Stay ConnectedCybersecurity weekly podcast series featuring industry thought leaders discussing security solutions, best practices, threat intel, and more.
Our primary topics within InfoSec include: Application Security; Artificial Intelligence; Blockchain; Career Development; Cloud Security; Encryption / DLP; Endpoint / Mobile / IoT Security; GRC; Incident Response / SIEM; Identity and Access Management; Network Security; Privacy; Ransomware / Malware; and Security Awareness.
Copyright: © 2019 Seguro Group Inc.
What does cybersecurity collaboration look like in the digital realm? What about the future of physical events and conferences for the cybersecurity industry?
In this episode, we are speaking with conference creator Brad Graver, Vice President of SecureWorld. Brad and his team have overseen more than 120 cybersecurity conferences across North America over the past 19 years, and have experienced the shift from in-person to online events in the wake of COVID-19.
Also, we look at new cloud security resources from Trend Micro, our premiere podcast partner.
RESOURCE LINKS:
• Trend Micro's Cloud Security and Misconfiguration Paper: https://www.trendmicro.com/vinfo/us/security/news/virtualization-and-cloud/exploring-common-threats-to-cloud-security
• New SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events
• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.
In this episode, we are speaking with Aaron Ansari, Vice President of Cloud One - Conformity at Trend Micro. What are the remote work security gaps exposed by the COVID-19 shift to the cloud? What are common factors in cloud security misconfigurations? With cybersecurity features built into many cloud platforms, do you need a third-party or external cloud security solution? We explore these questions and more. Says Ansari:
"Cloud providers have an enormous, robust, complex set of services that are available for organizations and people to build infrastructure and environment in their cloud. It's fantastic; it's very rich; it's very diverse. And it covers all the things that you would want to see covered, from database to computer storage to traffic and network and routing, and all that sort of content.
But what's lacking there is the diverse skill set needed to cover all those services. So when you're building a cloud environment, you might be a developer. And as a developer, you are specifically going through and trying to build an application, but you don't have a real deep understanding of database and you don't have a real deep understanding of computers. And so on and so forth. You're sitting there, building this environment by yourself, and you're just clicking. Yes, I need this. Yes, I need this. Next, next, next, next, next, and boom, you've got an environment. Now, it might be functional for what you're trying to do. But the reality is that you just took a blueprint that you think kind of works and you tried to build your house, and you didn't build your house correctly. It might look like something that it's supposed to on the outside, but on the inside, you put something a little too heavy on one wall and the whole thing comes crumbling down."
Resource links:• Trend Micro Cloud Security solutions overview: https://www.trendmicro.com/en_us/business/capabilities/solutions-for/cloud.html
• Cloud One - Conformity: https://www.trendmicro.com/cloud-one-services
• New SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events
• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.
In this episode, we are speaking with noted author Joseph Steinberg. His works on cybersecurity have been read by millions of people, including a security certification exam study guide and recently the "Cybersecurity for Dummies" book.
We cover a variety of topics: AI in cybersecurity; the rise of the insider threat risk; translating risk to executives or end-users; IoT security; and more.
RESOURCE LINKS:
• Trend Micro's Incident Response Guidebook: https://www.trendmicro.com/vinfo/us/security/news/managed-detection-and-response/cyberattacks-from-the-frontlines-incident-response-playbook-for-beginners
• Joseph Steinberg's official website: https://josephsteinberg.com
• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep dive web conferences: https://www.secureworldexpo.com/resources?cat=web-conferences
The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.
In this episode, we discuss in depth the cybersecurity risks that come from insiders. What does a malicious insider threat look like? How about the accidental insider threat? How can executives become accidental insider threats? And more.
Hear insights from these experts:
• Dr. Larry Ponemon of the Ponemon Institute • Sudeep Venkatesh, Chief Product Officer, Egress • John Grim, Head of Research, Development, and Innovation, Verizon Threat Research Advisory Center • Dr. Chris Pierson, Founder & CEO, BlackCloak
Also, Trend Micro shares mitigation techniques for PowerShell-based malware and attacks.
