Cyber Security Heroes

Latest Episodes:

How Businesses and Consumers Can Prepare For A Russian Cyber Attack Mar 26, 2022

Show notes

According to an FBI warning to president Biden, there is evolving intelligence that Russia is exploring options for potential cyber attacks against the U.S. homeland and specifically critical infrastructure. In this episode, I spoke to Christian Scott, CEO and Chief Information Security Officer of Go Vanguard, a boutique cybersecurity firm that performs red teaming services.We discussed what businesses and consumers can do to better protect themselves.

Connect with Christian on Linkedin
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

----------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

The Unraveling Of The Okta Breach And What You Can Do Mar 23, 2022

Show notes

Okta, Inc. is a publicly traded identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, website web services and devices

- Wikipedia

On 03.22.22 it was confirmed by Microsoft that the LAPSUS$ extortion-focused hacking crew had gained "limited access" to its systems, as authentication services provider Okta revealed that nearly 2.5% of its customers have been potentially impacted in the wake of the breach.

- Hacker News

Since recording this episode on 03.22.22, it seems Okta has admitted to being breached per their own blog, updated 03.23.22.

"After a thorough analysis of these claims, we have concluded that a small percentage of customers – approximately 2.5% – have potentially been impacted and whose data may have been viewed or acted upon. We have identified those customers and are contacting them directly.

If you are an Okta customer and were impacted, we have already reached out directly by email. We are sharing this interim update, consistent with our values of customer success, integrity, and transparency." https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/

In this episode, we cover some of the facts as they were presented on 03.22.22. My colleague Stephen Kowski, Director of Global Sales Engineering and Information Security at IRONSCALES gave us some advice on how companies can investigate and protect themselves.

[UPDATE] Okta’s Investigation of the January 2022 Compromise

https://www.okta.com/blog/2022/03/oktas-investigation-of-the-january-2022-compromise/

-----------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Jumpstart Your Pen Testing Career Mar 22, 2022

Show notes

It’s never too late to think about a career change.

Penetration testing, also known as pen testing, is a subset of cybersecurity where an individual simulates a cyber attack to evaluate the effectiveness of a system’s security. If you’re considering moving into penetration testing, you have to build up a cache of knowledge first, but that doesn’t mean you have to start from square one. Phillip Wylie, senior cloud penetration tester at US Bank, has worked in penetration testing for nearly a decade. Overall, he has a combined IT and cybersecurity career spanning several decades.

In our latest episode of Cybersecurity Heroes and part 4 of our mini-series #1SEAT, Phillip shared his tips for anyone looking to move into a penetration testing career, plus how to increase your chance of a job offer once you’re ready to apply.

Show Links

Check out US Bank
Connect with Phillip Wylie on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

The New Cyber Era Post Ukraine Invasion Mar 19, 2022

Show notes

In light of recent events such as the Russian invasion of Ukraine and the acquisition of Mandiant by Google.

I was lucky enough to get time with Karim Hijazi former Founder and CEO of Unveillance (acquired by Mandiant (v1.0)), former Director of Intelligence for Mandiant, presently Founder and CEO of Prevailion and Creator and Host of The Introverted Iconoclast podcast.

At Prevailion his team infiltrates the command and control infrastructure of threat actors to gain their perspective of their victims landscape, the intelligence is then organized and disseminated to organizations and governments.

We spoke about Russia's plans on de pairing itself from the internet, the potential ramifications of removing Russia from Swift, what's behind Google's acquisition of Mandiant and a whole lot more!

Show Links

Check out Prevailion

Connect with Karim on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Transition to a Cybersecurity Career Mar 15, 2022

Show notes

Changing careers is a big decision, and it can be scary to jump into a whole new field of expertise. If you’re thinking about switching to cybersecurity mid-career, you probably have a lot of questions. What credentials do you need? Will you have to work an entry-level job and take a pay cut? How will you compete with the experience of other people your age? In our latest episode of Cybersecurity Heroes and part 3 of our mini-series #1SEAT, Stephen Semmelroth, VP of Cyber at StrataCore, gave us his tips on what you need to know about switching to a career in cybersecurity.

Show Links

Check out StrataCore
Connect with Stephen Semmelroth on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------------------We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Is A Cybersecurity Boot Camp Right For Me? Mar 12, 2022

Show notes

Starting out in cybersecurity today is somewhat easier than the last decade with an array of mentors, free resources, boot camps and certifications.

But some of these options can be expensive if you go down the boot camp or certification path.

In part 2 of our new mini-series #1SEAT, I spoke with Matticus Hunt on his experience and thoughts around boot camps in order to help others weigh the pros and cons.

Show Links

Connect with Matticus on LinkedIn

Follow IRONSCALES on LinkedIn or Twitter

Connect with Brendon Rod on LinkedIn

-------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

What It Means To Shift From A Defensive To Offensive Security Posture Mar 08, 2022

Show notes

Since the Target breach in 2013 companies have invested a lot in tools and people to detect and respond but with all the tools and training in place, companies are still no better off, BEC and ransomware are more prevalent than ever before.

In this episode Harris D. Schwartz Field CISO at Elevate Security discussed with us the shift in the industry from defensive to offensive security and what that entails.

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Cyber Security Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Build and Retain a Highly Qualified SOC Team Mar 01, 2022

Show notes

Cybersecurity work requires long, demanding hours and being on call 24/7.

Companies who want to build a dedicated team and retain them over the long run have to find ways to make those demands worth it. A competitive salary is a given, but that’s not enough to make a person stay. Nurturing employee education with regular training and mentorships, fostering a culture of teamwork, and creating paths for growth can improve employee retainment.

In this first episode of our new mini-series #1SEAT, Joshua Copeland, Security Operation Center Director for AT&T, shares his tips for hiring the right candidates, making training a priority, and taking some of the pressure off the job.

Show Links

Check out AT&T
Connect with Joshua Copeland on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Cyber Security Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How To Grow And Scale A Secure Business With Compliance Feb 22, 2022

Show notes

Compliance is not security.

The two are connected, but just because you have all the certifications doesn’t mean that you’re secure. It does mean that as a company you’ve put in the time, effort, and resources to create a more secure organization. It builds trust with future partners and consumers. Most of all, it ensures that you have all the right practices in place to grow and scale your company in a secure way.

In this episode, Esther Pinto, head of information security at anecdotes, shares how companies should see compliance as a vehicle for growth and why training is so much more important than certificates for security professionals.

Show Links

Check out anecdotes
Connect with Esther Pinto on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Demystifying DMARC: What you need to know! Feb 15, 2022

Show notes

Phishing and scams are the bane of everyone’s virtual inbox, but some attacks are more insidious than others.

Skilled scammers can impersonate people or brands to lure email recipients into a false sense of security. If you want to protect your domain name, you need to take cybersecurity to the next level. DMARC, which stands for Domain-based Message Authentication, Reporting, and Conformance, can prevent someone else from using your domain name on scam emails.

In our latest episode of Cybersecurity Heroes, Callum Noad, a sales engineer at IRONSCALES, shared what you need to know to implement DMARC in your company.

Show Links

Connect with Callum Noad on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected