Real CyberSecurity

Bill educates us on satellite and control systems vulnerabilities, and we go philosophical on information theory. Sorry about the sound on one channel.

This episode we answer the question "what is the state of zero trust?", and discuss the Twitter drama, Bill's recent talk in Santa Clara on automotive cybersecurity, and what the fudge is 5.5G (spoiler - not a real thing).

Bill and Greg present their top 6 issues you'll likely come across in cybersecurity in 2023. 3 are business related, and 3 are techie.  

Recent hacks of well known tech firms bring us some lessons learned. The biggest lesson is that creating a security debt often doesn't work out.  Maybe a big part of our security staff shortage is we're producing the wrong kinds of security leaders, and good leaders won't go into bad security companies.

In the second half we discuss the several roles of machine learning we see today in security.

Bill gives the OneDrive screwdriver a 1 star review as a backup hammer. We discuss how this shows that consumer and enterprise security tools are different, and being good for one does not mean naturally it is good as the other - it takes a conscious effort. This leads to how moving to new buying centers takes a conscious effort, and even more so when the buying center isn't adjacent. How small and midsize companies' cybersecurity is so unique.

Bill and Greg report on what Bill saw at AWS ReInvent, and what they've heard from Black Hat/DEFCON (spoiler - nothing earth shattering). The security nonsense continues in the cryptocurrency world. Greg talsk why Continuous Assessment is the most important trend.

ICS security course tales, hacking factories, the current state sponsored landscape.

The Real CyberSecurity podcast talks suspected state-sponsored eavesdropping using equipment providers,  famous incidents involving tampered devices in embassies.

Privacy and cybersecurity seem to be diverging and that has to stop.

And how awesome the cybersecurity vibe in the US Northeast.

Bill and Greg discuss why even though blockchains have great inherent security, the businesses and applications that are using them for cryptocurrency are not. They then explore why we are planning now for Quantum Crypto, and what "Quantum Safe" means.

Bill gives a post event report on the RSA Conference.