Hacked Off

Latest Episodes:

038. Catching a Hacker! Oct 24, 2019

Show notes

Our technical director, Holly Grace, speaks to Ian Murphy the Co-Founder of LMNTRIX about different ways of catching attackers - such as threat hunting, adversarial deception, and threat intelligence. Key Points: 0'32 Guest introduction 1'22 LMNTRIX 3'40 An over reliance on logs 8'44 What is threat hunting? 11'10 Where do you start with threat hunting? 18'30 What is deception? 32'48 Machine learning and adversarial detection 42'20 The difference between the deep web and the dark web Download on iTunes: apple.co/2Ji61Ek Listening time: 54 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Ian Murphy, Co-Founder of LMNTRIX

037. Cost vs Risk: Deciding how much to spend on security Oct 17, 2019

Show notes

How much should you spend on cybersecurity? Whilst there isn't a definitive answer to this question or a one-size-fits all answer, our Technical Director Holly Grace Williams, takes a look at how to measure your risk to determine an answer suitable for your organisation. 0'39 According to statistics... 2'09 Estimating breach costs 6'19 Cybersecurity insurance 7'53 What's your cybersecurity maturity? 9'59 Threat modelling 13'13 What kind of security should you be investing in? Send us you cybersecurity budget questions or thoughts on Twitter @secarma! Useful links: Cybersecurity Maturity Assessment - https://www.secarma.com/services/cybersecurity-assessment/maturity-assessment.html Download on iTunes: apple.co/2Ji61Ek Listening time: 17 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma

036. Common Cybersecurity Misconceptions Oct 10, 2019

Show notes

Secarma’s Technical Director Holly Grace Williams, is joined by Secarma’s People & Event manager Lucy Leaper, to discuss some of the most common cybersecurity misconceptions. From money concerns to the ‘it won’t happen to me’ attitude, Holly debunks certain cybersecurity beliefs, which may be leaving your organisation vulnerable. Key points: 1’00 “There’s no ROI with security testing” 5’39 “Cybersecurity isn’t my responsibility” 9’59 “My hosting provider covers our cybersecurity” 13’27 “It won’t happen to me” 20’24 “I’m secure, I’ve had a Pentest” 25’17 What’s the minimum a company can do to be secure? Which misconception do you most commonly hear? Let us know on Twitter @secarma! Download on iTunes: apple.co/2Ji61Ek Listening time: 32 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Lucy Leaper, People & Events Manager

035. A month in review (Sept ’19): The New iPhone Vulnerability Oct 01, 2019

Show notes

Last month an iPhone bootrom exploit dubbed ‘checkm8’ was discovered by researcher axi0mX. This unpatchable vulnerability could give hackers access to iPhones but is it really something we need to be concerned about? 1’40 The new iPhone vulnerability 4’37 Discovering ‘checkm8’ and how it works 11’30 What we can learn from this vulnerability? 13’36 The price of vulnerabilities – bug bounties and brokers 20’53 Which iPhones are affected and how they’re affected 23’21 Is it really something we should be concerned about? What level of confidence do you have in mobile devices? Do you think mobile phones can be trusted? Let us know on Twitter @secarma! Download on iTunes: apple.co/2Ji61Ek Listening time: 26 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma

034. Propogating Malware Sep 26, 2019

Show notes

For those who missed The Future of Cyber Security in Manchester this week, our Technical Director Holly Grace Williams, presents her talk on malicious software and how automation will increase the impact of malware attacks. She also discusses the conversation she had with the Q&A panel on cybersecurity insurance. Key points: 1'23 Malicious software hasn't really changed 2'06 A look back on some historical ransomware attacks 3'05 Wannnacry 7'43 Notpetya 14'15 Should cyber insurance be mandatory? 19'20 Self propagating malware 23'37 SamSam Do you think cybersecurity should be mandatory? Let us know on Twitter @secarma! Download on iTunes: apple.co/2Ji61Ek Listening time: 26 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma

033. The New Cyber Resilience Centre Sep 19, 2019

Show notes

In the last 12 months, 822 cyber dependent crimes were reported into Greater Manchester Police, costing the victims £1.2 million. Neil Jones, the Detective Superintendent of GMP, is speaking to us today to raise awareness about his cyber investigation team and how they can support you after a cyber-attack. He also discusses how the new Cyber Resilience Centre, which is backed by GM police, can help support smaller businesses protect themselves from cyber-crime. Key Points: 0’52 What is The Cyber Resilience Centre? 2’44 Why cyber-crime reports are so low 6’34 The support you receive after reporting cyber-crime 11’52 Government backed cybersecurity products and services 19’10 Raising the awareness of the GM cyber investigation team 24’06 How the Cyber Resilience Centre can help Manchester based businesses Useful links: Small Business Guide - https://www.ncsc.gov.uk/collection/small-business-guide 10 Steps to Cyber Security - https://www.ncsc.gov.uk/collection/10-steps-to-cyber-security Cyber Essentials - https://www.secarma.com/services/cybersecurity-assessment/cyber-essentials.html Download on iTunes: apple.co/2Ji61Ek Listening time: 37 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Neil Jones Detective Superintendent | Head of Cyber & Innovation | The Cyber Resilience Centre for Greater Manchester

032. An Intro: Vulnerability Management Sep 12, 2019

Show notes

What does vulnerability management, mean to you? How do you deal with these issues and track this information? Our Technical Director, Holly Grace Williams discusses the process of pulling together vulnerability information and how certain industry scoring systems for vulnerabilities can be misleading. Key points: 0’43 Keeping track of vulnerability information 3’30 Vulnerability aggregation 6’10 Scoring vulnerabilities with CVSS 12’45 ‘High risk’ can mean different things 19’25 Grouping assets into services 27’52 Reporting vulnerabilities to the board 29’24 Tracking vulnerability recurrence We’d love to hear how you’re tracking vulnerability information? Let us know on social via Twitter or LinkedIn! Useful links: Common Vulnerability Scoring Systems version 3.1 - https://www.first.org/cvss/calculator/3.1 OWASP Top 10 - https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project Download on iTunes: apple.co/2Ji61Ek Listening time: 36 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma

031. A Month in Review (Aug ’19): Security Conference Controversy! Sep 05, 2019

Show notes

Introducing our new monthly podcast updating you with the latest cybersecurity news, we kick off ‘A Month in Review’ with some security conference controversy! Our Technical Director Holly Grace Williams discusses the BSides Twitter battle about corporate involvement and the controversial talk Crown Sterling presented at Blackhat. Key points: 1’00 The benefits of security conferences 4’29 The ‘Twitter battle’ about corporate involvement at BSides 11’17 Corporate sponsorship for corporate talks 13’34 A controversial "Sponsored Session" at BlackHat 22’26 Vetting sponsored talks and audience participation 23’49 The fallout following BlackHat's "Sponsored Sessions" 29’34 An very brief intro to Cryptography and Quantum How do you think conferences should handle corporate sponsorship? Let us know your thoughts on Twitter @secarma or email us at podcast@secarma.com Download on iTunes: apple.co/2Ji61Ek Listening time: 37 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma

030. Why Organisations Struggle with Security Basics Aug 29, 2019

Show notes

Some of the most common cybersecurity issues have been around for decades and whilst basic security practices can help protect organisations against these threats, businesses are still struggling to implement security basics. We talk phishing, patching and supply chain risk with the new Head of InfoSec at The University of Salford, Greg van der Gaast and why organisations need to be playing the long game when it comes to security. 0’22 Guest introduction 0’54 Why do companies struggle with security basics? 9’41 How to prioritise security 10’24 Phishing, patching and supply chain risk 34’16 Playing the long game 37’00 CISO certifications – are they worth it? 45’20 Security consistency 50’34 Visibility is everything! Do you see IT and Security as distinct entities, or do you see them as security as a function of IT? Reach out to us on Twitter @secarma or email us at podcast@secarma.com Download on iTunes: apple.co/2Ji61Ek Listening time: 55 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Greg van de Gaast, Head of InfoSec at The University of Salford

029. Leveraging Cybersecurity to Boost Your SME Aug 22, 2019

Show notes

Cybersecurity isn’t just a barrier. If leveraged correctly, it can help to improve and grow your business.The Cyber Foundry project, a European regional development fund program, has been designed to encourage and demonstrate to SMEs how to do just that. In this episode, we speak to the Project Manager of The University of Manchester, Brian Higgins, who runs us through delivering this unique initiative. We cover how businesses in all sectors are at risk of cyber crime, some common security problems, and how crime groups are operating like businesses themselves! Key points: 0’29 Guest introduction 0’46 Educating SMEs about security by design 3’30 What the Cyber Foundry Project does 8’32 All types of businesses need to consider cybersecurity 16’04 The ‘head in the sand ethos’ 17’35 Ransomware is a business model! 29’20 Your business has more electronic systems than you realise 37’49 Building a community to better understand cybersecurity for SMEs Useful links: Cyber Foundry - https://gmcyberfoundry.ac.uk/ What are your cybersecurity concerns as an SME? Reach out to us on Twitter @secarma or email us at podcast@secarma.com Download on iTunes: apple.co/2Ji61Ek Listening time: 44 minutes Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Brian Higgins, Project Manager at The University of Manchester

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected