iiinova — where your digital self keeps evolving

SANS Institute’s James Lyne and Cairan Martin talking about trends for cybersecurity leaders at #InfosecEurope

000

Mikko Hypponen introducing a panel on AI by mentioning his 34 year career in infosecurity, back to the days of viruses on floppy discs. Mikko says cybersecurity is no longer just about securing computers but about securing society

000

Listening to NCSC’s Paul Chichester talking about geopolitics driving cyber threats

000

Let’s get it right about ColostomyBagBoy and their historic malware writing exploits…

010

Prof Brian Cox talking about black holes, quantum physics and quantum computing

100

John Leyden @jleyden.bsky.social · 03/04/2025

Standing room only for the first Infosec Europe keynote

100

Great day at the #DTXM25 conference in Manchester yesterday. Saw talks by @rikferguson.com and @jakemooreuk.bsky.social as well as a timely panel on mental health in cybersecurity teams

221

John Leyden @jleyden.bsky.social · 18/12/2024

I'm putting together a follow-up piece on SEC breach disclosure rules. www.csoonline.com/article/3609... How can CISOs pre-prepare to assess whether or not a breach has a "material impact" and meet these tight reporting requirements? I'm looking for comments from industry (non-vendor) CISOs.

csoonline.com

What CISOs need to know about the SEC’s breach disclosure rules

Security leaders can face personal liability peril for security fails or misleading disclosures to the SEC and navigating the reporting guidelines is not always a straightforward task.

021

UK government is running consultations in coop with French to improve transparency into the cyber intrusion market #BlackHatEU <— Analogies with defence procurement don’t map well, say foreign office reps

010

Defending off the land: Using existing Windows OS capabilities rather the XDR agents or similar from security vendors to detect and alert on attackers (HT Thinkst Canary) #BlackHatEU2024

000

Senior French interior ministry chief Brigadier General Eric Freyssinet talking cybercrime trends #BlackHatEU2024

000

Research into 4 years of threat intel on SAP vulnerabilities revealed a sharp spike in discussions in 2020 #BlackHatEU

000

Interesting talk by Johann Rehberger of embracethered.com on advanced prompt injection exploits in LLM applications such as Microsoft Copilot #BlackHatEU2024

011

WorstFit: character conversion issue with Window’s BestFit tech creates numerous vulnerabilities in various applications, Orange Tsai tells #BlackHatEU

000

KeyTrap denial of service attack against DNSSec: 10 requests per second enough to create a viable DOS attack. Worse strain of attack - single request 18 mins DOS. All resolvers vulnerable. #BlackHatEU2024

000

French geopolitics academic Frédérick Douzet talking about the geopolitical implications of network connectivity and complexity #BlackHatEU2024

100