Robert Vamosi

When critical infrastructure is shut down due to ransomware or some other malicious attack, who gets notified and when? Chris Warner, from GuidePoint Security, discusses the upcoming Cyber Incident Reporting for Critical Infrastructure Act or CIRCIA. https://t.co/3HaSriVsLa

RT @JayinKyiv: Anti-Orban protests now include even the town of his birth. It seems many Hungarians aren't happy selling the country to Ru…

When an enterprise network goes down, you call in the Incident Response team. When your SCADA goes down, who do you call? Meet Lesley Carhart, technical director of incident response at Dragos, who focuses on the non-standard part of cybersecurity. https://t.co/erX83eSkik

Tonight I am on a panel with delegates from the Singapore Cybersecurity Agency, National University of Singapore, VCs, and other cybersecurity practicioners to discuss cybersecurity threats in industries such as healthcare, smart cities, and manufacturing. https://t.co/MJpoI5qphk

ICYMI This is the story of Cris Thomas aka Space Rogue, who’s written perhaps the best book about the early days of hacking, Space Rogue: How the Hackers Known as the Loft Changed The World. In this episode of Error Code, Cris also drops a lot of names. https://t.co/yUGfPkcjeU

"If [cyber criminals] knocked down an email server, you could stand up a parallel server.... If you knock down a factory floor, there is no alternative factory floor or factory machine that you could stand up in short order." - Dane Grace https://t.co/iARiSlBP48

I wrote my first book on IoT security in 2011. Back then, I spoke about IoT being the 4th wave of computing. So: Network. Mobile. Cloud. IoT.  Is that still true? Or has AI taken that 4th spot, with IoT security demoted to background noise?

ICYMI What if a vulnerability exists in popular ICS devices, yet the only fix is to re-issue the hardware? Ang Cui, founder and CEO of Red Balloon Security, talks about what the mitigations might look like. https://t.co/fTG1eOnGdL

Has the Oldsmar, Florida Water Treatment Plant attack been debunked? Was it an internal OT event? Or did someone external access TeamViewer with admin credentials? I am hearing both.

One of the problems with security is ROI. If I put in next gen this and next gen that and no security events happen, am I justified? Padraic O’Reilly, founder and Chief Innovation Officer at CyberSaint, walks us through the risk analysis for IoT and OT. https://t.co/hxBUm9I5gb

I spoke with an IoT expert yesterday who said IoT-based attacks today go beyond DDoSing another site (think Mirai). Today, they are being used for extortion. For example: shut down a factory floor or stop someone's defibrillator until a sum is paid.

I know it's not IoT-related, but my latest Error Code podcast talks about weaponizing EDRs. It was recorded at SecTor 2023 for another, now defunct podcast. I thought the topic was cool enough for EC. Error Code is back with IoT content next Tuesday. https://t.co/pYdH0NCNCE

One of the things that puzzles me is why IoT security isn't more of a thing. Maybe IoT is too ubiquitous-- it's everywhere now and in small amounts (hello, internet-connected toothbrushes). Or maybe it's because IoT is not really a thing yet?

This is the story of how a researcher turns commercial and commonly used EDRs and Cloud-based backup systems into wipers against the very data they’re designed to protect. Or Yair, from Safe Breach, talks about his two presentations at SecTor 2023.  https://t.co/pYdH0NCNCE

ICYMI The Vastaamo data breach stands as the most heinous of internet crimes because of the 30,000 psychiatric records that were exposed. Antti Kurittu discusses his presentation at SecTor 2022 and the Finnish arrest warrant for “Ransomware_Man” https://t.co/r72QZ5VPyZ

You might think that internet connected cameras would be limited in use by a bad actor. Mohammad Waqas, Field CTO at Armis, spoke at SecTor 2023 about the threat posed by IoT and OT devices in future cyberwarfare. #iotsecurity #otsecurity #podcast https://t.co/HkjyRbx673

I am looking for FT product marketing work, preferably in IoT and OT security, EDR, and AppSec, as well. I'm a CISSP with more than a decade of proven GTM experience. Prefer small organizations but open to any opportunity. #infosecurity #jobseekers