Taylor Lehmann

Safety U Security. 4xCISO. @Google

[Taylor Lehmann @BostonCyberGuy]

Cyber attacks have shut down healthcare systems and stopped sick people from getting care. It's unacceptable. Glad to see the work we're doing to stabilize and build a more secure, resilient healthcare infrastructure. #healthcare #resilience #cybersecuritynews
Proud to work @Google. https://t.co/9B9CjKUHRY

[Taylor Lehmann @BostonCyberGuy]

@royalhansen @demishassabis @pushmeet Is digital speed faster than machine speed? We are definitely in the first inning, and the first at bat, and maybe the second pitch.

[Taylor Lehmann @BostonCyberGuy]

@anton_chuvakin Breathe more air!

[Taylor Lehmann @BostonCyberGuy]

@royalhansen @Arsenal I had no idea this is what you were doing today!

[Taylor Lehmann @BostonCyberGuy]

@anton_chuvakin It's in my (and my agents) .bashrc. We login to check shit every day.

[Taylor Lehmann @BostonCyberGuy]

@royalhansen @philvenables Prediction markets suggest Nick's future sadness.

[Taylor Lehmann @BostonCyberGuy]

@anton_chuvakin I don't think H,M,L is a thing anymore when 3 Ls make an H. The answer is AI to fight AI 😉

[Taylor Lehmann @BostonCyberGuy]

@anton_chuvakin @jeremie_strand Helping security teams know what to do takes a ton of time out of adoption. The business benefits of security ....

[Taylor Lehmann @BostonCyberGuy]

@cisonaut @anton_chuvakin There's a lot more coming. Taking guess work out of cloud - "it's what we do".

[Taylor Lehmann @BostonCyberGuy]

@MitcelloRudoll @anton_chuvakin There's a lot more coming.

[Taylor Lehmann @BostonCyberGuy]

@anton_chuvakin @cisonaut "we did it" 🤣. Nothing moves fast enough @cisonaut but we deliver in promises.

[Taylor Lehmann @BostonCyberGuy]

@philvenables My 11 year old does it to "be cool" and now I've run out.

[Taylor Lehmann @BostonCyberGuy]

@chainguard_dev 7. Immutable, offline backups of all things you love and wish to keep.

[Taylor Lehmann @BostonCyberGuy]

A post Mythos Strategy for beginners (thread):

1. Reduce attack surface on all the things (start where it makes sense, but @chainguard_dev is a way...)

[Taylor Lehmann @BostonCyberGuy]

@chainguard_dev 6. <Room for the future>

[Taylor Lehmann @BostonCyberGuy]

@chainguard_dev 5. All the things we've been saying for years - hardware backed MFA, microsegmentation (physically and logically), etc. zero-trust-ification of your things.

[Taylor Lehmann @BostonCyberGuy]

@chainguard_dev 4. If you work in cyber, call your town municipal water / sewer services, rural hospitals, and basically anyone else @joshcorman recommends need help, and help them get a plan together.

[Taylor Lehmann @BostonCyberGuy]

@chainguard_dev 3. Read @anton_chuvakin's blog and do the things - https://t.co/Cei9NoieSP esp #2, #4, and 9

[Taylor Lehmann @BostonCyberGuy]

2. Acknowledge CVEs can no longer be prioritized in isolation
2a. Adjust pipelines to patch more, faster (configs too)
2b. Update post deployment validation procedures - ++ precision & recall
2c. Take a harder look at things like Assured Open Source (https://t.co/RscS8o032q)

[Taylor Lehmann @BostonCyberGuy]

@eliedelkind It does.