Security Now Discusses Layered Defenses Against Internal Threats

Summary

Steve Gibson and Leo Laporte discuss how social engineering can bypass perimeter defenses and why organizations should combine IP filtering, application allowlisting, segmentation and least privilege.

Key points

• Gibson recommends restricting access to enterprise VPNs and other services to known IP addresses as an additional layer when authentication fails.
• The speakers describe social engineering as a way around perimeter defenses and say employee training cannot prevent every mistake.
• Gibson recommends evaluating what a compromised endpoint could access and limiting privileges and departmental network access accordingly.
• Application allowlisting can restrict unauthorized software, but the speakers acknowledge its operational and usability costs.
• Gibson suggests continuous reauthentication and biometrics as possible ways to balance security with convenience.
• The speakers discuss local AI assistants as a potential way to warn users about deceptive links or unsafe commands, while presenting the idea as exploratory.

Countries