The CyberCall Podcast

Latest Episodes:

CIS Control 12 - Network Infrastructure Management - sponsored by Domotz! Jul 07, 2022

Show notes

Abstract: Network Infrastructure Management - Establish, implement, and actively manage network devices, in order to prevent attackers from exploiting vulnerable network services and access points.
Network infrastructure devices can be physical or virtual and include things such as routers, switches, firewalls, and wireless access points. Unfortunately, many devices are shipped from manufacturers with “default” configuration settings and passwords that, if deployed as-is, can significantly weaken an organization’s network infrastructure. Even if network devices are hardened with non-default configurations and strong passwords, over time these devices will be targeted by new vulnerabilities that are discovered by security researchers.

MSPs should ensure that their teams implementing and operating the network infrastructure have processes and procedures in place that include capabilities for having a secure network infrastructure.
👏Special thanks for Domotz sponsorship and interview.
ONLY $21 per Network!! Incredible for MSP COGS!!
Key areas Domotz helps MSPs: Control 1 | Continuous Discovery of new devices | checking for default passwords | Alerting on changes (ports, protocols, configurations) | being able to revert back (backup) | logging and auditing of changes and much more!!
🙌 JB Fowler: https://www.linkedin.com/in/jb-fowler-1302023/ & Giancarlo Fanelli https://www.linkedin.com/in/giancarlofanelli/

👉Domotz's Security Standards: https://www.domotz.com/knowledge-base/Domotz-Security-Standards-2021-March.pdf
Domotz MSP: https://www.domotz.com/msp.php
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

CIS Control 11 - Data Recovery - sponsored by Datto! May 24, 2022

Show notes

Abstract: Data loss can be a consequence of a variety of factors from malicious ransomware, threat actors using "Double Extortion" and exfiltration, human error and natural disasters like hurricanes. Regardless of the reason for data loss, we need to have a process established (RPO/RTO) to recover our data.

Key Takeaways for Control 11

Prioritize your data and come up with a data recovery plan.
Protect your backed up data. (See Control 3: Data Protection.)
Practice and Test restoring your data.
Restore your data after any compromise.

👉Datto's BCDR Resource Center: https://www.datto.com/resources?page=4&categories=BCDR
🙌 Rob Rae: https://www.linkedin.com/in/robtrae/ - special thanks for Datto's sponsorship and interview.
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

CIS Control 10 - Malware Defenses - sponsored by Malwarebytes! Apr 26, 2022

Show notes

Abstract: With the continuing rise of ransomware, malware defenses are more critical than ever before with regard to securing your MSP and clients. Malware defenses must be able to operate in a dynamic environment through automation, timely and rapid updating, and integrate with other processes like vulnerability management and incident response. Anti-Malware technologies have become an after thought in many organizations, a technology that they’ve always had, always used, and never really thought about. Effective malware protection includes traditional endpoint malware prevention and detection suites, along with enrichment from vendor, vulnerability or threat data.

👉MSP Partner Growth Program: https://www.malwarebytes.com/partners/managed-service-providers - email Roane Tucker for assistance - rtucker@malwarebytes.com.
🙌 Claudio Tosi: https://www.linkedin.com/in/claudiotosi/
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

CIS Control 9 - Email & Web Browser Protections - sponsored by Cisco Secure MSP Mar 17, 2022

Show notes

Abstract: Web browsers and email clients are very common points of entry for attackers because of their direct interaction with users inside an organization. Content can be crafted to entice or spoof users into disclosing credentials, providing sensitive data, or providing an open channel to allow attackers to gain access, thus increasing risk to your MSP or client's business. Since email and web are the main means that users interact with external and untrusted users and environments, these are prime targets for both malicious code and social engineering.
😎Cisco Secure MSP Interview: with Steve Steinberg, Sales Engineer for Cisco Umbrella.
👉Cisco Secure Managed Service Provider: https://www.cisco.com/c/en/us/products/security/secure-msp-center.html
🙌Steve Steinberg: https://www.linkedin.com/in/stevesteinberg/
Interested in learning more: msp@cisco.com
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

CIS Control 8 - Audit Log Management - sponsored by Blackpoint Cyber Feb 12, 2022

Show notes

Abstract: Log collection and analysis is critical for an organization's ability to detect malicious activity quickly. Sometimes audit logs are the only evidence of a successful attack. Attackers know that many organizations keep audit logs for compliance purposes, but rarely analyze them. Due to poor log analysis processes, attackers sometimes control victim machines for months or years without anyone in the target organization knowing. In this episode, learn about using logs in incident management, analyzing what to log and the numerous factors to establish a successful audit log management process.
Sponsor: Blackpoint Cyber interview with Travis Brittain, Director of Product Enablement.
Logging & Compliance: https://blackpointcyber.com/logic/
Travis Brittain: https://www.linkedin.com/in/tbrittain/
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

