Demystifying DMARC: What you need to know! Feb 15, 2022

Phishing and scams are the bane of everyone’s virtual inbox, but some attacks are more insidious than others.

Skilled scammers can impersonate people or brands to lure email recipients into a false sense of security. If you want to protect your domain name, you need to take cybersecurity to the next level. DMARC, which stands for Domain-based Message Authentication, Reporting, and Conformance, can prevent someone else from using your domain name on scam emails.

In our latest episode of Cybersecurity Heroes, Callum Noad, a sales engineer at IRONSCALES, shared what you need to know to implement DMARC in your company.

Show Links

Connect with Callum Noad on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How To Grow And Scale A Secure Business With Compliance Feb 22, 2022

Compliance is not security.

The two are connected, but just because you have all the certifications doesn’t mean that you’re secure. It does mean that as a company you’ve put in the time, effort, and resources to create a more secure organization. It builds trust with future partners and consumers. Most of all, it ensures that you have all the right practices in place to grow and scale your company in a secure way.

In this episode, Esther Pinto, head of information security at anecdotes, shares how companies should see compliance as a vehicle for growth and why training is so much more important than certificates for security professionals.

Show Links

Check out anecdotes
Connect with Esther Pinto on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Build and Retain a Highly Qualified SOC Team Mar 01, 2022

Cybersecurity work requires long, demanding hours and being on call 24/7.

Companies who want to build a dedicated team and retain them over the long run have to find ways to make those demands worth it. A competitive salary is a given, but that’s not enough to make a person stay. Nurturing employee education with regular training and mentorships, fostering a culture of teamwork, and creating paths for growth can improve employee retainment.

In this first episode of our new mini-series #1SEAT, Joshua Copeland, Security Operation Center Director for AT&T, shares his tips for hiring the right candidates, making training a priority, and taking some of the pressure off the job.

Show Links

Check out AT&T
Connect with Joshua Copeland on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Cyber Security Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

What It Means To Shift From A Defensive To Offensive Security Posture Mar 08, 2022

Since the Target breach in 2013 companies have invested a lot in tools and people to detect and respond but with all the tools and training in place, companies are still no better off, BEC and ransomware are more prevalent than ever before.

In this episode Harris D. Schwartz Field CISO at Elevate Security discussed with us the shift in the industry from defensive to offensive security and what that entails.

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Cyber Security Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Is A Cybersecurity Boot Camp Right For Me? Mar 12, 2022

Starting out in cybersecurity today is somewhat easier than the last decade with an array of mentors, free resources, boot camps and certifications.

But some of these options can be expensive if you go down the boot camp or certification path.

In part 2 of our new mini-series #1SEAT, I spoke with Matticus Hunt on his experience and thoughts around boot camps in order to help others weigh the pros and cons.

Show Links

Connect with Matticus on LinkedIn

Follow IRONSCALES on LinkedIn or Twitter

Connect with Brendon Rod on LinkedIn

-------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Transition to a Cybersecurity Career Mar 15, 2022

Changing careers is a big decision, and it can be scary to jump into a whole new field of expertise. If you’re thinking about switching to cybersecurity mid-career, you probably have a lot of questions. What credentials do you need? Will you have to work an entry-level job and take a pay cut? How will you compete with the experience of other people your age? In our latest episode of Cybersecurity Heroes and part 3 of our mini-series #1SEAT, Stephen Semmelroth, VP of Cyber at StrataCore, gave us his tips on what you need to know about switching to a career in cybersecurity.

Show Links

Check out StrataCore
Connect with Stephen Semmelroth on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------------------We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

The New Cyber Era Post Ukraine Invasion Mar 19, 2022

In light of recent events such as the Russian invasion of Ukraine and the acquisition of Mandiant by Google.

I was lucky enough to get time with Karim Hijazi former Founder and CEO of Unveillance (acquired by Mandiant (v1.0)), former Director of Intelligence for Mandiant, presently Founder and CEO of Prevailion and Creator and Host of The Introverted Iconoclast podcast.

At Prevailion his team infiltrates the command and control infrastructure of threat actors to gain their perspective of their victims landscape, the intelligence is then organized and disseminated to organizations and governments.

We spoke about Russia's plans on de pairing itself from the internet, the potential ramifications of removing Russia from Swift, what's behind Google's acquisition of Mandiant and a whole lot more!

Show Links

Check out Prevailion

Connect with Karim on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Jumpstart Your Pen Testing Career Mar 22, 2022

It’s never too late to think about a career change.

Penetration testing, also known as pen testing, is a subset of cybersecurity where an individual simulates a cyber attack to evaluate the effectiveness of a system’s security. If you’re considering moving into penetration testing, you have to build up a cache of knowledge first, but that doesn’t mean you have to start from square one. Phillip Wylie, senior cloud penetration tester at US Bank, has worked in penetration testing for nearly a decade. Overall, he has a combined IT and cybersecurity career spanning several decades.

In our latest episode of Cybersecurity Heroes and part 4 of our mini-series #1SEAT, Phillip shared his tips for anyone looking to move into a penetration testing career, plus how to increase your chance of a job offer once you’re ready to apply.

Show Links

Check out US Bank
Connect with Phillip Wylie on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

The Unraveling Of The Okta Breach And What You Can Do Mar 23, 2022

Okta, Inc. is a publicly traded identity and access management company based in San Francisco. It provides cloud software that helps companies manage and secure user authentication into applications, and for developers to build identity controls into applications, website web services and devices

- Wikipedia

On 03.22.22 it was confirmed by Microsoft that the LAPSUS$ extortion-focused hacking crew had gained "limited access" to its systems, as authentication services provider Okta revealed that nearly 2.5% of its customers have been potentially impacted in the wake of the breach.

- Hacker News

Since recording this episode on 03.22.22, it seems Okta has admitted to being breached per their own blog, updated 03.23.22.

"After a thorough analysis of these claims, we have concluded that a small percentage of customers – approximately 2.5% – have potentially been impacted and whose data may have been viewed or acted upon. We have identified those customers and are contacting them directly.

If you are an Okta customer and were impacted, we have already reached out directly by email. We are sharing this interim update, consistent with our values of customer success, integrity, and transparency." https://www.okta.com/blog/2022/03/updated-okta-statement-on-lapsus/

In this episode, we cover some of the facts as they were presented on 03.22.22. My colleague Stephen Kowski, Director of Global Sales Engineering and Information Security at IRONSCALES gave us some advice on how companies can investigate and protect themselves.

[UPDATE] Okta’s Investigation of the January 2022 Compromise

https://www.okta.com/blog/2022/03/oktas-investigation-of-the-january-2022-compromise/

-----------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How Businesses and Consumers Can Prepare For A Russian Cyber Attack Mar 26, 2022

According to an FBI warning to president Biden, there is evolving intelligence that Russia is exploring options for potential cyber attacks against the U.S. homeland and specifically critical infrastructure. In this episode, I spoke to Christian Scott, CEO and Chief Information Security Officer of Go Vanguard, a boutique cybersecurity firm that performs red teaming services.We discussed what businesses and consumers can do to better protect themselves.

Connect with Christian on Linkedin
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

----------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How Non-tech Professionals Can Solve the Cybersecurity Talent Problem Mar 28, 2022

Cybercrime is on the rise and we don’t have enough defenders fighting against it.

In the next few years, cybercrime is estimated to become a multi-trillion dollar industry and that money is going to fund more illegal things. The impact will be felt far beyond cybersecurity. That threat means we need to have the best people working to stop cybercriminals, but there’s currently a shortage of candidates to fill roles.

Naomi Buckwalter, founder and executive director of Cybersecurity Gatebreakers Foundation told us the answer is to start opening the gates to cybersecurity jobs to people with non-tech backgrounds.

