Author: lbhuston

Why I Stopped Collecting AI Prompt Samples – And What You Should Do Instead

/ lbhuston / Leave a comment

For a while, I was deep into collecting AI prompt samples, searching for the perfect prompt formula to get optimal results from various AI models. I spent hours tweaking phrasing, experimenting with structure, and trying to crack the code of prompt engineering. The idea was that, with the right prompt, the AI would give me exactly what I needed in one go.

Prompts

But over time, I realized something important: there are only a handful of core templates that work consistently across different use cases. Even better, the emerging best practice is to simply ask the AI itself to generate a custom prompt tailored to your specific needs. Here’s why I stopped collecting samples—and how you can use this approach effectively.

Core AI Prompt Templates That Work

After testing countless variations, I found that most use cases fall under just 3-5 common templates. These can be adapted to almost any scenario, from technical instructions to creative brainstorming. Let me walk you through the core templates that have proven most effective for me.

1. Descriptive Writing Prompt Template

Example: “Write a 200-word description of a serene forest, emphasizing the sights and sounds of nature.”

Fillable template: “Write a []-word description of [], emphasizing [__].”

2. Problem-Solving Prompt Template

Example: “Generate a step-by-step solution to solve data corruption in a database, taking into account low storage capacity.”

Fillable template: “Generate a step-by-step solution to solve [], taking into account [].”

3. Creative Brainstorming Prompt Template

Example: “List 10 ideas for an innovative marketing campaign, considering a budget of under $10,000.”

Fillable template: “List [] ideas for [], considering [__].”

4. Summary and Analysis Prompt Template

Example: “Summarize the key points of the latest cybersecurity report, focusing on potential threats to small businesses.”

Fillable template: “Summarize the key points of [], focusing on [].”

5. Instructional Guide Prompt Template

Example: “Explain how to install a WordPress plugin in five steps, suitable for a non-technical audience.”

Fillable template: “Explain how to complete [] in [] steps, suitable for a [__].”

Why the Emerging Best Practice Is to Ask the AI for a Custom Prompt

The real breakthrough in working with AI prompts has come from an unexpected source: asking the AI itself to generate a custom prompt for your needs. At first, this approach seemed almost too simplistic. After all, wasn’t the whole point of prompt engineering to manually craft the perfect prompt? But as I experimented, I discovered that this method works astonishingly well.

Here’s a simple template you can use to get the AI to design the perfect prompt:

AI-Generated Custom Prompt Template

Example: “Create a prompt that will help me generate an email campaign for a new product launch, considering our target audience is mostly millennial professionals.”

Fillable template: “Create a prompt that will help me [], considering [].”

Conclusion

Rather than endlessly collecting and refining prompt samples, I’ve discovered that a few reliable templates can cover most use cases. If you’ve ever found yourself bogged down by the intricacies of prompt engineering, take a step back. Focus on these core templates, and when in doubt, ask the AI for a custom solution. It’s faster, more efficient, and often more precise than trying to come up with the “perfect” prompt on your own.

Give it a try the next time you need a prompt tailored to your specific needs. You might just find that the AI knows better than we do—and that’s a good thing.

 

 

* AI tools were used as a research assistant for this content.

The Entourage Effect in Cybersecurity and Life: Amplifying Results with Minimal Effort

/ lbhuston / Leave a comment

In the world of cybersecurity, business, and even personal growth, we’re often told to focus on the few things that drive the majority of outcomes. The Pareto Principle, or the “80/20 rule,” is often cited as the key to efficiency: 20% of inputs will lead to 80% of results. But what about the remaining 80% of factors that don’t seem to hold the same weight? Is it wise to ignore them entirely, or is there a way to harness them strategically?

DefenseInDepth

In my experience, both in cybersecurity and life, I’ve found that while the core interventions drive most results, there’s power in layering smaller, easy-to-implement actions around these key elements. I call this the entourage effect: by combining secondary controls or interventions that may not be game-changers by themselves, we amplify the success of the critical 20%.

