Conversation

Notices

1. Embed this notice
   BrianKrebs (briankrebs@infosec.exchange)'s status on Sunday, 04-Feb-2024 01:56:13 JST BrianKrebs

   There's a huge disconnect for me rn in the IT space. Companies love to talk about an increasing deficit of smart, talented and skillful people available to help defend the cybers. Welp, a lot of those people are somehow now seeking gainful employment bc they've been laid off. Which is just nuts to me given the sheer scale, resources and effort our adversaries are throwing at everything now.

   p.s. AI isn't going to fix anyone's security problems. If anything, it's going to compound them by orders of magnitude (at least in terms of data governance).

   • Paul Cantrell repeated this.
   • Embed this notice
     BrianKrebs (briankrebs@infosec.exchange)'s status on Sunday, 04-Feb-2024 01:56:13 JST BrianKrebs

     in reply to

     As several people responding here have already noted, what this suggests is there is broad downward pressure on what companies are willing to pay for security.

     Which again seems slightly nuts when you think about how the costs of not paying adequately for security are increasing. I mean, the security headlines just in the past week alone are frankly terrifying and to my mind paint a pretty grim near-term future cyber-wise.

     Perhaps the costs of not investing enough in security are not high enough yet?

   • Embed this notice
     Erik Ableson (erik@mastodon.infrageeks.social)'s status on Sunday, 04-Feb-2024 04:37:52 JST Erik Ableson

     • Kevin Beaumont

     @GossiTheDog @briankrebs Assuming you get hit by a competent ransolware operator. I had a client that had their ESXi servers encrypted with a Linux toolkit which rendered them unbootable so everything had to be reinstalled anyway...