The TWiET crew delves into botnets, securing hybrid work environments, the future of DNS architecture, and more.

News Blips:

• Researchers uncover sophisticated IoT botnet named "K- Botnet" targeting US entities; linked to Chinese state-aligned hackers
• AI startup Vanta (a TWiT.tv Sponsor) launches AI suite to automate repetitive security and compliance tasks
• DARPA funds revolutionary laser-based aerial energy delivery system for military operations
• Networking company Cradlepoint acquires SASE vendor ERA to provide a potential combined 5G and zero-trust networking solution

DNS Deep Drive Part 3 with DNS Expert Josh Kuo and Principal Solutions Architect of Infoblox Ross Gibson

• Internal vs external DNS; differences in intended audience and integration
• Decoupling DNS services from domain controllers for stability
• Namespace planning tips; use owned domains, avoid random internal TLDs
• Encrypted DNS tradeoffs; privacy vs. visibility for security teams
• DNS security options like RPZ for control over internal resolution
• Future DNS role predictions like firewall integration and threat intel protections

The episode concludes with the announcement that the long-running show will be coming to an end after 12 years of enterprise content.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guests: Josh Kuo, Ross Gibson, and Leo Laporte

Help support TWiT by joining Club TWiT at https://twit.tv/clubtwit

Sponsors:

• INFO.ACILEARNING.COM/TWIT code SN100
• vanta.com/ENTERPRISE
• Miro.com/podcast

• Proxy trojan targets macOS users for traffic redirection
• Indoor navigation has had a slow start
• Krasue RAT uses cross-kernel Linux rootkit to attack telecoms
• U.S. approves first gene-editing treatment, Casgevy, for sickle cell disease
• The DNS Deep-Drive continues with guests Josh Kuo, DNS expert, and Ross Gibson, Principal Solutions Architect of Infoblox, to talk about external authoritative DNS - whether enterprises should fully manage their own external DNS or use managed services, threats like domain hijacking, using load balancers, and more.

Hosts: Curtis Franklin and Brian Chee

Guests: Josh Kuo and Ross Gibson

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• canary.tools/twit - use code: TWIT
• lookout.com
• vanta.com/ENTERPRISE

• Hackers Can Easily Extract ChatGPT Training Data
• Cheebert's prediction about VDI just came true
• Big Tech jobs are not as immune to layoffs as we thought
• Siemens PLCs are Still Vulnerable to Stuxnet-like Cyberattacks
• Josh Kuo, DNS Expert and Ross Gibson, Principal Solutions Architect of Infoblox join Brian Chee and Curt Franklin for part 1 of a 3 part in-depth primer on enterprise DNS, from the basics of DNS lookup, key considerations like security and encryption, and why run your own DNS versus other free alternatives?

Hosts: Brian Chee and Curtis Franklin

Guests: Josh Kuo and Ross Gibson

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• kolide.com/twiet
• bitwarden.com/twit
• INFO.ACILEARNING.COM/TWIT code SN100

• Ransomware group reports a victim company to the SEC for failing to promptly disclose a breach.
• Shadowy hack-for-hire group behind sprawling web of global cyberattacks
• Electrical arc detection devices that can prevent dangerous home fires caused by faulty wiring.
• The worst passwords of 2023
• The NIS2 Directive: The first piece of EU-wide legislation on cybersecurity
• Jenna Bilotta of LaunchDarkly joins to discuss transforming DevOps tools with better user experiences.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Jenna Bilotta

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• Miro.com/podcast
• lookout.com
• nureva.com/twit

• CISA Alerts: High-Severity SLP Vulnerability currently being exploited.
• ChatGPT outages attributed to DDoS activity.
• Gen Z and Millennial employees are a bigger cybersecurity risk than older employees.
• Security firm finds highly invasive malware hidden in software developer tools.
• Strategies for bridging the cybersecurity skills gap.
• Mike Star, CEO and founder of trackd talks about managing patches and how the community can help preventing disruption from bad updates.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Mike Star

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• INFO.ACILEARNING.COM/TWIT code SN100
• paloaltonetworks.com/ot-security-tco
• canary.tools/twit - use code: TWIT

