To Err Is Human, but the Blockchain Is Forever – ESW #260
One of the key features of cryptocurrency, NFTs, and other blockchain-based technologies is the immutable ledger. Put another way, there's no clear way to implement an 'undo' button when it comes to blockchain. In more traditional situations, passwords can be reset. Financial institutions can issue a stop payment order.
The call for papers is now open for InfoSec World 2022! Featuring expert insights, enlightening keynotes, and interactive breakout sessions, this year's conference will take place on September 26-28 in Orlando. We're looking for experts and innovators to contribute their ideas, experiences, and perspectives to help shape the 2022 program. To submit your proposal, please visit: https://securityweekly.com/isw2022
The State of Identity in the Enterprise – Branden Williams – ESW #260
We discuss the current state of identity challenges in the enterprise with Branden Williams.
Dr. Branden R. Williams has nearly twenty-five years of experience in business, technology, and cybersecurity as a consultant, strategist, and executive. Dr. Williams has experience working for the largest and smallest institutions as an entrepreneur, practitioner, and advisor. His specialty is navigating complex landscapes—be it compliance, security, technology, or business—and finding innovative solutions that promote growth while reducing risk. He is a practitioner and advisor for operational, engineering, and management of IT and IS tools. He’s held several executive roles in the industry, and served on both the PCICo and EMVCo boards. He is an author of several books on PCI Compliance, and his blog and other publications can be found at his website (brandenwilliams.com).
Don't miss any of your favorite Security Weekly content! Visit https://securityweekly.com/subscribe to subscribe to any of our podcast feeds and have all new episodes downloaded right to your phone! You can also join our mailing list, Discord server, and follow us on social media & our streaming platforms!
Glyptodons, Mandiant Rumors, Virtual CISOs, Log4j Testimony, & A Cyber Safety Board – ESW #260
Finally, in the Enterprise Security News, Security automation startup Cerby raises $12M, Virtual CISO startup Cynomi raises 3.5M to help SMBs automate cybersecurity, Keeper Security acquires Glyptodon (I’m 90% certain Keeper hasn’t just purchased the remains of an ancient, long-extinct armadillo), SecurityScorecard acquires LIFARS, a DFIR consulting firm, There’s a rumor that Microsoft is considering picking up Mandiant with all the extra cash still laying around after the Activision/Blizzard buy, & DHS launches the first-ever cyber safety review board!
Don't forget to check out our library of on-demand webcasts & technical trainings at securityweekly.com/ondemand.
We're always looking for great guests for all of the Security Weekly shows! Submit your suggestions by visiting https://securityweekly.com/guests and completing the form!
Adrian Sanabria
- FUNDING: Security automation startup Cerby raises $12M to secure non-IT-managed apps
- FUNDING: Virtual CISO startup Cynomi raises $3.5M to help SMBs automate cybersecurity – TechCrunch
- ACQUISITION: Keeper Security acquires Glyptodon to enhance privileged access management platform
- ACQUISITION: SecurityScorecard Acquires LIFARS; Empowers Organizations with a Complete View of Cyber Risk and an Accelerated Path to Cyber Resilience
- RUMOR: Microsoft Considers Pursuing a Deal for Cybersecurity Firm Mandiant
- STATS: CYBERSECURITY ALMANACThe annual Cybersecurity Almanac is always a _momentous_ occasion, and never more so than this year, with 2021 numbers being completely bonkers. The most interesting statement to me? "Investment In Cyber Is Keeping Pace With Threats" If our "investment in Cyber" was doing any good, wouldn't you expect the investment to _outpace_ the threats? With threats and breaches keeping pace, I think it's as clear as ever that cybersecurity isn't a problem we can simply spend our way out of.
- FEDERAL: Cisco’s Chief Security and Trust Officer Testifies About Log4JBrad Arkin, Cisco's CISO (CSTO?) had a chance to testify before congress regarding Cisco's performance addressing Log4j vulnerabilities, and the general impact to the industry. This Twitter thread is well worth a read-through.
- FEDERAL: DHS Launches First-Ever Cyber Safety Review Boardhttps://www.dhs.gov/news/2022/02/03/dhs-launches-first-ever-cyber-safety-review-board
- SQUIRREL: Florida man steals car; train sends it crashing into houseThe homeowners were fine, but “the explosive sound of a driverless car smashing into the side of their home was clearly jolting,” the sheriff’s office said.
