View More ESW Episodes

Cybersecurity has too many distractions and can the White House fix BGP? – Harish Peri, Harry Wilson, Darren Guccione – ESW #375

This week, in the enterprise security news, Cribl, Zafran, and US states raise funding, Cisco, Check Point, Salesforce, and Absolute Software acquire cybersecurity startups, AI Security products are picking up steam, You probably shouldn’t be too worried about Yubikey cloning, Instead, you should be more worried about malicious npm packages!, The White House wants to fix BGP, SolarWinds has shady stuff in its source code, AGAIN, The challenge of bringing security to small business, Scams are getting quicker and more effective, how not to run a phishing test, and AI assistants rickroll paying customers!. We are a month away from Oktane -- the biggest identity event of the year. Okta is bringi...

This episode is sponsored by
Full Show Notes
Segment One

Cybersecurity has too many distractions and can the White House fix BGP? – ESW #375

This week, in the enterprise security news,

  1. Cribl, Zafran, and US states raise funding
  2. Cisco, Check Point, Salesforce, and Absolute Software acquire cybersecurity startups
  3. AI Security products are picking up steam
  4. You probably shouldn’t be too worried about Yubikey cloning
  5. Instead, you should be more worried about malicious npm packages!
  6. The White House wants to fix BGP
  7. SolarWinds has shady stuff in its source code, AGAIN
  8. The challenge of bringing security to small business
  9. Scams are getting quicker and more effective
  10. how not to run a phishing test
  11. and AI assistants rickroll paying customers!
List of Articles

Adrian Sanabria

  1. FUNDINGS: Cribl, Zafran, and US States (wut?) raise funding

    This week's fundings:

  2. ACQUISITIONS: Cisco/Robust Intelligence, Check Point/Cyberint, Salesforce/Own, Absolute/Syxsense

    This week's acquisitions:

  3. NEW PRODUCTS: Prompt Security helps organizations monitor data shared with Microsoft 365 Copilot – Help Net Security
  4. NEW PRODUCTS: Wiz moves into securing CI/CD pipelines

    As mentioned by Tyler on the show

  5. ATTACKS: YubiKeys are vulnerable to cloning attacks thanks to newly discovered side channel

    The attacks require about $11,000 worth of equipment and a sophisticated understanding of electrical and cryptographic engineering. The difficulty of the attack means it would likely be carried out only by nation-states or other entities with comparable resources and then only in highly targeted scenarios. The likelihood of such an attack being used widely in the wild is extremely low. Roche said that two-factor-authentication and one-time password functionalities aren't affected: because they don't use the vulnerable part of the library.

  6. ATTACKS: Malicious npm Packages Mimicking ‘noblox.js’ Compromise Roblox Developers’ Systems
  7. INTERNET WORLD POLICE: White House publishes roadmap to secure internet routing
  8. VULNS: SolarWinds left hardcoded credentials in helpdesk product
  9. REPORTS: TL;DR: Every AI Talk from BSidesLV, Black Hat, and DEF CON 2024
  10. ESSAYS: Lifting the world out of the cybersecurity poverty

    As Darwin mentioned during the podcast - Bitdefender's Security for Content Creators

  11. TRENDS: Online scam cycles are getting shorter and more effective, Chainalysis finds
  12. WHOOPSIES: Uni phishing test based on fake Ebola scare prompts apology
  13. SQUIRREL: Lindy, a commercial AI assistant, rickrolls its customers
Segment Two

Oktane 2024 and the Current State of Identity Security – Harish Peri – ESW #375

We are a month away from Oktane -- the biggest identity event of the year. Okta is bringing thousands of identity industry thought leaders, IT and security executives, and other tech leaders together on October 15-17 to discuss the changing landscape for security and identity, how organizations are putting identity first, new Okta products, and more. Harish Peri, Senior Vice President of Product Marketing, joins Enterprise Security Weekly to discuss what people should expect from Oktane this year, the conversations that will take place at the event and why it’s important for security professionals to attend/tune in.

This segment is sponsored by Oktane. Visit https://securityweekly.com/oktane2024 and use discount code OKTNSC24 to pay only $100 for your full conference pass!

Guest
Senior Vice President of Product Marketing at Okta

Harish Peri is the Senior Vice President of Product Marketing at Okta, where he is responsible for messaging, product positioning, launches and helping evangelize Okta to the industry. He has over 20 years of experience leading teams and organizations across various industries and functions ranging from engineering to product management.

Segment Three

Cybersecurity at the speed of Formula One – Darren Guccione, Harry Wilson – ESW #375

Ever wondered what it's like to be responsible for the cybersecurity of a sports team? How about when that sports team is one of the world's most successful Formula One teams? I can't describe how excited we are to share this interview. This interview is basically two huge F1 nerds who happen to also be cybersecurity veterans asking everything they've always wanted to know about what it takes to secure an F1 team.

For the folks out there that aren't familiar with this sport, Formula One is arguably the fastest, most watched, and most international automotive racing sport today. In the 2024 season, the racing series will feature ten teams traveling to 24 race tracks located in 21 different countries. Also, did you know that only two countries get more than one race? Italy gets to host two Grand Prix, and the United States gets to host three.

A HUGE thanks to Keeper Security and Darren Guccione for making this interview possible. This isn't a sponsored interview, but it was Keeper's PR team that pitched the idea for this interview to us, and as F1 fans, we're super grateful they did!

Segment Resources:

Guests
CEO and Co-Founder at Keeper Security

Darren Guccione is the co-founder and CEO of Keeper Security, a leading provider of cloud-based zero-trust and zero-knowledge cybersecurity software designed to protect passwords, passkeys, secrets, connections and privileged access.

Head of Information Security at Williams Racing

Harry is the Head of Information Security at Williams Grand Prix Engineering. He is responsible for the design, build and operation of the cybersecurity programme covering the Williams Formula 1 and E-sports teams as well as the Williams heritage department and e-commerce platform.

Before joining Williams, Harry was the Group IT Director at a global retail and manufacturing company.

Show More

Stay in the Know, No Smoke and Mirrors – Join Our Newsletter

Get expert insights and technical breakdowns straight to your inbox.
Join Now

Related Episodes

Related Content

You can skip this ad in 5 seconds