Year, Same Security Problems – Kris Lahiri – ESW #256
It’s a new year and a time when we make resolutions…which often drop off by the start of February. To keep your security resolutions for 2022, today’s show will be about enterprise security pitfalls and the areas corporations should focus on when planning their cybersecurity strategy for the year. Topics will include proper data hygiene; ransomware prevention and recovery techniques; challenges in securing a distributed workforce and the changing role of IT and containing data sprawl. We’re looking forward to keeping you informed throughout 2022!
Kris is a co-founder of Egnyte. He is responsible for creating and implementing Egnyte’s global information security and compliance management strategies, policies and controls that protect all of Egnyte’s customers’ content and users. Prior to Egnyte, Kris spent many years in the design and deployment of large-scale infrastructures for Fortune 100 customers of Valdero and KPMG Consulting. Kris has a B.Tech in Engineering from the Indian Institute of Technology, Banaras, and an MS from the University of Cincinnati.
We're always looking for great guests for all of the Security Weekly shows! Submit your suggestions by visiting https://securityweekly.com/guests and completing the form!
A Look Back at the Most Active Year in Federal Cybersecurity Ever – Derek Johnson – ESW #256
2021 was the most active year in federal cybersecurity policy. Ever. The Biden administration used executive orders, new regulations, public/private partnerships and novel law enforcement strategies to shore up federal systems and engage with industry. Meanwhile, an otherwise active year in Congress took a hit when several major pieces of legislation like incident reporting mandates and federal cybersecurity reform were left of the NDAA. SC Media government reporter Derek B. Johnson will discuss what came out last year's flurry and what we can expect Congress to prioritize in 2022.
Segment Resources:
https://www.scworld.com/feature/policy/every-month-has-been-cybersecurity-awareness-month-for-the-biden-administration
Derek covers the federal government and its intersection with critical infrastructure and the private sector for SC Media. Prior to that he spent three years covering the intersection of cybersecurity policy and government for FCW.
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.
Israeli CyberSec Drama, Microsoft’s Security Chip, Best Job of 2022, & “YAU”s – ESW #256
In the Enterprise Security News for this week: Pentera announces a $150m Series C - YAU (Yet Another Unicorn), Herjavec Group merges with Fishtech, Google acquires SOAR vendor SIEMplify, A European grocery store buys BAS vendor XM Cyber, Flashpoint acquires vuln intel vendor Risk Based Security, Recorded Future acquires SecurityTrails, Drama in the Israeli cybersecurity news, Security, Analyst is the #1 best job of 2022, Microsoft to start rolling out its own hardware security chip, & Some annoying words get banned!
Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!
We had an absolute blast putting together this year's SW Unlocked virtual event! All presentations are now available on-demand for your viewing pleasure. Please visit https://securityweekly.com/unlocked to register and watch now!
Adrian Sanabria
- FUNDING: Pentera Announces $150M Series C at $1 Billion Valuation to Disrupt Legacy Vulnerability Management MarketPentera is either the most metal ballpoint EVER, or someone created a company name by combining pen testing with Pantera (RIP Dimebag). This is an interesting trend though. We all knew point-in-time testing wasn't ideal. If you need to lean on a pen testing firm to catch stuff you're missing, you probably need to lean more than once or twice a year...
- FUNDING: Eureka raises $8M for its data cloud security platform – TechCrunch
- MERGER: Shark Tank Star Joins Forces with Cybersecurity Visionary to Form New Industry PowerhouseHerjavec Group and Fishtech combine - Gary Fish's second big merger (Accuvant + Fishnet = Optiv was his first) seems solid on paper. Both founders remain on with significant stakes (CEO and Chairman, respectively). One US-based, one in Canada. Looks like Herjavec group was acquired by a PE firm about a year ago (Apex Funds), which also fits the mold - Blackstone engineered the Optiv deal, which seems like it would have been much larger than this one.
- ACQUISITION: Google Acquisition Of Siemplify Is A Knockout Punch For Standalone SOAR
- ACQUISITION: EU retail giant Schwarz Group snags security startup XM Cyber for $700 million – TechCrunchThis is an interesting one. We've seen some interesting acquisitions over the past few years. Acquisition by an organization best known for its chain of grocery stores is not the typical cybersecurity exit. Once you start digging into it, it starts to make sense. This company has a number of subsidiaries and has centralized many core business functions, including IT. They also make investments, so the XM Cyber acquisition ticks two boxes: Schwarz adds a high-growth investment to its portfolio, and gets preferred pricing (and maybe roadmap placement) for other Schwarz Group companies.
