Hi folks!

Phew! Another year – and another Security Analyst Summit wrapped. This time is was – ooh, let me see: yes, the 16^th edition of the event, and it was held in the Thai resort village of Khao Lak (here) – about a hundred kilometers north of Phuket.

In case you don’t know already, SAS is a one-of-a-kind security conference – very different from the usual, more buttoned-up, corporate events in the field. It actually started out as a gathering for our internal team – back when our own group of experts was growing and becoming more global. As it did, it made perfect sense to bring everyone together in person once a year: so the team members could get acquainted, interact face-to-face, and share their impressive research and investigations with each other. And it turned out to be a brilliant idea.

Eventually, someone (clearly thinking ahead) suggested we should invite outside cybersecurity experts, and so we began to welcome colleagues from other companies and organizations too. And slowly but surely, year after year, SAS grew into what it is now – a global conference for top analysts that still manages to maintain a bit of a party spirit. Here we allow ourselves to bend the rules a little, play, break from tradition, and do things our own way. But more than that, SAS has kept its club-like, invite-only character: a special expert committee decides who gets to attend. This has helped preserve its more open, candid atmosphere, where folks feel comfortable sharing more than they would at a typical IT security event.

Read on…

As any regular reader of this here blog will know, every year (besides years like 2020) on a Friday in the first half of July we celebrate the company’s birthday. This year, of course, was no exception. A full day – and night – of partying: big, varied, loud, fun… and this year – hurray! – lots of sun!

Yet again, the venue was our favorite Radisson Resort in Zavidovo – some 130km northwest of Moscow. And this year – as the title’s already let on – we had 3500 guests: a record!

Read on…

Another day – another continent!…

• Country: Brazil.
• City: Rio de Janeiro
• Main business: our regional (the Americas; these days mostly Latin American) partner conference
• Secondary activity: tourisms – of course!…

First up – the partner conference carnival. It wasn’t in Rio city itself, but a bit outside – in a beach suburb; still Rio though. I’d been here a couple of times before, but that was ages ago. The first time was in 2006; the second in 2010 – and on both occasions the reason I was here was for… you won’t will believe it: regional partner conferences!

Back then, I didn’t bother with detailed stories and lots photos (that got started properly in 2011), so I can’t compare today’s experience with that from 19 and 15 years ago, alas.

On the morning of our arrival, with a few hard days’ work ahead, we start out with breakfast looking out onto the South Atlantic Ocean – and a seemingly endless traffic jam:

Read on…

“Busy, busy – as a bee: that’s me!”

Yes, I could have been a poet, but I’ll settle for… globetrotting (partner-)conference-bingeing CEO!…

For yes – you’ve guessed it – I was at yet another partner conference the other week. This came hot on the heels of a real busy schedule in Egypt, after which I was teleported over to the UAE (more precisely, to the small Emirate of Ajman, here) for our annual partner conference for the Middle East and Africa region.

This was our eighth regional conference in… the region (having started in 2017, but we had a few pandemic-related breaks). And how we’ve grown! This time we were joined 110 partners from 67 companies across 20 countries. For some the flight to get there took eight hours, while for others – the local partner – it was just five minutes in a taxi!

Anyway – welcome!…

// And thanks for making just the one typo in the welcome sign :-) ->

I wonder if they had typos over there? ->

Read on…

It was somewhat sad saying goodbye to Singapore and its wonderful airport, but duty was calling so off we flew again…

So where next? Oh… that’s where! ->

Cairo – here we come!…

Read on…

Last week, the first ever GITEX Asia was held in Singapore – and I just had to be there…

Not that the original GITEX, which has been running since… 1980 (!) in Dubai every year, is disappearing or anything. It’s just that it’s getting all the more global – or should that be more local, given that Dubai is also in Asia. Confused? Don’t be! The more GITEXs the better is all you need to know!…

So what can I say about this newbie expo? Overall it was pretty modest: the venue wasn’t huge, and it featured only several dozen companies – a hundred tops. Not many big-name players, either. And in our field, it was basically just us:

Read on…

Hi folks!

…And for us it was hi St. Pete!

But, why does everyone always complain about how gloomy and rainy this city is? Every time I’m there – it’s all bright sunshine and blue skies! ->

We’re still in the thick of our hot season – packed with conferences, expos, meetings, and all kinds of other work-related stuff – plus a ton of travel around the globe. Early last week we wrapped up our global partner conference in Istanbul, while on Wednesday to Friday we had our Kaspersky Future Conference up in St. Petersburg for our major enterprise customers. It was a totally new format for us – we’d never done anything on such a scale before – but it worked out great: zero teething problems, or, as we say in Russia, the first pancake wasn’t a flop!

