Cyber Security Café

CyberRisk and Knowbe4 host an executive event joining them on the day is Kevin Mitnick, Cyber Security Café host Beverley moderates the session and asks the questions. Kevin’s childhood and fascination with magic and pranking history “McDonald’s prank”.
We discuss the latest findings in penetration testing and any commonalities, also what advice Kevin is offering executives and the workforce on phishing, social engineering and paying ransomware.
A few surprises near the end of the podcast.A special thanks to Kevin Mitnick for his generosity for our industry.
Thanks to our sponsor Cyber-Risk and KnowBe4

www.cyber-risk.com.au

www.knowbe4.com

 

Podcast produced by Martin Franklin / East Coast Studio

See omnystudio.com/listener for privacy information.

“Disruption”. Join Craig Templeton and Beverley Roche for a wrap up and summary of the 2020 SIT summit event and what is changing and working in the Cyber security culture programs.
We talk about the practitioners that contribute to making this event happen, the presenters, panel discussions and the key issues.
Want to know more about the SIT Empowers group? LinkedIn – Security, Influence and Trust Or check out the SITEMPOWERS website and download the SIT Guidebook and use the free resources.https://sitempowers.com/

See omnystudio.com/listener for privacy information.

The trauma, emotional and financial devastation, shame, and victim-blaming are all explored in this forthright conversation with relationship scam survivor, Jan Marshall.
Understanding that scammers are trained professionals, not just opportunistic players is vital to protect the vulnerable and idealistic in a world where everything and everyone is open for exploiting.
How can an intelligent person be so thoroughly scammed?
Cyber Security Cafe host, Beverley Roche chats to Jan Marshall about her story and the devastating trauma of a relationship scam.Emotions still resonate powerfully as Jan shares her very personal experience of being a victim of a relationship scam and details of her new emotional support service, Life After Scams for victims of similar cyber crimes.
If you think it is too good to be true, it probably is. If you are being asked for money and personal details shortly after meeting someone online, ask yourself #isthisforreal?If you think you are experiencing a relationship scam, here are some helpful sites to assist you:
Jan Marshall – www.lifeafterscams.orgReport to Scamwatch – www.scamwatch.gov.auIDCare – www.IDCare.org

See omnystudio.com/listener for privacy information.

Security 101 tips for reviewing Office 365 infrastructure, details of a Spear phishing attack that owned an organisations infrastructure and important tips about keeping an eye on your logs and monitoring.
During COVID19, data is moving about everywhere, with organisations rushing to move people to work from home and playing security catchup.
Beverley Roche chats to Christopher McNaughton from SECMON1,who specialise at looking at Security inside your organisation, Data discovery, workplace investigations, Digital Forensics and Electronic discovery.
Former Senior Forensic Examiner with Victoria Police Force, Chris talks about how he landed in Cybersecurity.
We talk about an organisations risk in relation to Data and how SECMON1 use their Discovery tools and off course we lift the rug to understand how important it is for employees not to use company assets for malicious purposes.

See omnystudio.com/listener for privacy information.

Will it make us safer? or will the data it collects lead to greater social harm in future ? Cyber Security lead, Beverley decompiles the current issues with the Covidsafe app and chats to well-known identity, Shannon Sedgwick about his early days in cyber and his current role as Senior Managing Director at Ankura.
We cover how Australian’s might be feeling about the trust issues, the trade offs and downloading the app for the greater good.
Shannon Sedgwick is highly regarded in technology and cyber security circles in Asia Pacific. He is often seen appearing on TV, radio, and in print publications, delivering keynotes discussing cyber security, effective leadership, business development, governance, culture, technology risk, government policy, and breaking news events.
Shannon can be contacted through his website: ssedgwick.com

See omnystudio.com/listener for privacy information.

Relationship scams, COVID-19 scams, Investment scams - Right now, there are more opportunistic, professional cyber-criminals hard at work to catch you out than ever before. Deputy Chair of the Australian Competition & Consumer Commission, Delia Rickard joins cyber security expert, Beverley Roche to unpack the current threats to your safety and finances.
Listen to how to keep yourself safe online and how to report scams. Ask yourself #isthis4real

See omnystudio.com/listener for privacy information.

What are the types of threats we are facing right now? Highly motivated cyber-criminals are working overtime right now.
Former National Director Joint Cyber Security Program of Australian Cyber Security Centre - Lead Ryan Janosevic of Retrospect Labs takes us through the steps to help you be Cyber Resilient. Retrospect Labs came through the accelerator Program at CyRise and Ryan is an investor, supporter and champion of Cybersecurity startups (Cybersecurity venture program powered by NTT and Deakin University.
We discussed the importance of supporting Australian Talent and Australian start-ups to ensure the flow of talent into the future of the cyber-security industry.What should organisations be doing right now to be prepared and ready?
Ryan recommends businesses practice their incident response plans and develop playbooks to testing a whole of enterprise approach with all the business stakeholders - treat it like a fire plan and drill.
ContactRyan Janosevic and Jason Pangwww.retrospectlabs.com

See omnystudio.com/listener for privacy information.

How to avoid workplace issues that lead to staff being compromised by phishing emails. What are the behavioural cues that indicate cognitive load is high? Using a customer journey map to understand the workforce and what are the danger zones in their day. What controls, both human and technology based can we deploy to mitigate that danger zone?
Paul Burrow, Cybersecurity Behavioural Expert discusses "wicked problems" and quotes Tim Brown's "Human Centred design" as his guidebook.Wicked problems like “How might we get all Australian’s implement Two Factor Authentication”
How to get the right message to the right people at the right time. We discuss the importance of finding shared language and common themes, how to build a narrative to get a workforce engaged. Cognitive load in the workplace is challenging how and when we, as cyber security professionals intersect with reminding people to be extra vigilant when those phishing emails hit.
Connect with Paul Burrow on LinkedIn - https://www.linkedin.com/in/paulburrow

See omnystudio.com/listener for privacy information.

THE INTRO ​

• Louisa and Beverley are at the SIT Summit today in Melbourne and this episode is an event special to help amplify the learnings for those who couldn't attend, wherever they are in the world!
• The Security Influence and Trust Group, founded in late 2015, is a community of people who believe that collaboration, consistent messages and simple actions are key to empower people to protect themselves in the digital world.
• They are working together to amplify consistent tips that help the community to build online safety skills.
• They are industry professionals with a long history of building security aware cultures.
• The 4th SIT Summit was hosted by Telstra in Melbourne on 27th November 2019.
• Event agenda sit-summit-2019-agenda
• Event photos (under SIT News) https://sitempowers.com

​​​THE CHAT​​Louisa and Beverley share their insights from the sessions and also asked special guests Christie Wilson, Erica Hardinge and Susie Jones to also share some of their key take aways from the event including:​- Advice on starting an awareness or influence program from scratch- Why they are passionate about human security and why it is important- What were their key learnings from the day- What was the thing that surprised them most- What amplify means to them- What is the one thing the security industry could do to help improve human security​For the full Transcript of the chat visit this linkprovided for free by Otter.ai (unedited)​​CREDITS​Guests: Christie Wilson, Erica Hardinge, Susie JonesHosts: Beverley Roche and Louisa Vogelenzang https://www.cybersecuritycafe.com.au/co-hostsProducer/Editor: Louisa VogelenzangSound Producer: Darcy Milne (Propodcastproduction.com)​
USEFUL LINKS ​Darren Pauli's writing guide https://sitempowers.com/1571-2/SIT Guidebook https://sitempowers.com/sit-guidebook/More info on ANZ PACT referred to by Erica Hardinge https://media.anz.com/posts/2018/10/anz-encourages-australians-to-make-a-pact-to-protect-their-virtu​
CONTACT THE CYBERSECURITY CAFÉ
Join our LinkedIn Group https://www.linkedin.com/company/the-cybersecurity-café
Email us:[email protected][email protected]
Visit our website: https://www.cybersecuritycafe.com.au
Want to be on the show? Send us your bio and an overview on what you want to chat about and we’ll be in touch asap.
We also welcome guest suggestions – in particular we’d love to hear from new voices in the industry who have new ideas to share about the human side of security.

© 2019 by Cyb

See omnystudio.com/listener for privacy information.

THE INTRO ​

• Louisa has been in New York at a Cyber insurance conference and shares her insights from a couple of the sessions including what people want their cyber insurance policy to cover and whether or not millennials care about privacy including the impact digital savviness may have on this
• Beverley wants to know who the greatest conmen of our time was and Louisa thinks Frank Abagnale Jr. is a good candidate and there are lots techniques Frank used that are still used today.
• Louisa and Beverley discuss the different definitions of social engineering
• Beverley is excited to have Chris Gatford on the podcast today

​​​THE CHAT​​Chris Gatford is the director of Hacktive in Sydney, Australia and performs penetration tests for organisations all around the world. Chris has performed thousands of penetration tests in his career and has reviewed countless IT environments and has directed and been responsible for numerous security assessments for a variety of corporations and government departments
Chris has co-authored two books, including “Network Security Assessment: From Vulnerability to Patch” from Syngress Publishing.​For the full Transcript of the chat visit this linkprovided for free by Otter.ai (unedited)​THE DEBRIEF​

• Louisa is seeing some themes emerge from the podcast interviews in terms of the key skillsets needed to be in cybersecurity and the criticality of curiosity
• Beverley agrees with Chris on why it is so hard to secure the family home
• Beverley is also glad to hear that millennials are asking big questions about privacy
• Beverley shares her view on whether penetration testing can be outsourced including the use of bug bounty programs and the role of trust
• Why we need another podcast to look at how our roles might change in the future and how we prepare for that
• How the BBQ/taxi conversation has changed and why we need to be ready to change our message as the criminals evolve

​How to follow Chriswebsite: https://www.hacktive.ioEmail: [email protected] Twitter: @ChrisGatford​CREDITS​Guest: Chris GatfordHosts: Beverley Roche and Louisa Vogelenzang https://www.cybersecuritycafe.com.au/co-hostsProducer/Editor: Louisa VogelenzangSound Producer: Darcy Milne (Propodcastproduction.com)​
RESEARCH
Digital literacy survey mentioned at the panel discussion Louisa attended in New York https://www.nominet.uk/digital-generation-gap-remains-wide-open-older-generations-fail-embrace-new-technology/
Frank Abignale on why tech has made things 4000x easier for criminals https://www.techrepublic.com/article/famous-con-man-frank-abagnale-crime-is-4000-times-easier-today/
Splendour in the grass science tent https://inspiringnsw.org.au/2019/06/27/science-tent-returns-to-splendour/
Open DNS solution mentioned by Chris during the chat https://www.opendns.com​CONTACT THE CYBERSECURITY CAFÉ
Join our LinkedIn Group https://www.linkedin.com/company/the-cybersecurity-café
Email us:[email protected][email protected]
Visit our website: https://www.cybersecuritycafe.com.au
Want to be on the show? Send us your bio and an overview on what you want to chat about and we’ll be in touch asap.
We also welcome guest suggestions – in particular we’d love to hear from new voices in the industry who have new ideas to share about the human side of security.

See omnystudio.com/listener for privacy information.