Hacker Valley Studio

Latest Episodes:

Do You Deserve To Be Hacked? Featuring Ilan Fehler and Dahvid Schloss Nov 26, 2024

Show notes

Do you deserve to be hacked? With that bold tagline, CovertSwarm is pushing leaders to rethink how they test and defend their systems, and in this episode, they’re sharing firsthand how organizations can prepare for adversaries in the wild.

Recorded at Black Hat 2024, Ron is joined by Ilan Fehler, US Sales Lead at CovertSwarm, and Dahvid Schloss, Hive Leader at CovertSwarm to explore the world of adversary emulation. From physical breaches to API exploits, this conversation covers the human, digital, and physical elements of cybersecurity.

Impactful Moments:
00:00 - Introduction
01:25 - You Deserve To Be Hacked
03:05 - Emulating criminal behavior: The hive structure
07:55 - Social engineering tactics that really work
20:16 - Physical breaches: Pentesting in action
24:09 - Past the firewall: Second- and third-layer testing
29:14 - Digital exploits and real-world vulnerabilities
35:24 - Why organizations hesitate to invest in red teams
37:33 - Building muscle memory for security

Links:

Connect with our guests, Ilan Fehler https://www.linkedin.com/in/fehler/ and Dahvid Schloss https://www.linkedin.com/in/dahvidschloss/

Learn more about CovertSwarm here: https://covertswarm.com/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Transforming SOC Operations with AI featuring Roy Halevi Nov 20, 2024

Show notes

Cybersecurity is evolving fast, and AI is at the center. Roy Halevi, Co-Founder and CTO of Intezer, explains how AI automates SOC operations, improving speed and accuracy while freeing up teams to focus on critical threats.

In this conversation with host Ron Eddings, Roy explains how AI automates critical tasks like alert investigation and response, reducing noise and improving accuracy. Roy shares insights on overcoming challenges in adopting AI, the future of SOC roles, and how organizations can optimize their defenses using AI driven tools.

Impactful Moments

00:00 – Intro and the AI revolution in cybersecurity

01:16 – Meet Roy Halevi, Co-Founder and CTO of Intezer

03:00 – The story behind the name ‘Intezer’

06:14 – Key challenges facing today’s SOC teams

15:04 – Top use cases for AI in the SOC

21:27 – How Intezer automates alert triage and response

37:32 – Future predictions for SOC and cybersecurity roles

48:23 – Closing thoughts and call to action

Links:

Connect with our guest, Roy Halevi: https://www.linkedin.com/in/royhalevi

Learn more about Intezer here: https://intezer.com

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

From Shadow IT to Full Asset Visibility with Wes Wright Nov 12, 2024

Show notes

Can you truly protect what you can't see? Wes Wright, Chief Healthcare Officer at Ordr, joins Ron to share how organizations can shine a light on their network and asset blind spots and take control of their digital assets.

In this episode, Ron and Wes discuss the importance of asset visibility in cybersecurity, outlining the potential of CAASM (Cyber Asset and Attack Surface Management) and how it empowers teams to expose hidden vulnerabilities, streamline operations, and stay ahead of security threats, vulnerabilities, and exposures.

Impactful Moments:

00:00 - Introduction

01:35 - Asset visibility and blind spots

03:47 - What keeps CTOs and CISOs up at night

08:45 - Bridging IT and OT: CAASM explained

12:10 - Real-world use cases for CAASM

18:37 - The power of automated asset management

25:00 - Why continuous inventory is a game-changer

35:59 - Wes’s advice for getting started with Ordr

Links:

Connect with our guest, Wes Wright: https://www.linkedin.com/in/4kidwes/

Learn more about Ordr here: https://ordr.net/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Building Opportunities for Women and Minorities in Cybersecurity with Connie Matthews Nov 06, 2024

Show notes

How do you create waves of change in an industry? Connie Matthews, Founder and CEO of ReynCon, speaks with Ron about the power of resilience, mentorship, and taking that first bold step in cybersecurity.
In this powerful episode, Connie shares her path as a pioneering woman in cybersecurity. Discussing diversity, mentorship, and her nonprofit EmpoW-ER, Connie’s shared lessons and insights on resilience and community give listeners a blueprint for making a meaningful impact in their careers.