- ACQUISITION: Flashpoint Acquires Vulnerability Intelligence Leader Risk Based SecurityAnother bootstrapped security company gets acquired! RBS is most notably, the home of VulnDB - one of the most comprehensive vulnerability databases in the industry, boasting tens of thousands more vulns than MITRE's CVE.
- ACQUISITION: Google enters agreement to acquire Actifio
- ACQUISITION: Recorded Future Acquires SecurityTrailsAttack surface management is heating up! We're approaching half a dozen companies acquired in this area and there are still plenty more to go! $65m for a bootstrapped company? I'd take it.
- DRAMA: “If Wiz is worth $6 billion, Palo Alto is worth more than a trillion”https://www.calcalistech.com/ctech/articles/0,7340,L-3925876,00.html
- MORE DRAMA: How did Noname Security become a Unicorn making $5 million a year?
- ANALYSIS: The Security Obstructionism (SecObs) Market
- SUPPLY CHAIN – Dev corrupts NPM libs ‘colors’ and ‘faker’ breaking thousands of appsA developer of a few popular NPM libraries was upset about a general unwillingness to pay for free software by heavily funded startups and chose to sabotage his own stuff to... teach everyone a lesson? There's a thin line between idealism and extortion here that's worth discussing. Ideally, sure - profitable companies should donate to open source libraries that helped them build products, grow quickly, and become profitable (whether that's actual profits, or repeat rounds of investment). On the other hand, how upset can you be if you create free software and no one pays for it? Another factor here is that the author tried creating a SaaS/PaaS service out of one of his projects and one company simply copied it (which was completely legal, given the license he was using).
- TRENDS: Israel’s cybersecurity startups post another record year in 2021 – TechCrunch
- TRENDS: U.S. News Announces the 2022 Best Jobs#1 on the list: Security Analyst! (yaaay, we're number one) (wait, is that a good thing?)
- TRENDS: CES 2022: Chip to cloud security: Pluton-powered Windows 11 PCs are comingPluton is effectively a TPM, but Microsoft is partnering with chip manufactures to bake it into the CPU, as I understand it. A good move in terms of design, considering we've seen some fairly straightforward attacks succeed in stealing secrets from a TPM by tapping the bus it traveled on towards the CPU. Overall, totally makes sense, given that Windows 11 now requires a TPM - something Apple has been doing for a while with their Macs and mobile devices.
- TRENDS: BlackBerry Die-Hards Struggle With Final BlowEnd of an age.
- TRENDS: FBI: FIN7 hackers target US companies with BadUSB devices to install ransomwareI'm not sure if attackers changing up tactics is a good sign or a bad one. Whichever the case, they're now sending USB devices similar to the HAK5 rubber ducky - it shows up as a keyboard when you plug it in, and proceeds to execute pre-programed keystrokes to do something nasty. In this case - download and install ransomware.
- TRENDS: Salesforce to require MFA for all users starting next monthSome might call it a bit late, but Salesforce requiring MFA for all users is a significant move that could encourage others to follow suit.
- TRENDS: Chrome will limit access to private networks, citing security reasons
This will go smoothly. Brave already does this, and it's annoying there also. - TOOLS: Simple CSPMA CSPM that's also a spreadsheet???
- TOOLS: T-Pot – a meta honeypot toolT-Pot effectively combines a wide variety of other honeypots, all into one meta tool. Kinda like the Security Onion of deception.
- SQUIRREL: Liquid Death lands $75M more to expand the brand – TechCrunchThe latest startup to use shock marketing to promote its brand raises a significant round. "Murder your thirst" is their tagline. One customer posted a video each day, of him drinking the product, for a year. The CEO and founder responded by getting a tattoo of the customer's FACE on his ARM. These hijinks got me interested in the VC and other companies they've founded. One that caught my eye is Lambs - a company that makes clothing that proposes to make you healthier by blocking the radiation from Bluetooth, Wi-Fi, and 5g signals. It also claims to improve your sleep, increase "HRV", reduce brain fog, and give you clearer, healthier skin. That's a pretty fancy t-shirt. They even give the name "Faraday" to much of their clothing line. Guess how much you have to pay to buy a Faraday T-Shirt.
- SQUIRREL: Banished Words List Year – Lake Superior State University
