Cyber Security Weekly Podcast

The Australian Department of Defence and Defence Force Cyber Directorate, Information Warfare Division runs an annual Cyber Skills Challenge – this year with about 750 participants – COL Robert ‘Doc’ Watson walks us through the challenge, the outcomes and the opportunities in defence cyber related roles.

Listen out for the F35 Joint Strike Fighter fly over at the start of the interview.

For more information visit defence.gov.au

MySec.TV takeaway - full episode video version available here: https://mysecuritymarketplace.com/av-media/adf-cyber-skills-challenge-with-the-joint-cyber-directorate-outlook-2021-with-hackerone/

Recorded 24 November 2020

CyberArk has released the industry’s first AI-powered cloud security service with a privilege-first approach to reducing excessive permissions.

This interview with Thomas Fikentscher, Regional Director ANZ of CyberArk delves into the privilege first-approach and how identity is the new perimeter.

Recorded for MySec.TV, 27 November 2020

#CyberArk (https://www.youtube.com/results?search_query=%23CyberArk) #PAM (https://www.youtube.com/results?search_query=%23PAM) #IdentitySecurity (https://www.youtube.com/results?search_query=%23IdentitySecurity) #cybersecurity (https://www.youtube.com/results?search_query=%23cybersecurity) #privilagedaccessmanagement (https://www.youtube.com/results?search_query=%23privilagedaccessmanagement) #IAM (https://www.youtube.com/results?search_query=%23IAM) #identityaccessmanagement (https://www.youtube.com/results?search_query=%23identityaccessmanagement)

Interview with Sumir Bhatia, President of Lenovo DCG APAC, and Daniel Fields, Executive Director of APAC Services Business at Lenovo PCSD - insights into the Lenovo response to COVID-19 and business of data centres and PCs.

In September Lenovo Data Center Group (DCG) announced a range of new and updated hyperconverged infrastructure (HCI) solutions and Lenovo Cloud Services. The open platform of hyperconverged infrastructure solutions are in partnership with Nutanix, Microsoft and VMWare and expands software-defined systems management capabilities with Lenovo XClarity.

Hyperconverged infrastructure solutions are uniquely suited to provide virtual desktop infrastructure (VDI), supporting the need for people to work remotely across many industries such as education and healthcare.

Recorded between Sydney and Singapore, 26 November 2020.

Previous episodes with Lenovo from Canalys APAC Summit

Episode 182 - Lenovo 3S Strategy - Smart IoT, Smart Infrastructure & Smart Verticals - Takeaway from Canalys Channels Forum 2019, Taipei (https://blubrry.com/mysecurity/52783130/episode-182-lenovo-3s-strategy-smart-iot-smart-infrastructure-smart-verticals-takeaway-from-canalys-channels-forum-2019-taipei/)

Episode 134 - Navigating an age of devices and disruption - Insights with Lenovo in Australia and the Asia Pacific (https://blubrry.com/mysecurity/41072456/episode-134-navigating-an-age-of-devices-and-disruption-insights-with-lenovo-in-australia-and-the-asia-pacific/)

As Chief Security Officer, Errol Weiss is responsible for the strategic vision and direction of the H-ISAC’s day-to-day Cyber and Physical Security Services offered to H-ISAC member organizations, including the delivery of Cyber and Physical Threat Intelligence, the H-ISAC Security Operations Center (SOC), Identity services, community exercises and other special interest services.

Weiss previously worked at Bank of America (BofA) where he was a Global Information Security executive working with internal partners to protect information, customers and staff by reducing the impact from cyber threats. Before BofA, Weiss worked for 10 years at Citigroup, where he created and ran the bank’s first Cyber Intelligence Center, a global team providing actionable intelligence to internal staff.

Weiss began his career at NSA conducting vulnerability analyses and penetrations of US Government systems and then spent ten years with consulting firms delivering information security services for Fortune 500 companies. Weiss was instrumental for the creation, implementation and operation of the Financial Services ISAC and is one of the four named inventors on the patent for Trusted and Anonymous Information Sharing.

