Cloud Security Office Hours Banner

Friday, September 19, 2025 — Meeting Recap

Event Planning and Platform Discussion

— Event Planning and Platform Discussion

Quick recap. The meeting began with a monologue by Shawn Nunley discussing technical topics related to cryptocurrency and hacking, followed by a discussion about an upcoming event and its promotion plans. The group then covered various professional updates including new community activities, job opportunities, and business endeavors, while also discussing a malware incident affecting NPM packages and sharing insights on Agentic AI design patterns. The latter part of the meeting focused on incident response and crisis management strategies, including the value of tabletop exercises and personality assessments in preparing for and managing stressful situations.

2025-09AISupply Chain
Show 7 discussion topics

Event Planning and Platform Discussion

Shawn and D discussed plans for an upcoming event, considering using the CSOH Zoom room and sending out an interest form to gauge participation. They decided to start promoting it in October, allowing time to reach the mailing list of 2,000 people. The conversation touched on the challenges of using different video conferencing platforms, with Shawn expressing frustration over the constant changes and security concerns from clients. The conversation ended with Shawn welcoming attendees and noting the quiet atmosphere, while Alex Cohen and Matthew commented on having made it through the week.

Cloud Security Office Hours Update

Shawn welcomed new members to Cloud Security Office Hours and announced upcoming activities, including a new Python group led by Danae and Thomas Braddy, which will focus on portfolio-building projects. Ed shared that his company is hiring for a senior cloud security engineer position. Kimberly announced her new business endeavor offering technical storytelling workshops and keynotes. The group discussed the importance of networking and mentorship within the community.

Malware Incident and Recovery Strategies

The team discussed a malware incident affecting over 800 NPM packages, which has been dubbed "Shai Hulud." Jay shared a seminal paper on Agentic AI design patterns, which Shawn and Kimberly expressed interest in reading. Alex inquired about recovering from catastrophic mistakes, and Shawn and Neil shared their experiences with data and infrastructure loss, emphasizing the importance of backups, documentation, and lessons learned. Matthew suggested using infrastructure as code tools to easily recover from infrastructure loss.

Incident Response and Crisis Management

The group discussed incident response and crisis management, sharing personal experiences and insights. Shawn emphasized the importance of remaining calm and focused during a crisis, while Kimberly explained the role of the prefrontal cortex in managing stress and making decisions. Neil shared his experience with incident response teams, highlighting the value of having dedicated communicators to handle stakeholder interactions. The discussion also touched on the importance of preparation, including running table-top exercises and having clear plans in place for various scenarios.

Tabletop Exercises and Team Dynamics

The group discussed the value of tabletop exercises for crisis preparedness, with Alex emphasizing how they help identify documentation gaps and improve response protocols. Shawn highlighted the importance of introducing random elements during tabletops to simulate real-world chaos, while Kimberly suggested pairing tabletops with personality assessments like the Enneagram to better understand stress responses and team dynamics. Michael shared his experience using personality tools in team settings, noting their effectiveness when combined with emotional awareness training. The conversation concluded with participants sharing their personality types and discussing the potential benefits of incorporating such assessments into professional settings.

Personality Assessment Tools Discussion

The group discussed the scientific validity of personality assessment tools like the Enneagram, with Michael explaining that while some tools may not have rigorous scientific backing, they can still be useful if they help people understand themselves and others better. Kimberly shared her experience using such tools in a medical context, highlighting the balance between evidence-based medicine and practical, low-risk interventions for her autistic son. The discussion concluded with Neil noting that while some people may naturally remain calm in stressful situations, this can sometimes be perceived as coldness by others.

Stress Management in Team Dynamics

The group discussed the importance of stress management and its role in various professional settings, emphasizing how different personality types and approaches can contribute to team dynamics. Neil highlighted the value of integrating diverse perspectives in teams to foster growth and innovation, while Kimberly and Michael shared insights on the nuances of personality compatibility and the challenges of managing friction in relationships and workplaces. The conversation also touched on the benefits of intentional training and the role of trust in professional and personal interactions.

↑ All meeting recaps