CISO Thoughts with
David Lindner
Contrast Security CISO David Lindner provides his top three weekly insights for CISOs, developers and the security community here. These are updated every Friday, so be sure to check back for the latest news on what's top of mind in AppSec and DevSecOps.
The latest insights as of October 18, 2024:
Insight #1: Data breach costs are climbing
According to IBM’s latest Cost of a Data Breach report, data breach costs have risen 39.4% over the past decade and are now at almost $5 million per breach. We should make sure our cybersecurity insurance falls in line with these numbers.
Insight #2: Ditto for open-source nasties in repos
According to a new report, the number of malicious packages uploaded to open-source repositories has increased 150% in the last year. Security of the supply chain is still a major problem, and the malicious actors are now trying to take advantage of this even more. What are you doing to secure your supply chain?
Insight #3: Stressed-out security leaders are turning to drugs & booze
The pressures of the modern workplace are driving an alarming number of security leaders to turn to substance abuse as a coping mechanism. Long hours, constant demands and the struggle to maintain work-life balance are taking a significant toll. Prioritizing well-being is crucial. Incorporate stress-reducing activities into your day, such as exercise or mindfulness practices, and ensure you take adequate time off to prevent burnout.
David Lindner
Chief Information Security Officer, Contrast Security
David is an experienced application security professional with over 20 years in cybersecurity. In addition to serving as the chief information security officer, David leads the Contrast Labs team that is focused on analyzing threat intelligence to help enterprise clients develop more proactive approaches to their application security programs. Throughout his career, David has worked within multiple disciplines in the security field—from application development to network architecture design and support, to IT security and consulting, to security training, to application security. Over the past decade, David has specialized in all things related to mobile applications and securing them. He has worked with many clients across industry sectors, including financial, government, automobile, healthcare, and retail. David is an active participant in numerous bug bounty programs.
Incident Response Solutions from Contrast
Contrast Protect
Always-on application and API protection from targeted attacks with no code changes required.
Contrast Assess
Flag underlying vulnerabilities in applications before it becomes a disclosed CVE or major incident - all without having to launch a single scan.
Contrast Scan
Code analysis that’s tailor-made for modern CI pipelines that delivers 10x faster scans, and actionable findings to ensure rapid fixes.
Contrast SCA
Automatically catalogue your third-party software risk across the software lifecycle - from build, to test, through production.