Impactful Moments:

00:00 – Introduction
04:27 – Mentorship impact: Building future leaders
10:14 – Embracing diversity and servant leadership
18:03 – Founding EmpoW-ER: Supporting women in cyber
24:13 – Navigating stereotypes and staying resilient
30:00 – Recognizing and celebrating young talent
36:45 – Building an inclusive cybersecurity community

Links:

Connect with our guest, Connie Matthews: https://www.linkedin.com/in/conniematthews/

Learn more about EmpoW-ER: https://www.empower-infosec.org/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

Rethinking Cybersecurity Hiring with Naomi Buckwalter Oct 29, 2024

Show notes

Is cybersecurity gatekeeping holding back the industry? Naomi Buckwalter, Senior Director of Product Security at Contrast Security and Founder of the Cybersecurity Gatebreakers Foundation, argues that fresh talent and open doors are crucial for industry growth.

In this episode, Naomi challenges why industry hiring norms fall short, shares candid stories of her own missteps, and explains why humility and learning are just as important as technical skills in cybersecurity.

Impactful Moments:

00:00 – Introduction

03:15 – Building a genuine presence on LinkedIn

07:40 – Founding the Cybersecurity Gatebreakers Foundation

12:00 – Why hiring juniors is a win for cybersecurity

17:58 – Relationship building in cybersecurity

25:27 – Lessons from layoffs and overcoming failure

35:45 – Setting goals and attracting opportunities

Links:

Connect with our guest, Naomi Buckwalter: https://www.linkedin.com/in/naomi-buckwalter/

Learn more about the Cybersecurity Gatebreakers Foundation: https://www.cybersecuritygatebreakers.org/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

AI, Deepfakes, and Human Risk in Cybersecurity with Perry Carpenter Oct 22, 2024

Show notes

In a world filled with AI-generated deceptions, how do we discern what’s real? Ron sits down with Perry Carpenter, author of FAIK: A Practical Guide to Living in a World of Deepfakes, Disinformation, and AI-Generated Deceptions, to discuss the risks and the potential of synthetic media and human risk management.

Whether you’re worried about deepfakes or curious about AI’s role in creativity, this episode has something for everyone.

Impactful Moments:

00:00 – Intro
00:49 – Synthetic voices surprise in mastermind
01:42 – Perry’s new book FAIK: A Practical Guide to Living in a World of Deepfakes, Disinformation, and AI-Generated Deceptions
03:42 – Psychology's role in cybersecurity
06:07 – Human risk management explained
09:14 – Deepfakes in fraud and scams
15:13 – Demo of deepfake voices
20:22 – Using cakes to explain large language models
27:00 – AI helps overcome creative blocks
32:00 – Managing AI hallucinations and risks

Connect with our guest, Perry Carpenter: https://www.linkedin.com/in/perrycarpenter

Purchase a copy of Perry’s book FAIK here: https://www.amazon.com/FAIK-Practical-Disinformation-AI-Generated-Deceptions/dp/1394299885

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

How to Become a True Security Leader with Nathan Case Oct 15, 2024

Show notes

How does one become a true security leader? According to Nathan Case, it’s not about titles—it’s about impact.

In this episode, Nathan Case, VP of Cloud Security at Clarity, shares his journey through security leadership, including stories from his time at AWS and his approach to building mission-driven teams. Nathan discusses balancing family with leadership, the future of AI in cybersecurity, and what it takes to become a real leader in the security space. He also reflects on the importance of being chosen as a leader, rather than striving for the title.

Impactful Moments:

00:00 – Introduction

02:31 – Journey from AWS to Clarity

04:00 – Cyber Dominance

05:55 – Leading Through M&A

07:00 – Redefining the CISO Role

11:00 – Shared Security Responsibility

15:15 – Balancing Mission and Family

20:00 – AI in Security

28:30 – Leadership in Incident Response

32:00 – Woodworking and Perfectionism

35:00 – Leaders Are Chosen

Links:

Connect with our guest, Nathan Case: https://www.linkedin.com/in/nathancase/

Check out Nathan and Ross Haleliuk's blog on Security Incident Response here: https://ventureinsecurity.net/p/a-different-take-on-security-incident

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

AI and the Future of Cyber Defense with John Hubbard Oct 08, 2024

Show notes

How can AI shape the future of cybersecurity defense? In this episode, we dive into SOC operations, AI integration, and the latest in threat detection with John Hubbard, Cyber Defense Curriculum Lead at SANS.

