Articles by Christopher Budd

Christopher Budd focuses on communications in the areas of online security and privacy, incident response, and crisis communications. Among many roles in the industry he was a ten-year veteran of the Microsoft Security Response Center (MSRC) and has worked at Avast, Palo Alto, Sophos and Trend Micro, among others. He most recently build and led Sophos’ X-Ops Comms, Analysis and Research team. He combines his prior career as an engineer with his communications expertise to help bridge the gap between the technical and communications realms. Follow him on LinkedIn.

Analysis: Google-Wiz deal sparks questions about cloud security strategy at AWS and Microsoft

Latest from Christopher Budd

Analysis: Google-Wiz deal sparks questions about cloud security strategy at AWS and Microsoft

Editor’s note: This analysis is written by Christopher Budd, a tech industry veteran who previously worked at the Microsoft Security Response Center. Earlier this month, Google announced plans to acquire… Read More

Microsoft and Amazon quantum advancements spark questions about the future of encryption

With recent announcements of new quantum computing advancements, Microsoft, Amazon and Google have set a new countdown clock ticking on today’s encryption — now an even shorter race than expected.… Read More

Analysis: Washington state’s response to data breach affecting 1.4M people is stunningly callous

Not our fault. And good luck, you’re on your own. These are essentially two main messages from Washington state government to its citizens and those affected by the recent Washington… Read More

Analysis: The potentially serious cybersecurity ramifications from the US Capitol riots

The overrunning of the U.S. Capitol on Wednesday may be one of the most serious cybersecurity events ever, potentially on par even with the ongoing SolarWinds hack. The riot has… Read More

2020: The year the internet didn’t crash

[Editor’s Note: Independent security consultant Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] Commentary: Yes, 2020 really sucked. But it could have been worse: the internet could… Read More

How hacked is hacked? Here’s a ‘hack scale’ to better understand the SolarWinds cyberattacks

“Microsoft, FireEye, and the U.S. Treasury department have been hacked in the SolarWinds attacks.” This statement is true but doesn’t tell the whole story accurately. It’s true because by most… Read More

How the SolarWinds hackers are targeting cloud services in unprecedented cyberattack

[Editor’s Note: Independent security consultant Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] Analysis: To understand where the SolarWinds attackers are going next, and how to defend… Read More

Microsoft unleashes ‘Death Star’ on SolarWinds hackers in extraordinary response to breach

[Editor’s Note: Independent security consultant Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] “Now witness the firepower of this fully armed and operational Battle Station.” –… Read More

Amazon Sidewalk rollout shows the future of ‘forced opt-in,’ taking lessons from Xfinity Wifi

How would you feel if you were a homeowner and woke up one morning to find people on a new sidewalk on your property, seemingly with no warning? Would you… Read More

With ‘Pluton’ chip, Microsoft shows strength, and proves Trustworthy Computing still matters

[Editor’s Note: Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] With this week’s “Pluton” news, Microsoft reminded the world that the new Microsoft is still Microsoft,… Read More

How an unpatched Microsoft vulnerability leaked inadvertently, and what it means for Windows Server security

As Seattle and Silicon Valley grapple with the impact of the novel coronavirus, Microsoft fixed a large batch of vulnerabilities Tuesday, as part of its regular monthly software updates. According… Read More

Security experts raise alarm over mobile app planned for Oregon and Washington elections

Just two weeks after the meltdown of the Iowa Democratic Party’s caucuses because of a mobile app, mobile apps and election security are in the news again, this time with… Read More

Decoding the Jeff Bezos phone hack: What the rest of us can learn from the forensic report

Jeff Bezos’ smartphone is back in the news. After days of second-hand reports that the Amazon founder and Washington Post owner’s phone was hacked by none other than Saudi Crown… Read More

NSA opts to ‘Turn a New Leaf,’ disclosing Windows vulnerability rather than using it as a weapon

Today is the final day for public security updates for Windows 7. It is also the day when, as security writer Brian Krebs reports, the U.S. National Security Agency (NSA)… Read More

Analysis: Why unionization in tech could actually gain traction in 2020

The idea of unions in tech has seemed impossible so far. The fast-moving, entrepreneurial, hopefully-get-rich-quick-with-stock-options spirit of the tech industry seems completely at odds with the more staid, protected, steady-as-it-goes… Read More

The decade when tech turned dark: Learning from the mistakes of the past 10 years

The arrival of 2020 is a chance to look back on the past decade and what it has meant for the world of technology. Recent security problems with security cameras… Read More

Wyze data leak: Key takeaways from server mistake that exposed information from 2.4M customers

