Articles by Christopher Budd

Christopher Budd works for Avast and focuses on communications in the areas of online security and privacy, incident response, and crisis communications. Among many roles in the industry he was a ten-year veteran of the Microsoft Security Response Center (MSRC). He combines his prior career as an engineer with his communications expertise to help bridge the gap between the technical and communications realms. Follow him on Twitter @christopherbudd.

How hacked is hacked? Here’s a ‘hack scale’ to better understand the SolarWinds cyberattacks

Latest from Christopher Budd

Analysis: Washington state’s response to data breach affecting 1.4M people is stunningly callous

by Christopher Budd on February 10, 2021February 9, 2021 at 8:40 pm

Not our fault. And good luck, you’re on your own. These are essentially two main messages from Washington state government to its citizens and those affected by the recent Washington… Read More

Analysis: The potentially serious cybersecurity ramifications from the US Capitol riots

by Christopher Budd on January 11, 2021January 11, 2021 at 7:57 am

The overrunning of the U.S. Capitol on Wednesday may be one of the most serious cybersecurity events ever, potentially on par even with the ongoing SolarWinds hack. The riot has… Read More

Video

2020: The year the internet didn’t crash

by Christopher Budd on January 4, 2021January 4, 2021 at 11:45 am

[Editor’s Note: Independent security consultant Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] Commentary: Yes, 2020 really sucked. But it could have been worse: the internet could… Read More

How hacked is hacked? Here’s a ‘hack scale’ to better understand the SolarWinds cyberattacks

by Christopher Budd on December 28, 2020December 28, 2020 at 11:09 am

“Microsoft, FireEye, and the U.S. Treasury department have been hacked in the SolarWinds attacks.” This statement is true but doesn’t tell the whole story accurately. It’s true because by most… Read More

How the SolarWinds hackers are targeting cloud services in unprecedented cyberattack

by Christopher Budd on December 23, 2020December 24, 2020 at 2:51 am

[Editor’s Note: Independent security consultant Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] Analysis: To understand where the SolarWinds attackers are going next, and how to defend… Read More

Video

Microsoft unleashes ‘Death Star’ on SolarWinds hackers in extraordinary response to breach

by Christopher Budd on December 16, 2020December 22, 2020 at 11:00 am

[Editor’s Note: Independent security consultant Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] “Now witness the firepower of this fully armed and operational Battle Station.” –… Read More

Amazon Sidewalk rollout shows the future of ‘forced opt-in,’ taking lessons from Xfinity Wifi

by Christopher Budd on December 12, 2020December 13, 2020 at 11:46 am

How would you feel if you were a homeowner and woke up one morning to find people on a new sidewalk on your property, seemingly with no warning? Would you… Read More

With ‘Pluton’ chip, Microsoft shows strength, and proves Trustworthy Computing still matters

by Christopher Budd on November 21, 2020November 21, 2020 at 10:32 am

[Editor’s Note: Christopher Budd worked previously in Microsoft’s Security Response Center for 10 years.] With this week’s “Pluton” news, Microsoft reminded the world that the new Microsoft is still Microsoft,… Read More

How an unpatched Microsoft vulnerability leaked inadvertently, and what it means for Windows Server security

by Christopher Budd on March 11, 2020March 11, 2020 at 11:41 am

As Seattle and Silicon Valley grapple with the impact of the novel coronavirus, Microsoft fixed a large batch of vulnerabilities Tuesday, as part of its regular monthly software updates. According… Read More

Security experts raise alarm over mobile app planned for Oregon and Washington elections

by Christopher Budd on February 13, 2020February 13, 2020 at 3:44 pm

Just two weeks after the meltdown of the Iowa Democratic Party’s caucuses because of a mobile app, mobile apps and election security are in the news again, this time with… Read More

Decoding the Jeff Bezos phone hack: What the rest of us can learn from the forensic report

by Christopher Budd on January 23, 2020January 23, 2020 at 10:55 am

Jeff Bezos’ smartphone is back in the news. After days of second-hand reports that the Amazon founder and Washington Post owner’s phone was hacked by none other than Saudi Crown… Read More

NSA opts to ‘Turn a New Leaf,’ disclosing Windows vulnerability rather than using it as a weapon

by Christopher Budd on January 14, 2020January 14, 2020 at 12:20 pm

Today is the final day for public security updates for Windows 7. It is also the day when, as security writer Brian Krebs reports, the U.S. National Security Agency (NSA)… Read More

Analysis: Why unionization in tech could actually gain traction in 2020

by Christopher Budd on January 4, 2020January 4, 2020 at 9:41 am

The idea of unions in tech has seemed impossible so far. The fast-moving, entrepreneurial, hopefully-get-rich-quick-with-stock-options spirit of the tech industry seems completely at odds with the more staid, protected, steady-as-it-goes… Read More

Video

The decade when tech turned dark: Learning from the mistakes of the past 10 years

by Christopher Budd on January 1, 2020January 1, 2020 at 9:30 am

The arrival of 2020 is a chance to look back on the past decade and what it has meant for the world of technology. Recent security problems with security cameras… Read More

Video

Wyze data leak: Key takeaways from server mistake that exposed information from 2.4M customers

by Christopher Budd on December 29, 2019December 29, 2019 at 6:02 pm

Post updated at 6 p.m. on Dec. 29. Seattle-area startup Wyze, a provider of home video cameras and other Internet of Things (IoT) devices, announced on Dec. 26 that it… Read More