Deconstructing Problems and Applying Pareto

At the heart of my approach is first principles thinking. I break down a problem to its most fundamental components and from there, apply the Pareto Principle to find the highest-impact solutions. This is typically straightforward once the problem is deconstructed: the core 20% emerges naturally, whether it’s in optimizing cybersecurity systems, designing business processes, or improving personal routines like fitness recovery.

For instance, in my workout recovery routine, the 20% that delivers 80% of the results is clear: sleep optimization and hydration. These are the most critical factors, requiring focus and discipline. However, it doesn’t stop there.

The Entourage Effect: Supporting and Amplifying Results

The next step is where the entourage effect comes into play. Once I’ve identified the big drivers, I start looking at the remaining 80% of possible interventions. I evaluate them based on two simple criteria:

  • Ease of implementation
  • Potential for return

If a smaller action is easy to integrate, has minimal downside, and can offer any form of return—whether it’s amplifying the main effort or providing an incremental improvement—it gets added to my solution set. In the case of workout recovery, these might include cold exposure, hot tub or sauna use, consuming turmeric, or simple massage. These steps don’t require much time, focus, or resources. They can be done passively or alongside other activities throughout my day.

By adding these smaller steps, I’m essentially surrounding the big actions with a layer of support, making it easier to achieve the overall goal—recovery, in this case—even on days when I’m not at my best.

Applying the Entourage Effect in Cybersecurity

In cybersecurity, the same logic applies. The Pareto control for many systems is strong authentication. But in the real world, focusing solely on one control leaves room for exploitation in unexpected ways. This is where compensating controls, or secondary measures, come in—defense in depth, as we often call it.

Take authentication. The “Pareto” 20% is clear: a solid, multi-factor authentication system. But smaller compensating controls such as honeypots, event thresholding, or additional prevention and detection mechanisms around attack surfaces add extra layers of security. These controls may not block every attack, but they can amplify the core defense by alerting you early or deterring certain threat actors.

Much like the entourage effect in personal routines, these smaller cybersecurity controls don’t require large resources or attention. Their purpose is to amplify the main defense, providing that extra buffer against potential threats.

Knowing When to Stop

However, it’s equally important to know when to stop. Not everything needs to be 100% optimized. Sometimes the 80% solution is good enough, depending on the risk appetite of the individual or organization. I make decisions based on the resource-to-return ratio: if a secondary intervention takes too much effort for a minimal return, I skip it.

Ultimately, the decision to add or ignore smaller actions comes down to practicality. Does this smaller step cost more in time, resources, or complexity than it delivers? If yes, I leave it out. But if it’s low effort and provides even a small return, it becomes part of the system.

Conclusion: Leveraging the Entourage Effect for Efficiency

The entourage effect, when layered on top of Pareto’s principle, helps drive sustained success. By focusing on the 20% that matters most while strategically adding easy, low-cost interventions around it, we create a system that works even when resources are low or attention is divided. Whether it’s in cybersecurity, business, or personal growth, understanding how to build a system that amplifies its own core interventions is key to both efficiency and resilience.

As with all things, balance is crucial. Overloading your system with unnecessary layers can lead to diminishing returns, but if done right, these secondary measures become a powerful way to enhance the performance of your core efforts.

 

* AI tools were used as a research assistant for this content.

Introduction to the Decision Matrix

/ lbhuston / Leave a comment

Introduction

The following is a detailed example of using a decision matrix and scoring mechanism to evaluate and make a complex decision. It should serve as a basic introduction to the decision matrix mental model and its uses.

Using the Decision Matrix to Choose a Career Path

Making a career decision can be difficult, especially when you have multiple options with various trade-offs. The decision matrix is a helpful tool to evaluate your choices systematically and make a more rational decision. Here’s an example of how to use it in the context of choosing a new career path.

Scenario

You’re currently in a stable but unfulfilling job and are considering a career change. You have three options:

  1. Pursue a job in a different industry (Industry B).
  2. Go back to school for a graduate degree.
  3. Stay in your current job and aim for a promotion.

