X
Back to blog

Cybersecurity Insights with Contrast CISO David Lindner | 2/2/24

By David Lindner, Chief Information Security Officer

February 2, 2024

Insight #1

Ransomware payments dropped to 29% in the last quarter of 2023. Will ransomware be a thing if victims stop paying completely? It seems we are getting closer to that reality due to better preparedness and some locations making it illegal to pay.

Insight #2

All it takes is one, just one missed configuration, one missed security control, and an attacker will get in and find ways to become hidden in your environment. Cloudflare released more information from their Okta breach back in October of 2023. Sophistication and persistence is what is being used, but it all started with a simple account compromise and credentials that were not initially rotated. 

Insight #3

Gartner says that Gen-AI is a top risk for organizations over the next two years. Without significant change in controls and even legislation, that risk is going to continue for many more years to come. Two years is just the start!
regulation okta breach ransomware Gen AI
David Lindner, Chief Information Security Officer

David Lindner, Chief Information Security Officer

David is an experienced application security professional with over 20 years in cybersecurity. In addition to serving as the chief information security officer, David leads the Contrast Labs team that is focused on analyzing threat intelligence to help enterprise clients develop more proactive approaches to their application security programs. Throughout his career, David has worked within multiple disciplines in the security field—from application development, to network architecture design and support, to IT security and consulting, to security training, to application security. Over the past decade, David has specialized in all things related to mobile applications and securing them. He has worked with many clients across industry sectors, including financial, government, automobile, healthcare, and retail. David is an active participant in numerous bug bounty programs.

Previous

Critical zero-day Confluence RCE vulnerability blocked by Contrast Runtime Security
Next

Cybersecurity Insights with Contrast CISO David Lindner | 2/9/24
Enlarged Image