John Leyden

Mikko Hypponen announces he is leaving the anti-malware industry after 34 years to join an anti- drone startup Sensofusion in August <— One of the deepest thinkers and best speakers in the industry moves on. Muchas gracias por todo y buena suerte. #InfosecurityEurope

Listening to Rory Stewart talking geopolitics #infosec. Trump’s decision to dismantle federal funding for universities and science, laying off US govt cybersecurity staff is bad news. Stewart predict regulatory divergence

SANS Institute’s James Lyne and Cairan Martin talking about trends for cybersecurity leaders at #InfosecEurope

Mikko Hypponen introducing a panel on AI by mentioning his 34 year career in infosecurity, back to the days of viruses on floppy discs. Mikko says cybersecurity is no longer just about securing computers but about securing society

Listening to NCSC’s Paul Chichester talking about geopolitics driving cyber threats

Let’s get it right about ColostomyBagBoy and their historic malware writing exploits…

Space time itself comes from a network on entangled qubits, says Prof Brian Cox (referencing discovery by Prof Stephen Hawking) <— Space time is a quantum error correction code

Prof Brian Cox talking about black holes, quantum physics and quantum computing

@grahamcluley.com opens the show by talking about the history of malware. 1990s boot sector viruses on floppy discs written by the likes of ColostomyBagBoy

Standing room only for the first Infosec Europe keynote

And, as a bonus, I also got to see the Kitt car from David Hasselhoff’s TV show Knight Rider

Here’s @rikferguson.com offering a history lesson on cybersecurity calamities…

Great day at the #DTXM25 conference in Manchester yesterday. Saw talks by @rikferguson.com and @jakemooreuk.bsky.social as well as a timely panel on mental health in cybersecurity teams

What CISOs need to know about the SEC’s breach disclosure rules Security leaders can face personal liability peril for security fails or misleading disclosures to the SEC and navigating the reporting guidelines is not always a straightforward task.

I'm putting together a follow-up piece on SEC breach disclosure rules.

www.csoonline.com/article/3609...

How can CISOs pre-prepare to assess whether or not a breach has a "material impact" and meet these tight reporting requirements?

I'm looking for comments from industry (non-vendor) CISOs.

UK government is running consultations in coop with French to improve transparency into the cyber intrusion market #BlackHatEU <— Analogies with defence procurement don’t map well, say foreign office reps

Defending off the land: Using existing Windows OS capabilities rather the XDR agents or similar from security vendors to detect and alert on attackers (HT Thinkst Canary) #BlackHatEU2024

Senior French interior ministry chief Brigadier General Eric Freyssinet talking cybercrime trends #BlackHatEU2024

Research into 4 years of threat intel on SAP vulnerabilities revealed a sharp spike in discussions in 2020 #BlackHatEU

Interesting talk by Johann Rehberger of embracethered.com on advanced prompt injection exploits in LLM applications such as Microsoft Copilot #BlackHatEU2024

WorstFit: character conversion issue with Window’s BestFit tech creates numerous vulnerabilities in various applications, Orange Tsai tells #BlackHatEU

KeyTrap denial of service attack against DNSSec: 10 requests per second enough to create a viable DOS attack. Worse strain of attack - single request 18 mins DOS. All resolvers vulnerable. #BlackHatEU2024

The internet in the West is dominated by 8 (mostly US) mega corporations <— This is bad for resilience, Douzet warns

Digital connections are mapping the front lines of battles, says Frédérick Douzet <— Countries seeking to control internet tend to have fewer connections. Enables surveillance - so bad for privacy - while reducing resilience

French geopolitics academic Frédérick Douzet talking about the geopolitical implications of network connectivity and complexity #BlackHatEU2024

A monoculture isn’t going to work well in a chaotic political environment, says Black Hat’s Jeff Moss #BlackHatEU2024 <—- Need to have flexibility in skills and avoid vendor lock-in

Thinking of trying out "I'm from the internet and I'm here to help" as a new icebreaker. "You can trust me, I'm a journalist" is far too 90s