Alexander Vanyurikhin

Director Information Security with focus on Cloud Security. ex-Microsoft MVP in Enterprise Mobility.

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin It was a bit of irony. Everyone claims AI would replace people, so maybe it could fix vulnerability management if humans can’t ;)

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin I guess people thought that "preventative" is too boring or "old school" and came up with something new.
However, English is not my native language and maybe there is deep meaningful difference in these two words.

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin I saw some situations where newly released Gartner MQ impacted RfP process or vendor selection.

[Alexander Vanyurikhin @vanyuale]

@0xdabbad00 Somehow I feel that Wiz is using CTF to tune Wiz Sensor to detect all the crazy things hundreds of people are doing ;)

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin @TankDerek Just imagine a future where systems can agree on approach purely on pros/cons for a company, without considering corporate politics, ego, etc.
But I would be happy if AI can do expense reports and accruals for me.

[Alexander Vanyurikhin @vanyuale]

@matthewdfuller Bring-Your-Own-Car now sounds completely different.

[Alexander Vanyurikhin @vanyuale]

@matthewdfuller I agree with “idiot proof” way in theory. In practice I can see it is almost impossible within one company, hence I don’t know how it would be even achievable by CSP.
I always blame shared responsibility model, as most people are having vague understanding of it.

[Alexander Vanyurikhin @vanyuale]

@0xdabbad00 Ahaha, you also added some smoke screens, but I don’t want to spoil things for others.
Will it be closed at some point soon or stay open until all challenges would be released?

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin Yes. Because these problems have no definitive solution for a reason. All require persistence and certain level of resolve to push people to do “boring” and unpleasant things. Easier to jump on a hype wagon in current cycle.

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin @rekdt I don't know if I should laugh or just cry in a dark room

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin @rekdt Maybe AI will save us all. I’m sure there were several vendors on RSA who promised to fix everything

[Alexander Vanyurikhin @vanyuale]

@rekdt Real conversation: “Hey, we did a great job! We found a way to prioritize vulnerabilities. Out of 300k, we can only focus on 17k which are critical, with high EPSS score and in KEV database”.
On this stage I wanted to cry in some dark place.

[Alexander Vanyurikhin @vanyuale]

On a flip-note, it would be interesting to observe how LLMs adoption would impact critical thinking. Before you had to find an information, analyze it. Now you are getting everything on a silver plate. There is no catch, right?

[Alexander Vanyurikhin @vanyuale]

Used NotebookLM to generate a podcast based on M-Trends, Verizon DBIR and IBM X-Force reports. @anton_chuvakin you need to tell Gemini team to stop making you a competitor.

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin Now you need to get Wiz guys on your podcast ;)

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin @bettersafetynet On every vendor’s meeting I’m playing a game “on which minute they are going to add something about AI”.

[Alexander Vanyurikhin @vanyuale]

@anton_chuvakin I already saw a vendor who added LLM for their query engine, so normal humans can just ask what they want. So, I hope no more new query languages (had to learn several in the past).