Step-by-Step Walkthrough of the Decision Matrix

1. Identify the Criteria

First, list the key criteria that are important in your decision. For this example, the following factors matter:

  • Job satisfaction: How much you’ll enjoy the work
  • Financial stability: Potential salary or financial support
  • Work-life balance: The balance between personal time and work
  • Growth opportunities: Career advancement potential
  • Risk: Uncertainty involved with each path

2. Assign Weights to Each Criterion

Not all criteria have the same importance. Let’s assume you weigh the factors as follows (out of 10):

  • Job satisfaction: 8
  • Financial stability: 6
  • Work-life balance: 7
  • Growth opportunities: 9
  • Risk: 5

3. Rate Each Option Against the Criteria

Next, rate each option on a scale of 1 to 10 for how well it satisfies each criterion. Here’s the table of ratings:

Option Job Satisfaction Financial Stability Work-Life Balance Growth Opportunities Risk
Pursue Industry B Job 7 6 6 8 6
Go Back to School (Graduate) 9 4 7 9 3
Stay in Current Job 5 7 8 6 9

4. Multiply the Ratings by the Weights

Now, multiply the ratings for each option by the weight assigned to each criterion to calculate the total score:

Option Job Satisfaction (8) Financial Stability (6) Work-Life Balance (7) Growth Opportunities (9) Risk (5) Total Score
Pursue Industry B Job 56 36 42 72 30 236
Go Back to School (Graduate) 72 24 49 81 15 241
Stay in Current Job 40 42 56 54 45 237

5. Analyze the Results

Add up the scores for each option:

  • Industry B Job: 236
  • Graduate School: 241
  • Stay in Current Job: 237

In this case, going back to school has the highest score (241), which suggests that it might be the best option based on your weighted criteria. However, the scores for staying in your current job (237) and pursuing a job in a different industry (236) are also close, indicating that all three options have their own merits.

6. Make a Decision

Now you can review the results to decide if the highest scoring option aligns with your intuition or needs further consideration. The decision matrix gives you an objective framework for analysis.

 

 

* AI tools were used as a research assistant for this content.

 

The Power of Compounding: How Small Decisions Can Add Up to Big Outcomes

/ lbhuston / Leave a comment

Have you ever stopped to think about the small decisions you make on a daily basis? They may seem insignificant at first, but the truth is that
they can have a profound impact on your life over time. This phenomenon is known as compounding, and it’s a powerful force that can work in both positive and negative ways.

In this post, we’ll explore how compounding can affect our lives for good or bad, and provide practical tips on how to harness its power to achieve our goals and improve our well-being.

The Good: Compounding Our Success

When we make decisions that are beneficial to us, the results can compound over time in a powerful way. Here are a few examples:

Savings: Let’s say you start saving $100 per month at an average annual return of 7%. After one year, you’ll have $1,200. But here’s the thing: that $1,200 earns interest itself, so after two years, your savings will be $1,374. By the time you reach five years, you’ll have over $2,500 in savings, even though you’ve only contributed $5,000 ($100/month x 50 months). This is compounding at work!

Investments: Investing a small amount of money each month can lead to significant wealth creation over time. Even if you start with just $10 per week and earn an average annual return of 8%, your investment will grow exponentially.

Career Advancement: Making smart career choices, such as taking on new challenges or developing valuable skills, can lead to greater job security and higher earning potential. As you progress in your career, the opportunities for advancement and increased compensation compound over time.

The Bad: Compounding Our Problems

Unfortunately, compounding can also work against us when we make decisions that are detrimental to our well-being. Here are a few examples:

Debt: Let’s say you take out a small loan of $1,000 at an interest rate of 18%. If you only pay the minimum payment each month, it may seem like you’re making progress on paying off your debt. However, the interest charges will continue to accrue, and before long, you’ll owe much more than you initially borrowed.

Bad Habits: Engaging in unhealthy habits, such as smoking or overeating, can lead to serious health problems over time. The damage caused by these habits can compound quickly, making it harder to reverse course later on.

Negative Relationships: Surrounding yourself with people who are toxic or unsupportive can have a corrosive effect on your mental and emotional well-being. As you continue to interact with these individuals, the negative emotions and experiences can build up over time.

Why Does Compounding Work So Well?