CIS Control 7 - Continuous Vulnerability Management - sponsored by CyberCNS Dec 22, 2021

Show notes

Note we discuss Log4j as this is a very timely topic to this control.
Abstract: Cyber defenders are constantly being challenged from attackers who are looking for vulnerabilities within their infrastructure to exploit and gain access. Defenders must have timely threat information available to them about: software updates, patches, security advisories, threat bulletins, etc., and they should regularly review their environment to identify these vulnerabilities before the attackers do. Understanding and managing vulnerabilities is a continuous activity, requiring focus of time, attention, and resources.
Sponsor: CyberCNS interview with Shiva Shankar, CTO & Founder at minute 45:22.
Learn more here: https://www.cybercns.com/ (free trial)
Shiva Shankar: https://www.linkedin.com/in/shivashankarj/
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

CIS Control 6 - Access Control Management - sponsored by Appgate Nov 22, 2021

Show notes

Abstract: It is easier for an external or internal threat actor to gain unauthorized access to assets or data through using valid user credentials than through "hacking" the environment. There are many ways to covertly obtain access to user accounts, including: week passwords, accounts still valid after a user leaves the organization, dormant or lingering test accounts, shared accounts that have not been changed in months or years, service accounts embedded in applications for scripts, a user having the same password as the one they use for an online account which was compromised in a public password dump. Listen as our hosts break down the people, process and technology to implement effective and secure account management.
Sponsor: Appgate interview with Tina Gravel, SVP Channels and Alliances at minute 37:20.
Learn more here: https://www.appgate.com/
Tina Gravel: https://www.linkedin.com/in/tinagravel/
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

CIS Control 5 - Account Management - sponsored by Keeper Security Oct 19, 2021

Show notes

Abstract: There are many ways to covertly obtain access to user accounts, including: week passwords, accounts still valid after a user leaves the enterprise, dormant or lingering test accounts, shared accounts that have not been changed in months or years, service accounts embedded in applications for scripts, a user having the same password as one they used for an online account. Learn how CIS Control 5 can mitigate some of the most common ways credentials are compromised.
Sponsor: Keeper Security interview with Marcia Dempster, Sr. Director of Channel Sales at minute 48:21.
Learn more here: https://www.keepersecurity.com/
Marcia Dempster: https://www.linkedin.com/in/marcia-dempster-03280914/
Sponsor: CIS CIS-CAT (https://learn.cisecurity.org/cis-cat-lite)
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

Control 4: Secure Configuration of Enterprise Assets - sponsored by ThreatLocker Aug 25, 2021

Show notes

Abstract: Learn why the number one thing organizations can do to defend their networks against top attacks, is to implement secure configurations!
Azure Breach (8/26/2021): According To Wiz who found the CosmosDB Vulnerability, they quote: "Database exposures have become alarmingly common in recent years as more companies move to the cloud, and the culprit is usually a misconfiguration in the customer’s environment." https://www.wiz.io/blog/chaosdb-how-we-hacked-thousands-of-azure-customers-databases
Sponsor: ThreatLocker interview with CEO, Danny Jenkins at minute 31:58. Learn more here: https://www.threatlocker.com/
Sponsor: CIS CIS-CAT (https://learn.cisecurity.org/cis-cat-lite)
Co-hosts:
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Phyllis Lee: https://www.linkedin.com/in/phyllis-lee-21b58a1a4/
Wes Spencer: https://www.linkedin.com/in/wesspencer/

Control 3: Data Protection (part 2) - Sponsored by Datto Jul 09, 2021

Show notes

Abstract: CIS Control 3 is Data Protection and data is pretty much what's at stake for a high percentage of cyber attacks. Data is more valuable than oil and it fuels many organizations. Many of the baseline security recommendations from all of the security frameworks out there now recommend, or REQUIRE if you’re in a regulated industry such as healthcare, that certain things like full disk encryption are simply put into place no matter your risk profile. Much of what’s in the Data Protection Control represents the modern reality of cybersecurity.
Note: we split up Data Protection into two shorter podcasts (about 20 minutes each) and therefore, you will see a "part 1 & part 2".
Part 2 focuses in depth into CIS Control 3 and the Safeguards 3 - 7 (formerly called sub controls).
Co-hosts in part 2 are: Ryan Weeks, CISO of Datto and Wes Spencer, CISO of Perch Security.
Ryan Weeks: https://www.linkedin.com/in/ryanweeks/
Wes Spencer: https://www.linkedin.com/in/wesspencer/
Sponsor: Datto - https://www.datto.com/
Rob Rae, SVP of Business Development: https://www.linkedin.com/in/robtrae/
DattoCon: https://seattle.dattocon.com/

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected