DrZeroTrust

I discussed various topics related to #cybersecurity, including CISA's new international cyber security plan, the appointment of a new CISO at UnitedHealthcare, the progress of federal agencies in implementing #zerotrust, and the evolving landscape of hacking influenced by #AI. The discussion also touches on a serious hacking incident involving The Walt Disney Company and food safety, insights into hacker motivations, and the vulnerabilities present in critical infrastructure. I really emphasized the need for effective leadership and actionable solutions to address these pressing cybersecurity challenges. #drzerotrust #happyhalloween

Takeaways

CISA's international cyber security plan aims to enhance global cooperation.

UnitedHealthcare's new CISO faces significant challenges post-ransomware attack.

Federal agencies are making progress on Zero Trust implementation.

AI is changing the hacking landscape, making it more accessible.

A former Disney employee's hacking incident raises serious food safety concerns.

Insights from hackers reveal motivations beyond financial gain.

Critical infrastructure vulnerabilities are alarmingly prevalent.

Effective leadership is crucial for solving cybersecurity issues.

Simple fixes can prevent major security breaches.

The conversation highlights the importance of proactive cybersecurity measures.

In this conversation, I discuss the ineffectiveness of compliance violations and fines in changing corporate behavior regarding cybersecurity. I present data showing that fines are often negligible compared to company revenues, making them merely a cost of doing business. I argue for a reevaluation of negligence in cybersecurity and emphasizes the need for accountability, suggesting that without significant consequences, organizations will continue to prioritize profit over security.

Takeaways

Compliance violations are often seen as a cost of doing business.

Fines do not significantly impact large corporations' revenues.

Cyber insurance can offset the costs of compliance violations.

Statistically, companies often see stock price increases after breaches.

The current compliance framework does not enforce real change.

Negligence in cybersecurity needs a clearer legal definition.

Fines for violations should be more substantial to deter negligence.

Government organizations often escape penalties for breaches.

The data suggests a need for a shift in accountability measures.

Compliance does not equate to actual security improvements.

In this conversation, I discuss various cybersecurity incidents and trends affecting organizations, including CrowdStrike's stock performance, foreign influence in U.S. elections, cybersecurity failures at Sellafield, and the impact of cyber incidents on critical infrastructure. The conversation also covers recent breaches at ADT and American Waterworks, challenges in healthcare cybersecurity, and T-Mobile's compliance issues. Throughout, I emphasizes the importance of robust cybersecurity measures and the ongoing threats faced by organizations.

CrowdStrike's stock has seen a resurgence after a breach.

Foreign actors are actively trying to influence U.S. elections.

Sellafield's cybersecurity failures have resulted in significant fines.

Cybersecurity incidents in critical infrastructure lead to financial losses.

Chinese hackers have targeted U.S. telecom companies for intelligence.

ADT has experienced multiple breaches in a short time frame.

American Waterworks reported unauthorized activity in its systems.

Healthcare organizations are struggling with cybersecurity preparedness.

MoneyGram faced a cybersecurity issue affecting customer data.

T-Mobile is under pressure to improve its cybersecurity measures.

Den Jones talks about why he is launching 909 Cyber for smb's and other businesses. He and I chat about how to address critical strategic shortfalls for organizations and he runs us through how he put Zero Trust in place while at Adobe! Don't miss this one!

In this conversation, I discuss various topics including music licensing, the recent school shooting in Georgia, the impact of cyber security breaches on corporate reputation, the glitch in Chase Bank ATMs, the warning from Warren Buffett about cyber insurance losses, Chinese hackers exploiting software bugs, the launch of a cyber incident reporting portal by CISA, a bipartisan bill to strengthen healthcare cybersecurity, and a judge granting a request to suppress a cyber expert's efforts to warn the public.

In this podcast episode, DrZeroTrust discusses various cybersecurity topics, including a partnership between G2 and security vendors, a cryptocurrency scam that led to the collapse of a Kansas bank, weaknesses in the FBI's cybersecurity practices, a breach at National Public Data, the state of phishing training, the use of AI chatbots by police officers, new cybersecurity rules proposed by the FAA, a lawsuit against Georgia Tech over cybersecurity failures, and allegations that the Biden administration pressured Meta (formerly Facebook) to censor COVID-19 content. DrZeroTrust emphasizes the importance of contributing to the cybersecurity community and encourages individuals to think critically and conduct their own research.

In this conversation, I discuss various topics including the US Army's failed $11 million marketing deal with the UFL and Dwayne 'The Rock' Johnson, the state of ransomware in state and local government organizations, the Mimecast Global Threat Intelligence Report, the reliance on a few tech companies for critical aspects of the economy, the need for campaigns to report cyber breaches, the vulnerabilities in open source software, and the findings from the IBM Cost of a Data Breach Report.