David Lindner, Director, Application Security

AppSec Observer

Insight #1: North Korean IT spies The threat of state-sponsored cyber espionage is real and evolving. Recent reports reveal North Korean IT professionals are using stolen identities and advanced tactics to infiltrate private companies. These "spies" are not just seeking employment, but are actively engaged in espionage and illicit revenue ... Read More

Insight #1 A recent study found that chief information security officers (CISOs) are significantly more anxious about the growing complexity of cybersecurity than their chief information officer (CIO) and chief technology officer (CTO) counterparts. Nearly three-quarters of CISOs worry that cybersecurity management is becoming difficult to manage, forcing them to ... Read More

Insight #1   As I watch the sea of news out of Black Hat, from CrowdStrike fallout to the ever-present-flow of AI tools (both threat and savior?), one announcement stands out. Software now powers the world, but it's also the simplest way for attackers to breach an organization. Despite this, ... Read More

Insight #1 Per IBM, the average cost of a data breach is now closing in on $5 million. You know what causes many of those breaches? Account compromise due to lack of multifactor authentication (MFA). It doesn't cost you $5 million to enable MFA. What are you waiting for?   ... Read More

Insight #1 A North Korean hacker, using a deep-faked identity, was hired by the U.S. cybersecurity firm KnowBe4. Shortly after receiving his workstation, the hacker used a virtual private network (VPN) and Raspberry Pi to download malware and make unauthorized changes, but the attempt was quickly detected and thwarted without impacting the ... Read More

Insight #1 It's been a while since I reminded everyone that one of the single greatest controls to implement to prevent account compromise is multifactor authentication (MFA). Do it today! ... Read More

Insight #1 Are we overburdening CISOs? According to CSO Online, the scope of responsibilities and titles held by CISOs has expanded significantly, with the title of “CISO” morphing into a dual title, appended by “and CIO,” or CTO, or VP of engineering, or head of product, or head of infrastructure ... Read More

Insight #1 It’s easy to get distracted by listicles about the hottest IT security certifications that will boost your pay. But while IT security certifications can be a valuable asset, they shouldn't be seen as a shortcut to a higher salary. In today's dynamic threat landscape, employers prioritize candidates with ... Read More

Insight #1 How many breaches do we need to endure before we realize that multifactor authentication (MFA) is the most important factor in preventing the successful use of compromised credentials in data breaches? As noted in Verizon’s Data Breach Investigations Report (DBIR) 2024, nearly 38 percent of analyzed breaches used stolen ... Read More

Insight #1 In the digital age, data has become an incredibly valuable asset. Just as oil was a driving force in the industrial revolution, data is fueling the information age. This realization underscores the importance of protecting data through robust cybersecurity measures to safeguard privacy, prevent breaches, and maintain the ... Read More