So, why does compounding seem to work so powerfully in both positive and negative ways? There are several reasons:

Time: The passage of time allows even small effects to add up quickly. As we’ve seen with savings and investments, the interest earned on our money can grow exponentially over time.

Momentum: Compounding creates momentum, which is difficult to stop once it gets started. As we experience success or failure in one area of life, it can have a ripple effect on other areas as well.

Habits: Repeating behaviors, whether good or bad, creates habits that are hard to break. This means that our small decisions today can lead to big outcomes tomorrow.

How Can We Harness the Power of Compounding?

So, how can we take advantage of compounding in a positive way and avoid its negative effects?

Start Small: Don’t try to tackle everything at once. Start with small, achievable goals, such as saving $100 per month or investing a little bit each week.

Make Smart Choices: Educate yourself about the potential consequences of your decisions, whether they’re related to finances, relationships, or career development.

Be Consistent: Consistency is key when it comes to compounding. Make regular contributions to your savings or investments, and stick to healthy
habits like exercise and a balanced diet.

Seek Support: Surround yourself with people who support and encourage you, whether they’re friends, family members, or mentors.

Conclusion

Compounding is a powerful force that can work in both positive and negative ways. By understanding how it affects our lives and taking steps to harness its power, we can achieve great things and avoid the pitfalls of poor decision-making. Whether you’re looking to grow your savings, advance your career, or simply improve your overall well-being, remember that small decisions today can lead to big outcomes tomorrow.

So, take control of your life and start making smart choices today. The power of compounding is waiting for you!

 

* AI tools were used as a research assistant for this content. Based on personal insights and commentary.

Startups Face Uphill Battle Raising Series B in Challenging Funding Environment

/ lbhuston / Leave a comment

The latest data paints a concerning picture for startups looking to raise Series B rounds. According to Crunchbase, U.S. startups are facing the longest Series B closure times since 2012, with a median of 28 months between Series A and B funding[1]. Out of 4,400 startups that raised a Series A in 2020-2021, only 1,600 (36%) have gone on to secure a Series B[1].

 The Series B Crunch

Raising a Series B has always been a critical and challenging milestone for startups. At the Series B stage, investors expect to see strong business fundamentals, scalable unit economics, and a clear path to profitability[1]. Many startups that looked promising at the Series A stage stumble when it comes time to prove out their business model and show sustainable growth.

In the current environment, with tighter VC budgets and a flight to quality, Series B investors are being even more selective. They are focusing their dollars on startups with exceptional metrics and category-leading potential. Even well-funded Series A startups with strong teams and products are getting caught in the Series B crunch.

 Sector Bright Spots

It’s not all doom and gloom though. Some sectors, particularly artificial intelligence, are still attracting large Series B rounds from investors eager to back the next breakout company.

Elon Musk’s xAI, for example, raised a massive $6 billion Series B just 6 months after its prior round[1]. Other hot AI startups like Anthropic and Adept have also raised supersized growth rounds in short order.

So while the bar for Series B is higher than ever for most startups, there are certainly exceptions for buzzworthy companies in the right sectors catching investors’ attention.

 Advice for Founders

For the majority of startups, the key to navigating the perilous Series B landscape is to plan ahead, be realistic, and explore all options:

– Start early: Given the long Series B closure times, it’s never too early to start building relationships with potential Series B leads. Plant seeds 6-12 months ahead of when you’ll need the capital.

– Shore up insider support: The path of least resistance is often an insider round led by existing investors. Make sure you’re communicating proactively with your Series A investors and getting their buy-in to preempt or at least backstop your Series B.

– Consider alternatives: If traditional Series B funding is proving elusive, look into alternative financing options like debt, revenue-based financing, or even an early exit to a strategic acquirer. The name of the game is extending runway however you can.

– Be scrappy: With funding hard to come by, it’s time to shift into scrappy startup mode. Cut burn, extend cash, and do more with less. Demonstrate to investors that you can execute in a capital-efficient manner.

Raising a Series B in this environment is undoubtedly challenging for most startups. But with foresight, creativity, and grit, savvy founders can still find a way to get it done. After all, constraints breed innovation.

