Ransomware is simply threat actors figuring out a way to monetize the technical debt we've been baking into our systems for decades.

Nov 30, 2020 · 2:16 PM UTC

7
65
11
300
Replying to @hal_pomeranz
Can’t fault their creativity...
1
Replying to @hal_pomeranz
Brilliantly put!
1
Replying to @hal_pomeranz
Pin this evergreen tweet from now till next christmas. What a precise means to communicate this concept. I will shamelessly borrow (with attribution) this till the end of my days.
Replying to @hal_pomeranz
What you call technical debt is simply the tradeoff that's been going on for decades between security and productivity.
2
Replying to @hal_pomeranz
And we know that traditional technical debt has evolved to what I call Tech Debt 2.0 which is more sinister and opens many more options for threat actors to exploit. Our management sophistication needs to evolve along with the evolution of technical debt!
Replying to @hal_pomeranz
Completely agree. The technical debt runs really deep as cybersecurity wasn't an organizational priority for many decades of business and IT decisions (and still isn't at many organizations). The marriage of this attacker business model and cred theft methods worries me a lot.
5