Cyber Security Weekly Podcast

Jane Lo, Singapore Correspondent speaks with Dr. Michael McGuire, Senior Lecturer in Criminology, Surrey Centre of Cyber Security, University of Surrey (United Kingdom)Dr Michael McGuire joined the Department as Senior Lecturer in Criminology in September 2012. Dr McGuire read Philosophy & Scientific method at the London School of Economics where he acquired a first class BSc Econ and he completed his PhD, at Kings College London. He has subsequently developed an international profile in the study of technology and the justice system and has published widely in these areas. His first book Hypercrime: The New Geometry of Harm (Glasshouse, 2008), involved a critique of the notion of cybercrime as a way of modelling computer enabled offending and was awarded the 2008 British Society of Criminology runners up Book Prize. His most recent publication Technology, Crime & Justice: The Question Concerning Technomia (Routledge, 2012) is the first book in the field of Criminology and Criminal Justice to attempt an overview of the implication of technology for the justice system and complements a range of applied studies in this area, including a comprehensive evidence review of cybercrime for the Home Office. Dr McGuires research interests also encompass questions relating to the impacts of the instincts and irrationality upon crime and justice and his paper “Abnormal Law” was recently included as a chapter in the three-volume series on Criminalisation (OUP) edited by Professor Anthony Duff of Stirling. He is currently completing a new monograph in this area to be titled The Criminology of Pleasure (for Taylor & Francis, 2014). In this podcast, Dr McGuire shares insights on Nation States conflict in cyber space, with reference to his research (“Web of Profit - April 2021”). Report available here (https://mysecuritymarketplace.com/reports/nation-states-cyberconflict-and-the-web-of-profit/) He points to how cybercrime economies are shaping the character of Nation State conflict in cyber space, where Nation States have become both “beneficiaries of and contributors” in the US$1.5 trillion cybercrime economy, by sharing, selling and buying tools and skills. Further to the asymmetric nature of operations in cyber space enabling smaller nations to confront larger powers, he highlights recent incidents that also underscore the emergence of multi-vector conflicts, where conventional warfare is beginning to integrate cyber abilities. He also discusses how trends such as “cognitive hacking” of attitudes on social media and others, contribute to indications that tensions between Nation States have escalated from “cyber competition” to today’s “advanced cyber conflict”. Amidst these developments, Dr McGuire shares challenges, including the attribution problem, in shaping policies to respond to the rising Nation State actor threats in cyber space. He also cautions the knowledge gap that exists - that our perspectives, formed by reports issued from U.S or UK, do not necessarily represent a complete picture of the threats faced by nations across the world. Recorded 29th Nov 2021 (SGT 5pm / UK London 9am)

We speak with Ariel Zeitlin, VP, CTO Enterprise Security Group at Akamai Technologies and Chris Gibbs, Managing Director and Regional Vice President, Australia and New Zealand. Ariel co-founded Guardicore, after spending 11 years as an officer in the Israeli Defense Forces (IDF), where he worked closely with Guardicore’s co-founder Pavel Gurvich. At Akamai, Ariel is focusing on building best in class Zero Trust platform. Chris joined Akamai in 2021 with more than 20 years of strategic leadership experience within the technology and telecommunications sector, across both Australia and Asia-Pacific & Japan (APJ). In September 2021, Akamai Technologies, Inc. (NASDAQ: AKAM), announced it will acquire Tel Aviv, Israel-based Guardicore. By adding Guardicore’s micro-segmentation solution into Akamai’s extensive Zero Trust security portfolio, Akamai has broadened its solution suite to provide comprehensive protections to the enterprise, defending against threat actors and the spread of malware and ransomware. We also discuss the Apache Log4j library vulnerability, (CVE-2021-44228) that was exposed days earlier. The vulnerability, also named Log4Shell or LogJam, has a CVSS severity level of 10 out of 10. The vulnerability allows hackers to execute arbitrary code and potentially take full control of a system.On 10 December, a Friday morning (US time), an exploit was publicly released for the critical zero-day vulnerability. Reports indicate hackers need the application to write just one string to the log. From there, hackers can remotely upload their own code to the application via the message lookup substitution function. Millions of servers are reportedly at risk, including those used by high-profile companies, including Apple, Cloudflare, Twitter, Valve, Tencent, iCloud, Steam, and Minecraft.Further Readinghttps://www.akamai.com/resources/ebook/5-step-ransomware-defense-ebookhttps://www.akamai.com/resources/white-paper/stop-the-impact-of-ransomware-white-paper