In this episode #5 of mini-series #1SEAT, she talks about how there are plenty of people who have the right skills.

**Show Links**

Check out Cybersecurity Gatebreakers Association
Connect with Naomi Buckwalter on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Bohan Zang Shares How He Landed His First SOC Analyst Role Apr 03, 2022

In this episode #6 of mini-series #1SEAT, Bohan Zang a Security Operations Center Analyst I from eSentire shares his journey on how he landed the role without having any prior security experience.

We covered:

Resume advice
Interview preparation
What certifications he recommends
Security tools to learn and more

We hope you are enjoying the series so far and if you would like to share your story with us, please reach out to me via LinkedIn

*Show Links**

Connect with Bohan Zang on Linkedin
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Protect Yourself from Scammers Apr 05, 2022

Everyone has a right to privacy.

Though social media has blurred the lines between what constitutes public versus private, your personal information still needs to be protected. Every time you give up private information, whether that’s a phone number, an email, or a birth date, you make yourself more vulnerable to cyberattacks.

And public profiles aren’t just targets for scammers, either. Potential employers, college admissions committees, and anyone else can access your social media and make judgments based on that information. So don’t give up your right to privacy without a fight.

In this episode, Gabriel Friedlander, founder of Wizer Security Awareness Training, offered some insights on how to keep your information private while living in a public world.

Show Links

Check out Wizer
Connect with Gabriel Friedlander on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Cybersecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Chip Harris – Who’s The Man Behind the Mask? Apr 08, 2022

Bryan Vorndran, an assistant director in the FBI's cyber division reported that Russian hackers have been scanning the systems of energy companies and other critical infrastructure in the United States during a hearing before a U.S. House of Representatives panel last Tuesday.

In this episode I had the pleasure of speaking with Chip Harris, a certified ethical hacker pen, tester, forensic investigator, and auditor for a three-letter agency, to explain in more layman's terms the severity and precautions utilities companies can take regarding this lingering threat.

Chip has completed 7 tours of Duty in Afghanistan and 1 in Mexico as a PMC – Private Military Contractor - to the DOD and DEA. He currently works for the NIH and CDC for DMI and is a writer and content provider for the University of Arizona - Post Grad program writing a textbook on Counterterrorism, Counter-Intelligence, and Cybersecurity.

Show Links

· Connect with Chip Harris on LinkedIn

· Follow IRONSCALES on LinkedIn or Twitter

· Connect with Brendon Rod on LinkedIn

We’re stronger together.

Cybersecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How Companies and Job Seekers Can Solve the Cybersecurity Shortage Apr 12, 2022

Companies are getting attacked daily by cyber criminals.

Most of those attacks aren’t getting into their systems, but when you add up all of the phishing emails and attempts to get credentials, it can look like thousands of attacks in a month. At the same time, there are over three million open positions in cybersecurity. In order to stay ahead of the constant attacks, organizations need to fill these positions.

In this episode (part 7 of our #1SEAT series), Ron Sharon, Vice President of Information Security at Mercer Advisors, discusses how meeting that demand is going to require changes from hiring companies and job seekers alike.

Show Links

Check out Mercer Advisors
Connect with Ron Sharon on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Pwn Your Career With Founder and CEO Deidre Diamond Apr 16, 2022

Welcome to episode #8 of our new mini-series #1SEAT: PWN Your Career

Deidre Diamond is the Founder and CEO at Cyber Security Network (http://www.cybersn.com), a company transforming the way Cyber Security Professionals approach job searches.

From online job matching to full-service recruitment, CyberSN provides professionals and hiring teams with the expertise, information, tools, connections, and services they need to maximize career success, job satisfaction, team performance and retention.

In this episode, we discuss the current cybersecurity job market, gender inequality and what she's doing to change the status quo.

Show Links

Check out CyberSN
Connect with Deidre on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

Learn more at ironscales.com

Celebrating Our 1-year Anniversary: 2021 Montage Part 1 Apr 19, 2022

It's Cyber Security Heroes' birthday month!

Thank you so much for tuning in and being part of the journey, it's really taken off and we are humbled by ALL the positive feedback. So to celebrate our 1 year anniversary, we did a montage of all the best of 2021 quotes.

Enjoy and thank you to all our guests. Here’s to 2022!

---------

We’re stronger together.

Keep connected with Cyber Security Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

2022 Best Practices for Cybersecurity Recruiters and Job Seekers Apr 25, 2022

Episode #9 of our mini-series #1SEAT is out. 👇

2022 Best Practices for Cybersecurity Recruiters and Job SeekersRecruiting in security has always been a challenge, and the Great Resignation has only made it more difficult to find the right job candidates.

There’s a high demand for internet security professionals and not a lot of candidates to go around. If you’re struggling to find applicants for cybersecurity positions, you may need to rethink your hiring strategy.

Pete Strouse, founder and CEO of InfoSec Connect, is an expert recruiter in the information security industry. In this episode, Pete shared his advice for finding the right candidates, what incentives to offer, and which hiring expectations your company may need to rethink.

He also explains what job seekers can do to stand out among the crowd, get an interview and hopefully land their ideal position.

**Show Links**

Check out InfoSec Connect

Connect with Pete Strouse on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

A Deep Dive With Allan Alford On Okta's Breach Response Apr 30, 2022

In this episode, we unpack and critique the handling of the Okta breach communications effort and why it matters, especially for all of us on the sidelines passing judgment without all the facts.

Allan Alford is the CISO/CTO at TrustMAPP & Host of The Cyber Ranch Podcast

Show Links

Connect with Allan on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How Cybersecurity Leaders Can Attract And Recruit Top Talent May 03, 2022

Cybersecurity leaders are in a unique position to drive their companies forward.

This includes their ability to identify, hire, and nurture top talent. Joshua Scott is the Head of Security and IT at Postman, where he seeks to find great hires and help his employees thrive.

In ep 10 of our mini-series #1SEAT, Joshua joined us to share what makes a good leader, how companies can recruit the right way, and what job seekers can do to think outside the box when it comes to looking for new roles and showcasing their skills.

Show Links

Check out Postman
Connect with Joshua Scott on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Better Utilize the Technical Controls You Already Have in Place May 10, 2022

There are many tech tools available to cite the capability to reduce phishing scams and cybersecurity threats.

But it’s important to carefully evaluate what technology you’re bringing to the table and how you’re approaching the problem in a way that’s not wasting time and money unnecessarily. Exchange Online Protection (EOP) is a hosted e-mail security service, owned by Microsoft, that filters spam and malware from e-mail messages. In many cases, companies already have access to EOP, but are not taking advantage of its capabilities.

In this episode J Stephen Kowski, Senior Director of Sales Engineering & Information Security at IRONSCALES, shared how you can configure your EOP tool properly so that it can catch as much—if not more—spam and malicious content than your expensive legacy Secure Email Gateway.

Show Links

Connect with J. Stephen Kowski on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

How to be an Effective CISO May 17, 2022

The role of the CISO has evolved from a technical one to more of an advisory one. A CISO guides business leaders on how to implement security controls while meeting business goals. A CISO should be prepared to communicate the return of investment on reducing risk through cybersecurity and translate business models into the cybersecurity requirements that will protect the organization. In this episode, Humberto Gauna, Chief Strategy Officer at DOT Security, discusses how to be an effective CISO, from balancing business knowledge with cybersecurity knowledge to looking for passionate employees that you can train.

Show Links

Check out DOT Security
Connect with Humberto Gauna on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Navigating a Career in Cybersecurity May 24, 2022

Despite the cybersecurity talent shortage, it can be tough to navigate the cybersecurity world at first.

