Hacked Off

Latest Episodes:

028. An Intro: Election Security Aug 15, 2019

Show notes

In 2016 it was reported that the Russian government targeted the US election system, and whilst there wasn’t any evidence that votes were tampered with, they could have changed data or even deleted voters. With the start of the US presidential 2020 election campaigns, we take a look at why you’d want to hack an election and the pros and cons of online voting. Key points: 1’00 Why would you want to hack an election? 4’13 The challenges of online voting 8’34 The ‘public intrusion test’ on the Swiss Government’s voting system 15’02 The benefits of online voting 17’24 Electronic voting machines 22’32 The Mueller Report - Russian interference in the 2016 presidential election 27’29 The pros and cons of paper ballets Useful links: Demystifying Tech Podcast: Will the UK ever get to vote electronically? - https://www.businesscloud.co.uk/podcasts/will-the-uk-ever-get-to-vote-electronically Defcon report on Cyber Vulnerabilities in U.S. Election Equipment, Databases, and Infrastructure - https://www.defcon.org/images/defcon-25/DEF%20CON%2025%20voting%20village%20report.pdf Download on iTunes: apple.co/2Ji61Ek Listening time: 32 minutes For more information, follow us on Twitter @secarma or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma

027. Getting a Cybersecurity Advisor Aug 08, 2019

Show notes

Ever wondered if you should be hiring a cybersecurity advisor or CISO, or whether the roles you currently have in place are right for your organisation? Mark Avery, Independent Cybersecurity Advisor, talks about the different CISO options, the pros and cons of these roles and how they can help support your organisation. He also discusses the challenges of the CISO role. How it is often misunderstood, resulting in demanding workloads and eventually burn out. Key points: 0’24 Guest Introduction 2’16 Understanding and implementing security foundations 4’00 How would an organisation know they need a cybersecurity advisor? 7’17 What scale of company needs a cybersecurity advisor? 9’55 Different types of cybersecurity advisors and CISOs 19’29 How to decide what kind of cybersecurity person is right for your business 21’39 The challenges of the CISO role 24’58 Why might a company not want a CISO? 27’37 Choosing the right policies for your company Useful links: www.clubciso.org Download on iTunes: apple.co/2Ji61Ek Listening time: 35 minutes For more information, follow us on Twitter @secarma or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Marc Avery, Independent Cybersecurity Advisor

026. The Benefits of Building a Peer Network in Cybersecurity Aug 01, 2019

Show notes

Book author, founder of the IN Security movement, judge to numerous awards in business, books and security; Jane Frankland has worn many hats over her 22 years in cybersecurity. She talks with passion about her work with leaders and women in cybersecurity, helping them build enviable and impactful results, going from being burnt out and under appreciated to being motivated, connected and sought after. Key points include: 0’41 Guest introduction 3’24 Burn out in security industry 6’23 The benefits of a peer network 13’24 The fear of putting yourself out there 19’14 The challenges of writing a book 29’48 Building a peer network 32’29 The IN Security Tribe 38’45 The challenges of staff turnover in cybersecurity 43’54 The importance of wellbeing for CIOs Useful links: www.jane-frankland.com *IN Security by Jane Frankland https://www.amazon.co.uk/InSecurity-Failure-Attract-Retain-Cybersecurity/dp/178133269X Download on iTunes: apple.co/2Ji61Ek Listening time: 48 minutes For more information, follow us on Twitter @secarma or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Jane Frankland, CISO Advisor, Author, Keynote Speaker & Champion for Women in Cybersecurity

025. The Misconceptions of the British Airways Breach Jul 25, 2019

Show notes

Whilst the British Airways breach of 2018 is 'old news' it has been bought to the fore front of everyone's mind with the recent announcement that they face a record-breaking GDPR fine of £183 million. Secarma's Technical Director discusses what we know about the BA breach, the misconceptions over what may have happened and the remediation steps you can take after a data breach. 2'25 - What happened to British Airways? 13’31 - Attack misconceptions 15’51 - Have there been similar attacks? 21'45 - Can you remove third party scripts? If not what should you do? 22’27 - Are you using Content Security Policy and Sub Resource Integrity? Download on iTunes: apple.co/2Ji61Ek Listening time: 29 minutes For more information, follow us on Twitter @secarma or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma

024: Security in the ‘good old days’ and the future of the CISO role Jul 18, 2019

Show notes

Mike Koss, Head of Security and Risk at N Brown Group reminisces about the ‘good old days’ when security was just a hobbyist thing, his career in IT security and how he believes the future of the CISO role it should be developed into a business position and a separate technical position. Key points include: 0’30 Guest introduction 1’38 IT security in retail 11’21 Security relationships with the board 14’37 When security was just a hobbyist thing! 24’13 The pros and cons of bug bounties 30’16 Capture The Flag vs testing in the ‘real world’ 43’43 Should CISOs have a technical degree or a business degree? The future is a CTSO role! 49’20 Defence in depth, not just an annual Pentest Download on iTunes: apple.co/2Ji61Ek Listening time: 60 minutes For more information, follow us on Twitter @secarma or @secarmalabs or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Mike Koss, Head of Security and Risk at N Brown Group