Post updated at 6 p.m. on Dec. 29. Seattle-area startup Wyze, a provider of home video cameras and other Internet of Things (IoT) devices, announced on Dec. 26 that it… Read More

Regulation is coming: How startups should be thinking about data, security and privacy

From the earliest days of the Internet in the mid-1990’s, the technology industry and its advocates have fought aggressively against government regulation. It is ironic, given that the Internet itself… Read More

Tech industry’s password problems come home to roost with Ring security camera hacks

After a series of high-profile hacks involving in-home Ring security cameras, some people are finding that devices they bought to increase their sense of security at home are doing just… Read More

A new Windows 10 ransomware threat? Examining claims of a ‘potentially unstoppable’ vulnerability

Security company Nyotron recently announced that it found a new vulnerability in Microsoft’s Windows 10 that could be used in ransomware attacks. Nyotron released details of what it called a… Read More

A guide for startups to prepare for the California Consumer Privacy Act (CCPA)

This week, Microsoft announced that it will be implementing the upcoming California Consumer Privacy Act (CCPA) for all customers in the U.S. This is a big deal. The CCPA has… Read More

A former Microsoft security expert reviews Brad Smith’s ‘Tools and Weapons’ book

Brad Smith makes one hell of a convincing argument. How else can you explain the following from Bill Gates’ foreword to his book, “Tools & Weapons: The Promise and the… Read More

Why the Clinton email server story matters — and why it may be worse than you think

Commentary: Let me start by saying what this article isn’t. This isn’t an article about Hillary Clinton (in fact, for the rest of the article, I’m simply going to talk… Read More

What should the U.S. do in response to North Korea? Nothing more

Commentary: The past 24 hours have seen the Sony hack attack take us even further into new, uncharted territory. With Sony announcing it is withdrawing the movie “The Interview” and the United… Read More

Microsoft’s Trustworthy Computing reorg: Back to the future, which could be good

[Editor’s Note: GeekWire contributor Christopher Budd worked in Microsoft’s Security Response Center for 10 years.] There’s an obvious question after this week’s changes at Microsoft: what does the announced split-up of the Trustworthy Computing Group… Read More

Articles by Christopher Budd

Top Stories from Christopher Budd

Analysis: Google-Wiz deal sparks questions about cloud security strategy at AWS and Microsoft

Latest from Christopher Budd

Analysis: Google-Wiz deal sparks questions about cloud security strategy at AWS and Microsoft

Microsoft and Amazon quantum advancements spark questions about the future of encryption

Analysis: Washington state’s response to data breach affecting 1.4M people is stunningly callous

Analysis: The potentially serious cybersecurity ramifications from the US Capitol riots

2020: The year the internet didn’t crash

How hacked is hacked? Here’s a ‘hack scale’ to better understand the SolarWinds cyberattacks

How the SolarWinds hackers are targeting cloud services in unprecedented cyberattack

Microsoft unleashes ‘Death Star’ on SolarWinds hackers in extraordinary response to breach

Amazon Sidewalk rollout shows the future of ‘forced opt-in,’ taking lessons from Xfinity Wifi

With ‘Pluton’ chip, Microsoft shows strength, and proves Trustworthy Computing still matters

How an unpatched Microsoft vulnerability leaked inadvertently, and what it means for Windows Server security

Security experts raise alarm over mobile app planned for Oregon and Washington elections

Decoding the Jeff Bezos phone hack: What the rest of us can learn from the forensic report

NSA opts to ‘Turn a New Leaf,’ disclosing Windows vulnerability rather than using it as a weapon

Analysis: Why unionization in tech could actually gain traction in 2020

Wyze data leak: Key takeaways from server mistake that exposed information from 2.4M customers

Regulation is coming: How startups should be thinking about data, security and privacy

Tech industry’s password problems come home to roost with Ring security camera hacks

A new Windows 10 ransomware threat? Examining claims of a ‘potentially unstoppable’ vulnerability

A guide for startups to prepare for the California Consumer Privacy Act (CCPA)

A former Microsoft security expert reviews Brad Smith’s ‘Tools and Weapons’ book

Why the Clinton email server story matters — and why it may be worse than you think

What should the U.S. do in response to North Korea? Nothing more

Microsoft’s Trustworthy Computing reorg: Back to the future, which could be good

How Apple may have ended the retail point-of-sale data breach crisis

House of Cars: Lessons in politics from Seattle’s ridesharing saga

The Target Tipping Point: How e-commerce trumped traditional retail in transaction security

Farewell, stack rank: Why this change is so big for Microsoft

Ten Years of Patch Tuesdays: Why It’s Time to Move On