If you want to get your foot in the door with cybersecurity, there are a lot of obstacles to overcome such as education, experience, and when and how to specialize. But when it comes to working in cybersecurity, the most important thing is your willingness to learn and grow.

In this episode and part 11 of our miniseries #1SEAT, Nicole Lamoureux, Associate Consultant at Mandiant, shared her advice for aspiring tech professionals who want to dive into the world of cybersecurity.

Show Links

Check out Mandiant
Connect with Nicole Lamoureux on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

How to Find the Right Cybersecurity Career Mentor Jun 07, 2022

You’ve likely heard the phrase “it’s not what you know, but who you know.”

In cybersecurity, it’s both. To get access to opportunities, you need connections. But to follow through on those opportunities, you need to have knowledge and skills. Mentorship can help you with both.

In this episode part 12 of our mini-series #1SEAT, Samara Williams, Manager of Information Security and Risk at Cardinal Health, discusses how mentors guide you personally and professionally so that you can be your best self and how to go about getting one.

Show Links

Check out Cardinal Health
Connect with Samara Williams on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

Cybersecurity benefits of behavioral biometrics and adversarial machine learning Jun 28, 2022

Justin Macorin, CTO and Co-founder at Ponsero discussed with me some cybersecurity use cases for NLP and behavioral biometric technology, especially when it comes to phishing and spam!We also discussed AI and ML misconceptions, the importance of quality data sets to train the models and how all of this can help give companies a fighting chance against cyber-criminals.

Show Links

Check out Ponsero
Connect with Justin-Macorin on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

CIO Insights on Balancing Revenue, Security and Service Nov 16, 2021

The security of your company should be a top priority for any CIO.

After all, it’s your responsibility to prevent cybersecurity attacks and mitigate the effects of any successful breaches.

At the same time, you should also think of your role as one that’s linked to revenue.

If you want broad support for the security initiatives that will shore up your security systems for tomorrow, don’t forget to link those initiatives to revenue today.

Prioritizing business savviness alongside safety will help you determine what to prioritize.

Pete Gibson is the CIO at Friendly’s Restaurant and Johnny Rockets.

He drew on his 20+ years of experience to share his tips for strengthening a company’s security the right way.

**Show Links**

- Check out [Friendly’s Restaurant](https://www.friendlysrestaurants.com/)

- Check out [Johnny Rockets](https://www.johnnyrockets.com/)

- Connect with Pete Gibson on [LinkedIn](https://www.linkedin.com/in/gibsonpete/)

- Follow IRONSCALES on [LinkedIn](https://www.linkedin.com/company/ironscales/) or [Twitter](https://twitter.com/IRONSCALES)

- Connect with Brendon Rod on [LinkedIn](https://www.linkedin.com/in/brendonrod)

-----------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple:

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Keep Your Business Information Confidential & Safe Nov 23, 2021

There are three pillars of cybersecurity: confidentiality, integrity, and availability.

Integrity is ensuring that your information doesn’t get tampered with, and availability is making sure it's accessible to your company to use as necessary.

But confidentiality is where your information is protected and only shared with those who should have access to it.

It’s a difficult and continual process, but there are ways to keep information confidential and your business safe.

In this episode of Cybersecurity Heroes, Dave Tuckman, director of engineering at Secure Smart Office, gives us his tips for staying compliant, promoting security awareness, and protecting your data.

**Show Links**

- Check out [Secure Smart Office ]

- Connect with Dave Tuckman on [LinkedIn ] or [Twitter ]

- Follow IRONSCALES on [LinkedIn ]or [Twitter ]

- Connect with Brendon Rod on [LinkedIn ]

-----------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple:

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

*Bonus* Log4J: What You Need to Know and How To Respond Dec 17, 2021

On Friday, December 10th a vulnerability was reported in a Java-based software known as "Log4j which is used extensively by enterprises and even the NSA.

This poses potential risks for much of the internet and threat actors are already taking advantage of this as we speak.

Since then the cybersecurity world has kicked into overdrive to identify vulnerable applications, detect potential attacks, and mitigate against exploits as best as humanly possible.

In this episode, Jeroen van Kessel shares some advice on how to respond as he works around the clock to help companies mitigate potential risks.

Free Resources:

Vulnerable application list:https://github.com/NCSC-NL/log4shell/tree/main/software
Internal log4j binary scanner:https://github.com/l ogpresso/CVE-2021-44228-Scanner
Network scanner log4j: https://github.com/fullhunt/log4j-scan

**Show Links**

- Check out [Cryptsus]

- Connect with Jeroen van Kessel on [LinkedIn] or [Twitter]

- Follow IRONSCALES on [LinkedIn] or [Twitter]

- Connect with Brendon Rod on [LinkedIn]

----------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple:

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Make Cybersecurity Culture Part of Company Culture Jun 16, 2021

Staying safe and on top of cybersecurity is already a challenge for most companies.
When IT teams face resistance to necessary changes, it makes things even harder.
The cybersecurity experts from Cybermaniacs, CEO Kate Brett Goldman, cyber culture evangelist Chris Rivinus, and HR wizard Angelo D’Agostino joined host Brendon on this episode of Cyber Security Heroes.
They explained why understanding company culture is the first step to bringing in cyber culture, why an alliance between HR and IT is crucial, and how making cybersecurity fun can make big changes stick.

Show Links

Check out Cybermaniacs
Follow Cybermaniacs on LinkedIn or Twitter
Connect with Kathryn Brett Goldman on LinkedIn
Connect with Christopher Rivinus on Linkedin
Connect with Angelo D'Agostino on Linkedin
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with Cyber Security Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below.Listening on a desktop & can’t see the links?Just search for #CyberSecurityHeroes in your favorite podcast player.

Cyber Security Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Why Current Encryption Solutions Are Ripe for Disruption Feb 01, 2022

If your company is a castle, it’s not enough to keep the perimeter safe.

You need to safeguard the objects inside, too. Many companies have encryption and password protection in place already. But in the modern threat landscape, the status quo is no longer cutting it.

The team at Atakama is busy innovating the next level of encryption techniques.

In this episode, Dimitri Nemirovsky, Atakama’s COO and co-founder, explains why new forms of encryption are needed, and how the technology Atakama is developing works.

Show Links

Check out Atakama
Connect with Dimitri Nemirovsky on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales dot com

How to Improve the Cyber Insurance Process Jan 05, 2022

In order to get cyber insurance, companies have to fill out long questionnaires to show they’re taking important security steps.

With every passing year, these questionnaires get more complex, and companies have a harder time making sense of them.

As a result, many don’t get the coverage they need.

One of the things the security community can do is identify the top priority actions that companies need to do to reduce impact, instead of leaving them feeling overwhelmed and under-protected.

In this episode, Kirsten Bay, CEO of Cysurance, discusses the things the cybersecurity industry can do to improve the insurance process and what companies can do to make sure they’re getting the right policy for them.

Show Links

· Check out Cysurance

· Connect with Kirsten Bay on LinkedIn or Twitter

· Follow IRONSCALES on LinkedInor Twitter

· Connect with Brendon Rod on LinkedIn

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

What's Trending in Cybersecurity and How to Build a Successful Career Dec 14, 2021

Cybersecurity is an ever-changing landscape. The pandemic put the shift to digital on steroids, and there has never been a better time to pursue trends like zero-trust security and quantum computing. There's also never been a better time to explore a career in cybersecurity. Kids these days are learning coding and understanding how to use cloud networks and social media platforms at age 10. Many of them will want to pursue careers in technology. In this episode of CyberSecurity Heroes, NTT's deputy to the global CISO John Petrie gave his take on the latest industry trends, along with his best advice for young people heading into cybersecurity and hoping to climb the ranks.