023. The different challenges of the CISO role Jul 11, 2019

Show notes

Secarma’s Technical Director Holly Grace Williams speaks to Mo Ahddoud Security Consultant and interim CISO, about his vast experience in the cybersecurity industry. They cover everything from the difference between a Security Manger and CISO role, the benefits of working with start ups and a little bit about his experience working with critical infrastructure. 0’49 Guest introduction 1’50 The Security Manager role vs the CISO role 4’06 The CISO role in different sectors 10’04 How to separate the snake oil from the useful technology 13’41 The benefits of working with start-up sized vendors 22’40 Tailoring vendor offerings 30’08 To patch or not to patch 36’25 The supply chain risk 46’34 The affect of IOT on critical infrastructure Download on iTunes: apple.co/2Ji61Ek Listening time: 55 minutes For more information, follow us on Twitter @secarma or @secarmalabs or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Mo Ahddoud, Security Consultant and interim CISO

022. Certifications and Upskilling in Cybersecurity & IT Jul 04, 2019

Show notes

We talk to Zeshan Sattar, Director of Learning & Skills Certification at CompTIA, about how organisations like CompTIA can help people not only in getting certified, but reskilling, upskilling and networking within IT and Cybersecurity. 1’53 What is CompTIA? 6’00 Developing the exams with industry experts 8’24 Continuing professional development with certifications 13’56 Who are these certifications for and where do you start? 18’36 What is a BETA exam? 22’56 CompTIA isn’t just exams! How they help you reskill or upskill. 33’43 The CompTIA Certification Roadmap – choosing the right certification for your role and level 38’24 It’s all about community and networking! Useful links: CompTIA Certification Roadmap - https://certification.comptia.org/why-certify/roadmap CompTIA Security+ Hub - https://certification.comptia.org/it-career-news/hub/comptia-security Cyberseek - https://www.cyberseek.org/ Download on iTunes: apple.co/2Ji61Ek Listening time: 42 minutes For more information, follow us on Twitter @secarma or @secarmalabs or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Zeshan Settar, Director of Learning & Skills Certification at CompTIA

021. Thomas Ballin: The Evolution of Penetration Testing Jun 27, 2019

Show notes

We talk to Senior Security Consultant Thomas Ballin, on what he thinks are the major facets of red team engagements, how they can differ by provider or scenario, and how he thinks they might evolve over time. 0’32 Thomas’ unconventional route into the cybersecurity industry and his role at Secarma 4’31 The many ‘definitions’ of penetration testing 7’30 The benefits of red teaming and where to start 15’02 The race between attack and defence 20’15 Debriefing after a red team 26’00 The future of red teaming 31’31 What you should do after a red team 37’47 The infrastructure that’s used for red team engagement 41’00 How to become a red teamer! Download on iTunes: apple.co/2Ji61Ek Listening time: 47 minutes For more information, follow us on Twitter @secarma or @secarmalabs or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma Guest: Thomas Ballin, Senior Security Consultant at Secarma

020. Malicious Software – Past, Present & Future Jun 20, 2019

Show notes

We take a look at the history of malicious software, some of the oldest known attacks and how it has changed over the years. Holly also speaks about her own personal experience of the 2017 Notpetya attack and predicts what the future holds for malicious software attacks. It doesn’t look good… 1’22 Different types of malicious software 5’33 The oldest known malware attacks 12’13 Dealing with the Notpetya attack 16’14 Automated propagation 19’24 Manual propagation 20’24 The future of malware 21’47 Why anti-malware isn’t perfect Download on iTunes: apple.co/2Ji61Ek Listening time: 33 minutes For more information, follow us on Twitter @secarma or @secarmalabs or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma

019. Cybersecurity Maturity Assessments Jun 13, 2019

Show notes

We share the talk we presented at UKFast’s recent Cybersecurity 101 workshop, in a little more detail, discussing where companies should start with cybersecurity and how they can be comfortable that they have covered a broad enough area of security to be safe. 1’41 What is Cyber Essentials and is it right for your company? 5’57 Risk management – building a security culture and getting the board involved 10’39 Security protections – what you can do yourself and when to get a third party involved 19’43 Incident detection – alert generation, automatic monitoring and training the team 27’57 Minimising impact – response testing and planning, root cause analysis and backups Download on iTunes: apple.co/2Ji61Ek Listening time: 39 minutes For more information, follow us on Twitter @secarma or @secarmalabs or email us at podcast@secarma.com Hosted by: Holly Grace Williams, Technical Director at Secarma

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected