Cisco: Just Because You’re Paranoid…
Apr19

Cisco: Just Because You’re Paranoid…

“Just because you’re paranoid doesn’t mean they aren’t after you.” Joseph Heller, Catch-22   With most of the cybersecurity world gathered in San Francisco for this week’s RSA Conference 2018, the timing was impeccable: on Monday Cisco made significant endpoint and email protection announcements; that was also the day the U.S. Computer Emergency Readiness Team issued a warning that ‘Russian hackers are attacking networking devices, network management protocols and the Cisco Smart Install Client that belong to governments, infrastructure providers and businesses.’ According to the networking giant, more than 168,000 systems are potentially exposed via that client. “Russian state-sponsored cyber actors have conducted both broad-scale and targeted scanning of Internet address spaces. Such scanning allows these actors to identify enabled Internet-facing ports and services, conduct device fingerprinting, and discover vulnerable network infrastructure devices,” said the April 16 alert, which was based on results of analytic efforts between the Department of Homeland Security, the FBI and the United Kingdom’s National Cyber Security Centre. Cisco noted several incidents in a release on April 5. “We are taking an active stance, and are urging customers, again, of the elevated risk and available remediation paths.” While Cisco might rue the timing of the hacker alert, it is generally a good time to be in the cybersecurity business: -the data protection market is expected to grow from $57.22 billion in 2017 to $119.95 billion by 2022, at a Compound Annual Growth Rate of 16%, and, -the total cybersecurity market will grow at a CAGR of 11%, from last year’s $137.85 billion to $231.94 billion by 2022. The reason this market is so hot, is because the threats are escalating even faster: – malware attacks increased 18.4% year-over-year to 9.32 billion in 2017; -while ransomware attacks dropped from 638 million to 184 million between 2016 and 2017, ransomware variants increased 101.2%; -the average organization will see almost 900 file-based attacks per year hidden by SSL/TLS encryption; -32% of breaches affected more than half of respondents’ systems, compared with 15% in 2016; -more than half of all attacks resulted in financial damages of more than $500,000, including, but not limited to, lost revenue, customers, opportunities, and out-of-pocket costs; -complexity is growing: in 2017, 25% of security professionals said they used products from 11 to 20 vendors, compared with 18% in 2016; and, -time to detection has improved from the 39-hour median TTD reported in November 2015, and the 14-hour median reported in 2017. To add injury to insult: -only 66% of organizations are investigating security alerts, and businesses are mitigating less than 50% of attacks they know are legitimate; and, -in almost all breaches (93%), it...

Read More

Cloud Security Will… Dominate the RSA Conference

Just a few days left before this year’s RSA Conference in San Francisco and everything points to a crazy week at the Moscone Center. I’ve heard that around 50,000 people will attend and that the Moscone Center is a mess of construction right now, so just getting in and out of the buildings may be difficult. Now, I’ve written a lot lately about my outlook for RSA as I expect a lot of banter around endpoint security, machine learning, security operations automation and orchestration, threat intelligence, risk management, etc. Yup, there will be a smorgasbord of topics throughout the week, but cloud security will dominate this year’s RSA Conference. Why the focus on cloud security? Because today’s messy situation is a mismatch for the importance and pace of adoption of cloud computing. Here at ESG we’ve been tracking cloud security, led by my colleague and cloud security guru Doug Cahill. Here’s a brief synopsis of the cloud security landscape today: To read the complete article, CLICK...

Read More

CISO Perspective on the RSA Security Conference

I’ve spent a good amount of time talking to CISOs over the last few months to learn about their current priorities and how their jobs are changing. Of course, many of these security executives will be attending the RSA Security Conference in a few weeks. Based upon my meetings, here’s a sample of what CISOs will be looking for in San Francisco: To read the complete article, CLICK...

Read More

GDPR: Look Out for…

According to ESG research, 11% of organizations say they are completely prepared for the GDPR deadline on May 25, 33% are mostly prepared, and 44% are somewhat prepared. This data may be somewhat misleading however. My guess is that most organizations are aiming to have controls and monitoring in place for all the GDPR stipulations by the May deadline. As with any compliance mandate, this is a sound plan but regardless of their preparation, organizations may still be challenged by Article 17 of GDPR, the right to erasure or more commonly known as the right to be forgotten. As a review, article 17 states: “The data subject (i.e. EU citizens) shall have the right to obtain from the controller (i.e. the organization that collects, processes, and analyzes the data) the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay…” To read the complete article, CLICK...

Read More

The Proactive CISO

I’ve spent a good amount of time speaking with CISOs over the past month and plan to write up a report about what I’m learning sometime after the RSA Security Conference. In the meantime, it’s become crystal clear to me that CISOs are becoming more and more proactive in their jobs in a few areas including: To read the complete article, CLICK...

Read More