Show Links

Check out NTT
Connect with John Petrie on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales dot com

Why Vulnerability Management is a Key Pillar in Your Cybersecurity Program Dec 07, 2021

Think about all of the possible entry points for cyberattacks at your company.

There are the computers and hardware at each employee workstation, the servers, the network components, IoT devices. And then there’s the code and your data in the cloud.

With rising security threats from ransomware, data stealing, and crypto miners, how do you keep all of these assets safe?

According to cybersecurity specialist Jeroen van Kessel, a vulnerability management program should be a key pillar of your organization so you can keep track of your assets and any vulnerabilities that could put them at risk.

Show Links

Check out Cryptsus
Connect with Jeroen van Kessel on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------------------

We’re stronger together.

Keep connected with CyberSecurityHeroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

Cyber Security Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Make Security Compliance Part of Your Company Culture Jan 12, 2022

How secure your company is, comes down to its culture. You might have all of the right rules and policies in place, but if they’re not enforced, then you’ve created a permissive security culture: no one will follow the rules. A secure company culture is not just your stance on how to be secure, it’s how those policies are executed and enforced. In this episode, Al Alper, founder of CyberGuard360, talks to us about how to bring compliance into your company without it feeling like a burden, and explains how culture, compliance, and security all work together.

Show Links

Check out CyberGuard360
Connect with Al Alper on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------------------We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

To Protect Against Advanced Email Threats Requires A Different Technology & Approach Jan 18, 2022

Business email compromise may have been a big issue before COVID, but in the past couple of years it’s grown exponentially. Not only have nefarious actors been raking in the money, but they’ve also changed tactics. In the early days of this threat, an actor would register a lookalike domain and hope an email from it would get through. Now 95% of this type of email is coming directly from a trusted coworker, vendor, or client accounts who’ve unknowingly put their credentials into a fake login form. Cracking down on this threat is harder when the source is someone you do business with. In this episode, Jeremy Schwarzrock, senior information security analyst at Alerus, gave us the rundown on how his team is putting protections in place to eliminate it.Show Links

Check out Alerus
Connect with Jeremy Schwarzock on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

----------------------------We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Your Biggest Risk Can Be Handled By Entry-Level Security Professionals Jan 15, 2022

Infosecurity managers are under pressure to find and fill demand with skilled professionals that can hit the ground running.

But all the skilled professionals are expensive, hard to find and get snapped up quickly in the market.

Therefore we should build and train the entry-level infosec workforce with phishing incident response skills because this is not hard to teach and can be learnt quickly and with an incredible ROI.In this episode i sat down with Eyal Benishti Founder and CEO of IRONSCALES to explore this in more depth.

Show Links

· Check out IRONSCALES

· Connect with Eyal on LinkedIn or Twitter

· Follow IRONSCALES on LinkedIn or Twitter

· Connect with Brendon Rod on LinkedIn

------We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

· Sounder:

· Apple:

· Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Prepare For and Negotiate Ransomware Attacks Sep 28, 2021

Ransomware attacks have gone from being a notable threat to a national crisis. Because of the profitability of the attacks, cyber criminals have gotten increasingly sophisticated and their ranks have grown. The Kaseya attacks this summer have underlined how many different vulnerabilities a company can have, including through an MSP. The bottom line: it's often no longer a question of "if," but "when." Organizations need to take action to protect their data. In this episode, Paul Caiazzo, CISO at Avertium, has a rich history in ransomware negotiation.In this episode, he outlines the ways that a company can build their defenses against ransomware attacks and minimize the damage if they do occur.

**Show Links**

- Check out Avertium

- Connect with Paul Caiazzo on LinkedIn or Twitter

- Follow IRONSCALES on LinkedIn or Twitter

- Connect with Brendon Rod on LinkedIn or Twitter

------------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple:

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How To Adapt To The Current Threat Landscape Jan 25, 2022

The landscape of cybersecurity threats has evolved from individual skilled attackers to a huge marketplace built by cybercrime organizations.

Now someone can make an efficient ransomware attack including the payload and the delivery mechanism, and go sell it to whoever can pay the price.

Bruce Snell, security strategy and transformation at NTT, explains that this shift means that the scale of cyberattacks has exponentially grown in recent years. Ten crime organizations now fuel hundreds of thousands of attacks.

In this episode, Bruce discusses how doing the bare minimum to protect your business is no longer enough and outlines the steps you need to take to boost your defenses.

Show Links

• Check out NTT

• Connect with Bruce Snell on LinkedIn or Twitter

• Follow IRONSCALES on LinkedIn or Twitter

• Connect with Brendon Rod on LinkedIn

------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

• Sounder:

• Apple:

• Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Don't Underestimate the Human Element in Your Threat Intelligence Program Nov 30, 2021

A great intelligence program cannot run on technology alone.

Fully uncovering all existing threats and coming up with the best way to deal with them requires human experts, too.

Yochai Corem, CEO of Cyberint, believes that the human element is equally important to machine learning and any other threat detections tools.

In this episode of Cybersecurity Heroes, he explains the steps they take to gather intelligence and protect a company as well as the value of having a threat intelligence partner.

Show Links

Check out Cyberint
Connect with Yochai Corem on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------------------

We’re stronger together.

Keep connected with Cyber Security Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurityHeroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Build A Legacy That Fulfils The Soul Dec 21, 2021

Struggling with doubt, anxiety and stress? Feeling overwhelmed?

If you know there’s something bigger in your plan and you’re not sure how to execute it?

Then meet Gaia Ferreira, a mentor, coach, speaker and author.

Gaia's personal and professional journey has been almost as non-traditional as you can get.

In this episode, she shares her insights about building your own legacy and reminds us of the importance of integrating ourselves.

She also believes in the importance of living your legacy on purpose so that the world may become a better place that is led from the heart (not from a spreadsheet).

Show Links

Check out https://gaiaferreira.com/
Connect with Gaia on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Understanding OT Security & How It Differs from IT May 19, 2021

These days, most companies understand they need IT security and have invested heavily in protecting themselves.

But what about those 20-year-old computers running their production lines?

Yeah, they aren’t secure at all — and hackers know it.

Today’s guest is Tom Jackson, Senior Manager at EY’s Cyber Security Consulting Practice, about the risks, like ransomware, that operational technology presents and what businesses can do to mitigate them.

In this episode, we discuss:

- How OT environments differ from IT

- Why you’ll find 20-year-old computers running in OT environments

- How get assess your risk and get buy-in for security improvements

We’re stronger together. Keep connected with Cybersecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Listening on a desktop & can’t see the links? Just search for Cybersecurity Heroes in your favorite podcast player.

Want to Combat Cybersecurity? Look for Insider Threats in Your Circle of Trust Jul 09, 2021

When most people think of cybersecurity, they picture an evil hacker plotting in a dark room. The reality? Your biggest security threat could be a trusted vendor, a go-getter employee, or even the CEO. We hosted a panel of three top cybersecurity experts to explain the most common reasons that breaches happen. They explained why companies need to go on the offense, thinking about cybersecurity as an ongoing business risk to manage, rather than an isolated IT issue.

Show Links

Connect with E.J. Hilbert on LinkedIn or Twitter
Connect with Mark Sangster on LinkedIn or Twitter
Connect with Daniel Stiegman on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with Cyber Security Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

CyberSecurityHeroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

The 5 Laws of Cybersecurity and How to Follow Them Aug 25, 2021

One of the biggest hurdles to fighting cybercrime is communicating the risks to people in a way they can understand.That’s why Nick Espinosa, founder of Security Fanatics, came up with The Five Laws of Cybersecurity. The laws are five basic concepts that explain the reality of cyber threats and how we should be defending against them. In this episode, Nick defines each of the five laws and shares actionable advice for staying safe in the current cyber climate.

