Firewalls Don't Stop Dragons Podcast
Sad State of Cybersecurity
· Summarized
Key takeaways
- The state of cybersecurity is worsening, with increasing threats highlighted by high-profile vulnerabilities like SolarWinds and Colonial Pipeline.
- Organizations need to adopt a more defensive cybersecurity approach rather than solely focusing on offensive strategies.
- Training and education in cybersecurity practices are essential for both individuals and organizations.
- The complexities of cyber attacks often arise from human error, misconfigured systems, and trusting the wrong vendors.
- Ransomware attacks are financially motivated and underscore the need for organizations to have strong backup systems and response plans.
Summary
Current State of Cybersecurity
Josh Jackson describes the alarming and deteriorating landscape of cybersecurity, emphasizing that threats have increased in the wake of the pandemic. He explains that companies are too focused on offensive strategies while neglecting the importance of defensive cybersecurity practices. The discussion covers the trend of data being the 'new oil,' leading to increased ransomware attacks, highlighting the need for stronger security measures.
The Complexity of Cyber Attacks
The conversation delves into why significant organizations still face cybersecurity failures despite having resources. Josh likens security to a soccer game where the performance of the weakest player can impact the entire team's defense. He discusses notable incidents such as the SolarWinds supply chain hack and its implications, explaining how attackers can infiltrate organizations through trusted vendors.
Defense vs. Offense in Cybersecurity
Josh stresses the importance of organizations adopting a defensive posture in cybersecurity, discussing how most strategies currently focus on offense. The discussion shifts to the role of regulations and standards in shaping better security practices and how firms can leverage emerging technologies like AI to bolster their defenses.
Challenges in Attribution and Regulation
The podcast covers difficulties in attributing cyber attacks to particular actors, highlighting the complexities involved in tracing the origins. It also touches on governmental efforts to unify cybersecurity regulations through standards like the Cybersecurity Maturity Model Certification (CMMC) and how organizations can navigate varying compliance requirements.
Ransomware and Insurance
The explosion of ransomware attacks is tackled, with Josh explaining how cyber insurance can sometimes incentivize ransom payments. Highlighting the complexities of the insurance market, he notes that if the payouts become too frequent, insurers may discontinue coverage options, making it vital for companies to establish better cybersecurity defenses.
Sponsors
- 6clicks · Josh Jackson is from 6clicks, a company focused on improving cybersecurity and compliance.
- Cybersecurity Maturity Model · Discussion about the Cybersecurity Maturity Model (CMMC) and its role in setting industry standards.
- Internet of Things Cybersecurity Improvement Act of 2020 · Mention of the IoT Cybersecurity Improvement Act and its implications for companies selling to the government.
- Firewalls Don't Stop Dragons Challenge Coin Promotion · Special promotion for the D20 challenge coin for patrons with a call to action.
- Become a Patron · Encouragement to support the show on Patreon for additional benefits.
- Secure Passphrases Generator · A tool for generating secure passphrases to enhance personal cybersecurity.
Show notes
Today's news headlines are littered with stories on massive cybersecurity failures: SolarWinds, Microsoft Exchange, Colonial Pipeline, data breaches, ransomware... Are the bad guys ramping up their game? Or are we just really bad at cybersecurity? (Or both?) How do we fix this? Who can lead the charge to improve our cyber defenses and fend off these attacks? Where do we learn best practices? Can new tools like Artificial Intelligence (AI) help us be more secure - or will these tools benefit the bad guys more? In today's show, I discuss the current sorry state of cybersecurity and it's foggy future with Josh Jackson from 6clicks!
Josh Jackson is an avid student of law, policy, and regulations. He is a speaker on Artificial Intelligence and Automation and a teacher on the Legal and Regulatory Environment of Business. He is passionate about ethics and agency law, and corporate and regulatory risk.
Further Info:
6clicks: https://www.6clicks.io/ Cybersecurity Maturity Model: https://www.acq.osd.mil/cmmc/draft.html Internet of Things Cybersecurity Improvement Act of 2020: https://www.congress.gov/bill/116th-congress/house-bill/1668/text Only three days to get your challenge coin!! https://firewallsdontstopdragons.com/get-your-official-challenge-coin/ Become a Patron! https://www.patreon.com/FirewallsDontStopDragons Would you like me to speak to your group about security and/privacy? http://bit.ly/Firewalls-SpeakerGenerate secure passphrases! https://d20key.com/#/
Follow this show on AudioBrevity and new episodes get summarized for you. Create a free account