Lewie Dunsworth

The McAfee Institute Blog is live. Built for professionals on the front lines of law enforcement, intelligence, investigations, and cybersecurity—this new resource hub delivers real-world strategies, tools, and insights you can apply immediately. No fluff. No filler. Just practical content to help you think sharper, lead stronger, and stay mission-ready. Explore the latest articles, case studies, and frameworks here: https://hubs.la/Q03t5NSr0 #McAfeeInstitute #Investigations #Intelligence #Leadership #OSINT #LawEnforcement #CyberInvestigations #ProfessionalDevelopment

3

1 Comment

Here’s my take—and why you should tune in 👇 Having Dr. Chase Cunningham walk through a paper like this is gold. It feels like he’s sitting next to you, giving color commentary and calling B.S. where it’s deserved—occasionally tagging BIG B.S. when something’s out-of-bounds. That kind of straight talk is rare. This week on the Dr. Zero Trust Podcast, he reviews Tailscale’s “Zero Trust is Dead” report. Cute headline. The real story? Zero Trust doesn’t fail—implementations do. Chase breaks down the blockers (legacy drag, brittle identity, UX friction) and the fixes that actually work (passwordless, least-privilege, segmentation). A few things that made me raise an eyebrow while still appreciating the effort: “Survey of 1,000” respondents—conducted over seven days. Round numbers and tight windows always make me look twice. Yes, it’s a whitepaper that’s also a veiled advertisement (as they all are). But credit where it’s due: the TL;DRs are useful, and there’s real work here. Chase gave it a 7/10—and that guy throws around compliments like manhole covers. Take that as a big positive review. ▶️ Watch: https://lnkd.in/eRwdiGS2 Original paper: https://lnkd.in/eME7vDRm #ZeroTrust #Cybersecurity #SecurityStrategy #CISO #InfoSec #DevSecOps #ZTNA #IdentitySecurity #Passwordless #Microsegmentation #CloudSecurity #Tailscale #DrZeroTrust

5

Big Story here, in my opinion: The group responsible for cybersecurity information sharing across state lines is hemorrhaging funds, and its operator is in emergency funding mode. It’s hard to overstate the importance of basic information-sharing in cybersecurity. When the name of the game is prevention, siloed state agencies rely on threat detection and vulnerability research services from their peers around the country, shared via open lines of communication. https://lnkd.in/gfwFgaiR

6

Clorox is suing Cognizant for $380M. The reason? A 2023 cyberattack that crippled their operations, allegedly caused by poor help desk controls and a botched incident response. - This wasn’t just a breach. It disrupted supply chains, damaged customer trust, and is now turning into a legal battle with one vendor blaming the other. As security professionals, we often say: "Third-party risk is your risk." But too often, those warnings get ignored… until it’s too late. This case raises questions that CISOs and boards must be asking: - Are our vendors following the same standards we require internally? - How strong are our controls against social engineering, especially at the help desk? - Do we have contractual clarity around incident response ownership? Link to the full article is in the comments. #Cybersecurity #RiskManagement #GRC #InfoSec #CISOs

98

27 Comments

Remember my post on vibe-coding is a trap! Fyi: watch-out “value sharing” / outcome-based deals: OpenAI has signaled that for high-impact, IP-creating use cases (e.g., drug discovery, materials, finance/trading), they may push for bespoke contracts that include profit-share or upside participation, not just usage fees.

3

1 Comment