Show Links

Check out Security Fanatics
Connect with Nick Espinosa on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How To Manage Cloud Migration Apr 21, 2021

Is cloud migration right for you? How much of your business should move across? When? Why? What are the costs and benefits?

In this episode of Cybersecurity Heroes, I get to speak with Mark Dittenber, Director of IT Business Systems at Inform Diagnostic, to answer these questions.

This conversation is useful if you want to better understand and navigate cloud migration.

We discussed:

- Mark’s background and the work being done at Inform Diagnostics

- Reasons for and benefits of migrating to the cloud

- How to manage the costs associated with cloud migration

- The ROI of hardware vs people

- Skills required now and in the future: hardware, legacy and cloud solutions

- Advice for getting started and processing cloud migration

- Outsourcing vs in-house cloud migration management

Check out these resources we mentioned during the podcast:

- Mark Dittenber’s LinkedIn Profile

- Inform Diagnostics’ website

- IRONSCALES’ website

- The Art of Deception by Kevin Mitnick (Book)

- Krebs on Security

We’re stronger together. Keep connected with Cybersecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Listening on a desktop & can’t see the links? Just search for Cybersecurity Heroes in your favorite podcast player.

What Drives Cybersecurity in the Automotive & Manufacturing Industries? May 12, 2021

The company polo made him look official. The heavy boxes added an air of desperation. "Can you hold the door?" he asked an incoming employee. "I'm struggling here."

The employee not only held open the door but also escorted him to the manager's office. There, he plugged in a USB drive and downloaded all the data he wanted.

And that's how Tareq Falah proved that no matter how good your security tech is, it's no match for a kindhearted plant floor associate in a manufacturing firm.

In this episode of Cyber Security Heroes, I chat with Tareq, who's the Vice President, Information Technology / Information Systems at Creative Foam Corp. We discuss:

- How to maintain a proactive cybersecurity posture

- What a framework is and why you probably shouldn't use one

- Tips to sustain 99% uptime across all servers and network resources

- Risk trends in the automotive and manufacturing industries

We’re stronger together. Keep connected with Cybersecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Listening on a desktop & can’t see the links? Just search for Cybersecurity Heroes in your favorite podcast player.

Bringing Email Security to the Forefront May 25, 2021

Want to protect your business? Start with your inbox.

That’s the mission motivating Ignite Cyber’s Chuck Sirois - and his free security testing tools.

As a cybersecurity consultant, Chuck realized that 90% of users were overlooking basic email security.

Today, he educates and equips companies to protect their email from attacks.

In this episode of the Cybersecurity Heroes podcast by IRONSCALES, Chuck and Brendon discuss the pros and cons of DMARC, getting your email security score, and how just $5 can purchase an attack on your inbox.

Pinpointing email security problems
Nipping risk in the bud with inbox filtering
Inbox testing and scoring
Simple security testing protocols
Choosing the right cybersecurity tools

Show Links

Check out Ignite Cyber on Linkedin or Twitter
Follow Chuck on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

*BONUS* AMA With Founder and CEO @IRONSCALES Eyal Benishti Jun 12, 2021

Founder and CEO of IRONSCALES Eyal Benishti answers our previous guests questions posed to him directly on various topics.

As Chief Executive Officer at IRONSCALES, Eyal Benishti pioneered the development of the world’s first self-learning anti-phishing email security solution that combines human intelligence and machine learning technologies for automatic prevention, detection and autonomous incident response to cyber-attacks in real time.
Under Eyal’s leadership, IRONSCALES has filed four patents for anti-phishing and email security solutions and secured three funding rounds from K1 and Israel’s RDSeed totaling more than $20 million.

IRONSCALES has received numerous awards, including Frost & Sullivan’s AI-Powered Email Security Innovation Award and Best Enterprise Email Security Solution by the Cybersecurity Breakthrough Awards.

Eyal brings to his executive leadership role nearly 15 years of software industry experience with enterprise and startup companies.

Prior to founding IRONSCALES in 2013, he was a security researcher and malware analyst at Radware and worked as technical lead for various information security solutions at Imperva.

Previously, he held a variety of R&D roles with Comverse and Amdocs. A passionate cybersecurity researcher from a young age, Eyal earned his bachelor’s degree in computer science and mathematics from Bar-Ilan University in Israel.
Connect with Eyal on Linkedin
https://www.linkedin.com/in/eyalbd1/

How to Reinforce Your Cybersecurity Framework Oct 26, 2021

When it comes to cybersecurity, preparation is everything. Your cybersecurity framework is your company’s best defense against cyber attacks and breaches.

But how do you invest your time and money to get the greatest protection?

There is no single perfect solution that can shield your business from every potential threat, but if you invest in the right framework and make sure those systems are properly implemented, even a small company can build a defensible security system.

In this episode, Raffi Jamgotchian, President and CTO of Triada Networks, shared his recommendations on how to build a strong cybersecurity framework that can ward off unwanted attacks.

Show Links

· Check out Triada Networks

· Connect with Raffi Jamgotchian on LinkedInor Twitter

· Follow IRONSCALES on LinkedInor Twitter

· Connect with Brendon Rod on LinkedIn

------------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

· Sounder:

· Apple:

· Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Rethinking Cyber Education with Josh Mason Jun 02, 2021

Episode Introduction

Anyone can work in cybersecurity, with the right training.
That’s what Josh Mason believes, and he would know.

He’s a former Air Force pilot turned cybersecurity expert who spends his days training the military in cyber warfare at Jacobs’s Defense Cyber Crime Center.

He’s also an instructor for With You With Me, an Australian company which helps people without a tech background get jobs in tech.

In this episode of Cyber Security Heroes by IRONSCALES, Josh shares the historical perspective of cyber certifications, along with his opinion on the various courses and degrees available — and his recommendations for the best (and cheapest) path forward to a career in tech.

Show Links

Check out Jacobs
Follow Josh Mason on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

Why Defensibility and Accountability Is Key To Building Trust and Reducing Cybersecurity Risk Feb 08, 2022

If you want to keep your clients’ data secure, you need to be actively working to better your systems and protocols.

This requires two key things: defensibility and accountability. Your job as an MSP or an MSSP is not to protect your clients. It's to be defensible in your actions. This comes down to how you choose to protect your client's data and network, and how you educate your client. Working to mitigate risk is a never-ending part of cybersecurity. But by working proactively, you can get ahead of potential breaches.

In this episode, Matt Lee, Senior Director of Security and Compliance at Pax8, shared his tips for mitigating cybersecurity risk through defensible and accountable practices, plus how to handle the responsibilities of an MSSP.

Show Links

Check out Pax8

Connect with Matt Lee on LinkedIn

Follow IRONSCALES on LinkedIn or Twitter

Connect with Brendon Rod on LinkedIn

---------------------------We’re stronger together.

Keep connected with CyberSecurityHeroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:

Apple:

Spotify:

Cyber Security Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Bringing Neglected Cybersecurity Basics to the Forefront Jun 23, 2021

Who is E.J. Hilbert really?

History teacher? FBI cyber special agent? Founder & CEO of cybersecurity firm KCECyber? The answer is all of the above.In other words: he’s someone worth listening to. With over 25 years in cybersecurity - which is just about as long as cybersecurity has existed - E.J. has plenty to say about what businesses are still doing wrong to protect their assets.

In this episode of Cyber Security Heroes, E.J. and Brendon talk about cybersecurity myths, taking responsibility for data protection, threat intelligence sharing, ransomware and what we can learn from the bad guys.

