Cyber Security Weekly Podcast

We speak with Rob Nobilo, Regional Sales Director with Virsec

Virsec is a San Jose, USA based company which provides an application-aware workload protection platform. Virsec is gearing up for rapid growth in the ANZ region with Rob recently joining the team.

Nobilo brings years of in-depth experience as a former Sales Director at Palo Alto Networks, looking after enterprise accounts in BFSI, retail, healthcare, utilities and mining. Prior to joining Palo Alto Networks, Nobilo spent five years at Dimension Data (now NTT) in various roles including Security Practice Manager and National Business Manager of Managed Security Services.

“Virsec is gearing up for rapid growth in the ANZ region and I am keen to continue building the team over the coming year. The cybersecurity market in ANZ is worth around A$5bn and we will keep expanding at an annual rate of 18% till 2026,” said Nobilo.

Read more https://australiancybersecuritymagazine.com.au/virsec-announces-expansion-into-the-anz-market-with-new-appointments/ (https://australiancybersecuritymagazine.com.au/virsec-announces-expansion-into-the-anz-market-with-new-appointments/)

Watch the Video version - https://mysecuritymarketplace.com/av-media/virsec-enters-anz-cybersecurity-market/ (https://mysecuritymarketplace.com/av-media/virsec-enters-anz-cybersecurity-market/ )

#mysecuritytv #cybersecurity #virsec #appsec #workloadprotection

We speak with Phil Rodrigues, Head of Security, APJ Commercial at Amazon Web Services (AWS).

Following the Federal Government’s announcement that it is investing more than $8 million in improving the skills and availability of cyber security professionals, we look at AWS and ADAPT research that found 92% of Australian and New Zealand CISO’s report the pandemic has increased the need for security and awareness training within their organisation. Further, 44% reported the depth of their in-house security skills is good but could be better, with an additional 39% reporting in-house skills are ‘poor’ or ‘OK’."

Recorded Live on MySec.TV - episode available https://mysecuritymarketplace.com/av-media/cybersecurity-professionals-australia-invests-8-million-on-skills-and-availability/

Apologies for a network outage during the session.

#cybersecurity #AWS #cyberskills #securityawareness #mysecuritytv

Alexis Dorais-Joncas started his career in cybersecurity in 2010, when he was hired by ESET as a malware researcher. In 2015, Alexis was appointed head of ESET’s R&D branch office located in Montreal, where he and his team focus on cutting edge malware research, network security and targeted attack tracking. Their goal is to shed light on the latest trends and developments in the malware ecosystem and implement efficient and innovative countermeasures to allow ESET customers to be safe online.

Alexis is an established speaker on current cyberthreats, having spoken in front of both very technically literate audiences at events such as Bluehat and M3AAWG, and in higher level settings such as RightsCon, SERENE-RISC workshops and GoSec. He has been quoted in several security and technical media such as Wired, ITWorldCanada, DarkReading and Ars Technica, with broadcast appearances on Radio-Canada and Sky News in the UK.

In this podcast with Jane Lo, Singapore Correspondent, Alexis takes the audience behind the scenes of real cybercrime investigations ESET has been involved in. By going over success stories such as the Andromeda and Operation Windigo busts that brought down multi-million dollar criminal networks, Alexis helps shed some light on how private security companies partnerships with law enforcement agencies work.

With an excess of 350,000 new malware files observed each day, Alexis explains that one of the first steps is turning these into unique and actionable insights, using a combination of automated unpacking and decryption tools and in-depth analysis.

In sharing such threat information with law enforcement agencies, he highlights the integral role of trust, including the importance of following protocols where customers’ data are involved, and exercising caution to avoid “tipping off”.

While waiting for the “right moment to strike”, Alexis points to another important role that the private sector plays. To help the law enforcement arrest the cyber criminals and build the case for indictment and prosecution, Alexis shares how his team provides comprehensive training to the law enforcement agencies.

Alexis also discusses how the work behind Andromeda and Operation Windigo busts took up to 4 years, and how identification of victims through “sinkholing” forms part of the take down efforts.

As these two cases illustrate, with the right private-public partnerships and collaborations, Alexis stresses while cybercrime may be borderless, cyber criminals are not immune from prosecution.

Recorded: 18th June 2021, 7am Singapore/  [-1 day] 7pm Montreal

We speak with Dr John Coyne, Head of Strategic Policing and Law Enforcement at the Australian Strategic Policy Institute.

