John Leyden
jleyden.bsky.social
John Leyden
@jleyden.bsky.social
85 followers 250 following 26 posts
Cybersecurity journalist for csoonline.com (past Daily Swig, The Register and others). Sports fan and travel enthusiast.
Posts Media Videos Starter Packs
Mikko Hypponen announces he is leaving the anti-malware industry after 34 years to join an anti- drone startup Sensofusion in August <— One of the deepest thinkers and best speakers in the industry moves on. Muchas gracias por todo y buena suerte. #InfosecurityEurope
Listening to Rory Stewart talking geopolitics #infosec. Trump’s decision to dismantle federal funding for universities and science, laying off US govt cybersecurity staff is bad news. Stewart predict regulatory divergence
SANS Institute’s James Lyne and Cairan Martin talking about trends for cybersecurity leaders at #InfosecEurope
Mikko Hypponen introducing a panel on AI by mentioning his 34 year career in infosecurity, back to the days of viruses on floppy discs. Mikko says cybersecurity is no longer just about securing computers but about securing society
Listening to NCSC’s Paul Chichester talking about geopolitics driving cyber threats
Let’s get it right about ColostomyBagBoy and their historic malware writing exploits…
Before a geek “I think you’ll-find”s me, I should point out Colostomy Bagboy wrote file viruses rather BSVs…

Anyway, good to know you’re here John! Hope we can catch up.
Space time itself comes from a network on entangled qubits, says Prof Brian Cox (referencing discovery by Prof Stephen Hawking) <— Space time is a quantum error correction code
Prof Brian Cox talking about black holes, quantum physics and quantum computing
@grahamcluley.com opens the show by talking about the history of malware. 1990s boot sector viruses on floppy discs written by the likes of ColostomyBagBoy
Standing room only for the first Infosec Europe keynote
And, as a bonus, I also got to see the Kitt car from David Hasselhoff’s TV show Knight Rider
Here’s @rikferguson.com offering a history lesson on cybersecurity calamities…
Great day at the #DTXM25 conference in Manchester yesterday. Saw talks by @rikferguson.com and @jakemooreuk.bsky.social as well as a timely panel on mental health in cybersecurity teams
I'm putting together a follow-up piece on SEC breach disclosure rules.

www.csoonline.com/article/3609...

How can CISOs pre-prepare to assess whether or not a breach has a "material impact" and meet these tight reporting requirements?

I'm looking for comments from industry (non-vendor) CISOs.
What CISOs need to know about the SEC’s breach disclosure rules
Security leaders can face personal liability peril for security fails or misleading disclosures to the SEC and navigating the reporting guidelines is not always a straightforward task.
www.csoonline.com
UK government is running consultations in coop with French to improve transparency into the cyber intrusion market #BlackHatEU <— Analogies with defence procurement don’t map well, say foreign office reps
Defending off the land: Using existing Windows OS capabilities rather the XDR agents or similar from security vendors to detect and alert on attackers (HT Thinkst Canary) #BlackHatEU2024
Senior French interior ministry chief Brigadier General Eric Freyssinet talking cybercrime trends #BlackHatEU2024
Research into 4 years of threat intel on SAP vulnerabilities revealed a sharp spike in discussions in 2020 #BlackHatEU
Interesting talk by Johann Rehberger of embracethered.com on advanced prompt injection exploits in LLM applications such as Microsoft Copilot #BlackHatEU2024
WorstFit: character conversion issue with Window’s BestFit tech creates numerous vulnerabilities in various applications, Orange Tsai tells #BlackHatEU
KeyTrap denial of service attack against DNSSec: 10 requests per second enough to create a viable DOS attack. Worse strain of attack - single request 18 mins DOS. All resolvers vulnerable. #BlackHatEU2024
The internet in the West is dominated by 8 (mostly US) mega corporations <— This is bad for resilience, Douzet warns
Digital connections are mapping the front lines of battles, says Frédérick Douzet <— Countries seeking to control internet tend to have fewer connections. Enables surveillance - so bad for privacy - while reducing resilience
French geopolitics academic Frédérick Douzet talking about the geopolitical implications of network connectivity and complexity #BlackHatEU2024
A monoculture isn’t going to work well in a chaotic political environment, says Black Hat’s Jeff Moss #BlackHatEU2024 <—- Need to have flexibility in skills and avoid vendor lock-in