Show Links

Check out KCECyber

Connect with E.J. Hilbert on LinkedIn or Twitter

Follow IRONSCALES on LinkedIn or Twitter

Connect with Brendon Rod on LinkedIn --------------

CyberSecurityHeroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Never Trust, Always Verify: Why Synergy Six Degrees’ Kevin Bailey Believes Zero Trust is a Cybersecurity Must-Have Jun 30, 2021

Zero Trust. It sounds like a great way to protect your business. Unfortunately, you’re not launching zero trust protocols with an easy plug & play product.Zero trust is a long-term strategy that dictates how your business operates: from devices to users to authentication. For Synergy Six Degrees’ Kevin Bailey, that means the industry is overdue for a standardized definition of zero trust - and what you need to do to stay vigilant. In this episode of Cybersecurity Heroes, Kevin and Brendon discuss zero trust implementation, including how to tighten up your cybersecurity protocols today.

Show Links

Check out Synergy Six Degrees
Connect with Kevin Bailey on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

What You Should Know About The Changing Information Security Landscape Apr 27, 2021

Seth Edgar is Director of Security Operations at AF Group.

With over 12 years of experience in information security, Seth has done it all - from troubleshooting school systems to fending off malicious attacks on businesses.

Seth joined Brendon Rod on the Cybersecurity Heroes podcast by IRONSCALES to share the skills needed to work in computer security, threats facing today's companies, and the changing landscape of information security in the post-pandemic world of remote working.

Show Links

Check out AF Group

Follow AF Group on LinkedIn or Twitter
Connect with Seth Edgar on LinkedIn
Follow IRONSCALES LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

How to Use BAS to Find and Fix Cybersecurity Vulnerabilities Nov 03, 2021

If you want to stop cyberattacks before they occur, you need to learn how to identify and fix your system’s vulnerabilities.

One way you can do this is through breach and attack simulation (BAS), a method for testing security by staging an attack on your system to pinpoint any weaknesses.

Once you know where your company is vulnerable, you can update and reconfigure your security to fill in those gaps. Yotam Ben Ezra is the Vice President of Products at SafeBreach, a cybersecurity firm.

In this episode, Yotam shares how you can use BAS to strengthen your security defenses to protect your company against cyber attacks now and in the future.

Show Links

Check out SafeBreach
Connect with Yotam Ben Ezra on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple:

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Phishing Incident Response From The Trenches Jun 09, 2021

Imagine 30 reports of phishing emails in one day.

Each email takes 20 minutes to investigate. And you’re a one person team.

That’s a pretty long day.

This is life for Jeremy Hoard, Information Security Analyst at Haworth.

On this episode of Cybersecurity Heroes from IRONSCALES, Jeremy shares how he went from IT helpdesk to solo security analyst at a 5000+ person company.

We discuss the biggest threats facing large companies, and tips for training users on cyber safety.

Jeremy also gives his take on how to start out in cybersecurity, why experience outweighs studying, and why interest in the field matters the most.

Show Links

Check out Haworth
Follow Haworth on LinkedIn or Twitter
Connect with Jeremy Hoard on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

Why We’re Losing the War on Cybersecurity and How to Fix it Aug 11, 2021

Many cybersecurity professionals believe that extensive education and a long list of certifications are the best preparations for fighting cyber crime.
Yet data breaches and security compromises happen every day at companies full of well-educated people.
Christian Espinosa, Managing Director of Cerberus Sentinel and author of "The Smartest Person in the Room:
The Root Cause and New Solution for Cybersecurity," believes we’re losing the cybersecurity war because we’re ignoring skills like communication and risk comprehension.
In this episode, Christian explains how we can fix cyber culture, solve the talent shortage, and be more effective in our roles as cybersecurity professionals.

Show Links

Check out Cerberus Sentinel and follow them on LinkedIn or Twitter
Connect with Christian Espinosa on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-------------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Create Security Training That Sticks Sep 08, 2021

Have you ever yawned your way through a dull training seminar?
We’ve all been there. But Zack Schuler decided the world shouldn’t have to settle for boring security training.
That’s why he founded NINJIO, a cybersecurity awareness training solution that publishes short animated videos each month featuring real-life cybercrime and celebrity actors.
He joined us on the podcast to explain why micro-learning, reinforcement, and relevancy are the key to cybersecurity training that really works.

• Check out NINJIO

• Connect with Zack Schuler on LinkedIn or Twitter

• Follow IRONSCALES on LinkedIn or Twitter

• Connect with Brendon Rod on LinkedIn

-------------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Strengthening Your Strongest Security Asset: Your People Apr 06, 2021

Your people are arguably the most valuable part of your company. They’re also the biggest cybersecurity risks.

You need to invest more budget and training to strengthen your user community in cybersecurity awareness.

In this episode, I interview Michael McGovern, an information technology executive with nearly 30 years of experience, about people-based strategies for boosting cybersecurity.

What we talked about:

- Reasons why employees still click phishing attempts

- The shortage of cybersecurity professionals to fill 4+ million positions

- The role of AI in phishing prevention

- Key KPIs to report to leadership and when

Resources we mentioned during the podcast:

- Michael gave a shout-out to Peter Bamber

- Michael’s current read is Cyber Rants

We’re stronger together. Keep connected with Cybersecurity Heroes at Apple Podcasts or Spotify.

Listening on a desktop & can’t see the links? Just search for Cybersecurity Heroes in your favorite podcast player.

The Biggest Challenge in Cybersecurity Apr 14, 2021

I don't need somebody to tell me I'm getting broken into in the middle of the night. I need somebody to block and react to that incident.

Either block them from getting in or if they are in to react, because otherwise there's hours of time that could go by possibly where, i'm unaware of, and able to respond to an incident.

That's a big challenge from my standpoint.

In this episode, I interview Jason Gherardini, Senior Vice President IT at Sares Regis Group, about protecting the end user, including, when necessary, from themselves.

What we talked about:

- Segmenting roles in the SMB market

- The origin of burnout for the cyber professional

- The tech/training conundrum & where to spend

- Rapid fire questions & the most overrated cybersecurity tactic

We’re stronger together. Keep connected with Cybersecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Listening on a desktop & can’t see the links? Just search for Cybersecurity Heroes in your favorite podcast player.

If you would like to get in touch with Jason:

Full Name: Jason Gherardini

Company: Sares Regis Group

Job Title: Senior Vice President IT

LinkedIn profile: https://www.linkedin.com/in/jasongherardini/

What We Can Learn From Nigerian Cybersecurity Culture Dec 28, 2021

There has been a rise in digital threats and malicious cyber activities across Africa, because the COVID-19 crisis forced more people to become increasingly reliant on the internet.

Nigeria is no different and has been the target of cyberattacks since the country's independence and with more than 104 million active internet users, she stands among the leading information communication technology markets on the continent.

I got to sit down with Ademayokun Of CyberSOC Africa and MTN Nigeria to discuss the state of Nigerian cybersecurity and its culture.

Show Links

· Connect with Ademayokun on LinkedIn

· Follow IRONSCALES on LinkedIn or Twitter

· Connect with Brendon Rod on LinkedIn

-----------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

· Sounder:

· Apple:

· Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Penetration Testing Explained: What they are and how to perform them to protect against cyber attacks Jul 15, 2021

Penetration testing is a simulated and controlled cyber attack against a computer system that assesses the strength of the system’s security defenses.
They’re an important part of a company’s cybersecurity program, but many companies don’t know how to use them effectively.
In this episode, Juan Carlos Mejia Cano of Castellan Information Security Services shares everything you need to know about pen testing, including the three types of tests, why you want to run them, and how often they should be done.