Links from the show:• Trend Micro paper, "Tracking, Detecting, and Thwarting PowerShell-based Malware and Attacks": https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/tracking-detecting-and-thwarting-powershell-based-malware-and-attacks
• SecureWorld web conference, "Are We Taking the Insider Threat Seriously Enough?": https://www.secureworldexpo.com/resources/insider-threat-giving-the-attention-it-deserves
• Fireside chat with Dr. Larry Ponemon of the Ponemon Institute (podcast): https://www.secureworldexpo.com/resources/larry-ponemon-interview-podcast
• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep dive web conferences: https://www.secureworldexpo.com/resources?cat=web-conferences
The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.
In this episode, we are speaking with Rob Morgus, Director of Research and Analysis at the U.S. Cyberspace Solarium Commission. He is the lead author on a new white paper which uncovers the parallels between the COVID-19 pandemic and the cyber threat landscape. He also explains new cybersecurity priorities the Commission published as a result of lessons from the coronavirus response. Says Morgus:
"The bottom line is that the United States on cybersecurity—and now we're experiencing something similar—has experienced a number of wake up calls over the last decade, decade and a half. In 2014, hacking OPM, and we didn't really improve the state of our government cybersecurity in 2015. In 2016, we saw Russia turn off the power grid in Ukraine, and we haven't really taken massive steps to improve the security of our power grid. We saw NotPetya and WannaCry in 2017-2018; we haven't really done much to lock down our critical systems. And now we're experiencing the pandemic, which is a massive disruption.
These have all been opportunities for us to wake up and smell the roses, and we continually sort of hit the snooze button. And the main contention, and if you take away one thing from the pandemic white paper, it is that now is the time to invest. We've had plenty of opportunities to say, hey, we need to do this. We should have the foresight to do so, and now I think we're seeing that it's more urgent than ever."
Will we heed the wake up call from COVID-19?
Also, Trend Micro shares ransomware mitigation techniques for Maze ransomware.
SHOW LINKS:
• Trend Micro research on Maze ransomware mitigation techniques: https://www.trendmicro.com/vinfo/us/security/threat-intelligence-center/security-strategies-for-enterprises/ent-threats-ransomware
• White Paper #1 (June 2020) by U.S. Cyberspace Solarium Commission: https://drive.google.com/file/d/1wCHVtIFlw84uZIPOTZe2nkdGau15fLAQ/view
• March 2020 U.S. Cyberspace Solarium Commission Report: https://www.solarium.gov/report
• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep dive web conferences: https://www.secureworldexpo.com/resources?cat=web-conferences
The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.
In this episode, we are speaking to "The Privacy Professor" Rebecca Herold, one of the authors of the new NIST Privacy Framework and host of her own privacy and cybersecurity podcast. She unpacks the privacy and security challenges of coronavirus contact tracing, which relies on massive amounts of personal data to work.
"I mean, you can't preserve privacy if you can't control the data," Herold says. "And to control the data, you have to have security applied to it in many different ways and layers, making sure only those who need access can get access, protecting the data from being captured as it's being transmitted through different types of pathways and other methods."
Also, Trend Micro shares ransomware mitigation techniques for the new Nefilim ransomware.
RESOURCE LINKS:
• Trend Micro research: "Nefilim Ransomware Threatens to Expose Stolen Data": https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/nefilim-ransomware-threatens-to-expose-stolen-data
• Rebecca Herold's podcast: https://www.privacyguidance.com/radio.html
• Rebecca Herold's LinkedIn page: https://www.linkedin.com/in/rebeccaherold/
• SecureWorld Remote Sessions daily briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep dive web conferences: https://www.secureworldexpo.com/resources?cat=web-conferences
The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.