• Okta customer data exposed in support breach impacting 134 companies.
• Biden requests $3.1B more for FCC's "rip-and-replace" program to remove insecure equipment from federal networks, targeting Huawei and ZTE equipment.
• Kaspersky finds Android spyware targeting WhatsApp users, reusing malware from Telegram cyber attacks.
• U.S. Immigration and Customs Enforcement agency is using AI to scan social media for derogatory content before approving visas. Brian warns about oversharing online.
• President Biden signs executive order governing federal agency use of AI, requiring non-discrimination, privacy, security, and responsible testing. The hosts debate if AI needs unique regulation.
• Chris Heard, CEO of Olive Technologies talks about how businesses can properly evaluate the total cost of ownership when looking for the right software solutions.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Chris Heard

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• nureva.com/twit
• bitwarden.com/twit
• paloaltonetworks.com/ot-security-tco

• iLeakage gives hackers access passwords and sensitive data on iOS and macOS browsers.
• 0ktapus is "one of the world's most dangerous financial criminal groups" says Microsoft.
• Apple backs national right-to-repair bill.
• Pro-Russia hackers exploiting 0-day in Roundcube webmail software.
• 9 innovative ways to boost security hygiene for Cyber Awareness Month
• Josh Kuo, Senior Educator and SME in Cyber Security of Infoblox talks about why we need Punycode and how DNS can be a security solution for malicious Punycode.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Josh Kuo

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• lookout.com
• kolide.com/twiet
• Miro.com/podcast

This info-packed episode of TWiET dives into the hidden dangers of Google hosted ads with malware. Guest Adam Jacob shares his vision for a "second wave" of DevOps to achieve better collaboration and outcomes.

• Patch Winrar right now
• The most used IT Admin passwords
• Cisco reports 10,000 network devices backdoored with unpatched 0-day
• The global chip talent shortage and partnerships addressing it
• The risks of malicious Google ads using punycode to disguise fake URLs
• Adam Jacob, CEO of System Initiative and Co-founder of Chef talks about his vision for improving and rebuilding DevOps from the ground up.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Adam Jacob

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• vanta.com/ENTERPRISE
• paloaltonetworks.com/ot-security-tco
• INFO.ACILEARNING.COM/TWIT code SN100

On This Week in Enterprise Tech, Lou, Curt, and Brian dive into how remote console devices are empowering IT pros, the future of digital trust and content authenticity, and the evolving landscape of endpoint management security.

• Jeff Marraccini from Altair explains how air console devices allow him to remotely access noisy server racks to diagnose issues, avoiding dangerous sound levels. This saves time and prevents disruptions.
• This week's news blips:
  • Comcast announces DOCSIS 4.0 in select U.S. cities.
  • Security pros warn that EU's vulnerability disclosuer rule is risky.
  • Edge AI-enabled drones delivering first response for public safety.
• On this week's discussion byte, hosts debate whether Adobe's new content credential system can combat misinformation and assure authenticity. They conclude it helps provide traceability but has limitations as a voluntary system.
• Zach Wasserman from Fleet discusses how organizations can gain visibility into employee devices to strengthen endpoint security, especially with remote work.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guests: Jeff Marraccini and Zach Wasserman

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• paloaltonetworks.com/ot-security-tco
• canary.tools/twit - use code: TWIT
• nureva.com/twit

This episode of This Week In Enterprise Tech discusses the major cybersecurity recruitment challenges organizations face today and dives into the world of enterprise edge computing and the future of hyperscale cloud services with Scott Evers of Involta.

• News Blips: The hosts discuss a severe vulnerability in Atlassian's Confluence Server that allows attackers admin-level access, how over 100,000 industrial control systems are exposed on the public internet, using fiber optic cables on the ocean floor for earthquake detection, and a Linux "Looney Tunables" flaw threatens most distributions.
• Byte Discussion - Cybersecurity Recruitment: The hosts examine the cybersecurity talent shortage and creative approaches to recruiting, like looking beyond degrees to aptitude and expanding the talent pipeline.
• Interview with Involta Enterprise Architect Scott Evers: Scott discusses his career path from physicist to enterprise architect. Common security gaps he sees in software-defined environments. The importance of workload-focused cloud migrations. How data sovereignty affects cloud choices. The persisting confusion around shared responsibility models.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Scott Evers

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• bitwarden.com/twit
• cs.co/twit
• INFO.ACILEARNING.COM/TWIT code SN100

This episode of This Week in Enterprise Tech covers the convergence of networking and security with the emergence of SASE (secure access service edge), tips for navigating the document and file management landscape, and more enterprise tech stories.

