This week we discuss an academic paper through Venture in Security talking about how companies will rely more and more on legal reasoning and decision making vs. technical reasoning and decision making, and we quickly hit on ATT&CK v16.

Article 1 - Venture in Security Response - Blessed are the lawyers, for they shall inherit cybersecurity
Supporting Articles:
Original Paper - Blessed Are The Lawyers, For They Shall Inherit Cybersecurity

Article 2 - V16 Brings (Re)Balance: Restructured Cloud, New Analytics, and More Cybercriminals

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

Today we discuss the Detection Engineering Behavior Maturity Model, which is a new Capability Maturity Model for Detection Engineering (surprise!) from Elastic. It seems a little overly complicated to me (M.) but super useful despite that!

Article that we originally saw

Direct link to Elastic Blog Post

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

This week we discuss an attempted kidnapping and ransom of the parents of someone connected to a multi million dollar theft, stolen prompts and responses from Muah.ai's "companions", and how much attention should be paying low severity alerts?

Article 1 - Lamborghini Carjackers Lured by $243M Cyberheist

Article 2 - AI girlfriend site breached, user fantasies stolen

Article 3 - Have you been keeping up with your low confidence detections?

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!