In this episode, we are speaking to Shawn Tuma, cybersecurity and data privacy attorney with Spencer Fane LLP. He says the two key elements of cyber resilience are an incident response plan and cyber insurance. But do you know what your cyber insurance policy covers? Tuma says cyber insurance policies can lead to unpleasant surprises during an incident if you do not understand your policy.
@ 14:30 Tuma says: "You're just tuned up and ready to go on a moment's notice. You get alerted you have an incident. And while you're not exactly excited about that, you're glad that you have this incident response plan in place. You activate your plan, you begin execution. Only then do you discover that not only does your company have cyber insurance, but that insurance policy specifically dictates what vendor or professional service firms you can use. And none of those approved vendors are the ones that you included on your external Incident Response Team. Okay, that's a problem."
Also, Trend Micro uncovers new types of industrial Internet of Things (IIoT) cyberattacks in some fresh research. See the link below.
RESOURCE LINKS:
• Trend Micro research: "Threats and Consequences: Attacks on Smart Manufacturing Systems": https://www.trendmicro.com/vinfo/us/security/news/internet-of-things/threats-and-consequences-a-security-analysis-of-smart-manufacturing-systems
• Shawn Tuma's resource site: https://shawnetuma.com
• SecureWorld Remote Sessions daily briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep dive web conferences: https://www.secureworldexpo.com/resources?cat=web-conferences
The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.
In this episode, we are speaking to CNN Analyst and retired U.S. Air Force Col. Cedric Leighton. The real world and the cyber world are converging. Criminal elements are increasingly turning to cybercrime. And nation-state hackers continue to look for what is next.
@ 34:49 Leighton says: "We will know that the Chinese, the Russians, the North Koreans, even the Iranians are going to continue to be active in cyberspace. They will take advantage of new work modes that may outlast the coronavirus pandemic. And those new work modes lead to new vulnerabilities. There's new vulnerabilities will lead to new methods of exploitation by these and other bad actors."
Also, Trend Micro research uncovers geopolitics and cyber attacks against the oil and gas industry.
RESOURCE LINKS:
The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.
In this episode, we are speaking to CISO and Holistic Health practitioner Jothi Dugar about the impact of cybersecurity stress on mental health.
@9:04 Dugar says: "You kind of have to be connected 24 by 7 because you have to know what's going on. You have to do incident response, you're on call, you're probably working more than 40 hours a week. And you have to be on top of it with your A game on at all times to deal with cyber incidents or outages or breaches at any time in the day or night." She explains how mindset and reframing can help lower your stress level and reduce your risk of burnout.
Also, Premiere podcast partner Trend Micro uncovers how leadership and boards view cloud adoption differently than, say, security engineers. Check out their discussion in the video below.
RESOURCE LINKS:
The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.
The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.
In this episode, we are speaking to Neal O'Farrell, Founder of the PsyberResilience Project. He started a movement to develop a mental health baseline among cybersecurity professionals and to tackle the issues of cybersecurity stress and burnout. He says burnout hurts your organizational security posture and is causing us to lose important people and widen the talent gap. Also, what are the top causes of cybersecurity burnout?
@7:55: "One thing that's come on very strong is unrealistic expectations. This I hear repeatedly. They think we know all this stuff, they think that we're capable of working 12, 14, 16 hour days there. They think that we constantly know about the new threats before any one else, that we have unpacked and understand all these vendor tools, that we win all the time. There's no kind of theory of acceptable losses in security. So unrealistic expectations certainly is up there in the top five."
RELATED LINKS: • Trend Micro updates "Know the Symptoms, Protect Your Device While Working from Home": https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/know-the-symptoms-protect-your-devices-while-working-from-home
• The PsyberResilience Project - Take the Survey: https://www.thepsyberproject.com
• SecureWorld Remote Sessions daily briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep dive Web Conferences: https://www.secureworldexpo.com/resources?cat=web-conferences
Our TOPPODCAST Picks 