We speak with authors Dan Lohrmann and Shamane Tan following the recent release of Cyber Mayday and the Day After: A Leader's Guide to Preparing, Managing, and Recovering from Inevitable Business Disruptions. Now available on Amazon - https://www.amazon.com/Cyber-Mayday-Day-After-Disruptions/dp/1119835305 (https://www.amazon.com/Cyber-Mayday-Day-After-Disruptions/dp/1119835305) From the Inside Flap Digital transformation and cyber insecurity converged spectacularly in recent years, leading to some of the highest profile network security failures in modern history. From the SolarWinds hack to the Colonial Pipeline ransomware event, these incidents dramatically highlighted the need for impactful and effective leadership through a crisis. In Cyber Mayday and the Day After, a team of veteran cybersecurity leaders delivers an incisive collection of stories, strategies, tactics, lessons, and outlooks from some of the top C-executive leaders around the world. Packed with insights from former FBI agents, NASA professionals, government Chief Information Security Officers, and high-profile executives, this book offers the practical examples and workable solutions that leaders need to succeed in the 21st century. Cyber Mayday and the Day After is a guide to the art of communication with senior stakeholders and how to effect cultural change within organizations to adapt to a new reality that includes ransomware, online deception, and nation-state hackers. You’ll learn what you should know before a critical event occurs and what other executives wish they’d known before cyber crisis struck their organizations. You’ll also discover how executive-level responses can make or break customer trust in your company. Finally, you’ll explore how to utilize communication, coordination, and teamwork, as well as partnerships with vendors, law enforcement, and others, to tailor your crisis response for maximum damage mitigation. Cyber Mayday and the Day After is an eye-opening, need-to-read experience that’s ideal for current or aspiring executives who seek to understand high-level leadership through a different lens. It’s also the ideal resource for managers and other leaders who want to learn invaluable lessons in communication and leadership from veteran industry professionals. For a copy of Shamane Tan's first book - Cyber Risk Leaders - visit https://mysecuritymarketplace.com/books/cyber-risk-leaders-global-c-suite-insights-leadership-and-influence-in-the-cyber-age-by-shamane-tan/ (https://mysecuritymarketplace.com/books/cyber-risk-leaders-global-c-suite-insights-leadership-and-influence-in-the-cyber-age-by-shamane-tan/)#cyberriskmeetup (https://www.youtube.com/hashtag/cyberriskmeetup) #cyberriskleaders (https://www.youtube.com/hashtag/cyberriskleaders) #cybersecurity (https://www.youtube.com/hashtag/cybersecurity)

We speak with Noushin Shabab, Senior Security Researcher with Kaspersky. Kaspersky’s Digital Stalking in Relationships Report asked over 21,000 people their attitudes towards stalkerware, which is technology that enables a perpetrator to digitally monitor another person’s private life via a mobile device without their consent. Over a quarter (27%) of the 1,004 Australian respondents surveyed said they see no problem with stalkerware, or think it is acceptable under some circumstances. 30% of global respondents shared this sentiment, with the highest level of agreement amongst respondents in Asia-Pacific (24%) compared to Europe (10%) and the Americas (8%). The respondents’ reasons to justify secret surveillance included: if they believe their partner is being unfaithful; if it is related to their safety; or if they believe them to be involved in criminal activity. Younger Australians surveyed are more inclined to think this activity is appropriate – 14% of 16-34 year olds compared to 4% aged over 55. Noushin is a cybersecurity researcher based in Australia, specialising in reverse engineering and targeted attack investigations. She joined Kaspersky in 2016 as a senior security researcher in the Global Research & Analysis Team (GReAT). Her research focuses on the investigation of advanced cyber-criminal activities and targeted attacks with a particular focus on local threats in the Asia Pacific region. Prior to joining Kaspersky, Noushin worked as a senior malware analyst and security software developer focusing on rootkit analysis and detection techniques as well as APT attack investigations. TinyCheck is a simple tool used to detect stalkerware and spyware installed on smartphones and tablets, and was developed to help non-profit organisations support survivors of domestic violence. TinyCheck runs separate to a smartphone, on a device like a Raspberry Pi microcomputer. Using a regular Wi-Fi connection, TinyCheck scans a mobile device’s outgoing internet traffic and identifies if it is sending data to a known malicious server. It addresses a few specific problems that non-profit organisations face when they want to help a victim/survivor and check their device for stalkerware: 1) TinyCheck is unique in its ability to detect stalkerware and inform the affected user without making the perpetrator aware that such a check is being carried out. Nothing has to be installed on the device itself to perform the check. While other security solutions can also check and alert about stalkerware, they will need to be installed on the device. Therefore, there is a risk that the perpetrator will also be alerted. 2) TinyCheck enables checking any device, regardless of whether it is an iOS or Android device or any other OS. 3) It‘s an open source tool that is easily available to NPOs and affordable. The components can be bought for between 400-500 AUS dollars. It’s available now at GitHub - https://github.com/KasperskyLab/tinycheck (https://github.com/KasperskyLab/tinycheck) Our 2018 Interview with Noushin Shabab - https://mysecuritymarketplace.com/av-media/episode-118-meet-cyber-twins-noushinshbb-negarshbb-womenincyber-malware-analysis-appsec/ (https://mysecuritymarketplace.com/av-media/episode-118-meet-cyber-twins-noushinshbb-negarshbb-womenincyber-malware-analysis-appsec/) #stalkerware #cybersecurity #domesticvioleneceprevention #malware #kaspersky #domesticviolence #stalking