John discusses the expansive landscape of cybersecurity defense, while sharing insights on AI's role in threat detection and the cutting-edge tools that are pushing the boundaries of cybersecurity. From automation to detecting anomalies in network traffic, this episode will bring you up to speed on the latest trends and challenges facing cyber defense teams.

Impactful Moments:

00:00 – Introduction
01:00 – Meet John Hubbard: Cyber Defense Curriculum Lead at SANS
02:30 – Overview of the SANS Cyber Defense Curriculum
03:30 – The Role of AI in Cybersecurity
05:30 – How AI is Shaping Threat Detection in SOCs
09:00 – Automation and AI: Practical Use Cases
15:00 – AI in Network Traffic Analysis
19:00 – The Future of SOC Operations with AI

Links:

Connect with our guest, John Hubbard: https://www.linkedin.com/in/johnlhubbard/

Check out the SANS Cybersecurity Courses & Certifications: https://www.sans.org/cyber-security-courses/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

How Adversaries Are Living Off The Dark Web with Jason Haddix Oct 01, 2024

Show notes

Have you ever lost something important, only to find out someone moved it without telling you? The same thing happens with our personal and business data. But what if you could see what the adversary sees?

In this episode, Jason Haddix, Field CISO at Flare, shares his experiences in red teaming, accessing dark web credentials, and protecting against malicious actors. Whether you're curious about data exposure or how threat actors operate, this conversation offers insights into the constant changes in cybersecurity.

Impactful Moments:

00:00 - Introduction

01:11 - The Basics of the Dark Web and How Criminals Operate

07:16 - Flare's Role in Cybersecurity

11:14 - Common Security Mistakes

20:04 - Pen Testing with Flare

21:33 - Exploiting Exposed Credentials

22:19 - Reconnaissance Tools and Techniques

24:38 - Email Security Concerns

28:43 - The Power of Stealer Logs

38:21 - Dark Web Tactics and AI

39:33 - Advice for Cybersecurity Leaders

42:04 - Exploring Flare’s Platform for Threat Intelligence

44:26 - Conclusion and Final Thoughts

Links:

Connect with our guest, Jason Haddix: https://www.linkedin.com/in/jhaddix/

Check out Flare here: https://try.flare.io/hacker-valley-media/

Check out Arcanum here: https://www.arcanum-sec.com/

Check out our upcoming events: https://www.hackervalley.com/livestreams

Join our creative mastermind and stand out as a cybersecurity professional:

https://www.patreon.com/hackervalleystudio

Love Hacker Valley Studio? Pick up some swag: https://store.hackervalley.com

Continue the conversation by joining our Discord: https://hackervalley.com/discord

Become a sponsor of the show to amplify your brand: https://hackervalley.com/work-with-us/

AT&T Dynamic Defense: Security Before It Reaches Your Company's Doorstep with Senthil Ramakrishnan Sep 24, 2024

Show notes

In this episode, Ron Eddings and Jen Langdon speak with Senthil Ramakrishnan, Assistant Vice President of Cybersecurity Product at AT&T Business.

Senthil shares information about how a new product, AT&T Dynamic Defense™, helps protect customers by providing threat detection and mitigation at the network edge. They’ll discuss how it can address evolving cybersecurity threats, including real-world examples like the Log4j vulnerability, and how its simplicity allows for a zero-touch experience.

Impactful Moments:

00:00 - Welcome

01:01 - Introducing guest, Senthil Ramakrishnan

04:01 - Security at the Network Edge

05:57 - Fitting in With Businesses

08:00 - “Can You Just Block It For Us?”

10:05 - Stopping Log4j

11:18 - Default Enabled Policy

15:57 - How Involved is the Customer?

16:40 - Simplifying Security for Customers

Links:

Connect with our guest Senthil Ramakrishnan: https://www.linkedin.com/in/senthil-ramakrishnan-66406b30/