"Impose remote access controls on all..."
"We have improved our ability to detect forged tokens and are expanding asynchronous validation to additional Microsoft workloads. We are partitioning critical infrastructure identity keys to reduce impact if they are compromised"
Attacks on Krebs "should be publicly condemned by any American who believes in the Constitution"
No, NVD is *not* in good shape to step in...
"We anticipate multiple impacts to CVE, including deterioration of national vulnerability databases and advisories, tool vendors, incident response operations, and all manner of critical infrastructure"
"Third-party exposure will continue to increase as the complexity of models increases and outsourcing costs decrease"
Tines’ Charlie Ardagh on a partnership with Elastic, enriching SIEM alerts and automating away SOC toil and tool-sprawl