The Shift to Cloud-Native Security - Chris Goosen - Cyber Smokehouse - Episode #30

Yeah.

I was going to ask, like, how, how often do you still run into like NT4O systems or like, you know, people still running on-prem exchange? Like, is this common? On-prem exchange is actually still fairly

common.

Um, usually there are no mailboxes on it.

It's just folks are using it for management.

And it's only just very recently that you actually had the capability of being able to like start switching the source to be able to get rid of it.

But yeah.

On-prem exchange is pretty common.

I haven't seen NT4 for a little while.

I've probably been, I think the last time I saw NT4 was probably around 2013 or so, which still was pretty new if you think about like pretty recent for NT4.

But you do still bump into like 32-bit apps running on Windows XP, right? Or Windows 10, I think, has a 32-bit version.

And usually those are OT environments.

And when you think about the...

the controllers or the things that those systems control, like it's a scary proposition, isn't it?

Yeah.

Well, so what else are you seeing? I mean, we always like to open the show with what are the big burning platforms out there? I mean, what else are you seeing in the Microsoft space that's coming out that's cool or what are the big challenges you're seeing?

Look, I think from a challenge perspective, I think folks have realized that we can lock the cloud down pretty well at this point.

So we've got most folks now have MFA know to a relative degree of control right um you know microsoft just this this last week have started the the process of getting rid of um you know sms message and voice mfa methods right which is which is great because we've been saying for a long time that those are garbage or we shouldn't be using them um so now folks are starting to push and i i understand this there's always some difficulties there if you look at In Europe, for example, you can't just rely on using the end user's personal phone for a token.

Their laws about disconnect and stuff is different, right? But there are YubiKeys and things like that that we can use.

But I think most organizations now finally have a handle on MFA and how do we secure MFA and how do we actually start controlling our endpoints, right? So not only just our laptops and stuff, but the BYOD devices that we allow into our environment.

Organizations are starting to get a handle on that.

The area that I think is still a little bit of a soft underbelly is your traditional stuff, your on-prem stuff, Active Directory.

Active Directory is 25, 26 years old now.

Probably hasn't had a major change in a decade at least.

Small things here and there, but that's what attackers are targeting.

Yeah.

I was going to ask, like, how, how often do you still run into like NT4O systems or like, you know, people still running on-prem exchange? Like, is this common? On-prem exchange is actually still fairly

common.

Um, usually there are no mailboxes on it.

It's just folks are using it for management.

And it's only just very recently that you actually had the capability of being able to like start switching the source to be able to get rid of it.

But yeah.

On-prem exchange is pretty common.

I haven't seen NT4 for a little while.

I've probably been, I think the last time I saw NT4 was probably around 2013 or so, which still was pretty new if you think about like pretty recent for NT4.

But you do still bump into like 32-bit apps running on Windows XP, right? Or Windows 10, I think, has a 32-bit version.

And usually those are OT environments.

And when you think about the...

the controllers or the things that those systems control, like it's a scary proposition, isn't it?

Yeah.

Well, so what else are you seeing? I mean, we always like to open the show with what are the big burning platforms out there? I mean, what else are you seeing in the Microsoft space that's coming out that's cool or what are the big challenges you're seeing?

Look, I think from a challenge perspective, I think folks have realized that we can lock the cloud down pretty well at this point.

So we've got most folks now have MFA know to a relative degree of control right um you know microsoft just this this last week have started the the process of getting rid of um you know sms message and voice mfa methods right which is which is great because we've been saying for a long time that those are garbage or we shouldn't be using them um so now folks are starting to push and i i understand this there's always some difficulties there if you look at In Europe, for example, you can't just rely on using the end user's personal phone for a token.

Their laws about disconnect and stuff is different, right? But there are YubiKeys and things like that that we can use.

But I think most organizations now finally have a handle on MFA and how do we secure MFA and how do we actually start controlling our endpoints, right? So not only just our laptops and stuff, but the BYOD devices that we allow into our environment.

Organizations are starting to get a handle on that.

The area that I think is still a little bit of a soft underbelly is your traditional stuff, your on-prem stuff, Active Directory.

Active Directory is 25, 26 years old now.

Probably hasn't had a major change in a decade at least.

Small things here and there, but that's what attackers are targeting.