 AI tools were used as a research assistant for this content. Written by Brent Huston with aid from Perplexity.

Citations:

[1] https://www.bizjournals.com/sanfrancisco/inno/stories/inno-insights/2024/07/18/series-b-gap-startups-higher-interest-rates.html
[2] https://houston.innovationmap.com/q4-2023-startup-funding-2666870949.html
[3] https://houston.innovationmap.com/2024-q1-funding-houston-startups-2667750361.html

Reduced Capital Returns to VC and PE Firms in 2024

/ lbhuston / Leave a comment

The private equity (PE) and venture capital (VC) industry has faced challenges in 2024 with
reduced levels of capital returning to firms. Despite some optimism and resilience, the
slowdown in deal activity and exits has impacted the ability of PE and VC firms to return capital
to their investors.

Venture Capital Slowdown

The slowdown in VC deal activity, which began in Q3 2022, has persisted into Q1 2024. In the
first quarter, $36.6 billion was invested across 3,925 deals, comparable to the levels seen in
2023[4]. Factors contributing to this slowdown include high inflation, uncertainty about future
interest rate cuts, and geopolitical fragility.

Exits have been a significant issue for VC firms. Q1 2024 saw exit values of $18.4 billion, only
slightly better than most quarters in 2023. The lack of exits has particularly affected unicorn
companies and their investors, with an average holding period exceeding eight years,
increasing liquidity risk[4].

Private Equity Challenges

Private equity activity saw its strongest quarter in two years in Q2 2024, with firms announcing
122 deals valued at $196 billion[5]. However, the valuation gap between sellers and buyers has
been a primary impediment to deal-making since interest rates began rising in mid-2022.

The lack of liquidity and distributions back to limited partners (LPs) has made them cautious
when allocating capital to PE funds[4]. This has contributed to a slowdown in fundraising, with
only 100 VC funds raising $9.3 billion in Q1 2024.

Impact on Limited Partners

Limited partners investing in private markets have been affected by the reduced capital returns.
In a survey, 61% of LPs reported that they will increase their asset allocation to private credit in
2024[1], potentially seeking alternative investment opportunities.

The fundraising outlook for PE firms has slightly improved, with only 15% of general partner
respondents expecting deteriorating conditions in 2024, compared to 45% at the start of 2023.
However, VC firms still have concerns about LPs reducing their allocation to venture capital[1].

Looking Ahead

Despite the challenges, there are some positive signs for the PE and VC industry. Corporate
investors have signaled plans to increase investment in corporate venture capital funds in
2024[3], expanding the pool of available capital. Additionally, PE firms have accumulated a
record $317 billion in dry powder as of Q1 2024, resulting from strong fundraising in 2021-2022
and a slowdown in capital deployment[4].

As the industry navigates this challenging period, entrepreneurs and fund managers will need
to focus on building resilient, profitable companies and managing capital carefully. Those who
can adapt and demonstrate clear paths to growth will be best positioned to attract investment
and succeed in the current environment[3].

Citations:
[1] https://press.spglobal.com/2024-04-29-Private-Equity-and-Venture-Capital-Industry-
Shows-Resilience-and-Optimism-in-2024-Amidst-Shifting-Market-Dynamics-according-to-S-
P-Global-Market-Intelligence-survey
[2] https://www.cambridgeassociates.com/insight/2024-outlook-private-equity-venture-capital/
[3] https://www.ey.com/en_us/insights/growth/venture-capital-market-to-seek-new-floor-
in-2024
[4] https://www.eisneramper.com/insights/financial-services/venture-capital-q1-vc-blog-2024/
[5] https://www.ey.com/en_gl/insights/private-equity/pulse

 

* AI tools were used as a research assistant for this content.

Don’t Get Caught in the Web: 5 Online Scams You Need to Know About Now

/ lbhuston / Leave a comment

 

In today’s digital world, it’s crucial to be aware of the various online scams that can put your personal information, finances, and emotional wellbeing at risk. This post will explain some common internet scams in simple terms, helping you recognize and avoid them.

