Conversation

Notices

1. Embed this notice
   Kevin Beaumont (gossithedog@cyberplace.social)'s status on Friday, 13-Dec-2024 05:59:26 JST Kevin Beaumont

   A cycle I’ve seen repeated over and over and over… Yahoo, hires the best people, gets its security in order, declares victory, lays the same people off and offshores their roles.

   The next stage is they get breached in a few years and declare a security investment programme again.

   • Embed this notice
     Alex (alex02@cyberplace.social)'s status on Friday, 13-Dec-2024 06:46:11 JST Alex

     in reply to

     @GossiTheDog so just stupid execs.

   • Embed this notice
     Wendy Nather (wendynather@infosec.exchange)'s status on Friday, 13-Dec-2024 07:38:33 JST Wendy Nather

     in reply to

     • Brian Honan

     @GossiTheDog @brianhonan You can probably figure out how recently an org’s last breach was by the size of their security team. It tends to peak about 18 months later.