• A new Chrome 0-day is sending the Internet into a new chapter of Groundhog Day
• DHS Calls Into Question Physical Security in Johnson Controls Cyberattack
• Hikvision Intercoms Allow Snooping on Neighbors
• Backdoored firmware lets China state hackers control routers with "magic packets"
• On our Byte discussion the hosts explore the rise of SASE (Secure Access Service Edge) as organizations embrace cloud and hybrid environments. The hosts weigh how acquisitions like Cradlepoint & Ericom will shape the SASE-as-a-service market.
• For the host roundtable, Lou Maresca, Brian Chee, and Curt Franklin talk about document archiving and file management systems. They trace the evolution from optical archives to today's mix of on-prem and cloud solutions. The hosts also debate when to build vs buy systems, and the promise of generative AI for archiving and searching documents.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• nureva.com/twit
• INFO.ACILEARNING.COM/TWIT code SN100

This episode of This Week in Enterprise Tech packs in analysis on Cisco's shocking $25 billion acquisition of Splunk and what it means for the cybersecurity ecosystem. Plus, Intel VP of Sales & Marketing Jason Kimrey joins to decode the company's groundbreaking new neural processors and innovations in chip design, and accelerating AI processing at the edge.

* Major vulnerabilities uncovered in Apple and Google image libraries - despite patches, blindspots remain
* Surge of cyberattacks originating from Middle East and Africa
* OpenAI unveils new AI image generator DALL-E 3 - balancing innovation with ethical concerns
* Cisco announced plans to buy Splunk in a monster $28B deal - how will this impact Splunk's products and rock-solid community?
* Jason Kimrey, VP of Sales & Marketing at Intel discuss announcements from Intel Innovation 2023 including new neural processors for offloading AI workloads, and how they are looking to advance Moore's Law.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Jason Kimrey

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• kolide.com/twiet
• Miro.com/podcast
• lookout.com

This week on TWiET, Lou Maresca, Brian Chee, and Curt Franklin talk with Dev Rishi, Co-Founder and CEO at Predibase, discussing the hurdles of moving large language models into production environments and how privacy concerns factor into that decision. Guest Dev Rishi of Predibase explains why many organizations say they can't use commercial LLMs, and shares best practices for getting started with privacy-focused ML.

Other topics include:

• Microsoft, Oracle deliver direct access to Oracle database services on Azure
• Cyber Extortion Attacks No Longer Require Ransomware
• World's Largest Lithium Deposit Found Along Nevada-Oregon Border
• AI-Powered SOC Automation: A New Era in Security Operations
• The ripple effects of phasing out older TLS protocols

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Dev Rishi

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• nureva.com/twit
• discourse.org/twit
• canary.tools/twit - use code: TWIT

On This Week in Enterprise Tech, Lou Maresca, Brian Chee, and Curtis Franklin dive into how the SEC's proposed cybersecurity rules could reshape how corporations handle disclosures and risk management. Guest Brian McDonald from Mutare also shares insights on securing voice communications against rising cyber threats. Plus Brian Chee explains out-of-band network management(OOBI).

• Brian Chee breaks down out-of-band management(OOBI) for remotely accessing devices separately from production networks.
• The SEC's proposed cybersecurity disclosure rule pushes public companies to reveal incidents faster and boost security governance. But CISOs face challenges balancing speedy reporting and fully understanding new threats.
• Guest Brian McDonald explains how Mutare is redefining voice communication security amid rising vishing and spoofing threats.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Brian McDonald

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• cs.co/twit
• INFO.ACILEARNING.COM/TWIT code SN100
• discourse.org/twit

• UK's Online Safety Bill compromises end-to-end encryption and could result in systemic security risks
• Cybercriminal gangs are trafficing cybercrime workers
• Pros and Cons of JAVA programing
• AirBnb accounts hacked using stealers malware and stolen cookies
• Should Big Tech firms help pay for broadband contruction?
• Ketan Karkhanis, executive vice president and general manager of Sales Cloud at Salesforce talks about trust and challenges with AI, and how generative AI will change sales.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Ketan Karkhanis

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• bitwarden.com/twit
• lookout.com

This week on This Week in Enterprise Tech, host Lou Maresca and co-hosts Curt Franklin and Brian Chee explore the key takeaways from the 2023 Black Hat and DEF CON cybersecurity conferences. They discuss the proliferation of AI, especially in relation to security. Guest Michael Amori, CEO of Virtualitics, talks about how AI is impacting data analytics and access.