OnlineScammer

Sextortion

Sextortion is a form of blackmail where scammers threaten to share intimate photos or videos of you unless you pay them money. Here’s how it typically works:

  1. The scammer contacts you, often pretending to be an attractive person interested in a relationship.
  2. They convince you to share intimate photos or videos, or claim they’ve hacked your webcam to obtain such content.
  3. The scammer then threatens to send these images to your friends, family, or coworkers unless you pay them.

How to protect yourself: Be extremely cautious about sharing intimate content online. Remember, even if a scammer does have compromising images, paying them rarely solves the problem – they’ll likely just demand more money.

Pig Butchering

This oddly-named scam combines elements of romance scams and investment fraud. The name comes from the idea of “fattening up a pig before slaughter.” Here’s the process:

  1. The scammer builds a relationship with you over time, often romantically.
  2. They gain your trust and eventually start talking about a great investment opportunity.
  3. You’re encouraged to invest small amounts at first, and may even see some returns.
  4. As you invest more, the scammer disappears with all your money.

How to protect yourself: Be wary of investment advice from people you’ve only met online. Always research investments independently and consult with licensed financial advisors.

Phishing

Phishing scams try to trick you into revealing sensitive information like passwords or credit card numbers. They often work like this:

  1. You receive an email or message that appears to be from a legitimate company or website.
  2. The message urges you to “verify your account” or claims there’s a problem that needs your immediate attention.
  3. You’re directed to a fake website that looks real, where you’re asked to enter your login details or other sensitive information.

How to protect yourself: Always double-check the sender’s email address and be cautious of urgent requests. Instead of clicking links in emails, go directly to the company’s website by typing the address in your browser.

Tech Support Scams

In these scams, fraudsters pose as tech support personnel to gain access to your computer or financial information:

  1. You receive a call or pop-up message claiming there’s a problem with your computer.
  2. The scammer offers to fix the issue but needs remote access to your computer.
  3. Once they have access, they can install malware or access your personal files.

How to protect yourself: Legitimate tech companies won’t contact you unsolicited about computer problems. If you’re concerned, contact the company directly using their official website or phone number.

Underage Impersonation Scams

This type of scam often targets adults who have been engaging in online dating or relationships. Here’s how it typically unfolds:

  1. The scammer builds an online relationship with the victim, often through dating sites or social media.
  2. After establishing trust and possibly exchanging intimate messages or photos, the scammer reveals they are underage.
  3. The scammer (or an accomplice posing as a parent or law enforcement) then demands money to keep quiet, threatening legal action or exposure.

How to protect yourself: Be cautious when engaging in online relationships. Verify the identity of people you meet online, and be wary of anyone who seems hesitant to video chat or meet in person. Remember, engaging with minors in sexual contexts is illegal and extremely serious.

How to Detect, Prevent, and Report Online Scams

Here’s a quick guide to help you stay safe online:

Detect:

  • Be skeptical of unsolicited contacts or “too good to be true” offers.
  • Watch for poor grammar or spelling in official-looking messages.
  • Be wary of high-pressure tactics or threats.
  • Question any requests for personal information or money.

Prevent:

  • Use strong, unique passwords for each online account.
  • Enable two-factor authentication whenever possible.
  • Keep your software and operating systems up-to-date.
  • Don’t click on links or download attachments from unknown sources.
  • Be cautious about what personal information you share online.
  • Research before making investments or large purchases.

Report:

  • If you’ve been scammed, report it to your local law enforcement.
  • Report scams to the Federal Trade Commission at ftc.gov/complaint.
  • For internet crimes, file a report with the Internet Crime Complaint Center (IC3) at ic3.gov.
  • Report phishing attempts to the Anti-Phishing Working Group at reportphishing@apwg.org.
  • If the scam occurred on a specific platform (like Facebook or a dating site), report it to the platform as well.

Remember, it’s okay to take your time before responding to requests or making decisions online. Your safety and security are worth the extra caution!

Conclusion

While the internet can be a wonderful tool, it’s important to stay vigilant. If something seems too good to be true, it probably is. Always verify the identity of people you meet online, be cautious about sharing personal information, and trust your instincts if something feels off.