A cyber sting three years in the making culminated last week when the Australian Federal Police (AFP) executed hundreds of search warrants in Australia-wide raids.

Dubbed Operation Ironside, the AFP joined the FBI to harness an encrypted app called ANoM and feed it into underworld circles worldwide.

Since 2018, the AFP has been reading the presumed secure ANoM messages that resulted in Monday’s raids. With state police agencies, the AFP arrested 224 people on 526 charges. Simultaneous raids occurred around the world.

We discuss what may be the implications of such an operation – not just on organised crime but also on the future of policing and trust in encryption capabilities.

Further reading: https://australiancybersecuritymagazine.com.au/operation-ironside-sees-police-raids-worldwide/

Thanks for tuning in and stay tuned for more… #MySecurityTV (https://www.youtube.com/hashtag/mysecuritytv) #Police (https://www.youtube.com/hashtag/police) #Policing (https://www.youtube.com/hashtag/policing) #Ironside (https://www.youtube.com/hashtag/ironside) #AFP (https://www.youtube.com/hashtag/afp) #Encryption

MySec.TV version is available here https://mysecuritymarketplace.com/av-media/police-operation-ironside-what-are-the-implications/ (https://mysecuritymarketplace.com/av-media/police-operation-ironside-what-are-the-implications/ )

Jane Lo, Singapore Correspndent interviews Professor Dr. Christian Doerr, Professor of Cyber Security and Enterprise Security, Director of the Cyber Threat Intelligence Lab, Hasso Plattner Institute (Potsdam, Germany).

Professor Dr. Christian Doerr, is the Professor of Cyber Security and Enterprise Security, and Director of the Cyber Threat Intelligence Lab, Hasso Plattner Institute in Potsdam, Germany.

He works in the broad area of network security and critical infrastructure protection, with a research focus on designing resilient network systems, localizing and estimating current threats through real-time situational awareness in networks as well as conducting threat intelligence on adversaries.   While most of his work focuses on technology, he also integrates socio-technical aspects of cyber security in his research.

Professor Doerr  received his Ph.D. in Computer Science and Cognitive Science from the University of Colorado, USA.

In this podcast, Professor Doerr discussed the investigation by his team into the emerging role of Bitcoin in powering advance malware, and shared insights into threat actors’ use of Bitcoin blockchain to signal the locations of the Command and Control (C&C) Infrastructure.

He highlighted key developments of the C&C evolution in the cat-and-mouse game between the cyber defenders and the threat actors. With attractive characteristics such as immutability, open-access, and high adoption rates, he pointed out how blockchain holds certain advantages over existing designs for threat actors.

While the research team was able to execute a temporary take-over of the infrastructure that cost the adversaries approximately $2 million, the threat actors, however, were able to adapt quickly and resume their malicious activities.

As detection of covert communication patterns in a blockchain is still in its infancy, Prof Doerr predicted that threat actors will increasingly blend their malicious activities with normal services using the blockchain infrastructure.  Faced with such a scenario, he advised cyber defenders to bolster basic mitigation measures,  including addressing the weakest link by raising user awareness.

Recorded 26th May 2021 Singapore 5.15pm/ Germany 11.15am.

Professor Doerr spoke at BlackHat Asia 2021 - MySecurity Media were media partners to the event.

WordPress set to grow to $636 billion this year, fiercely competing with eCommerce.

Today we’re interviewing WP Engine’s Country Manager, ANZ, Mark Randall and Senior Engineer and self-described “WordPress Evangelist” Ricky Blacker.

WP Engine, the #1 managed WordPress platform in the world, is launching the world’s first WordPress economy study in partnership with the University of London and Vanson Bourne. The WordPress Economy report reveals WordPress is a multi-billion-dollar industry now valued at $597 billion, compared to AI at $327 billion and eCommerce at $618 billion.

Listen to the previous interview with WP Engine – https://australiancybersecuritymagazine.com.au/wp-engine-the-future-of-websites-fake-news-dark-data/ (https://australiancybersecuritymagazine.com.au/wp-engine-the-future-of-websites-fake-news-dark-data/)

#mysecuritytv (https://www.youtube.com/hashtag/mysecuritytv) #wordpress (https://www.youtube.com/hashtag/wordpress) #wpengine (https://www.youtube.com/hashtag/wpengine)

Recorded on MySec.TV (http://www.mysec.tv)Live - June 8, 2021

Interview with Mary Jo Schrade, Assistant General Counsel and Regional Lead for Microsoft’s Digital Crimes Unit (DCU) Asia.

