SS-NEWS-30: Ransomware Disclosure and Why is SIEM Still Terrible?

In this week's episode, we discuss Vendor Security Questionnaire's, Ransomware payment disclosure, Why does SIEM still suck, and finally, vulnerability scanning for just ransomware.  

We're trying a slightly new format this week.  Instead of preparing ahead of time, we're doing it ad hoc.  Each of us comes with two articles to discuss, and the other person won't know until right beforehand!

Article 1 - What Are Some Red Flags in a Vendor Security Assessment?

Article 2 - Ransomware law would require victims to disclose ransom payments within 48 hours

Article 3 - Security Correlation Then and Now: A Sad Truth About SIEM

Article 4 - Ransomware Risk Assessment Service Aims to Deflect Attacks

As always, please subscribe on your favorite podcast app, and rate and review so that other people will come to know and love us as much as our mothers do