By staying informed about these common scams and following best practices for online safety, you can significantly reduce your risk of falling victim to online fraud. Stay safe out there!

 

 

* AI tools were used as a research assistant for this content.

 

Sophos Discovers an EDR Killer Malware For Sale and In Use

/ lbhuston / Leave a comment

We’ve got a new player in the malware game that’s making waves, and it’s called EDRKillShifter. If you’re in the cybersecurity world, this is something you need to know about. Let’s dive into the top 10 things you need to know about this latest threat.

1. Meet EDRKillShifter: The New Sheriff in Malware Town 
Sophos analysts recently uncovered this new utility, EDRKillShifter, being used by ransomware gangs to take out endpoint detection and response (EDR) systems. It’s like the latest weapon in their arsenal, and it’s got everyone talking.

2. Malware’s Own Delivery Service 
EDRKillShifter acts as the delivery man for vulnerable drivers that disable endpoint protection. Think of it as the Uber Eats of malware—except instead of delivering your favorite meal, it serves up a disabled security system.

3. The Three-Step Attack Plan 
EDRKillShifter’s attack method is straightforward:
– Step 1: The attacker enters a secret password and hits execute.
– Step 2: The tool decrypts its hidden payload.
– Step 3: A Go-based package emerges, exploiting a driver vulnerability to unhook your EDR. Just like that, your defenses are down.

4. Russian Fingerprints All Over It 
There are strong indicators that this malware has Russian origins. The original filename is Loader.exe, it masquerades as a product called ARK-Game, and the development environment shows signs of Russian localization. It’s hard to call that a coincidence.

5. A Chameleon in Code 
EDRKillShifter employs self-modifying code in its second stage to evade analysis. It’s like a chameleon, constantly changing to avoid detection and analysis. This is one slippery piece of malware.

6. Different Payloads, Same Goal 
While the final payloads might look different each time, they all aim to do the same thing: exploit a vulnerable driver and disable your EDR. The goal is to leave your systems defenseless.

7. Open-Source Exploits 
The exploit code for these driver vulnerabilities is openly available on GitHub. Malware authors are simply copying and pasting this code into their own malicious creations. It’s a reminder that open-source can be a double-edged sword.

8. A Malware Assembly Line 
Sophos suspects that there may be a mastermind behind EDRKillShifter, selling the loader on the dark web while script kiddies create the final payloads. It’s like a well-oiled malware assembly line, churning out threats at scale.

9. Sophos is on the Case 
Don’t panic just yet—Sophos products detect EDRKillShifter as Troj/KillAV-KG, and their behavioral protection rules can block its most dangerous moves. They’re already a step ahead in this cat-and-mouse game.

10. How to Protect Yourself 
To safeguard your systems from EDRKillShifter:
– Enable tamper protection in your endpoint security.
– Separate admin and user accounts to minimize risk.
– Stay up-to-date with Microsoft’s driver de-certification patches to close off vulnerabilities.

So, there you have it—EDRKillShifter is the latest and greatest in the realm of EDR-killing malware. But with the right knowledge and defenses, we can keep it at bay. Stay vigilant and stay safe out there!

References:
https://news.sophos.com/en-us/2024/08/14/edr-kill-shifter/

* AI tools were used as a research assistant for this content.

The Great Vendor Concentration Risk Circus: A Brave New World?

/ lbhuston / Leave a comment

Hey folks, buckle up because we’re diving into a wild tale that became the talk of the tech town this past weekend—the CrowdStrike and Microsoft outage! As always, I’m here to keep it light on the details but heavy on the takeaways. So grab your popcorn, and let’s roll!

ConcentrationRisk

First up, let’s chat about vendor concentration risk. In simple terms, it’s like putting all your eggs in one basket, or as I like to call it—having one favorite vendor at the carnival. Sure, they may have the greatest cotton candy, but when the vendor runs out, or their machine breaks down, you’re left sad and craving sugar! That’s what this outage highlighted for everyone relying on cloud services and cybersecurity—if that one vendor stumbles, everyone in line ends up feeling it![2][4]

Now, what happened with CrowdStrike and Microsoft? Well, it turns out that a software update on July 18 flung a wrench in the gears of countless IT systems across the globe. Reports came flooding in from big-name institutions—banks, airlines, and even emergency services were caught in the chaos! Over 8.5 million Windows devices were affected, reminding us just how interconnected our tech ecosystems truly are.[3][4]

So, what can we learn from this whole spectacle? 

