Vetting Vendors: Xcitiums ‘Insane, Outlandish Claims’ About Security [YouTube Release]

Youtube Releases
1

Additional Resources:

Jason’s Linkedin Post

CRN Article

Google Project 0 Tavis Ormandy on Comodo
https://bugs.chromium.org/p/project-zero/issues/detail?id=703&redir=1

Comodo Caught Breaking New CAA Standard One Day After It Went Into Effect

Lets Encrypt won its Comodo trademark battle – but now fan tools must rename • The Register

Chronicle found that Sectigo, formerly known as Comodo, had issued the highest number of digital certificates which were used to sign malware over the observed time period, Attackers Are Signing Malware With Valid Certificates | Decipher

Comodo, Lavasoft software bundled with Superfish-type code | TechRadar

Lets Encrypt in trademark drama • The Register

Comodo Caught Breaking New CAA Standard One Day After It Went Into Effect

Attackers Are Signing Malware With Valid Certificates | Decipher

Name Change https://info.comodo.com/blog/xcitium-announcement

Comodo Cybersecurity - Wikipedia

Connecting With Us

Lawrence Systems Shirts and Swag

►👕 https://teespring.com/stores/lawrence-technology-services

AFFILIATES & REFERRAL LINKS

Amazon Affiliate Store
:shopping_cart: Lawrence Systems's Amazon Page

Ubiquiti Affiliate
:shopping_cart: Ubiquiti Store

All Of Our Affiliates that help us out and can get you discounts!
:shopping_cart: https://www.lawrencesystems.com/partners-and-affiliates/

Gear we use on Kit
:shopping_cart: Kit

Try ITProTV free of charge and get 30% off!
:shopping_cart: https://go.itpro.tv/lts

Use OfferCode LTSERVICES to get 10% off your order at
:shopping_cart: Tech Supply Direct - Premium Refurbished Servers & Workstations at Unbeatable Prices

Digital Ocean Offer Code
:shopping_cart: DigitalOcean: AI-Powered Unified Inference Cloud Infrastructure

HostiFi UniFi Cloud Hosting Service
:shopping_cart: HostiFi - Fast and Reliable UniFi in the Cloud

Protect you privacy with a VPN from Private Internet Access
:shopping_cart: https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Patreon
:money_bag: https://www.patreon.com/lawrencesystems

:stopwatch: Timestamps :stopwatch:
00:00 :play_button: Xcitium & Overstated Security Claims

01:00 :play_button: The 100% Secure Claim

02:56 :play_button: Comodo History Of Bad Behaviors

06:32 :play_button: Vetting The Vendors

2

Nothing can stop malware from infecting organizations’ computers.

Four words:

Mandatory. Security. Awareness. Training.

Repeat it after me:

Mandatory. Security. Awareness. Training.

Need I say more?

If we want zero trust, zero threats, and 0 breach, then turn off your computer, disconnect Ethernet cable from the computer, disconnect the power cord from your computer, remove the battery if you have a laptop that has a removable battery, and you are done. If you must have your computer on at all times, put your computer in a faraday cage and you are all set.

Until then:

Mandatory. Security. Awareness. Training.

I can say those words 10 times and I would never get tired of it. I would recommend a monthly mandatory security awareness training for every single employee who isn’t part of the IT department. But then even the people who work in IT can fall victim to phishing and malware as well… In that cae, all we can do is educate ourselves and follow common sense regarding protecting organization’s security and data.

1 Like
3

Training i9s not enough if policy with consequences is not in place.

1 Like
4

Hah… Didn’t think about policies when it comes to security incidents.