Govt Unravelling, AI Hijinx, Bot Chaos, Recall, Oracle, Slopesquatting, Tycoon 2FA… – PSW #870

Summary: The video discusses the latest developments in cybersecurity, highlighting topics such as the ongoing challenges associated with the federal government and cybersecurity institutions, the need for effective incident responses, the implications of using AI and bots, and the evolving landscape of educational paths in technology. The hosts engage deeply on the effectiveness of current cybersecurity measures and the potential disadvantages and advantages of relying on AI in various aspects, as well as the role of higher education in producing competent professionals.

Keypoints:

• The episode number is 870, which has a hex value of 366, related to Fibonacci and prime numbers.
• Doug White fills in as host while Paul is away on unspecified business.
• Discussion on recent news regarding funding issues for important cybersecurity institutions like CISA and MITRE.
• Concerns raised over the dependency on the CVE list and the implications of unstable funding.
• Debate over whether the CVE list is the bedrock of cybersecurity or if it is time for a shift in focus to a more robust system.
• The importance of prioritizing systems in cybersecurity over solely focusing on CVE scores.
• A review of the role of government vs. state-level cybersecurity efforts and their associated effectiveness.
• Concerns about using AI in cybersecurity, including risks of hallucination in LLMs and its impact on coding practices.
• Discussion on the growth of bot traffic in web environments, highlighting the threats posed by malicious bots.
• Insights from a report claiming that certificates in cybersecurity need shorter lifespans to ensure organizational security.
• Discussion about the effectiveness of education in creating cybersecurity professionals and the validity of alternative paths to career success.
• Chris Krebs leaves Sentinel One amidst administrative challenges to combat cybersecurity issues effectively.