Vulnerabilities, Threats, Lions, Tigers, and Bears, Oh My - With Eward Driehuis, of CSIRT.global

Welcome Eward Driehuis, chairman of the board of CSIRT.global.  Eward has a long and diverse history in the information security sector, and currently supports the mission of CSIRT.global, a not for profit vulnerability and incident management collective based in the Netherlands.

Today, we talk about a wide range of topics, including

- various types of malware
- the evolution of visibility into different types of threat actors
- different "use cases" of malware, and different perspectives of public vs. private sector defenders
- objectives, tactics, techniques, and procedures (TTPs) of purely commercial criminal gangs vs. those of spies
- supporting cybersecurity preparedness and resilience in small to medium size enterprises (SMEs)
- Internet structural vulnerabilities
- how not to annoy customers when selling information security products and solutions
- the impact of cybercrime and disinformation on societal stability, and how different generations deal with this

Some links to topics mentioned in the video:

GameOver Zeus malware: https://www.cisa.gov/news-events/alerts/2014/06/02/gameover-zeus-p2p-malware
Dyre banking trojan:  https://www.secureworks.com/research/dyre-banking-trojan
Dridex malware: https://www.cisa.gov/news-events/cybersecurity-advisories/aa19-339a
Kaseya vulnerability (CVE-2021-30116):  https://www.cvedetails.com/cve/CVE-2021-30116/
REvil ransomware attack:  https://blog.qualys.com/product-tech/2021/07/08/kaseya-revil-ransomware-attack-cve-2021-30116-automatically-discover-and-prioritize-using-qualys-vmdr

The Dutch Institute for Vulnerability Disclosure:  https://www.divd.nl/

CSIRT.global homepage:  https://csirt.global/
Eward's LinkedIn profile:  https://www.linkedin.com/in/ewarddriehuis/

Visit us at https://cybersecurityadvisors.network

Intro/outro music courtesy of Studio Kolomna via Pixabay: https://pixabay.com/users/studiokolomna-2073170/