Eric Geller

Eric Geller @ericgeller

Elaine Chao. Boy, I don't know. — PolitiTweet.org

Eric Geller @ericgeller

@NoahShachtman that's basically the worst possible combination of factors — PolitiTweet.org

Eric Geller @ericgeller

@NoahShachtman nothing good ever happens at a mostly white Mississippi middle school — PolitiTweet.org

Eric Geller @ericgeller

New Biden national security agenda document describes how "we will make cybersecurity a top priority, strengthening our capability, readiness, and resilience in cyberspace." https://t.co/5GAaikltW9 https://t.co/sSuHvFPcQi — PolitiTweet.org

Eric Geller @ericgeller

Agencies that lack the expertise to hunt for indicators of compromise must also disconnect potentially affected servers, even if they don't see evidence that they were hacked. — PolitiTweet.org

Eric Geller @ericgeller

New CISA emergency directive requires agencies to search for evidence that they were hacked through the Microsoft Exchange Server vulnerabilities disclosed yesterday. If they find evidence, they must disconnect affected servers. If not, they have to patch. https://t.co/EzLikliEAl — PolitiTweet.org

Eric Geller @ericgeller

So what should be done? Gazlay wants to see the government work with major vendors like Microsoft to make secure configurations (e.g. looking for suspicious behavior in the right places) the default, so orgs don’t have to do it themselves. — PolitiTweet.org

Eric Geller @ericgeller

Gazlay provided this example: Incident responders sometimes see authentication tokens configured to last for one minute or two years. That's a pretty good sign of token forgery, but unless you're looking for it, you won't catch it, because it's happening to an authorized user. — PolitiTweet.org

Eric Geller @ericgeller

"We need to make sure that we are ramping up our efforts to detect abnormal behavior" on networks, Gazlay said. He said an "astounding" # of orgs don't understand their identity management systems, even people who manage "large amounts of risk" at those orgs. — PolitiTweet.org

Eric Geller @ericgeller

Gazlay: After OPM, USG focused on high-value assets, but "the adversary seems to have pivoted, too." "Instead of going after these data holdings, they're going after the identities that give them access" to that data. Authentication now top target and must be protected as such. — PolitiTweet.org

Eric Geller @ericgeller

This is especially true as orgs move more resources to the cloud, "where all that matters is the [software recognizing] that you are who you say you are," Gazlay said. — PolitiTweet.org

Eric Geller @ericgeller

Gazlay: "Our takeaway from [SolarWinds] at CISA is that identity is everything now." Firewalls etc. don't matter much if adversary can impersonate legitimate user. If we can't protect authentication, "we’re not going to be able to go up against sophisticated threat actors." — PolitiTweet.org

Eric Geller @ericgeller

"We really don’t like this attack because of how it goes to the heart of a lot of our trust relationships," Gazlay told the ISPAB. "We trust [identity mgmt] far too much. We trust updates. ... And so, seeing this really was something that has made us all quite squeamish.” — PolitiTweet.org

Eric Geller @ericgeller

At @NIST cyber advisory board mtg, CISA's Jay Gazlay says SolarWinds "made us all quite squeamish" b/c it exploited the overlooked reliance on software updates & identity management systems. My writeup on his briefing about lessons learned and next steps: https://t.co/d2T5mMitY7 — PolitiTweet.org

Eric Geller @ericgeller

@gregotto this rules actually — PolitiTweet.org

Eric Geller @ericgeller

@Grace_Segers he gazed into the sink and the sink gazed back — PolitiTweet.org

Eric Geller @ericgeller

Mike Pence doubles down on the Big Lie. Big 2024 energy. — PolitiTweet.org

Eric Geller @ericgeller

@HowellONeill why are so many people so dumb, Patrick — PolitiTweet.org

Eric Geller @ericgeller

GOP-aligned terrorism remains the biggest homeland security threat to the U.S. https://t.co/rP2kJk9l8t — PolitiTweet.org

Eric Geller @ericgeller

Just a reminder that our only information about Donald Trump's health came from an alleged abusive, drugged-up sex pest. — PolitiTweet.org

Eric Geller @ericgeller

Naturally, he's now a Texas congressman https://t.co/X2HA4rENyn — PolitiTweet.org

Eric Geller @ericgeller

Horrible. — PolitiTweet.org

Eric Geller @ericgeller

@pbump no i'm a real baseball fan now since the nationals won the world series — PolitiTweet.org

Eric Geller @ericgeller

@pbump peanuts and crackerjacks — PolitiTweet.org

Eric Geller @ericgeller

In a normal political system, these numbers would be great for Democrats. But in the U.S., with our bizarre electoral procedures, it doesn't matter that more people like Democrats and Democratic policies than like Republicans and Republican policies. https://t.co/hExaMlbV40 https://t.co/Lf4vfiMt9K — PolitiTweet.org

Eric Geller @ericgeller

@C_C_Krebs Chris I would eat this — PolitiTweet.org

Eric Geller @ericgeller

cancel culture strikes again — PolitiTweet.org

Eric Geller @ericgeller

Campaign vendors lying and scamming? No way. — PolitiTweet.org

Eric Geller @ericgeller

Public health experts say mask mandates and indoor dining bans are essential right now. The CDC is urging states not to relax their restrictions yet. Far-right governors are ignoring these experts. — PolitiTweet.org

Eric Geller @ericgeller

🎶 Baby, when you finally Get to hug somebody Guess what 🎶 — PolitiTweet.org