Security Weekly News Subscribe

Vulnerability Management, Malware, Business continuity

Analyzing the CrowdStrike Incident and Its Ripple Effects – SWN #399

July 19, 2024

In this episode of Security Weekly News, Dr. Doug White and Josh Marpet delve into the widespread impact of the recent CrowdStrike and Microsoft technical issue, which disrupted various industries, including airlines, DMVs, and hospitals. They discuss the interconnectedness of modern systems, the reliance on automatic updates, and the critical need for thorough testing and third-party risk management. Emphasizing the importance of understanding and planning for system failures, the hosts highlight the necessity for comprehensive inventories, continuous monitoring, and robust backup plans to ensure business continuity and resilience. Tune in for expert insights into mitigating the significant consequences of system failures.

Full episode and show notes

Hosts

Professor at Roger Williams University

https://securedigitallife.com/

Executive Director at Guardedrisk

1. Crowdstrike has a REALLY bad, horrible, miserable day
What happens when Microsoft and Crowdstrike decide they want to work all weekend, and give LOTS of money to lawyers?

Related

Risk Assessments/Management

What’s wrong with the cybersecurity industry and what we can do about it – Richard Hollis – ESW #368

July 18, 2024

On this segment, we're going to zoom all the way out to discuss one of my favorite topics: what's fundamentally wrong with this industry? I believe we're at an inflection point: security teams have budget, staff, and more sway at the board level than ever. The cybersecurity market is doing great - growing at an astonishing rate with cyber startups ...

Vulnerability Management

EPSS – The Exploit Prediction Scoring System – Jay Jacobs, Wade Baker – BTS #34

July 17, 2024

Jay Jacobs Co-Founder and Data Scientist and Wade Baker Co-Founder; Data Storyteller from The Cyentia Institute come on the show to talk about The Exploit Prediction Scoring System (EPSS). This segment is sponsored by Eclypsium. Visit https://securityweekly.com/eclypsium to learn more about them!

Vulnerability Management

Vulnerability Chains – PSW #835

July 17, 2024

Find new flaws in UEFI using STASE, combining vulnerabilities to exploit Sonicwall Devices, remote BMC exploits, Netgear patches, and not a lot of information, 22 minutes before exploited, if the secrets were lost, we'd all be in screwed, Exim has not been replaced by something better and its vulnerable, CISA's red team reports, and attackers use d...