Careers Information Security Podcast

By CareersInfoSecurity.com

What's Careers Information Security Podcast about?

Exclusive, insightful audio interviews by our staff with careers/security leading practitioners and thought-leaders. Transcripts are also available on our site!

Download our free app to listen on your phone

Careers Information Security Podcast episodes:

06.27.2024
Collaborate on Shifting Left: Why 'AppSec Is a Team Sport'
Developers are using more and more open-source code because they "want to move fast," said Cycode's Lotem Guy. But the speed of development and the continuous deployment that follows means security teams have to catch up to the fast-moving development...
06.25.2024
Securing Data With Immutable Backups and Automated Recovery
Acronis President Gaidar Magdanurov discusses the need for immutable backups in the current threat landscape and highlights the benefits of integrating security measures with backup systems to facilitate automated recovery from ransomware attacks and minimize downtime.
06.24.2024
Fighting Payment Fraud by Integrating Security Into Finance
Payment fraud is the top risk to companies across the globe. Business email compromise is continually on the rise. Johnny Deutsch, co-founder and CEO of B2B payments protection company Creednz, discusses the need to integrate security into financial processes.
06.17.2024
Getting a Firmer Grip on AI Privacy Concerns in Healthcare
Artificial intelligence technologies offer tremendous promise in healthcare, but it's crucial for organizations to carefully assess the complex data privacy concerns involved with different types of AI products and deployments, said Karen Habercoss, chief privacy officer at UChicago Medicine.
06.14.2024
Managing Chaos in Massive Healthcare Sector Cyberattacks
The chaos experienced by thousands of healthcare organizations in the wake of the massive Change Healthcare cyberattack and IT outage in February is proof that most organizations are simply unprepared for such devastating incidents, said Bryan Chnowski, deputy CISO...
06.14.2024
The Dangers of Over-Relying on Too Few Critical Vendors
Many healthcare organizations have discovered major gaps in business operations preparedness - the ability to quickly rebound from major IT disruptions, such as those caused by the Change Healthcare cyberattack. Jigar Kadakia, CISO of Emory Healthcare, said it's time to...
06.14.2024
How the Growing Demands of Healthcare Are Complicating Risk
Healthcare is increasingly complex and interconnected, and the push to exchange more digital patient information among providers adds to the threat of busy staff falling victim to phishing and other scams that can jeopardize data, said Krista Arndt, CISO of...
06.13.2024
Learning From Others' Gaps in the Wake of Major Attacks
It's critical for CISOs to study what went wrong in major ransomware IT disruptions and breaches hitting the healthcare sector and to look closely within their own organizations for similar gaps or vulnerabilities, said Michael Prakhye, CISO of Adventist HealthCare.
06.12.2024
Ransomware: Disruption of Hospitals and Nearby Facilities
A study investigating the impact of ransomware attacks on hospitals and the ripple effect on nearby facilities is a call to action for policymakers to seriously address how those assaults can be better handled in the health sector, said researchers...
06.07.2024
Collaborative Security: The Team Sport Approach
By decentralizing the ownership of cybersecurity and increasing security consciousness among everyone in the organization, businesses can improve their security posture, said Dom Lombardi, the vice president of security and trust at Kandji. He discussed the concept of collaborative security.
05.31.2024
What's in Biden's Security Memo for the Healthcare Sector?
A recent White House memo on bolstering the security and resiliency of critical infrastructure sectors calls for comprehensive mapping and risk assessment of all critical components and interdependencies within the healthcare ecosystem, said Greg Garcia of the Healthcare Sector Coordinating...
05.06.2024
The Challenges in Keeping Medical Device Software Updated
Updating software as new vulnerabilities are discovered persistently remains a top medical device cybersecurity challenge, said David Brumley, a cybersecurity professor at Carnegie Mellon University and CEO of security firm ForAllSecure. Solving this requires a major mindset shift, he said.
05.06.2024
Enterprise Technology Management: No Asset Management Silos
Oomnitza co-founder and CEO Arthur Lozinski discusses enterprise technology management - a solution that brings software, hardware and infrastructure asset management together in a single database and uses automation to set and enforce policies for the enterprise as a whole.
05.03.2024
Regulating AI: 'It's Going to Be a Madhouse'
Information Security Media group CTO and CISO Dan Grosu discusses the challenges of realistically implementing the directives in President Joe Biden's executive order on artificial intelligence. Hint: He thinks it's going to be "a madhouse" if enterprises don't get more...
05.03.2024
Web Trackers Persist in Healthcare Despite Privacy Risks
While fewer healthcare websites appear to be using online trackers now than a year ago, nearly 1 in 3 firms are still using Meta Pixel and similar tech tools despite warnings from regulators and a rise in class action litigation...
05.01.2024
Correlating Cyber Investments With Business Outcomes
SecurityGate CEO Ted Gutierrez said the SEC's new cybersecurity mandates give "more teeth to the idea that cybersecurity is a business problem." He discussed the need for CISOs to link cyber risk and business outcomes and other ways in which...
