David Cottingham

David Cottingham, co-founder of Airlock Digital and expert in cybersecurity, discusses the risks associated with Microsoft’s ClickOnce application deployment. He explains how attackers exploit ClickOnce to load malicious code and the effectiveness of allow-listing in mitigating these threats. The conversation also dives into the challenges EDR technologies face in detecting such attacks. Additionally, there's a fascinating debate on the potential for AI to enhance allow-list management while maintaining human oversight.

David Cottingham, CEO of Airlock Digital, shares insights on building robust security management platforms for critical systems. He delves into evolving allow listing software and the challenges of securing user permissions in diverse environments. The discussion also covers recent cyber threats, including vulnerabilities in SharePoint servers and a significant hacking incident in Brazil. Cottingham emphasizes the importance of automation and identity management in enhancing security, while also addressing the need for timely system updates.

Daniel Schell, Airlock Digital co-founder and CTO, builds deep endpoint controls. David Cottingham, co-founder and chief product officer, drives deny-by-default execution control. They discuss AI's role in allowlisting and why deterministic, customer-scoped automation beats LLMs for recommendations. They cover autotrust, assembly reflection, hardening UIs, and making allowlisting operationally practical.