What if a single update could bring the world to a standstill? On July 19th, that hypothetical nightmare became a reality when a CrowdStrike sys file update led to the largest IT outage in history. In this episode, we unravel the catastrophic chain of events that left 8.5 million Windows systems crippled and incurred an estimated $15 billion in global damages. From grounded flights to disrupted healthcare services, the fallout was immense and far-reaching. But that wasn’t the end—the chaos also opened the door for opportunistic hackers, posing as CrowdStrike support, to exploit the situation further.

Join us as we dissect the lessons learned from this unprecedented incident. We’ll explore the critical importance of rigorous testing, robust backup plans, and zero trust technologies in maintaining system integrity. Companies must prioritize compliance and vendor vetting to mitigate risks. Through CrowdStrike’s transparent response, we see a roadmap for handling such crises. As consumers of cybersecurity, the onus is on us to demand more stringent development and testing processes from our providers. Tune in to get the insights you need to stay secure and informed in an ever-evolving threat landscape.

Support the show

Imagine a world where artificial intelligence is not just a tool for progress but a weapon for exploitation. Are we prepared for this ironic twist? Join us as I unpack observations from the recent InfoSec conference in Orlando. The discussion delves into the burgeoning trends of utilizing AI technologies, such as chatGPT, across multiple industries with a keen emphasis on cybersecurity. We discuss how vendors employ AI to enhance their products, sometimes as a hands-on guide through processes, or as entirely AI-driven solutions for tasks such as log sorting and risk analysis.

However, the path forward is not without thorns. The conversation takes a sobering turn as I discuss how AI is being weaponized. Yes, the same AI we're leveraging for advancements is being harnessed by hackers to create streamlined workflows, write exploit codes, and more. Tune in for an insightful journey into the future implications of AI in cybersecurity and join the conversation. If you attended InfoSec, I'd love to hear your thoughts. Don't forget to like, subscribe, and follow for more enlightening discussions!

Support the show

In my premiere episode, I sit down with Jackson Mumey, the CEO of Celebration Bar Review. We discuss his journey from cassette tapes to the current cloud-delivered platform his business uses. Jackson can be found on his own podcast called The Extra Mile. If you need to pass the Bar Exam look no further than Celebration Bar Review https://www.celebrationbarreview.com.

Support the show