Show Links

Check out Castellan Information Security Services and follow them on LinkedIn or Twitter
Connect with Juan Carlos Mejia Cano on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

----------------------------
We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

The 5-Phase Incident Response Playbook Jul 23, 2021

No company is immune to cybersecurity threats. Big, medium, small - no matter the size of your business or the extent of your resources, attacks will happen. But many businesses still don’t have a plan in place. They don’t create a strategy until an attack has already happened. In this episode, Jay Jay Davey, SOC Analyst at CyberClan, explained why being reactive instead of proactive with cybersecurity puts your business at risk. He shared how to create a five-phase instant response playbook so that if an attack happens, employees can react swiftly to contain the threat. Show Links

Check out CyberClan
Follow CyberClan on LinkedIn or Twitter
Connect with Jay Jay Davey on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

--------------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales dot com

The 8 Steps to Building a Phishing Awareness Security Program Aug 03, 2021

When a security breach happens at a company, nine times out of 10 it’s because someone clicked on something they shouldn’t have.
Phishing is still the number one weapon in a cyber criminal’s arsenal.
There is software that helps detect phishing emails, but there’s also a human element that has to be solved.
In this episode, Shayla Treadwell, Executive Director - Governance, Risk and Compliance at ECS, told us how raising phishing awareness is crucial for a company’s cybersecurity.
She discussed what companies need to keep in mind when building an awareness and testing program that will create lasting behavioral change.

Show Links

Check out ECS
Follow ECS on LinkedIn or Twitter
Connect with Shayla Treadwell on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Find Cybersecurity Products that Actually Work Aug 18, 2021

There are billions of dollars spent on security product marketing. Yet, thousands of breaches happen every year at companies running products that claim to keep you safe.
The problem is that we have no established system for figuring out whether these products actually work. This lack of oversight creates a more vulnerable environment for everyone.
In this episode, Adrian Sanabria, founder of CyberRisk Alliance, discusses the things we can do to better assess products and invest in solutions that actually work.

Show Links

Check out CyberRisk Alliance and follow them on LinkedIn
Connect with Adrian Sanabria on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------------------

We’re stronger together.
Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.
Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Managed Detection and Response: How it Could be the Next Essential Step in Your Security Arsenal Sep 01, 2021

Most companies have mastered cybersecurity when it comes to the equivalent of locking your windows and doors.
But many companies haven’t taken the next step of monitoring inside the walls for signs of an intruder who has already picked the lock.
This type of security is known as MDR, or managed detection and response.
MDR is the expertise domain of Mark Sangster, VP of Industry Security Strategies at eSentire. Mark is all about helping companies detect breaches quickly, remediate them appropriately, and share those cybercrime learnings with others for the betterment of the entire online ecosystem.

Show Links

Check out eSentire
Connect with Mark Sangster on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Select a New Cybersecurity Tool or MSSP Sep 14, 2021

An MSSP or Managed Security Service Provider monitors and manages an organization's cyber infrastructure from firewalls to breach detection.
A good one goes beyond just diagnostics and helps your company to understand the risks in your environment and how to stay on top of them.
But there are things a company should do to make sure they’re getting the most out of an MSSP.
In this episode, Benjamin Dynkin, co-founder of Atlas Cybersecurity, an MSSP that helps small and mid-size businesses, explained to us how much of cybersecurity starts with building the right culture, assessing what you do and don’t need, and thinking like a hacker.
Listen now to learn how to find the right MSSP for you.

**Show Links**

- Check out [Atlas Cybersecurity](https://www.atlas-cybersecurity.com/)

- Connect with Benjamin Dynkin on [LinkedIn](https://www.linkedin.com/in/benjamindynkin/) or [Twitter](https://twitter.com/bendynkin)

- Follow IRONSCALES on [LinkedIn](https://www.linkedin.com/company/ironscales/) or [Twitter](https://twitter.com/IRONSCALES)

- Connect with Brendon Rod on [LinkedIn](https://www.linkedin.com/in/brendonrod)

-----------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Introducing…The Cybersecurity Heroes Podcast Mar 28, 2021

We are so excited and proud to launch Cybersecurity Heroes, a podcast about cybersecurity and resilience.

What can you expect to hear in each episode? One of your hosts Wes Snapp, National Commercial Sales Director at IRONSCALES, is here to make the introductions.

In this intro episode, you’ll learn:

Social engineering has been a big risk ever since the fax age
Highlighting heroes is the purpose behind the podcast
What each episode will include

We’re stronger together. Keep connected with Cybersecurity Heroes at Apple Podcasts, Spotify, or our website.

Listening on a desktop & can’t see the links? Just search for Cybersecurity Heroes in your favorite podcast player.

Apply Cybersecurity Fundamentals to the Modern World Oct 05, 2021

The business world is changing. Is your cybersecurity changing with it?

Today, more information than ever is in the cloud or distributed remotely.

And while new and fancier security solutions come out every year, your best bet is to ensure that you are applying basic security practices to your changing business environment.

Michael Crean is the CEO and Founder of Solutions Granted, an MSSP focused on taking care of small to medium-sized MSPs.

In this episode, he discusses why safety relies on SMB vigilance, supply chain vendors, and cybersecurity fundamentals.

**Show Links**

- Check out Solutions Granted

- Connect with Michael Crean on LinkedIn

- Follow IRONSCALES on LinkedIn or Twitter

- Connect with Brendon Rod on LinkedIn

------------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

- Sounder:

- Apple

- Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Why You Should Use the NIST Framework to Protect Your Business Oct 12, 2021

In the wake of cyber attacks like those at Kaseya and Solar Winds, there’s one thing everyone needs to do.

Accept that every product, hardware, or software you buy may be vulnerable or exploitable and plan for an attack.

You can no longer put blind faith into tech products and trust that the company has it under control.

One of the best ways to protect your business and reduce these vulnerabilities is to implement the NIST framework or hire an MSSP to help you do so.

In this episode, Bryan Hornung founder and CEO of Xact IT Solutions, explains how a cybersecurity framework will guide you through the steps needed to prevent a breach as well as recover if one happens.

Show Links

Check out Xact IT Solutions
Connect with Bryan Hornung on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Ditch the Degree? What You Need to Land a Cyber Security Role May 05, 2021

Let’s talk about the Cyber Security job market.

Some studies have shown that there are upwards of 4 million Cyber Security roles needed throughout the world right now. And unfortunately, there are 2 main issues facing the Cyber Security workforce right now: a talent shortage, and a skills gap.

But what is the difference? What are the skills needed, and why does it seem like so many people have gaps in the skills that they do have?

On this episode of Cyber Security Heroes, I sit down with Aviel Tzarfaty. Aviel is the Product Manager at Cybint Solutions, and we talked all about:

- The difference between a talent shortage and a skills gap

- Why you don’t necessarily need a degree in Computer Science to get a job in Cyber Security

- Advice for folks looking to get their first job in the Cyber Security field

- Interview tips and tricks for Cyber Security roles, even for those more experienced professionals

We’re stronger together. Keep connected with Cybersecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Listening on a desktop & can’t see the links? Just search for Cybersecurity Heroes in your favorite podcast player.

How to Build an Effective Intelligence Analysis Program Oct 20, 2021

Intelligence analysis is fundamentally both an art and a science.

Lately, the information security community has shown a trending interest in utilizing intelligence functions for a company’s information security department.

But what can an intelligence program really offer to your organization?

Daniel Stiegman is the Senior Cyber Threat and Insider Threat Intelligence Analyst at Equifax, a global data, analytics, and technology company.

In this episode, Daniel shares what an intelligence program looks like and how your company can get the most out of your intelligence analysis program.

Show Links

Check out Equifax

Connect with Daniel Stiegman on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----------------------------

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Breaking Down The Gartner Market Guide for Email Security 2021 Nov 09, 2021

In this episode with Eyal Benishti, founder and CEO @IRONSCALES, we demystify the Gartner Market Guide for Email Security for those of you who may not be so familiar with the email security space and jargons.

If you didn’t read it yet or dont have access to it, don’t worry we will be covering the main take aways.

