A Fireside Chat

The conversation opens with social media as both a tool and a hazard. Early WannaCry indicators surfaced on Twitter, yet the same platforms have spread propaganda and eroded trust. The speaker names five overlapping groups behind disinformation: foreign intelligence services, political activists, conspiracy communities, anti-vaccine groups and profiteers. Education is offered as a partial remedy, including a 2019 government awareness campaign that used a pineapple-pizza debate to explain how influence operations unfold.

The middle section covers software supply chains. The speaker argues the attacks are not new, but their reach is growing because adversaries target single points of leverage such as widely used vendors. Outsourcing shifts risk to third parties without removing it, and basic practices remain hard. He describes an executive order requiring software bills of materials and stronger build and testing requirements, while raising concerns about cost and small vendors. Product labeling, a shared vocabulary, and better protection for industrial control systems and rural utilities also come up.

The closing turns more optimistic. The speaker sees progress where executives treat security as a differentiator and empower security leaders to act. He encourages skepticism toward any single news source and reflects on leadership lessons about empathy. His final point is that risk is managed continuously rather than eliminated.