We speak with Jason Manar, Chief Information Security Officer, Kaseya. In October, 2021, Kaseya (https://cyberriskleaders.com/kaseya-responds-swiftly-to-sophisticated-cyberattack/)announced that it hired Jason Manar as Chief Information Security Officer (CISO). Manar, who was most recently named Assistant Special Agent in Charge for the Federal Bureau of Investigation (FBI) overseeing all cyber, counterintelligence, intelligence and the language service programs for the San Diego office, will play a pivotal role in further solidifying Kaseya’s security stance. Manar will oversee information security and compliance for Kaseya, leading the company’s cybersecurity division to identify the industry’s latest threats and vulnerabilities and intercept them. Additionally, as CISO, he will ensure compliance with security requirements associated with government regulations, which vary by global region. Manar first became familiar with Kaseya as the Miami Cybercrime Supervisory Special Agent where he managed all FBI criminal cyber operations within the Southern District of Florida, the Caribbean and Central and South America. Prior to that, he served at FBI headquarters in the Major Crimes Unit combatting cybercriminal threats against the U.S. In that role, he built relationships with key industry partners and was instrumental in the creation of the Microsoft Cybercrime Center. Manar also served as the Safe Streets Gang & Violent Crime Task Force Coordinator for the FBI’s Springfield Division investigating drug trafficking organizations, violent crime, cybercrime and transnational organized crime. Manar graduated from Murray State University with a Bachelor of Science. Prior to joining the FBI, he served six years with the Kentucky State Police as a trooper and detective.Recorded 23 November 2021 for MySec.TV - video session available here https://mysecuritymarketplace.com/av-media/mitigating-global-disruption-and-predictions-2022-interview-with-ciso-of-kaseya/ (https://mysecuritymarketplace.com/av-media/mitigating-global-disruption-and-predictions-2022-interview-with-ciso-of-kaseya/)

Jane Lo, Singapore Correspondent speaks with Rick Aldrich, Lead Cybersecurity Policy and Compliance Analyst, Booze Allen Hamilton.Rick is a cybersecurity policy and compliance analyst for Booz Allen in its support to the U.S. Department of Defense CIO. Previously he spent over 15 years as an Air Force JAG (Judge Advocate General’s Corp) specializing in cybercrime and information operations portfolios. He was recognized as the Outstanding Professor of Law at the Air Force Academy. Rick has multiple publications, including a chapter on information warfare in a widely used textbook. He has presented at national and international conferences and is co-author of DoD's award-winning CyberLaw digital training product. Rick has been awarded several grants by the Institute for National Security Studies to research the legal and policy implications of cybercrime and cyberwar. He holds a B.S. in Computer Science from the Air Force Academy, a JD from UCLA, and an LLM in Intellectual Property Law from the University of Houston. In this podcast, Rick discussed highlights of cyber law cases and regulations in the recent years in United States in 4 areas: * The U.S. Department of the Treasury’s Office of Foreign Assets Control (“OFAC”) - Advisory on Potential Sanctions Risks for Facilitating Ransomware Payments* The high-profile case of Mondelez International, Inc. v. Zurich American Insurance Co. litigation, and takeaways for organisations and cyber insurance companies* Attorney-Client Privilege and takeaways for cybersecurity professionals* Observations from recent class action lawsuits and settlement amounts Key takeaways from these developments highlighted could have important implications for cybersecurity professionals across the world. Recorded: 16th November 2021 6pm (Virginia, U.S) / 17th November 2021 7am (Singapore)