1. Diversify Your Vendors: Don’t just eat at one food stall! Utilize multiple vendors for essential services to reduce the fallout if one faces a hiccup.[1][2]

2. Communicate with Employees: Keep your team informed and calm during hiccups. This situation showed us how vital communication is during a tech mishap.  

3. Prepare for Disruptions: Have contingency plans! Know what to do if your vendors experience turbulence.[1][2]

In closing, while tech might have some dramatic glitches now and then, they are vital reminders of our interconnected world. Let’s take this as a fun little lesson in preparedness and resilience! Until next time, keep your systems and vendors varied and safe!

 

Citations:

[1] https://www.venminder.com/blog/pros-and-cons-of-vendor-concentration-risk

[2] https://mitratech.com/resource-hub/blog/what-is-concentration-risk/

[3] https://edition.cnn.com/2024/07/22/us/microsoft-power-outage-crowdstrike-it/index.html

[4] https://www.usatoday.com/story/money/2024/07/20/how-microsoft-crowdstrike-update-large-impact/74477759007/

[5] https://ncua.gov/regulation-supervision/letters-credit-unions-other-guidance/concentration-risk-0

 

 

 AI tools were used as a research assistant for this content.

How Running a BBS Shaped My Path in Information Security

/ lbhuston / Leave a comment

Today, I want to share with you how my early experiences with Magick Mountain BBS laid the foundation for my career in information security and my role at MicroSolved.

80sIBM

It all started in the late 80s when my fascination with telecommunications and the allure of digital communication systems led me to discover the world of Bulletin Board Systems (BBS). By 1989, I had launched Magick Mountain BBS, a platform that began as a simple operation on an IBM PC clone and evolved into a sophisticated network on an Amiga 500, serving a bustling community interested in everything from programming to hacking.

Running Magick Mountain was like stepping into a new world where information was at our fingertips, albeit not as seamlessly as it is today with the internet. This was a world where modems connected curious minds, and every conversation could spark an idea. The BBS hosted discussions on a myriad of topics, from technology to social issues, and became a central hub for like-minded individuals to connect and share knowledge.

The technical challenges were significant. Setting up and maintaining the BBS required a deep understanding of hardware and software. I juggled DOS systems, dealt with dual floppy setups, and later navigated the complexities of Amiga OS. Each upgrade taught me resilience and the importance of staying current with technological advances, skills that are crucial in the ever-evolving field of cybersecurity.

But what truly shaped my career was the community management aspect. Magick Mountain was more than just a platform; it was a community. Managing this community taught me the delicate balance of fostering open communication while ensuring a safe environment—paralleling the core challenges of modern cybersecurity.

These early experiences honed my skills in handling sensitive information and spotting vulnerabilities, paving the way for my transition into the corporate world. They ingrained in me a hacker’s mindset of curiosity and pragmatism, which later became instrumental in founding MicroSolved in 1992. Here, I applied the lessons learned from BBS days to real-world information security challenges, helping businesses protect themselves against cyber threats.

Reflecting on the evolution from BBS to today’s digital ecosystems, the principles of community building, knowledge exchange, and security management remain as relevant as ever. These principles guide our work at MicroSolved, as we navigate the complexities of protecting enterprise systems in an interconnected world.

To those aspiring to make a mark in cybersecurity, my advice is to nurture your curiosity. Dive deep into technology, join communities, share your knowledge, and keep pushing the boundaries. The digital world is vast, and much like the BBS days, there’s always something new on the horizon.

Thank you for reading. I hope my journey from running a BBS to leading a cybersecurity firm inspires you to pursue your passions and explore the endless possibilities in the digital realm.

 

*AI was used in the creation of this content. It created the final draft based on a series of interviews and Q&A sessions with an AI engine. All content is true and based on my words and ideas in those interviews and Q&A sessions.