• Curtis Franklin shares highlights from Black Hat and DEFCON 2023, noting generative AI was the dominant theme across both events. He breaks down differences between classic and generative AI models, quantifying risk, and other topics like IoT/OT security.
• IBM revealed Code Assistant for IBM Z, an AI code translation tool that can convert legacy COBOL code to Java. The hosts reflect on converting other legacy code, and the risks of AI-generated code.
• Michael Amori explains how Virtualitics is using AI and data visualization to help enterprises explore and understand their data, serving as an "AI assistant" for analysts. He discusses responsible and ethical AI, maintaining privacy, the need for explainability, and Virtualitics' tools like Network Extractor.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Michael Amori

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• Miro.com/podcast
• kolide.com/twiet
• panoptica.app

This episode of This Week in Enterprise Tech discusses the latest issues around AI, including legal implications, security concerns, and practical applications. Lucid Software Chief Product Officer Dan Lawyer joins hosts Curt Franklin, Brian Chee, and Oliver Rist to explain how Lucid's visual collaboration tools aim to improve teamwork through integrating AI capabilities.

• Recent phishing campaign targeting Zimbra customers in over a dozen countries
• AI requiring changes to data center heat dissipation strategies
• Verizon expanding 5G coverage using newly available C-band 5G spectrum
• White House again telling executive branch to take cybersecurity seriously
• Potential NY Times lawsuit against OpenAI over ChatGPT training on copyrighted content
• Lucid Software's Chief Product Officer Dan Lawyer explains how Lucid's visual collaboration tools aim to improve teamwork through integrating AI capabilities, and streamlining the HR onboarding process.

Hosts: Brian Chee and Curtis Franklin

Co-Host: Oliver Rist

Guest: Dan Lawyer

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• INFO.ACILEARNING.COM/TWIT code SN100
• panoptica.app

Facial Recognition Lawsuit, AI-generated Fake Books, SaaS Management with Zylo, and more.

• How fame-seeking teenagers hacked some of the world's biggest targets
• Innocent pregnant woman jailed amid faulty facial recognition trend
• XWorm, Remcos RAT evade EDRs to infect critical infrastructure
  Homage to Lahaina
• Author discovers AI-generated counterfeit books written in her name on Amazon
• Zylo co-founder and CSO Ben Pippenger sheds light on the importance of managing SaaS applications, revealing shocking statistics about the wastage of SaaS licenses and the complexities of software usage.

Hosts: Louis Maresca and Brian Chee

Guest: Ben Pippenger

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• canary.tools/twit - use code: TWIT
• discourse.org/twit

• Researchers strengthen defenses against denial-of-service attack
• Cult of the Dead Cow Hacktivists Give Life to 'Privacy-First' App Framework
• Photoshop can now use generative AI to expand images Text prompts for AI are also available in over 100 languages.
• US military battling cyber threats from within and without
• White House Cyber Workforce Strategy: No Quick Fix for Skills Shortage
• Michael "Hoff" Hoffman, Co-founder & CEO of IQXR, a Mesmerise Group Company, talks about extended reality(XR) and spatial computing in the enterprise and how the Apple Vision Pro could revolutionize the industry.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Michael "Hoff" Hoffman

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• panoptica.app
• bitwarden.com/twit
• cs.co/twit

• Cloudflare Radar's new BGP origin hijack detection system
• TSA Updates Pipeline Cybersecurity Requirements
• AT&T and Verizon's ancient lead cables have US lawmakers demanding action
• EFF: FBI Seizure of Mastodon Server Data is a Wakeup Call to Fediverse Users and Hosts to Protect their Users
• Companies Must Have Corporate Cybersecurity Experts, SEC Says
• Ricardo Michel Reyes, Chief Science Officer and Co-founder of Erudit talks about how AI can be used to help organizations build healthier work communities.

Hosts: Louis Maresca, Brian Chee, and Curtis Franklin

Guest: Ricardo Michel Reyes

Download or subscribe to this show at https://twit.tv/shows/this-week-in-enterprise-tech.

Get episodes ad-free with Club TWiT at https://twit.tv/clubtwit

Sponsors:

• Miro.com/podcast
• meraki.cisco.com/twit
• kolide.com/twiet