04.29.2024
Why Many Healthcare Sector Entities End Up Paying Ransoms
While most healthcare sector organizations hit with ransomware attacks never imagine giving in to extortion demands, the pressures they face in dealing with the crisis often push about half of them to pay, said attorney Lynn Sessions of BakerHostetler, speaking...
04.24.2024
Major Areas of Cybersecurity Focus for Medical Device Makers
Medical device makers submitting products for premarket approval by the Food and Drug Administration often struggle the most with cybersecurity in three major areas - design controls, providing a software bill of materials and testing, according to Nastassia Tamari of...
04.22.2024
Benefits of a Unified CNAPP and XDR Platform
In this episode of the "Cybersecurity Insights" podcast, Uptycs CEO Ganesh Pai discusses unifying XDR and CNAPP to improve visibility and explains the coming shift from behavioral detection to outlier or anomaly detection, which uses sophisticated ML and AI.
04.18.2024
Why Health Firms Struggle With Cybersecurity Frameworks
Healthcare sector organizations often still struggle to implement security frameworks effectively, often not fully understanding the requirements or failing to integrate them into their overall cybersecurity strategy, said Keith Forrester of security firm Optiv, who offers tips to help.
04.09.2024
Evolving Threats Facing Robotic and Other Medical Gear
Robotic medical devices, such as surgical gear, offer great potential to improve patient care, but the cyber risks associated with these products must be carefully addressed, said Kevin Fu, director of the Archimedes Center for Health Care and Medical Device...
04.05.2024
Medical Device Cyberthreat Modeling: Top Considerations
Besides not doing cyberthreat modeling at all, some the biggest mistakes medical device manufacturers can make are starting the modeling process too late in the development phase or using it simply as a "paper weight exercise," said threat modeling expert...
04.01.2024
How 'Security by Default' Boosts Health Sector Cybersecurity
Healthcare entities can easily achieve many of the cyber performance goals set by regulators if they deploy technology solutions that provide robust security by default and create an organizational culture in which security-mindedness is ingrained, said Taylor Lehmann of Google...
04.01.2024
How the NIST CSF 2.0 Can Help Healthcare Sector Firms
The National Institute of Standards and Technology's updated Cybersecurity Framework 2.0 can help healthcare organizations better formalize their governance functions to enhance their cybersecurity posture and resilience, said Robert Booker, chief strategy officer at HITRUST.
03.29.2024
Is It Generative AI's Fault, or Do We Blame Human Beings?
AI is on the way to embedding itself in our daily lives. CISO Sam Curry and his brother, CMO Red Curry, discuss what generative AI means for copyrights and plagiarism, the "AI bubble," and whether governing AI-derived speech will wind...
03.18.2024
Safeguarding Critical OT and IoT Gear Used in Healthcare
The many kinds of OT and IoT gear that are not regulated medical devices but are critical to run hospitals and other care facilities present a variety of cybersecurity and patient safety concerns, said Dr. Benoit Desjardins, professor of radiology...
03.15.2024
Transforming a Cyber Program in the Aftermath of an Attack
In the aftermath of a ransomware attack several years ago, Hackensack Meridian Health embarked on transforming its cybersecurity program with the support of top leadership and increased funding and staff and by implementing critical security tools and best practices, said...
03.15.2024
Protecting Medical Devices Against Future Cyberthreats
Healthcare organizations and makers of medical devices need to think about how to safeguard their critical medical gear against future cyberthreats, including the looming dangers posed by quantum computing, said Mike Nelson, global vice president of digital trust at security...
03.14.2024
Properly Vetting AI Before It's Deployed in Healthcare
The U.S. healthcare sector needs to closely watch government regulatory and legislative developments involving artificial intelligence, including the European Union AI Act, said Lee Kim, senior principal of cybersecurity and privacy at the Healthcare Information and Management Systems Society.
03.14.2024
Planning for Healthcare IT Resiliency on a Regional Basis
It's critical for hospitals and other firms to not only prepare for how they will respond to a cyberattack but also to consider the regional impact if a neighboring provider of services needed in the community is disrupted by a...
03.14.2024
Why HHS' Cybersecurity Goals Aren't Necessarily Voluntary
Healthcare sector organizations need to focus their attention on meeting the "voluntary" essential and enhanced cybersecurity performance goals set out by federal regulators before they become potential mandates, said Kate Pierce, virtual information security officer at Fortified Heath Security.
03.13.2024
The Concentrated Cyber Risk Posed by Enormous Vendors
The vast healthcare ecosystem disruption caused by the recent attack on Change Healthcare, which affected more than 100 of the company's IT products and services, underscores the concentrated cyber risk when a major vendor suffers a serious cyber incident, said...
03.12.2024
Building a 911 Cyber Civil Defense System for Healthcare
The healthcare sector needs a 911-style cyber civil defense system that can help all segments of the industry, including under-resourced groups, to more rapidly and effectively respond to cyberattacks and related incidents, said Erik Decker, CISO of Intermountain Health and...
