Startups

Learning the lessons from cybersecurity trash fires at TC Disrupt 2023

Comment

We’ve all seen headlines about major hacks and data breaches of major companies — it can feel like nobody’s safe. Security is a constant learning curve, and what we learn when things go wrong can help defend against similar threats and would-be incidents in the future.

That’s why we’re excited to welcome three of the sharpest security experts — Lesley Carhart, director of incident response, Dragos; Sherrod DeGrippo, director of threat intelligence strategy, Microsoft; and Rachel Tobac, friendly hacker and CEO, SocialProof Security — to the Security Stage on September 21 at TechCrunch Disrupt 2023.

In a session called “What We Can Learn from Cybersecurity Trash Fires,” our panel will talk about the lessons we can take from some of the cybersecurity horror stories — or “trash fires” — they’ve seen in their careers.

In this judgment-free space, we’ll discuss how security incidents can be prevented by learning and heeding the lessons from yesteryear. You’ll hear hand-picked examples of cybersecurity trash fires from the top professionals in their fields, and you’ll take away actionable advice and relatable guidance on both what — and what not — to do.

Come to learn how to make the world less hackable, and leave with the tools and knowledge to take on the challenges as the next generation of security leaders.

Learn more about our speakers — and their qualifications for tackling this challenging topic — below.

Lesley Carhart: Dragos, director of incident response for North America

Lesley Carhart leads response to, and proactively hunts for, threats in customers’ industrial control system (ICS) environments. After four years as a principal incident responder at Dragos, Lesley now manages a team of incident response and digital forensics professionals across North America. Carhart investigates commodity, targeted and insider threat cases in industrial networks. Carhart is also a certified instructor and curriculum developer for Dragos’ incident-response and threat-hunting courses.

Prior to joining Dragos, Carhart was the incident response team lead at Motorola Solutions. Lesley is honored to be retired from the U.S. Air Force Reserves and to have received recognition such as DEF CON Hacker of the Year, SANS Difference Maker, and Power Player from SC Magazine.

Carhart also organizes résumé and interview clinics at several cybersecurity conferences, and they lecture, blog and tweet prolifically about cybersecurity. When not working, Carhart enjoys being a youth martial arts instructor.

Sherrod DeGrippo: Microsoft, director of threat intelligence strategy

Sherrod DeGrippo was selected as Cybersecurity Woman of the Year in 2022 and Cybersecurity PR Spokesperson of the year for 2021. Prior to joining Microsoft, she was VP of threat research and detection at Proofpoint, where she led a global team of threat researchers, malware reverse engineers and threat intelligence analysts.

DeGrippo’s career in cybersecurity spans 19 years with prior roles that include leading the security business services team at Nexum, senior solutions engineer for Symantec, senior security consultant for Secureworks and senior network security analyst for the National Nuclear Security Administration (NNSA).

A frequently cited threat intelligence expert, DeGrippo’s media experience includes televised appearances on BBC News and commentary in the Wall Street Journal, CNN, The New York Times and more. She is a well-known public speaker having presented at Black Hat, RSA Conference,  Rocky Mountain Information Security Conference (RMISC), Sleuthcon and others. In her personal time, she co-hosts the cultural lifestyle podcast Bit Obscene and spends time with her rescue dog, Boris Karloff.

Rachel Tobac: SocialProof Security, friendly hacker and CEO

Rachel Tobac helps people and companies keep their data safe by training and pen testing them on social engineering risks. She was also second-place winner of Def Con’s wild spectator sport, the Social Engineering Capture the Flag contest, three years in a row.

Tobac has shared her real-life social engineering stories with NPR, Last Week Tonight with John Oliver, The New York Times, CNN, NBC Nightly News with Lester Holt and many more. In her remaining spare time, she sits on the CISA Technical Advisory Committee and is the chair of the board for the nonprofit Women in Security and Privacy (WISP), where she works to advance women to lead in the fields.


TechCrunch Disrupt 2023 takes place on September 19–21 in San Francisco. Tickets will sell out. Buy your pass now and save $400 before prices go up at the door. For a limited time, when you book your Disrupt hotel room at the Hyatt Regency San Francisco Downtown SOMA, you’ll automatically be eligible to enter a raffle for a chance to win two spots for you and a guest to attend the exclusive TechCrunch Disrupt Speakers & Editors Dinner. Book your room today. More hotel raffle details here.

Is your company interested in sponsoring or exhibiting at TechCrunch Disrupt 2023? Contact our sponsorship sales team by filling out this form.

More TechCrunch

The problem is not the media, but the message.

Apple’s ‘Crush’ ad is disgusting

Ever wonder why conversational AI like ChatGPT says “Sorry, I can’t do that” or some other polite refusal? OpenAI is offering a limited look at the reasoning behind its own…

OpenAI offers a peek behind the curtain of its AI’s secret instructions

The federal government agency responsible for granting patents and trademarks is alerting thousands of filers whose private addresses were exposed following a second data spill in as many years. The…

US Patent and Trademark Office confirms another leak of filers’ address data

As part of an investigation into people involved in the pro-independence movement in Catalonia, the Spanish police obtained information from the encrypted services Wire and Proton, which helped the authorities…

Encrypted services Apple, Proton and Wire helped Spanish police identify activist

Match Group, the company that owns several dating apps, including Tinder and Hinge, released its first-quarter earnings report on Tuesday, which shows that Tinder’s paying user base has decreased for…

Match looks to Hinge as Tinder fails

Private social networking is making a comeback. Gratitude Plus, a startup that aims to shift social media in a more positive direction, is expanding its wellness-focused, personal reflections journal to…

Gratitude Plus makes social networking positive, private and personal

With venture totals slipping year-over-year in key markets like the United States, and concern that venture firms themselves are struggling to raise more capital, founders might be worried. After all,…

Can AI help founders fundraise more quickly and easily?

