Rising Threat of Russia’s Cyber Warfare with Mikko Hypponen https://www.youtube.com/watch?v=E6OvLbAHM6s Rising Threat of Russia’s Cyber Warfare with Mikko Hypponen The Cybersecurity Vault — episode 35 Some of the most aggressive cyber attacks originate out of Russia. The 2022 invasion of Ukraine was a pivotal moment for nation state attacks. Mikko is close to the front lines and one of the best sources of current research and perspectives. Listen to his pragmatic insights…
YouTube's Deepfake Removal Feature YouTube has announced that it will facilitate requests to remove AI generated content that is created to look or sound like you. It is a nice gesture on behalf of YouTube, but the process to protect from deepfakes is not scalable. The attackers will be able to create vast amounts of videos for publishing and the YouTube review team will be flooded with requests, unable to keep up. Additionally, it will be difficult for victims to identify…
Microsoft in Cybersecurity Leadership Crisis – Open Letter to the CEO There is no indication that the root of Microsoft’s cybersecurity issues is being addressed. In fact, all indications are that the executive team is somewhat worried and bewildered at the diverse and numerous issues arising. After many embarrassing incidents, which recently culminated in the President of Microsoft being called to answer questions before Congress, the Board and senior executive team once…
Google Wants to Up-Sell AI Security to Gmail Customers https://www.youtube.com/watch?v=T1FrJG8FuOo Google wants to up-sell enterprise Gmail users for AI security enhancements, when in reality the feature is mitigating the advances that attackers are making through their own innovative use of AI, making their Social Engineering attacks more effective. I am a firm believer that cybersecurity can be a competitive advantage and even generate new revenue for organizations. …BUT…
Rise of Aggressive Nation State Activities https://www.youtube.com/watch?v=ONTYJvB9w4s This is the replay of the live LinkedIn interview with Matthew Rosenquist (CISO at Mercury Risk. - Formerly Intel Corp, Cybersecurity Strategist, Board Advisor, Keynote Speaker) to discuss the Rise of Aggressive Nation State Capabilities. Hosted by Aaron Stillwell, David Cross, and Alex Mavro. Nation State attacks impact everyone! The discussion covers the evolving threats, their…
AT&T Data Breach: Understanding the Fallout https://www.youtube.com/watch?v=I8dwYF40lQQ As an AT&T customer, I did receive the unwelcome news that they suffered a data breach. Here is a rundown for what you should to know. BREACH DETAILS · This is a sizable data breach of about 109 million customers · Call and text interactions from May 1, 2022 to October 31, 2022 · AT&T is blaming a 3rd party cloud platform — Snowflake · FBI Investigating and 1 arrest has been made ·…
Massive CrowdStrike IT Outage Has Global Implications for Cybersecurity The world experienced a digital pandemic of systems going offline and displaying the dreaded Windows Blue Screen of Death (BSOD), due to a catastrophic failure caused by a flawed file in an update to CrowdStrike cybersecurity customers. The impacts have been obscenely widespread, with many banks, airlines, train stations, financial exchanges, news agencies, supermarkets, and health care providers to name…
CrowdStrike Outage Impacts Over 8 Million Computers https://www.youtube.com/watch?v=u4gOhZXLO_U The recent CrowdStrike outage, that continues to have global implications, reinforces the fact that cybersecurity solutions help manage cyber attack risks, but can also be a source of risk. The level of system access, which is necessary to provide security, can also be used to disrupt systems and used maliciously by attackers. We are fortunate that the CrowdStrike incident was…
New Microsoft Recovery Tool for CrowdStrike Issue on Windows Endpoints Not sure who need this resource, but Microsoft updated its Recovery Tool for the CrowdStrike issue on Windows endpoints: Here is the link to the Microsoft Tech Community Support Site: https://techcommunity.microsoft.com/t5/intune-customer-success/new-recovery-tool-to-help-with-crowdstrike-issue-impacting/ba-p/4196959 As a former cybersecurity Incident Commander for Intel, here are my additional…
CrowdStrike Outage Explained in Plain English https://www.youtube.com/watch?v=WkXHDS7SZHw Let’s break down the CrowdStrike outage in non-technical terms! Thanks for watching! Be sure to subscribe for more Cybersecurity Insights! Follow me on LinkedIn: https://www.linkedin.com/in/matthewrosenquist/ and on my YouTube channel for more Cybersecurity Insights: https://www.youtube.com/CybersecurityInsights
Learning from CrowdStrike’s Quality Assurance Failures Let’s talk about CrowdStrike’s quality assurance failures! Thanks to Help Net Security for publishing my opinion piece. Take a look for a more in-depth explanation of how the bad update made it to over 8 million devices and caused widespread global outages. CrowdStrike has released preliminary details of how their bad update made it to client systems, which caused the BSODs. It showcases they have a complex product…
Failures of CrowdStrike Quality Testing https://www.youtube.com/watch?v=wlBJBbkVkmc Details emerge on how a bad CrowdStrike update was allowed to land on Windows systems and cause over 8 billion computers to fail. I discuss their leadership and break down the preliminary Post Incident Review document to reveal the point of failure for their quality assurance infrastructure. I also give clear recommendations on how CrowdStrike must change to remedy this situation so it does…
CrowdStrike Global Outage: Unpacking the Fallout and Future https://www.youtube.com/watch?v=sdsZRY9BKOs The Cybersecurity Vault - episode #36, with guest Ira Winkler Today we are going to talk about the massive global IT outage, effecting over 8 million devices, caused by the cybersecurity vendor CrowdStrike. Although not a cyberattack, this incident is bringing to light potential issues for cybersecurity solutions and the potential fragility of the global computing…
Prestigious Cybersphere CISO Advisory Board Unveils Full Member Listing Tackling the biggest problems in cybersecurity requires superb insights and collaboration across the industry. This CISO Advisory Board will be a catalyst for constructive communication, practical innovation, and a showcase for leadership that drives adaptation to keep pace with evolving threats and rising business expectations. I am honored to join the Cybersphere CISO Advisory Board with such a…
California DMV Implementing Blockchain Tech California’s Department of Motor Vehicles will implement a blockchain to prevent vehicle title fraud. They will use Ava Labs’s Avalanche blockchain to allow over 39 million residents to claim and access their vehicle titles. https://qz.com/california-dmv-blockchain-car-title-fraud-ava-labs-web3-1851609271 The online service is intended to cut down on fraud and reduce the workload for DMV offices to process the requests. Love it or…
@M.Rosenquist