Cisco Talos Summit: Network Defenders Not Serious Enough About Attacks

Security is weak, and most companies are clueless, according to Immunity researcher Lurene Grenier, who kicked off the Cisco Talos Threat Research Summit on Sunday.

Your network is under attack, but you dont care. That was the message from Immunity researcher Lurene Grenier, who on Sunday kicked off the Cisco Talos Threat Research Summit, in Orlando, Fla.
You are either not aware of whats going on or arent taking all this seriously, she said.
At the heart of Greniers view of attackers is a set of three tiers:
Tier 1: Nation-state actors
Tier 2: Organized crime
Tier 3: lolsec and reverse hacktivism
She told the audience that dealing with tier 3 involves the kind of activity theyre used to — pen testing, updating, and then continuing to pen test and update.
Tier 2 becomes more complex because many of the organized crime groups are either working on behalf of nation-states or reusing nation-state code. To have a chance of defending against tier 2 threats, Grenier said, your organization must do two things, one expensive and one difficult.
The expensive task is finding and hiring good security people. From there, give them time to understand your network, she said. They need to know your network better than the attackers, and thats a tall order, Grenier explained.
Then comes the hard task: Give them the clout to change what needs to be changed, and give them the resources to make the changes, Grenier said, noting that both involves a cultural shift for many organizations.
But thats easy compared with the shift required for coping with tier 1 attackers. Grenier hammered home the point that every organization must be prepared to deal with these most advanced threat actors.
How can I convince you to care about this? This isnt a responsibility thing anymore — they wont tell you when theyve owned you, Grenier said. Its just that your IP will end up in another country.
Defending against this kind of attacker requires investment; Grenier offered a metric for how much a company should be prepared to invest. How much do you pay your lawyers? You should be paying your security team at least as much, she said.
Then she recommended draconian segmentation. Most corporate computers, she said, have no business being on the Internet and should only be connected to an internal network without an internet gateway. What about the employees who need to update social media and check March Madness scores? Give your employees an iPad, Grenier recommended.
One of the reasons Greniers warnings seem so dire is that she has seen the layers of attacks that threat actors have at their disposal. There are unpatchable bugs in everything you own and use. Every nation-state has multiple zero days on everything you own — probably three deep, she said.
Those vulnerabilities and exploits extend to mobile devices. The iPhone, Grenier said, is probably the most secure mobile device widely sold, and yet there are probably 10 full iPhone [exploit] chains at any given time. And thats the most secure calling platform.
The real risk isnt in an attacker devastating your infrastructure, Grenier said, but in a nation-state-sponsored competitor beating you economically.
What could you do, as someone negotiating a contract, if you had perfect knowledge of your competitors plans, information, and projections? she asked. Thats the situation everyone finds themselves in when they deal with a state capitalist.
Related Content:
Cyxtera Completes Immunity Purchase
5 Tips for Protecting SOHO Routers Against the VPNFilter Malware
Bug Bounty Payouts Up 73% Per Vulnerability: Bugcrowd
Strutting Past the Equifax Breach: Lessons Learned
US-North Korea Summit News Used as Lure In New Malware Campaign

Top industry experts will offer a range of information and insight on who the bad guys are – and why they might be targeting your enterprise. Click for
more information

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Cisco Talos Summit: Network Defenders Not Serious Enough About Attacks