Google has found a way to bring a variation of its clever “Circle to Search” gesture to iPhone users. The new interaction, launched in January, allows Android users to search…

Google brings a variation on ‘Circle to Search’ to iPhone users

A new sculpture going live on Wednesday in the Flatiron South Public Plaza in New York is not your typical artwork. It combines technology, sociology, anthropology and art to let…

Always-on video portal lets people in NYC and Dublin interact in real time

Apple’s iPad event had a lot to like. New iPads with new chips and new sizes, a new Apple Pencil, and even some software updates. If you are a big…

TechCrunch Minute: When did iPads get as expensive as MacBooks?

Autonomous, AI-based players are coming to a gaming experience near you, and a new startup, Altera, is joining the fray to build this new guard of AI agents. The company announced…

Bye-bye bots: Altera’s game-playing AI agents get backing from Eric Schmidt

Google DeepMind has taken the wraps off a new version of AlphaFold, their transformative machine learning model that predicts the shape and behavior of proteins. AlphaFold 3 is not only…

Google DeepMind debuts huge AlphaFold update and free proteomics-as-a-service web app

Uber plans to deliver more perks to Uber One members, like member-exclusive events, in a bid to gain more revenue through subscriptions.  “You will see more member-exclusives coming up where…

Uber promises member exclusives as Uber One passes $1B run-rate

We’ve all seen them. The inspector with a clipboard, walking around a building, ticking off the last time the fire extinguishers were checked, or if all the lights are working.…

Checkfirst raises $1.5M pre-seed to apply AI to remote inspections and audits

Close to a decade ago, brothers Aviv and Matteo Shapira co-founded a company, Replay, that created a video format for 360-degree replays — the sorts of replays that have become…

Controversial drone company Xtend leans into defense with new $40 million round

Usually, when something starts to rot, it gets pitched in the trash. But Joanne Rodriguez wants to turn the concept of rot on its head by growing fungus on trash…

Mycocycle uses mushrooms to upcycle old tires and construction waste

Monzo has raised another £150 million ($190 million), as the challenger bank looks to expand its presence internationally — particularly in the U.S. The new round comes just two months…

UK challenger bank Monzo nabs another $190M as US expansion beckons

iRobot has announced the successor to longtime CEO, Colin Angle. Gary Cohen, who previous held chief executive role at Timex and Qualitor Automotive, will be heading up the company, marking a major…

iRobot names former Timex head Gary Cohen as CEO

Reddit — now a publicly-traded company with more scrutiny on revenue growth — is putting a big focus on boosting its international audience, starting with francophones. In their first-ever earnings…

Reddit tests automatic, whole-site translation into French using LLM-based AI

Mushrooms continue to be a big area for alternative proteins. Canada-based Maia Farms recently raised $1.7 million to develop a blend of mushroom and plant-based protein using biomass fermentation. There’s…

Meati Foods bites into another $100M amid growth to 7,000 retail locations

Cleaning the outside of buildings is a dirty job, and it’s also dangerous. Lucid Bots came on the scene in 2018 with its Sherpa line of drones to clean windows…

Lucid Bots secures $9M for drones to clean more than your windows

High interest rates and financial pressures make it more important than ever for finance teams to have a better handle on their cash flow, and several startups are hoping to…

Israeli startup Panax raises a $10M Series A for its AI-driven cash flow management platform

The European Union has deepened the investigation of Elon Musk-owned social network, X, that it opened back in December under the bloc’s online governance and content moderation rulebook, the Digital Services Act…

EU grills Elon Musk’s X about content moderation and deepfake risks

For the founders of Atlan, a data governance startup, data has always been at the heart of what they do, even before they launched the company. In fact, co-founders Prukalpa…

Atlan scores $105M for its data control plane, as LLMs boost importance of data

It is estimated that about 2 billion people, especially those in lower and middle-income countries, lack access to quality and affordable essential medicines. The situation is exacerbated by low-quality or even killer…

Axmed raises $2M from Founderful to streamline drug supply chains in underserved markets

For decades, the Global Positioning System (GPS) has maintained a de facto monopoly on positioning, navigation and timing, because it’s cheap and already integrated into billions of devices around the…

Xona Space Systems closes $19M Series A to build out ultra-accurate GPS alternative

Bankruptcy lawyers representing customers impacted by the dramatic crash of cryptocurrency exchange FTX 17 months ago say that the vast majority of victims will receive their money back — plus interest. The…

FTX crypto fraud victims to get their money back — plus interest

On Wednesday, Google launched its digital wallet in India with local integrations, nearly two years after the app was relaunched as a digital wallet platform in the U.S. As TechCrunch exclusively reported last month,…

Google Wallet is now available in India

Bluesky has launched a new product roadmap for the coming months. The decentralized social network said on Tuesday that it is planning to introduce direct messages, support for videos, improved…

Bluesky to add DMs, video support and in-app custom feed curation

Samsung Medison, a medical device unit of Samsung Electronics that specializes in developing diagnostic imaging devices, said on Wednesday it plans to acquire Sonio, a Paris-based startup that makes AI-powered software…

Samsung Medison to acquire French AI ultrasound startup Sonio for $92.7M