State of Cybercrime7 Dec 2016

A Technologist’s Hippocratic Oath

Last month, there was a thought-provoking article on programmers who were asked to do unethical work on the job. We often talk about balancing security with precaution and paranoia, but I wondered about the balance of ethics and execution.

As always, I was curious to hear the reactions from the Inside Out Security Show panel – Mike Buckbee, Kris Keyser, and Mike Thompson.

Here’s what they had to say:

Thompson: “The downside in technology is that shortcuts lead to lapses in security…In healthcare, there are tight regulations…but who is making that decision in the technology industry?”

Buckbee, “We talk about different kinds of crime like property, violent crime, and white collar crime. There’s cybercrime as well. People have different acceptable models in these different areas. [For instance] when it comes to SQL injection, you probably don’t think that adding a few additional characters to a URL is a felon criminal trespass, but it totally could be…”

Keyser, “I drew a parallel between engineers that work in the physical space and engineers that work in the digital space. And engineer or somebody who builds a faulty house with a poor structure or horrible locking system, there would be repercussions for that if the house collapsed…I don’t think people have realized the parallels between that and the digital space.”

Click play to see what else they had to say! Additional responses include: thoughtful insights to the most recent San Francisco MUNI hacker that got hacked, potentially unnecessary malware fixes, as well as the latest hacking tools and exploits.

Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

Avsnitt(211)

The Ransomware That Ran Itself

More from Varonis ⬇️ Visit our website: https://www.varonis.com LinkedIn: linkedin.com/company/varonis X/Twitter: x.com/varonis Instagram: instagram.com/varonislife Want to join us live? Save a seat h...

18 Juli 38min

Megalodon Poisons Github

12 Juni 29min

The Canvas Breach

19 Maj 29min

The Axios Supply Chain Attack

The Axios supply chain attack proves attackers don’t need vulnerabilities if they can hit the assembly line. By compromising a single npm maintainer account, they were able to slip a trojan into Axios...

10 Apr 43min

Salesforce Aura Data Theft

ShinyHunters has once again placed Salesforce customers in their crosshairs – this time abusing guest user misconfigurations in public-facing Experience Cloud sites. The group claims to have compromis...

20 Mars 29min

OpenClaw & Moltbook (w/ Moriah Hara!)

OpenClaw – an opensource AI agent dubbed “Claude with hands” – has exploded across GitHub, rocketing from obscurity to 170,000 stars in just two weeks. It’s now the fastest spreading form of shadow IT...

14 Feb 43min

The React2Shell Crisis

React2Shell, the zero-click RCE exploit, is rapidly becoming one of the most significant cybersecurity incidents this year. From emergency patches causing a massive Cloudflare outage to active exploi...

15 Dec 202522min

AI-Powered Espionage

A Chinese state-sponsored group weaponized Anthropic’s Claude tool to launch the first large-scale AI-driven espionage campaign, targeting more than 30 organizations across tech, finance, manufacturin...

24 Nov 202523min