Regulation is coming: How startups should be thinking about data, security and privacy

by Christopher Budd on December 14, 2019December 14, 2019 at 1:27 pm

From the earliest days of the Internet in the mid-1990’s, the technology industry and its advocates have fought aggressively against government regulation. It is ironic, given that the Internet itself… Read More

Tech industry’s password problems come home to roost with Ring security camera hacks

by Christopher Budd on December 12, 2019December 16, 2019 at 7:36 am

After a series of high-profile hacks involving in-home Ring security cameras, some people are finding that devices they bought to increase their sense of security at home are doing just… Read More

Video

A new Windows 10 ransomware threat? Examining claims of a ‘potentially unstoppable’ vulnerability

by Christopher Budd on December 9, 2019December 9, 2019 at 8:17 am

Security company Nyotron recently announced that it found a new vulnerability in Microsoft’s Windows 10 that could be used in ransomware attacks. Nyotron released details of what it called a… Read More

A guide for startups to prepare for the California Consumer Privacy Act (CCPA)

by Christopher Budd on November 17, 2019November 15, 2019 at 4:24 pm

This week, Microsoft announced that it will be implementing the upcoming California Consumer Privacy Act (CCPA) for all customers in the U.S. This is a big deal. The CCPA has… Read More

A former Microsoft security expert reviews Brad Smith’s ‘Tools and Weapons’ book

by Christopher Budd on October 6, 2019October 5, 2019 at 8:12 am

Brad Smith makes one hell of a convincing argument. How else can you explain the following from Bill Gates’ foreword to his book, “Tools & Weapons: The Promise and the… Read More

Why the Clinton email server story matters — and why it may be worse than you think

by Christopher Budd on March 8, 2015March 10, 2015 at 7:32 am

Commentary: Let me start by saying what this article isn’t. This isn’t an article about Hillary Clinton (in fact, for the rest of the article, I’m simply going to talk… Read More

What should the U.S. do in response to North Korea? Nothing more

by Christopher Budd on December 18, 2014February 12, 2015 at 11:26 pm

Commentary: The past 24 hours have seen the Sony hack attack take us even further into new, uncharted territory. With Sony announcing it is withdrawing the movie “The Interview” and the United… Read More

Microsoft’s Trustworthy Computing reorg: Back to the future, which could be good

by Christopher Budd on September 19, 2014February 12, 2015 at 11:27 pm

[Editor’s Note: GeekWire contributor Christopher Budd worked in Microsoft’s Security Response Center for 10 years.] There’s an obvious question after this week’s changes at Microsoft: what does the announced split-up of the Trustworthy Computing Group… Read More

Articles by Christopher Budd

Top Stories from Christopher Budd

How hacked is hacked? Here’s a ‘hack scale’ to better understand the SolarWinds cyberattacks

Latest from Christopher Budd

Analysis: Washington state’s response to data breach affecting 1.4M people is stunningly callous

Analysis: The potentially serious cybersecurity ramifications from the US Capitol riots

2020: The year the internet didn’t crash

How hacked is hacked? Here’s a ‘hack scale’ to better understand the SolarWinds cyberattacks

How the SolarWinds hackers are targeting cloud services in unprecedented cyberattack

Microsoft unleashes ‘Death Star’ on SolarWinds hackers in extraordinary response to breach

Amazon Sidewalk rollout shows the future of ‘forced opt-in,’ taking lessons from Xfinity Wifi

With ‘Pluton’ chip, Microsoft shows strength, and proves Trustworthy Computing still matters

How an unpatched Microsoft vulnerability leaked inadvertently, and what it means for Windows Server security

Security experts raise alarm over mobile app planned for Oregon and Washington elections

Decoding the Jeff Bezos phone hack: What the rest of us can learn from the forensic report

NSA opts to ‘Turn a New Leaf,’ disclosing Windows vulnerability rather than using it as a weapon

Analysis: Why unionization in tech could actually gain traction in 2020

Wyze data leak: Key takeaways from server mistake that exposed information from 2.4M customers

Regulation is coming: How startups should be thinking about data, security and privacy

Tech industry’s password problems come home to roost with Ring security camera hacks

A new Windows 10 ransomware threat? Examining claims of a ‘potentially unstoppable’ vulnerability

A guide for startups to prepare for the California Consumer Privacy Act (CCPA)

A former Microsoft security expert reviews Brad Smith’s ‘Tools and Weapons’ book

Why the Clinton email server story matters — and why it may be worse than you think

What should the U.S. do in response to North Korea? Nothing more

Microsoft’s Trustworthy Computing reorg: Back to the future, which could be good

How Apple may have ended the retail point-of-sale data breach crisis

House of Cars: Lessons in politics from Seattle’s ridesharing saga

The Target Tipping Point: How e-commerce trumped traditional retail in transaction security

Farewell, stack rank: Why this change is so big for Microsoft

Ten Years of Patch Tuesdays: Why It’s Time to Move On

Truth in absurdity: A former Microsoftie’s take on ‘Where’d You Go Bernadette’

Why I won’t buy another subsidized Android phone (and why you shouldn’t, either)