--------------------------

Overview

There is a continued increase in volume and success of phishing attacks. Companies are migrating more to cloud email.

BUT

They don’t always know the inherent risks and vulnerabilities of being in the cloud and their current solutions for example the incumbent SEG is not appropriate to the new cloud architecture and changing threat landscape

Therefore

Security and risk management leaders require a reevaluation of email security controls and processes.--------------------------Show Links

Connect with Eyal Benishti on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

Catch all the links to the episode below or search for #CyberSecurityHeroes in your favorite podcast player.

Sounder:
Apple:
Spotify:

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

5 Things You Need to do When Creating a Privacy Program Jun 01, 2022

Businesses starting to build a privacy program need to ask themselves this:

How would customers feel if their data was used in a way that ends up in the New York Times? What would happen to your business? Good privacy policies benefit the business, don’t hurt engineering morale, and protect the customer. But for all of that to happen, you need customer trust.

In this episode, Nishant Bhajaria, director of privacy engineering, architecture, and analytics at Uber, discusses the steps to take to protect customers and achieve business objectives.

Show Links

Check out Uber
Connect with Nishant Bhajara on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-------

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

How to Create Cybersecurity Training Playbooks Jun 14, 2022

A good training program is not just beneficial to new hires.

It’s beneficial to everyone. Clear playbooks that can be referred to time and again make everyone stronger and reduce turnover. But many companies are missing the mark when it comes to the onboarding process from a lack of documentation to murky procedures.

In this episode part 13 of our #1SEAT mini-series, Christina Westfall, Threat Detection Analyst at Pareto Cyber, explains how getting a training program in place can empower your team from the job description all the way through independent employee success.Show Links

Check out Pareto Cyber
Connect with Christian Westfall on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-------

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

Navigating The Complex Ecosystem Of Subjects, Resources & Endless Certs Jun 21, 2022

Christian Scott is the COO and Chief Information Security Officer at GoVanguard, a boutique cybersecurity firm that performs red teaming services, like penetration testing and social engineering.

They do a lot of work for multi-billion dollar hedge funds, international internet service providers, insurance companies and international banks.In this episode #14 of our mini-series #1SEAT, we discuss the complex cybersecurity ecosystem of subjects, free resources, endless certs and boot camps.

Tune in for Christian's recommendations on how people can navigate all of this information in order to get the best and most efficient start into the industry.

Show Links

Check out GoVanguard
Connect with Christian on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

Adrianus Warmenhoven, Defensive Strategist @Nord Security Jul 05, 2022

Adrianus Warmenhoven was one of the first web-hosters in Europe, setting up ISPs in the very early 1990s and the first ISP in Tanzania.

He has worked with National Forensics Institute on cybercrime, taught at Universities on subjects such as security, performance and scaling. And he was involved in the groundwork investigations that helped him win the Mitre challenge.

In this episode, we covered a lot of ground covering Adrianus's history, thoughts and aspirations toward a more privacy-centric society.

Show Links

Check out Nord Security
Connect with Adrianus on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-----

We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Find Cybersecurity Talent in a Candidate-Driven Market Jul 12, 2022

Cybersecurity companies need to be realistic when recruiting new talent.

With so many companies hiring, there is stiff competition for candidates. Job descriptions that require a long list of certifications for entry level jobs won’t get filled easily. One with a salary below market or few days off won’t either.

In this episode #15 of our #1SEAT series, Tomas Walker, former cybersecurity specialist recruitment consultant for Premier Group Recruitment, tells us how cybersecurity companies need to be better prepared for the current job market.

Show Links

Check out Cyberfort Group
Check out Premier Group Recruitment
Connect with Tomas Walker on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

5 Things You Need to Know About Modern Disaster Recovery Jul 20, 2022

The biggest mistake companies make is not having a suitable disaster recovery plan in place. They think that a box of tapes serving as their backup is enough.

That might have been true a couple of decades ago, but with ransomware attacks happening every few minutes, that won’t cut it anymore.

In this episode, Curtis Preston, Chief Technical Evangelist of Druva, explains how a disaster recovery plan is like health insurance. It requires time and money upfront when things are okay, but it saves you when the worst happens.

Show Links

Check out Druva
Connect with Curtis Preston on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

How to Prevent an Identity and Access Management System Breach Jul 25, 2022

When identity access management system Okta was breached earlier this year, 366 companies had their data compromised.

For those companies, a single point of failure put their data, and business, at risk. Because of the nature of Okta and similar systems, it wasn’t clear what, if any, changes had been made. That meant their disaster recovery process was more complicated than expected.

In this episode, accSenSe CEO Muli Motola explains the things that any company using identity access management systems can do right now to make their disaster recovery plan stronger and protect themselves in case of a major breach.*Update*

Okta has revealed that just two of its customers were affected by an incident in January in which threat actors compromised a third-party vendor’s workstation.

The authentication specialist completed its investigation into the events that took place between January 16 and 21 this year, when it was believed that a hacker from the Lapsus group gained access to back-end systems.https://www.infosecurity-magazine.com/news/okta-just-two-customers-lapsus/

Previously, Okta estimated that 366 customers may have had their tenants accessed by the attackers via a Sitel support engineer’s machine.

Show Links

Check out accSenSe
Connect with Muli Motola on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

---------

We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Why search and delete is the wrong approach to phishing incident response Jul 29, 2022

Search and delete is a common response to phishing emails, but it’s not the best approach.

It’s inefficient, ineffective, and with the sheer volume of phishing attacks, it’s not feasible as a standard practice. The only thing search and delete truly provides is a false sense of security.

In this episode, IRONSCALES’ Senior Director of Sales Engineering and Information Security, and former email administrator, Stephen Kowski talks us through what to do instead.

**Show Links**

Connect with J. Stephen Kowski on LinkedIn or Twitter
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-------We’re stronger together.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales dot com

How To Succeed In Red Teaming Without Experience Jul 31, 2022

You don’t need to be a technical wizard to succeed in red teaming.

And people with no or low experience don’t have to go through months of training before you give them work. There are many components of red teaming that can be taught in a short amount of time from open source reconnaissance to proofreading reports.

In this episode, Travis DeForge, security engineering manager at GoVanguard, discusses how a few changes to your onboarding process can expand your talent pool and allow all levels of your team to upgrade their skills.

Show Links

Check out GoVanguard
Connect with Travis DeForge on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

-------

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

6 Tips for Breaking Into Cybersecurity Aug 01, 2022

Cybersecurity is a broad field with new opportunities appearing every year.

But what do you need to do to stand out among the job seekers and break into the industry? There is no one path to landing a job in cyber, but there are a few best practices to attain the skills you need to get your foot in the door.

In this episode, Paul Charles, Senior Consultant of Cyber Security at Forward Role Recruitment and Founder of Cyber Jobs Hunting Discord Server, shared his recommendations for job seekers on how to break into a career in cybersecurity how how hiring managers can support them.

Show Links

Check out Forward Role Recruitment
Connect with Paul Charles on LinkedIn
Follow IRONSCALES on LinkedIn or Twitter
Connect with Brendon Rod on LinkedIn

------We’re stronger together.

Keep connected with CyberSecurity Heroes at Apple Podcasts, Spotify, Stitcher and Google Podcast.

CyberSecurity Heroes is brought to you by IRONSCALES.

An email security platform powered by AI, enhanced by thousands of customer security teams and built around detecting and removing threats in the inbox.

We offer a service that is fast to deploy, easy to operate and is unparalleled in the ability to stop all types of email threats, including advanced attacks like BEC, ATO and more.

Learn more at ironscales.com

Our TOPPODCAST Picks

Follow Us

Stay Connected

Cyber Security Heroes

Episode Introduction

Related Podcasts

Links

Stay Connected