July 20th, 2020

In this video, Kyle, Wes, and Paul discuss the critical DNS vulnerability found in Microsoft’s service, exploring its implications and the importance of the MITRE ATT&CK framework for better understanding and managing security threats. They delve into how Managed Service Providers (MSPs) can effectively communicate such vulnerabilities to their clients without causing unnecessary alarm, and the balance between ensuring security and maintaining business operations. The conversation also touches on the evolving landscape of vulnerability management and the need for MSPs to integrate these practices into their service offerings to provide comprehensive security solutions for their clients.

• The webinar focused on vulnerability management, particularly dealing with a 17-year-old critical vulnerability in Microsoft’s DNS with a CVSS score of 10.
• The importance of the MITRE ATT&CK framework was highlighted as a unifying taxonomy for understanding and communicating about cybersecurity threats and tactics.
• Discussion around DNS encryption methods, such as DNS over TLS (DOT) and DNS over HTTPS (DOH), and their implications for network security and privacy.