Disrupting one of the world’s most dangerous malware - Trickbot

Mary Jo Schrade is an Assistant General Counsel and Regional Lead for Microsoft’s Digital Crimes Unit (DCU) Asia and is based at Microsoft’s Cyber Security Center in Singapore. She oversees the initiatives, programs and strategies related to Microsoft Asia’s efforts to prevent or disrupt organized cybercrime and online tech support scams through public-private partnerships, coordinated enforcement, and customer engagements relating to cyber security and Microsoft's digital trust commitment to its customers.

In this podcast, Mary Jo gave highlights of Microsoft’s legal action in October 2020 to disrupt Trickbot, one of the world’s most pervasive malware families which was behind attacks launched by ransomware groups such as Ryuk.

Representing one of the rare cases where the disruption was coordinated by private sector organisations, this involved extensive partnerships around the world with other organisations, including FS-ISAC (financial services information sharing and analysis center), ISPs, and other cybersecurity companies.

She also shared some of the key factors and decisions behind the legal strategy, and learning lessons for cyber defenders. For smaller and medium sized organisations in Asia, she stressed that the effectiveness of protective measures, such as multi-factor authentication, cannot be underestimated.

Recorded 28th May 2021, Singapore 9am.

We speak with Evan Davidson (https://www.linkedin.com/in/evdavidson/ ), Vice-President, Asia Pacific & Japan and Kelvin Wee (https://www.linkedin.com/in/kewee/), Director for Security Engineering, APJ for SentinelOne (https://www.sentinelone.com) and discuss how AI-driven innovations are disrupting the Top Right Quadrant for Endpoint Protection.

We also discuss what the Mitre Att&ck evaluation is, their methodology and why it has become one of the best sources for CISOs to choose their cybersecurity solutions. SentinelOne scored 100% for visibility in the evaluation and we cover the critical importance visibility has in providing extended detection and response capability.

Linked to the Mitre Att&ck evaluation is available via https://attackevals.mitre-engenuity.org/enterprise/participants/sentinelone/?adversary=carbanak_fin7 (https://attackevals.mitre-engenuity.org/enterprise/participants/sentinelone/?adversary=carbanak_fin7)

Recorded courtesy of SentinelOne, 27 May 2021 - MySec.TV version is available here (https://youtu.be/Uy0EAVgRrQ8).

We speak with ISACA on their recent annual research report, The State of Cybersecurity.

We're joined by Jenai Marinkovic, vCTO/CISO at Tiro Security and advisory board member at Beyond, and member of ISACA’s Emerging Trends Working Group and Jonathan Brandt, ISACA Information Security Professional Practices Lead.

State of Cybersecurity 2021, Part 1: Global Update on Workforce Efforts, Resources and Budgets reports the results of the annual ISACA global State of Cybersecurity Survey, conducted in the fourth quarter of 2020.

The report (www.isaca.org/state-of-cybersecurity-2021) focuses on the current trends in cybersecurity workforce development, staffing and cybersecurity budgets. The issue of cybersecurity workforce deficiencies remains unresolved, despite years of reporting on this problem from numerous resources.

Streamed May 28, 2021. Video version is available at https://youtu.be/ykzwD2CB0Jc (https://youtu.be/ykzwD2CB0Jc)

Thanks for tuning in and stay tuned for more... #MySecurityTV (https://www.youtube.com/hashtag/mysecuritytv) #ISACA (https://www.youtube.com/hashtag/isaca) #Cybersecurity (https://www.youtube.com/hashtag/cybersecurity) #cyberskills (https://www.youtube.com/hashtag/cyberskills)

In this interview we speak with Tim Jones, Managing Director and Stefan Prandl, Chief Technology Officer of Hyprfire.

Hyprfire is an Australian cybersecurity start-up which has innovated the application of Power Law Statistical Distributions and Behavioural Analytics to achieve effective, real-time network anomaly detection.

Get a copy of the Firebug Whitepaper here www.hyprfire.com/whitepaper (https://www.hyprfire.com/whitepaper)

#cybersecurity (https://www.youtube.com/hashtag/cybersecurity) #networkdetection (https://www.youtube.com/hashtag/networkdetection) #IDS (https://www.youtube.com/hashtag/ids)

To view the MySec.TV interview - visit https://youtu.be/JEg8z0ndtWI (https://youtu.be/JEg8z0ndtWI)