Weiss has been involved with the ISAC concept from its foundation – first as part of the team that created the Financial Services ISAC in 1999 and then as a Board member where he also served as Treasurer and Vice Chair. Weiss has been an active user of ISAC services and served on the FS-ISAC Board of Directors for six years and Threat Intelligence Committee for ten years.

He’s been invited to speak internationally and has provided expert testimony before Congress to advocate for change and help influence information sharing legislation.

Interview by Jane Lo, Singapore Correspondent. Recorded between Singapore and Florida, 17/16 (SGT/US) November, 2020.

China’s Grand Strategy and Australia’s Future in the New Global Order - Book review with Geoff Raby

Special interview, recorded 12 November, 2020 with Geoff Raby, author of a new book – ‘China’s Grand Strategy and Australia’s Future in the New Global Order’ Geoff Raby was Australia’s ambassador to China (2007–11); ambassador to APEC (2003–5); and ambassador to the World Trade Organization (1998–2001). He was awarded the Order of Australia in 2019 for services to Australia–China relations and to international trade.

This interview reviews Geoff’s work and the new emerging world order of competition and disruption, particularly in the APAC region with consideration to the impacts on Australia, ASEAN and US-China relations.

Copies of the book for purchase are available via: https://www.mup.com.au/books/chinas-g... (https://www.youtube.com/redirect?v=eTrCpJn-8eo&event=video_description&q=https%3A%2F%2Fwww.mup.com.au%2Fbooks%2Fchinas-grand-strategy-and-australias-future-in-the-new-global-order-paperback-softback&redir_token=QUFFLUhqa213SXo3N2hxVDh3WERsYzJ4N285RGZ1QzItQXxBQ3Jtc0ttR1RXWmZnSmVhVjQ2S0hkV3hoNHQwSm5rNG1CRlZsVmhlMkpwbHVubDJVV01wcERzOWZWRkVqZEEtVkNuNzFXcEtwaTBMeDQ3YWQwVGNKN3c2Y3JSU2oxOVNoTm1lTXBpd0JHcFo0ODhSSXB1cGlLSQ%3D%3D)

For further viewing on MySecurityTV – Aerospace, Defence & Security Technology Market Trends 2020 – India’s Reach Series (Episodes 1 – 8); Indo-Pacific Series (Episodes 1 – 10) – visit www.MySec.TV (https://mysecuritymarketplace.com/av-channel/my-security-tv/)

Introducing a takeaway interview from Episode 1 - MySecurityTV Tech & Sec Weekly Series - Aerospace, Defence & Security Technology Market Trends - Watch now...

Russian State-Sponsored APT Actor Compromises U.S. Government Targets: Interview with Professor Matthew Warren, Director of RMIT University Centre for Cyber Security Research and Innovation.

“Since at least September 2020, a Russian state-sponsored APT actor—known variously as Berserk Bear, Energetic Bear, TeamSpy, Dragonfly, Havex, Crouching Yeti, and Koala in open-source reporting — has conducted a campaign against a wide variety of U.S. targets.” National Cyber Awareness System Alert (AA20-296A) - Russian State-Sponsored Advanced Persistent Threat Actor Compromises U.S. Government Targets: October 22, 2020

Just two weeks out from the US federal election, the CISA-FBI jointly warned (AA20-296A/B) that “Iranian advanced persistent threat (APT) actors are likely intent on influencing and interfering with the U.S. elections to sow discord among voters and undermine public confidence in the U.S. electoral process.

The APT actors are creating fictitious media sites and spoofing legitimate media sites to spread obtained U.S. voter-registration data, anti-American propaganda, and misinformation about voter suppression, voter fraud, and ballot fraud.

The APT actors have historically exploited critical vulnerabilities to conduct distributed denial-of-service (DDoS) attacks, structured query language (SQL) injections attacks, spear-phishing campaigns, website defacements, and disinformation campaigns.

The Russian state-sponsored APT actor has targeted dozens of SLTT government and aviation networks, attempted intrusions at several SLTT organizations, successfully compromised network infrastructure, and as of October 1, 2020, exfiltrated data from at least two victim servers.”

