Press & publications
Perspective shaped by practice. Selected press commentary from my time as SafeBreach CISO, contributed industry perspectives, and a book that brings it back to the tools.
In the press
Eight selected appearances, with brief excerpts and links to the original reporting. Dates and roles reflect the time of publication.
“we expect malicious actors to leverage newer alternative channels like voice, SMS, and targeted videos to attack their designated targets.”
Avishai Avivi · CISO, SafeBreach at publication · Excerpt
On how generative AI expands the channels and sophistication of targeted attacks.
Read at SecurityWeek ↗“The CardioComm attack is alarming for several reasons”
Avishai Avivi · CISO, SafeBreach at publication · Excerpt
On why an incident at a medical software provider raises concerns beyond the exposure of personal data.
Read at Infosecurity Magazine ↗“investment in proper BCP and the resources needed to test it”
Avishai Avivi · CISO, SafeBreach at publication · Excerpt
On using the business impact of the Dish incident to make the case for continuity planning and testing.
Read at SC Media ↗“This suggests that the hospital’s networks were not properly segmented and segregated from each other.”
Avishai Avivi · CISO, SafeBreach at publication
Analysis of the reported disruption across multiple locations at Hospital Clinic de Barcelona.
Read at Infosecurity Magazine ↗“It basically allows the malicious actor to take control of the organisation’s firewall.”
Avishai Avivi · CISO, SafeBreach at publication
On the consequences of firewall compromise and the importance of validating and backing up configurations.
Read at ITPro ↗“The cybersecurity buck stops with the CISO.”
Avishai Avivi · CISO, SafeBreach at publication · Excerpt
Avi’s paraphrase of President Truman, discussing accountability after the Joe Sullivan verdict.
Read at The Record ↗“Rather than relying on reactive controls, we should have had better data classification preventative controls”
Avishai Avivi · CISO, SafeBreach at publication · Excerpt
Lessons from a training spreadsheet containing sensitive customer data, and the case for preventative controls.
Read at CSO Online ↗“We specifically recommend that companies follow the principle of least privilege”
Avishai Avivi · CISO, SafeBreach at publication · Excerpt
On excessive cloud permissions and using automation to evaluate identity and access controls.
Read at SC Media ↗By Avishai Avivi
A contributed perspective on securing the convergence of enterprise IT and operational technology.
Read at SC Media ↗A contributed perspective on demonstrating cyber resilience to insurance providers.
Read at SC Media ↗A conversation is a good place to start