I loved reading this article of 3 teenagers' descent into criminal hacking, their arrests, and later finding redemption. @a_greenberg is so good at telling stories, backed by deeply-researched reporting.
I spent this year talking to the 3 young hackers behind Mirai, the malware that once broke the internet.
This is WIRED's resulting cover story—an epic, untold, 22,000-word tale of cybercrime, friendship, chaos, betrayal, paranoia, and redemption.
Read: https://t.co/tpPk5EGkQJ
Lockheed Martin is not very specific in addressing these points, but it's a start. I'm curious to see if other companies are more detailed in their cybersecurity disclosures.
Lockheed Martin today appears to be the first to comply with the SEC's cybersecurity rules in its annual report. The new item 1C on cybersecurity is surprisingly extensive: https://t.co/6p99zVosmP
This includes: "Whether and which management positions [e.g., the CISO] or committees are responsible for assessing and managing such risks, and the relevant expertise of such persons or members in such detail as necessary to fully describe the nature of the expertise."
Oh my. Kevin Mitnick has died. "Kevin David Mitnick, 59, died peacefully on Sunday, July 16, 2023, after valiantly battling pancreatic cancer for more than a year." https://t.co/62sqY7vxrQ
#Breaking A federal judge decides not to sentence former Uber security chief Joe Sullivan to prison, but to 3 years probation. "I hope everyone in the CISO community take this is a lesson, and not leniency." @lawdotcom
I wrote an article with @mlowrycpa for The Wall Street Journal about how CISOs can gain influence in their organizations:
https://t.co/B71AvdHAWW
I’ll be talking about this research with @iMeluny and @DiscernibleInc this Friday, 12/8 at 3pm ET. Join us!
How do CISOs build legitimacy with the board?
Don't miss your chance to join us next Thursday for a live discussion with Dr. @anthonyvance about his recent findings on improving the relationship between CISOs and the board of directors.
https://t.co/lntY8OaJil
This is what “responsible departure” of a CISO looks like.
Twitter must soon submit a compliance report to the FTC about its security/privacy practices. https://t.co/ZGBgkznoDM
I've made the hard decision to leave Twitter. I've had the opportunity to work with amazing people and I'm so proud of the privacy, security, and IT teams and the work we've done.
I'm looking forward to figuring out what's next, starting with my reviews for @USENIXSecurity 😁
Influence as a trusted advisor is a core competency for effective CISO communications.
🔥 Read our new Q&A with @anthonyvance about his new research on how CISOs earn legitimacy with the board of directors.
https://t.co/RNUA2I2MHf
@marciahofmann@KimZetter It seems this applies to the count of obstruction, but I am unclear about the count of misprision: “having knowledge of the actual commission of a felony” [unauthorized access/extortion] “did conceal the same, and did not as soon as possible make known the same” to an authority.
@robertgraham The key issue is explained well by @lilyhnewman in her 2020 Wired article: https://t.co/hKOzUhtl2t
Essentially, Sullivan was the designated officer who gave sworn testimony and reports to the FTC before and after the 2016 hack. That’s why this case is unique.
#Breaking: Uber’s former head of security Joe Sullivan found guilty of obstructing an investigation by the Federal Trade Commission into Uber’s security practices and hiding a 2016 data breach from authorities. @CourthouseNews