Don’t be the next Solarwinds. A talk with Samantha Schwartz - Ascent Conference

Don’t be the next Solarwinds. A talk with Samantha Schwartz

December 2020 saw the exposure of the largest, most sophisticated, and stealth cyberattack seen to-date. SolarWinds was subjected to an attack that reportedly compromised 18,000 of its clients, including at least nine federal agencies. Alarmingly the hack went undetected for several months. Its sheer size and magnitude mean that it may take years to secure the networks again. But this was only the latest in a string of high-profile cyber attacks to have hit headlines in recent years. In 2017 more than 60 countries were overwhelmed by the NotPetya ransomware outbreak, a veritable cybersecurity horror story that piqued the interest of Samantha Schwartz. ‘I found it so creepy‘ says Schwartz ‘everybody is linked in cyber, whether it’s the consumer, the enterprise or government‘.  It was this connection that drove her to join the ranks of the information security community. 

Samantha Schwartz is a reporter for CyberSecurity Dive and will be moderating a panel discussion at Spotlight On Cybersecurity: SolarWinds deep dive: what happened, and how to prevent it at your organization. We recently caught up with Samantha about what is top of mind in cybersecurity.

What are your biggest cybersecurity concerns right now?

“Whenever a major hack happens, that’s what sort of takes the forefront.” Right now the buzzwords are supply chain security, supply chain attacks, and ransomware. There is also a growing interest in information sharing because of recent attacks. As an aside note, Samantha expresses a personal interest in private and public sector cooperation, information sharing, and any reluctance associated with it.

What got you excited about Cybersecurity in the first place? 

Samantha first started working for CyberSecurity Dive in June 2017 “NotPetya was my introduction to cybersecurity. As a newbie, I found it so creepy. Everybody is linked in cyber, whether it’s the consumer or whether it’s the enterprise or whether it’s the government.” Mentioning the Equifax, Uber cases, and other giant breaches, Samantha ponders “it sounds so bad because it’s exciting and it’s exciting for maybe the wrong reasons”. Yet she stresses that this excitement is out of character describing herself as “a very anxious person, I stick to the Great British Baking Show.” 

Has your role in cybersecurity led to changes in how you consume content? Has cybercrime affected you?

Samantha explains that she is increasingly suspicious of any online interactions. She reveals how she has been a victim of cybercrime “As a teenager” she explains,I paid a ransom because I was illegally streaming a video or a movie online. And it wasn’t even a new movie. It was very old. But I was so freaked out and I paid the ransom. As a cybersecurity reporter now, I look back on that and think, even then I was fairly well versed in online security and digital security. So I can’t imagine what it’s like for the average person.”  Now working in the field, Samantha has become particularly interested in the human aspect of cybersecurity as well as its danger “it doesn’t take much to cause so much damage.”

 With the fast growth in consumer data, is the role of cybersecurity becoming more important and prominent? 

“I do think security, in general, is top of mind, even for consumers, because of these giant breaches that we’re all being notified about” Samantha keeps a close ear to the ground when it comes to federal privacy law because she believes it plays an important role in privacy law. When it comes to data collection accountability, the question to ask companies is“do you even need half the data that you’re collecting? And more often than not, these companies are saying no, but we collect it” 

On the subject of private and public sector collaboration…

For Samantha Cybersecurity is a very obvious and clear gateway for the private and public sector to work together. She explains that often when we think about the private sector, we look at it with a critical eye because we expect companies to look out for themselves. “But cybersecurity is so different because of the value of information sharing… and how interwoven we are with the government, and what incentives and disincentives we have with working with one another”.

What are the three biggest aspects of your session that people can look forward to hearing about at Spotlight On Cybersecurity?

“This session will highlight how not to become the next conduit for an adversarial nations state attack…because it could happen to anybody.”

Samantha Schwartz will join an expert panel of speakers that will be live on April 7th at the Spotlight On Cybersecurity. Join us to find out about the cutting-edge trends in Cybersecurity. Save your spot today!

Privacy Notice

This privacy notice discloses the privacy practices for (www.ascentconf.com). This privacy notice applies solely to information collected by this website. It will notify you of the following:

  • What personally identifiable information is collected from you through the website, how it is used and with whom it may be shared.
  • What choices are available to you regarding the use of your data.
  • The security procedures in place to protect the misuse of your information.
  • How you can correct any inaccuracies in the information.

Information Collection, Use, and Sharing

We are the sole owners of the information collected on this site. We only have access to/collect information that you voluntarily give us via email or other direct contact from you. We will not sell or rent this information to anyone.

We will use your information to respond to you, regarding the reason you contacted us. We will not share your information with any third party outside of our organization, other than as necessary to fulfill your request, e.g. to ship an order.

Unless you ask us not to, we may contact you via email in the future to tell you about specials, new products or services, or changes to this privacy policy.

Your Access to and Control Over Information

You may opt out of any future contacts from us at any time. You can do the following at any time by contacting us via the email address or phone number given on our website:

  • See what data we have about you, if any.
  • Change/correct any data we have about you.
  • Have us delete any data we have about you.
  • Express any concern you have about our use of your data.

Security

We take precautions to protect your information. When you submit sensitive information via the website, your information is protected both online and offline.

Wherever we collect sensitive information (such as credit card data), that information is encrypted and transmitted to us in a secure way. You can verify this by looking for a lock icon in the address bar and looking for “https” at the beginning of the address of the Web page.

While we use encryption to protect sensitive information transmitted online, we also protect your information offline. Only employees who need the information to perform a specific job (for example, billing or customer service) are granted access to personally identifiable information. The computers/servers in which we store personally identifiable information are kept in a secure environment.

If you feel that we are not abiding by this privacy policy, you should contact us immediately via telephone at 202-256-9707 or [email protected].