We speak with Michael Daniel, President & CEO, Cyber Threat Alliance, a nonprofit that coordinates information sharing between leading cybersecurity companies, including Cisco, McAfee, Palo Alto Networks, Symantec, Verizon and more. Prior to joining the CTA in February 2017, Michael served from June 2012 to January 2017 as Special Assistant to President Obama and Cybersecurity Coordinator on the National Security Council Staff. In this role, Michael led the development of national cybersecurity strategy and policy, and ensured that the US government effectively partnered with the private sector, non-governmental organizations, and other nations. Michael provides the outcomes from the Institute for Security and Technology (IST) Ransomware Task Force (RTF). Conducted in partnership with a broad coalition of experts in industry, government, law enforcement, civil society, and international organizations, the RTF released a comprehensive framework to combat ransomware. We also hear Michael's outlook for the industry and the CTA in 2022, as well as his thoughts on Australia's Ransomware Plan. Recorded 18 November 2021 - MySec.TV version available https://mysecuritymarketplace.com/av-media/cyber-threat-alliance-president-ceo-speaks-on-the-ransomware-task-force/ (https://mysecuritymarketplace.com/av-media/cyber-threat-alliance-president-ceo-speaks-on-the-ransomware-task-force/)We last spoke to Michael in Sydney in 2017 - here is that interview https://australiancybersecuritymagazine.com.au/episode-9-cyber-threat-alliance-cta-president-michael-daniel-in-sydney-aisacon17/ (https://australiancybersecuritymagazine.com.au/episode-9-cyber-threat-alliance-cta-president-michael-daniel-in-sydney-aisacon17/)

We speak with Aleksandr Yampolskiy, Chief Executive Officer and co-Founder with SecurityScorecard, based in New York, USA. Aleksandr Yampolskiy is a globally recognized cybersecurity innovator, leader, and expert. As co-founder and chief executive officer, Yampolskiy has led the company since its beginnings in 2013 to become one of the world’s most trusted cybersecurity brands. His vision is to create a new language for cybersecurity by enabling people to work collaboratively across the enterprise and with external parties to build a more secure ecosystem. Prior to founding the company, Yampolskiy was a hands-on CTO at Cinchcast and BlogTalkRadio, the largest online talk radio and podcast hosting platform. Prior to that, he led security and compliance at Gilt Groupe, where he managed all aspects of IT infrastructure security, secure application development, and PCI compliance. Yampolskiy has a B.A. in mathematics and computer science from New York University and a Ph.D. in Cryptography from Yale University.We will be deep diving into the SecurityScorecard platform on Thursday, December 2, 2:00pm AEDT - register here https://mysecuritymarketplace.com/security-scorecard/Recorded courtesy of SecurityScorecard - 16 November, 2021

We speak to Eva-Maria Elya, Senior Director World-Wide Channel Sales with Lookout on the market opportunities for MSPs and MSSPs who choose to partner with Lookout.To get the most of your countless cloud apps without risking your data, you need to know exactly what’s going on. You also need to be able to detect and respond to threats and have the ability to dynamically control access. Lookout Cloud Access Security Broker (CASB) provides full visibility into the interactions between users, endpoints, cloud apps and your data. It also enables you to dynamically dial in Zero Trust access controls.With continuous monitoring of user and entity behaviour analytics (UEBA), you can detect and respond to insider threats and advanced cyberattacks. Lookout provides advanced data loss prevention that can classify, encrypt and restrict sharing of your data on the fly so that only authorized users have access. They also perform automated assessments of all your cloud apps and infrastructure to ensure they are properly configured.Visit www.lookout.com for more details or visit https://learnsecurity.mysecuritymarketplace.com/course/endpoint-to-cloud-security to deep dive with Don Tan, Regional Director for APJ For the MySec.TV interview - visit https://mysecuritymarketplace.com/av-media/zero-trust-approach-us13-billion-market-opportunity/#lookout #endpoint #casb #ueba #cybersecurity #channelpartners

On a Sunday morning in Sydney, the computers freeze and digital systems go down at a leading hospital. The nurses on the ground don’t know it yet, but the hospital is under cyberattack. How is this going to unfold? That was the question posed at an Australian Cyber Week hypothetical on Monday.The hypothetical, hosted by AustCyber, is one of a series of events marking Australian Cyber Week and designed to raise cybersecurity awareness. Monday’s hypothetical included experts from the Australian Cyber Security Centre, the Global Forum on Cyber Expertise, health provider BUPA, and cyber threat intelligence firm Cybermerc.We speak with Michelle Price, CEO of AustCyber about the outcomes from the opening two days of events and the remainder of the week's events.Recorded October 26, 2021Read more: https://australiancybersecuritymagazine.com.au/hypothetical-hospital-cyber-attack-highlights-cyber-risks-in-healthcare/ (https://australiancybersecuritymagazine.com.au/hypothetical-hospital-cyber-attack-highlights-cyber-risks-in-healthcare/)AUCyberWeek2021 - https://www.cyberweek2021.austcyber.com/ (https://www.cyberweek2021.austcyber.com/)Video Interview version https://mysecuritymarketplace.com/av-media/aucyberweek2021-with-austcyber-ceo-michelle-price/ (https://mysecuritymarketplace.com/av-media/aucyberweek2021-with-austcyber-ceo-michelle-price/)Related interview: AustCyberWeek Wrap-up interview https://youtu.be/njy5uk3fMCQ (https://youtu.be/njy5uk3fMCQ)