Conversation

Notices

1. Embed this notice
   kurtseifried (he/him) (kurtseifried@infosec.exchange)'s status on Wednesday, 13-Nov-2024 08:55:50 JST kurtseifried (he/him)

   • Kevin Beaumont

   @GossiTheDog What do people actually do with this data? Like do they use it to justify budgets for specific tech/services? I've never really understood how people meaningfully use this data beyond some security theatre type stuff.

   • Embed this notice
     oci3o (oci3o@mastodon.social)'s status on Wednesday, 13-Nov-2024 18:47:22 JST oci3o

     • Kevin Beaumont

     @GossiTheDog Honestly, the costs are stupid.
     I'm doing a major security uplift at work currently, only about 100 seats, NinjaOne wanted to sell me Crowd strike for 15kp/y! Sentinel about 4k and I'm due to speak to huntress.

     We had an apprentice say we should get Copilot for Security, okay yeah let me drop a few bags a month on a query writer which I don't have time to use

     I think orgs need to stick to security fundamentals first.

   • Embed this notice
     Marius Kießling (marius@kiessling.social)'s status on Thursday, 14-Nov-2024 01:58:17 JST Marius Kießling

     • Kevin Beaumont

     @GossiTheDog I always scream when I hear that an org that I am involved with decides to buy into threat intel when they are not even able to patch a known VPN gateway vuln a month after it has been publicly released. You don’t need threat intel. You need to get your IT landscape in order.