Skip to content

Cybersecurity Insights with Contrast CISO David Lindner | 6/14/24

By David Lindner, Chief Information Security Officer

June 14, 2024

vulnerabilities MFA cyberattacks Secure from within secure by design

    
Cybersecurity Insights with Contrast CISO David Lindner | 6/14/24

Insight #1

How many breaches do we need to endure before we realize that multifactor authentication (MFA) is the most important factor in preventing the successful use of compromised credentials in data breaches? As noted in Verizon’s Data Breach Investigations Report (DBIR) 2024, nearly 38 percent of analyzed breaches used stolen credentials — more than double the breaches that used phishing (15%) and far more than those that leveraged vulnerability exploitation (4%). Examples include Change Healthcare — which wasn’t using MFA — and Ticketmaster-Snowflake, which appeared to suffer “a targeted campaign directed at users with single-factor authentication" wherein the threat actors leveraged previously obtained credentials. We can do better.

Insight #2

A recent study shows 66% of global CISOs are concerned about personal, financial and legal liabilities in their role. This number continues to grow as the CISO role continues being scapegoated in many breach situations.

Insight #3

It's here! The "Secure Software Development Attestation" form will be required if you are providing software to critical infrastructure entities. Are you ready?
vulnerabilities MFA cyberattacks Secure from within secure by design
David Lindner, Chief Information Security Officer

David Lindner, Chief Information Security Officer

David is an experienced application security professional with over 20 years in cybersecurity. In addition to serving as the chief information security officer, David leads the Contrast Labs team that is focused on analyzing threat intelligence to help enterprise clients develop more proactive approaches to their application security programs. Throughout his career, David has worked within multiple disciplines in the security field—from application development, to network architecture design and support, to IT security and consulting, to security training, to application security. Over the past decade, David has specialized in all things related to mobile applications and securing them. He has worked with many clients across industry sectors, including financial, government, automobile, healthcare, and retail. David is an active participant in numerous bug bounty programs.

Previous

How Contrast ‘secures from within:’ Code vulnerabilities set off smoke alarms; runtime incidents & cyberattacks trigger the sprinklers
Next

Contrast wins 2024 PwC Luxembourg Award for Cybersecurity & Privacy Solution of the Year