It all took place in downtown St. Pete, at the Astoria Hotel:

We brought together almost 250 folks from 130+ companies, and there were nearly 30 talks (less than half of which were ours – most came from the guests). I took to the stage too and shared my predictions about the future of cyber-nastiness. Sadly, the outlook’s grim…

But if you’re thorough in setting up the right processes and protocols, you can bring the risk of cyberattacks down to practically zero – and finally get a good night’s sleep :)

On top of that, we ran several workshops on incident investigation and other topics in our field:

During breaks, people mingled in the main area – something like this:

We also picked up some pretty colorful terms from the talks:

• Not just “threats” – but “black swans”
• “Ripe tomatoes”: we all want to be ripe tomatoes, not green ones
• Internal DDoS attack during an antivirus update :)
• Talking to IT is like making a deal with the devil // from the cybersecurity POV
• “Underbelly scanner” :)

It’s clear that information-security folks aren’t exactly popular, for we tend to get in the way of business-as-usual. Hence the rebranding of infosec departments: “Information Security Department”: ISD -> “Idiotic Sabotage Department”! Oh yes – very drole. But!… If you don’t do security (well), it’s only gonna be worse – way worse.

One nice little perk for me: since we’d brought a whole bunch of guests to both attend the conference at the Astoria and stay there too, the hotel management treated me to a luxury suite – (huge thanks to them!) ->

Honestly, I really don’t need such fancy digs, but if they’re offering – why not? And folks often ask me to show off some unique hotels and other lodgings. So here it is – this is what the Rachmaninoff Suite looks like:

Not bad, eh?

Luxurious!

The third room? Half-bar-half-library! ->

Views from the room:

To wrap things up – a shot from one of the restaurants hosting our evening bashes:

That’s it for St. Pete – time to head home! But it won’t be long till I’m back on the road once again!…

Salam, folks – from Saudi Arabia!

I was there last week at the Internet Governance Forum in Riyadh, where I was invited to give a speech about some of the lesser-known evils of the internet – and about our ideas regarding what to do to best tackle those evils. Traditionally, this annual forum has been attended by politicians and other government officials, representatives of international organizations, and so on. Only relatively recently have they started inviting folks from commercial companies – seemingly so as to get a better handle on the home truths about what’s really going on across the internet.

Since the event wasn’t dedicated to my core field (JIC: cybersecurity!), I didn’t stay around to listen to the other speeches. Thus, that’s all for today about the actual conference! However, I just have to tell you about the place where the event took place…

The forum took place in the enormous… palace (I can’t describe the building any other way) called the King Abdulaziz International Conference Center. And it seems it’s so luxuriously-exclusively grand and ritzy that there’s hardly anything about the place on the internet (e.g., no Wikipedia page) – yes, that same internet the governance of which the forum is dedicated to! Here’s how it looks from the outside:

Inside – breathtakingly beautiful opulence; here, for example, is the entrance hall:

The main hall:

Like? Then let’s take a closer look…

Read on…

Hai folks!

The official part of our SAS-2024 conference: done.

Now – the fun part: our esteemed delegates, respected speakers, honorable guests (and I!) continue to enjoy this picture-perfect corner of the island of Bali while they come to their senses – still digesting the mega-doses of first-class cybersecurity content they’ve just received…

As to my (direct) participation in the proceedings (besides watching the speeches), the highlight for sure was my being on stage – not as interviewee, but as interviewer. I can’t recall if I’d ever done such a thing before (if I had it was decades ago). Anyway, it felt like the first time – and early on I was really nervous! Yes – me! But I soon got into the swing of it – no doubt partly due to just how interesting my interviewees were: the Russian cosmonaut Mikhail Kornienko and American astronaut Leroy Chiao! We discussed all sorts of cybersecurity issues in space: how they duplicate the comms channels on the International Space Station, who’s responsible for installing updates, what happens if an incident occurs, and lots more besides…

Read on…

Hi folks – from Indonesia, where we’re holding our yearly international cybersecurity conference SAS – the Security Analyst Summit.

Dozens of cybersecurity events take place around the world every year, but ours has its own special format – its own special work-hard-play-hard ethic, and it’s always by the sea in a tropical clime. It attracts leading analysts and researchers of the most complex cyberattacks, and this year we’re in Bali ->

Read on…