03.12.2024
HHS Resources, Funding to Bolster Healthcare Cyber Efforts
The Department of Health and Human Services is working on grant programs and other financial programs to help under-resourced healthcare organizations deal with the cybersecurity challenges they're facing, said La Monte Yarborough, CISO and acting deputy CIO at HHS.
03.11.2024
Importance of Resilience in Mitigating Supply Chain Attacks
The Change Healthcare attack is already providing valuable lessons to healthcare firms - mostly about the importance of resilience, especially when it comes the industry's supply chain and third parties, said Nitin Natarajan, deputy director of the Cybersecurity and...
03.05.2024
How NOT to Lead
Leaders in cybersecurity - and in any other business - need to keep a bank account filled with the trust and respect of their employees and make sure that account stays in the black, said Chase Cunningham, aka the Doctor...
03.01.2024
The Widespread Effect of the Change Healthcare Mega Hack
The Change Healthcare mega hack has taken nearly 120 of the company's IT products and services offline since Feb. 21, and that cyber disruption is having serious, widespread impact on the entire healthcare industry including major players, said attorney Sara...
02.29.2024
Your Supply Chain Is Your New Attack Surface
Your supply chain is your new attack surface, according to Galit Lubetzky Sharon, the co-founder and CEO of Wing Security. She discusses Wing's solution - Secure SaaS Posture Management, or SSPM - that helps organizations ensure that all of their...
02.23.2024
Why OT Security Keeps Some Healthcare Leaders Up at Night
It's not just medical device cybersecurity that's keeping some healthcare security leaders up at night - it's also the risks posed by other critical connected gear that patients and clinicians depend upon, said Ali Youssef, director of medical device and...
02.16.2024
Cyberwar: What Is It Good For?
CISO Sam Curry and CMO Red Curry discuss the chaos and disruption of cyberwar and how attacks on critical infrastructure can tactically help attackers in combat, demoralize the general population and affect critical capabilities at just the right point in...
02.07.2024
Bolstering Healthcare Cybersecurity: The Regulatory Outlook
The Biden administration's strategy for bolstering health sector cybersecurity, which includes newly released voluntary cyber performance goals and plans to update the HIPAA Security Rule, is fueling uncertainty in some organizations, said privacy attorney Iliana Peters of law firm Polsinelli.
02.06.2024
How to Win a Cyberwar: Use a Combined Intelligence Strategy
In times of conflict, such as the Israel-Hamas war, intelligence becomes even more important than it is in peacetime. Red Curry, chief marketing officer at Tautuk, and his brother, Sam Curry, CISO at Zscaler, discuss the need for a combined...
01.31.2024
Pushing the Healthcare Sector to Improve Cybersecurity
Getting the health sector to vastly improve the state of its cybersecurity will take much more than the recent issuance of federal guidance outlining cyber performance goals for entities. It will also require new government incentives and mandates, said Steve...
01.25.2024
Resilience: The New Priority for Your Security Model
Security leaders focus on protection and detection, but the new priority is resilience. A resilience strategy should "get the real 'ground truth' of what has happened" in the attack, said Brian Dye, CEO of Corelight, in this episode of "Cybersecurity...
01.17.2024
How a Novel Legal Maneuver Got a Hospital's Stolen Data Back
The ubiquity and anonymity of cryptocurrencies are fueling economic, legal and ethical challenges that put healthcare entities in the crosshairs of cybercriminals, said David Hoffman, general counsel of Claxton-Hepburn Medical Center, which recently filed a lawsuit against ransomware gang LockBit.
01.16.2024
XDR and the Benefits of Managed Services
Extended Detection and Response (XDR) has evolved significantly over the past few years, becoming more critical than ever for organizations in need of enhanced capabilities. But so, too, have the accompanying managed services evolved. Port53 Technologies President Omar Zarabi explains.
01.11.2024
How the Merck Case Shapes the Future of Cyber Insurance
Merck & Co.'s proposed settlement with insurers over a $1.4 billion claim related to the NotPetya attack will change the language the insurance industry uses to exclude acts of war in its policies, and organizations need to consider how those...
01.03.2024
Large Language Models: Moving Past the Early Stage
AI, machine learning and large language models are not new, but they are coming to fruition with the mass adoption of generative AI. For cybersecurity professionals, these are "exciting times we live in," said Dan Grosu, CTO and CISO at...
01.01.2024
Top Considerations for Complying With My Health My Data Act
It's time for companies dealing with non-HIPAA-regulated health information to plan their compliance with Washington state's My Health My Data Act, which goes into effect in the new year and affects organizations that are based in other states, said attorney...
12.29.2023
How One University Is Beefing Up Cyber Defenses, Programs
Educational institutions are prime targets for ransomware and other cyberattacks due to their open nature and troves of sensitive data, requiring continuous investment in cyber defenses and strong security practices, said Steve Zuromski, CIO at Bridgewater State University in Massachusetts.

What's Careers Information Security Podcast about?

Download our free app to listen on your phone

Careers Information Security Podcast episodes:

Collaborate on Shifting Left: Why 'AppSec Is a Team Sport'

Securing Data With Immutable Backups and Automated Recovery

Fighting Payment Fraud by Integrating Security Into Finance

Getting a Firmer Grip on AI Privacy Concerns in Healthcare

Managing Chaos in Massive Healthcare Sector Cyberattacks

The Dangers of Over-Relying on Too Few Critical Vendors

How the Growing Demands of Healthcare Are Complicating Risk

Learning From Others' Gaps in the Wake of Major Attacks

Ransomware: Disruption of Hospitals and Nearby Facilities

Collaborative Security: The Team Sport Approach

What's in Biden's Security Memo for the Healthcare Sector?

The Challenges in Keeping Medical Device Software Updated

Enterprise Technology Management: No Asset Management Silos

Regulating AI: 'It's Going to Be a Madhouse'

Web Trackers Persist in Healthcare Despite Privacy Risks

Correlating Cyber Investments With Business Outcomes

Why Many Healthcare Sector Entities End Up Paying Ransoms

Major Areas of Cybersecurity Focus for Medical Device Makers

Benefits of a Unified CNAPP and XDR Platform

Why Health Firms Struggle With Cybersecurity Frameworks

Evolving Threats Facing Robotic and Other Medical Gear

Medical Device Cyberthreat Modeling: Top Considerations

How 'Security by Default' Boosts Health Sector Cybersecurity

How the NIST CSF 2.0 Can Help Healthcare Sector Firms

Is It Generative AI's Fault, or Do We Blame Human Beings?

Safeguarding Critical OT and IoT Gear Used in Healthcare

Transforming a Cyber Program in the Aftermath of an Attack

Protecting Medical Devices Against Future Cyberthreats

Properly Vetting AI Before It's Deployed in Healthcare

Planning for Healthcare IT Resiliency on a Regional Basis

Why HHS' Cybersecurity Goals Aren't Necessarily Voluntary

The Concentrated Cyber Risk Posed by Enormous Vendors

Building a 911 Cyber Civil Defense System for Healthcare

HHS Resources, Funding to Bolster Healthcare Cyber Efforts

Importance of Resilience in Mitigating Supply Chain Attacks

How NOT to Lead

The Widespread Effect of the Change Healthcare Mega Hack

Your Supply Chain Is Your New Attack Surface

Why OT Security Keeps Some Healthcare Leaders Up at Night

Cyberwar: What Is It Good For?

Bolstering Healthcare Cybersecurity: The Regulatory Outlook

How to Win a Cyberwar: Use a Combined Intelligence Strategy

Pushing the Healthcare Sector to Improve Cybersecurity

Resilience: The New Priority for Your Security Model

How a Novel Legal Maneuver Got a Hospital's Stolen Data Back

XDR and the Benefits of Managed Services

How the Merck Case Shapes the Future of Cyber Insurance

Large Language Models: Moving Past the Early Stage

Top Considerations for Complying With My Health My Data Act

How One University Is Beefing Up Cyber Defenses, Programs