Today's sponsor

Hi and welcome to another Security weekly. Where we laugh, we cry and share the latest and greatest in security and tech news.

In this week's edition:
📊 Unleashing Imagination in Cybersecurity: Insights from ESET's CEO
📰 Bits & Bytes
❓ Disable User explains: Citrix Bleed
🔥 meme of the week

Reading time: 02:22

Unleashing Imagination in Cybersecurity: Insights from ESET's CEO

A lack of imagination.

Last week I attended a seminar where Dave Maasland, CEO of ESET Netherlands, was speaking about the state of AI in Cybersecurity.

Admittedly, I’m weary of CEO’s. Especially the board appointed ones. Or as I call them, the ‘hired and uninspired’.

This was different.
Dave started with a powerful quote from the 9/11 report: “9/11 happened due to a lack of imagination”.
A lack of being able to imagine this scenario was possible.
The rest of his speech was inspiring to say the least and together with some powerful imagery, it made me think.

Cybersecurity is often seen as restrictive. It limits people in their actions, both digitally and physically.
It’s seen as cumbersome, intrusive and overall a hassle.

If you take a look at the current state of cybersecurity, it’s worrying to say the least.

• APT’s and Nation-state backed hackers are more active than ever

• More than 75% of organizations still don’t know what to do when they’re hit with ransomware

• The cost of cybercrime is growing so fast, no prediction about the growth has been accurate for the past 10 years. (it’s always more as expected)

But…

• Cybersecurity awareness is at an all-time high.

• There’s an enormous growth in the cybersecurity workforce.

• There's significant progress in cybersecurity technologies. Advancements in AI and machine learning are particularly noteworthy.

• There’s a giant increase in public-private collaborations. Governments are teaming up with vendors (like ESET) to bring shared knowledge to the battlefield.

• With initiatives like HackShield Future Cyber Heroes there’s a whole generation being educated about cyber.

• There’s way more good ones than bad ones.

It’s our job as Cybersecurity professionals, IT admins, Cloud engineers, developers, Support engineers, Servicedesk heroes, Network guru’s, …
to stand up and do your part.

• Help that colleague that accidentally clicked a phishing link, don’t punish them.

• Don’t force your users to use shadow IT because your policies are making normal work impossible.

• Don’t be lazy, stick to procedures.

Use your imagination.

We’ve been trying to reach you…

…about your car’s extended warranty. Tired of getting those calls? Here’s your chance to protect yourself, your personal data, and your sanity.

Incogni is a personal data removal service that scrubs your sensitive info (think: SSN, DOB, home addresses, health information, and contact details) from the web.

With Incogni, you’ll worry way less about:

• Identity theft

• Health insurers raising your rates based on info from data brokers

• Robo and spam calls

• Scammers taking out loans in your name

Protect your personal info + get 60% off the Incogni annual plan at this link with code PRIVACY.

Bits & Bytes

• Okta breach: Hackers stole info on ALL customer support users - Going from 0-100 in 3 weeks.

• Sam Altman’s officially back at OpenAI, and the board gains a Microsoft observer - Good on you, Sam.

• Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks - If I had a Dollar for every unsupported/unpatched/outdated server I encountered on a daily basis, I’d be rich. Elon-rich.

• Update your Chrome browser ASAP to avoid this security exploit - don’t be late to upgrade!

• US Health Dept urges hospitals to patch critical Citrix Bleed bug - don’t be late to upgrade!(1)

• Apple fixes two new iOS zero-days in emergency updates - don’t be late to upgrade!(2)

Citrix Bleed

Citrix Bleed allows threat actors to exploit and bypass password requirements and multifactor authentication, to hijack legitimate user sessions and acquire elevated permissions to harvest credentials, move laterally and access data and resources.

Think of Citrix as your digital Swiss Army knife, but when you want to use a knife, you get a spoon.

God I hate Citrix.

Meme of the week