Gary P Shewan (Page 17)

Sign in Subscribe

More issues

Survivorship Bias

This is a really good post from Microsoft. Transparency is becoming more important - for all companies. Results of Major Technical Investigations for Storm-0558 Key Acquisition | MSRC Blog | Microsoft Security Response CenterResults of Major Technical Investigations for Storm-0558 Key AcquisitionMicrosoft Security Response CenterMSRC My thoughts? Not on this but to

Understanding LLMs

Rather than just criticise the hype around Large Language Models (LLMs…I refuse to say AI). It’s good to try and get beyond that and gain a deeper understanding. Can local data be pointed at a local model which mitigates some of the Infosec concerns? A bit of reading,

Zoom, AI and Privacy

This is one for EU Compliance folk. How could Zoom think they can get away with an updated terms of service (27 July) that grants them rights to utilise customer data and content - globally? With no opt out? Additionally explicitly stating it could be used for ML/AI training.

Shared responsibility

What is your immediate feeling when you hear ‘Shared Responsibility Model’ with regards to Cloud? It never seemed (to me) to be a great relief to anyone. Unless it’s an answer to an audit question… The write up by Tenable below is good and thorough. Arguably, comms coming from

Personal BCP

Occasionally I'll think about a personal BCP. I've never lost my phone - but if you have then you'll know why I'm thinking about it. I don't carry a wallet anymore. Everything is contactless. Money, train or flight tickets? All

Online Safety Bill Concerns

Oh this is going to be a nasty car crash. “God, I wish we had been a lot more vociferous. The legislation sounded so outlandish that I thought surely someone else would step up and shoot it down. We clearly should have been in the room but there was no-one

Solarwinds investigation

Quite a debate about this: “The US SEC has roiled the cybersecurity industry by putting executives of SolarWind on notice that it may pursue legal action for violations of federal law in connection with their response to the 2020 attack on the company’s infrastructure that affected thousands of customers

Ransomware updates

Some interesting figures here on ransomware events: * Only 4% of ransomware victims recover all their data * Only 61% recover data at all * Typical experience is 25 days of disrupted business There are no end of products and services to defend/protect against this. But how many decades have we had