2023 Cybersecurity Trends and Post-RSA Observations – Antonio Sanchez – ESW #317
Antonio Sanchez is Principal Evangelist at Fortra. As a subject matter expert for Fortra’s security portfolio, Antonio helps drive market recognition for the Fortra brand. He joined Fortra from Alert Logic in 2023, where he developed the messaging, positioning, and technical content for the managed detection and response (MDR) business. Alert Logic was acquired by Fortra in 2022.
Antonio has over 20 years in the IT industry focusing on cybersecurity, information management, and disaster recovery solutions to help organizations of all sizes manage threats and improve their security posture. He is a Certified Information Systems Security Professional (CISSP).
Antonio has held various product management, technical sales, and strategic marketing roles with Dell, Forcepoint, and Symantec. At the latter, he was responsible for developing and leading the Competitive Intelligence Program for the core security unit.
Antonio is a life-long learner and skilled at translating complex topics into simple terms. He is also a big supporter of education for underprivileged communities and an active mentor for people from minority groups who are interested in a career in cybersecurity.
- Join us at an upcoming Official Cyber Security Summit in a city near you! This series of one-day, invitation-only, executive level conferences are designed to educate senior cyber professionals on the latest threat landscape. We are pleased to offer our listeners $100 off admission when you use code SecWeek23 to register. Visit securityweekly.com/cybersecuritysummit to learn more and register today!
CISO Avoids Jail, Shares Rise, Steganography, & DEF CON On Large Language Models – ESW #317
- Our teams from Security Weekly and SC Media were onsite at RSA Conference 2023 delivering in-depth reporting, analysis and interviews from the conference. If you were unable to join us in person, or didn't manage to catch our video livestream from Broadcast Alley, you can access all of our RSAC 2023 coverage at https://securityweekly.com/rsac.
Matt Alderman
- FUNDING: Sourcepass Announces $135 MM in Total Funding and Their 7th Acquisition, Proxios
Misleading title - $65M of funding raised, but they shared the total instead. Previous round was $70M, so we're not calling this a Series B or a down round - they're both just "venture rounds".
- FUNDING: BioCatch, the Leading Online Fraud Detection Platform, Welcomes Permira Growth Opportunities as a Significant Shareholder
$40M in secondary market funding for a minority stake
- FUNDING: Token raises $30M to fuel growth and development of biometric authentication wearable
They make a wearable authentication device called a "Token Ring".
Yes, they're very clever. Funny name. Do physical auth tokens really make sense when we all carry a phone, a face, and a fingerprint though? How many 2nd, 3rd, 4th, and 5th factors do we really need?
- FUNDING: HUB Security Raises Up to $16 Million in Growth Investment from The Lind Partners
- ACQUISITIONS: Databricks acquires AI-centric data governance platform Okera
- MARKET TRENDS: CrowdStrike, Fortinet shares rise in broad security tech rally
- NEW FEATURES: Google rolls out passkey support across accounts on all major platforms
Shortly after Apple announces support for passkeys, Google announces it as well. Everyone seems to be beating Google to the punch these days, huh?
- LEGAL: Merck’s Insurers On the Hook in $1.4 Billion NotPetya Attack, Court Says
Does this set a precedent? It took a while, but it looks like the whole "act of war" interpretation has been finally decided. For Merck, at least.
- LEGAL: Ex-Uber security executive gets probation, no jail time for concealing 2016 data breach
A few years probation and 200 hours community service. A lot of CISOs will be relieved, but was it the right result? Were prosecutors overzealous or out-of-line?
- TRENDS: Could Bartenders Close the Growing Tech Skills Gap in Cybersecurity?
TL;DR - maybe we're hiring from the wrong labor pools, or need to realize that all of security's labor needs need not match a single stereotype. It's almost like diversity is a good thing, huh?
- TRENDS: Cybersecurity goes undercover to protect electric grid data
Is it just me, or is it weird they never use the term steganography when describing this? That's what this is, no?
- AI TRENDS: DEF CON to set thousands of hackers loose on LLMs
LLMs are already so accessible, I'm curious if we'll see anything notable coming out of this. It makes more sense to set up these events for things that are more difficult to get access to, like voting machines.
- AI TRENDS: No Business Plan? No Problem. ChatGPT Spawns an Investor Gold Rush in AI
AI Gold Rush. HUGE if true ;)
"No business plan required" <-- it's almost like we didn't learn from the cryptocurrency/blockchain rush...
- AI TOOLS: EVA AI-Relational Database System
The complexity sidestepped here is breathtaking. The AI model simply makes a determination on the video data it's seeing and a simple SQL statement selects from it. Super powerful, and scary, given that we know the ML models reviewing video data are far from perfect.
- ESSAYS: Security’s eternal prioritisation problem
- SCIENCE: VulnU #010: Loneliness Epidemic: When Your Only Friend is Over Your VPN
Matt Johansen's latest edition of his Vulnerable U newsletter focuses on the importance of socialization to overall health.
Adrian's Take: don't be lonely, join us at BlackHat in a few months!!
Resilient Security: Tackling AI-Powered Phishing and Consumer Trends – Brian Kenyon, Deepen Desai, Rhett Dillingham – ESW #317
As Chief Security Officer at Zscaler, Deepen Desai is responsible for running the global security research operations as well as working with the product group to ensure that the Zscaler platform and services are secure.
Brian Kenyon drives corporate strategy at Island as its Chief Strategy Officer and one of the company’s founding members. Brian has also held the role of CSO at Symantec and Blue Coat Systems. He built his early career in technical roles for more than a decade at McAfee where he was Chief Technical Strategist, as well as CTO, and served as chief architect at start-up Foundstone.
Brian is the author of Security Battleground: An Executive Field Manual; Security Sage: Guide to Hardening the Network Infrastructure; and Special Ops: Host and Network Security. He holds a B.A. degree in Finance from Loyola Marymount University.
Rhett leads product management and user experience for Sumo Logic security solutions. With over 20 years of experience building cybersecurity, cloud, and collaboration platforms, he guides the build-out of Sumo Logic’s SaaS analytics platform to delight customers securing and protecting their enterprise against modern threats. Prior to joining Sumo Logic, Rhett held product development leadership roles at Amazon, AMD, JASK, Microsoft, and Rackspace.