Alongside this latest allegation Russia and Iran are again sponsoring attacks against US democracy and government information system infrastructure, the United States is also facing a third wave of COVID-19, reaching over 80,000 daily cases (25 Oct) and with some forecasts calculating that over 500,000 Americans will die from the pandemic by the end of February 2021. How the US responds to these issues, and a myriad of other significant domestic and international challenges is up to voters and the ultimate outcome to the election.

Link to the Cyber Risk Leaders Magazine, Issue 3 (https://mysecuritymarketplace.com/books/cyber-risk-leaders-magazine-issue-3-2020/)

Link to the MySecurityTV Series (https://mysecuritymarketplace.com/av-channel/my-security-tv/)

Recorded 27 October 2020 - #MySecurityTV

Jane Lo, Singapore Correspondent for MySecurity Media speaks with Charles Perine, a Senior Threat Researcher for Trend Micro.

In this podcast, Charles provides insights into his joint work with Stephen Hilt, Federico Maggi, Lord Remorin, Martin Rösler, Rainer Vosseler on conceptualising and running a manufacturing facility honey pot. To determine how knowledgeable and imaginative attackers could be in compromising a manufacturing facility, they built an ideal environment to monitor and learn about the attackers attracted to the honeypot.  He discussed the attacks observed, which included a malicious cryptocurrency mining campaign, two ransomware attacks, another that posed as a ransomware attack, and several scanners.

Charles has 15 years of experience in computer and network security. Much of his focus during that time has been dedicated to ICS security, including research projects at Sandia National Laboratories (OPSAID) and Digital Bond (Portaledge), and work on securing ICS environments for customers while working for Revolutionary Security and Lockheed Martin. Previously, he had also tested internal products and helped create the Product Security Incident Response Team (PSIRT) process while working for General Electric. Charles enjoys breaking hardware and software.

He had also presented on other TrendMicro research “Lost in Translation: When Industrial Protocol Translation Goes Wrong”, at CRITIS: Critical Information Infrastructures Security 2020.

Recorded in association with MySecurity Media as media partners to BlackHat Asia 2020, 29 Sept - 2 October 2020.

Executive Editor Chris Cubbage speaks with Abigail Bradshaw CSC, Head of the Australian Cyber Security Centre (ACSC).

A year or so on from the ACSC becoming part of the Australian Signals Directorate (ASD), we speak with Abigail Bradshaw about some of the challenges and benefits, with an updated overview of the ACSC as it is today and more generally, how the ACSC engages across government and law enforcement.

Abigail highlights some of the key items from the Australian Cyber Security Strategy 2020 which relate to plans for mandatory reporting for Critical Infrastructure and the expansion of cyber-exercises, in particular to determine when the ACSC can intervene into attacks against CI of national significance.

The interview also provides insights into the development and importance of the Annual Cyber Threat Report – 19/20, Advisory 008 - the Copy-Paste Compromises Report, Tradecraft Trends and other advisory reports.

Finally, the ACSC is seeking to recruit 500 staff under the new strategy with a current focus on Technical Directors. Checkout cyber.gov.au/careers for more information.

Abigail worked in the Department of Prime Minister and Cabinet, most recently as the Deputy Coordinator of the National Bushfire Recovery Agency and prior to that as the head of the National Security Division. She has held senior roles in the Department of Home Affairs offshore covering Europe and sub-Saharan Africa and as the department’s inaugural Chief Risk Officer. She was the Deputy Commander of Maritime Border Command during the height of the people-smuggling trade.

Abigail began her career in the Royal Australian Navy and was awarded the Conspicuous Service Cross in 2005. She holds a Bachelor of Laws and a Bachelor of Asian Studies.

Recorded 14 October 2020.

Related Episodes

Episode 221 - Cyber Power Index highlighting Australian Government’s gaps in cyber capability (https://blubrry.com/mysecurity/67420882/episode-221-cyber-power-index-highlighting-australian-governments-gaps-in-cyber-capability/)

Episode 212 - Cybersecurity Taskforce Webinar Session - Capacity Building For Resilience 2020 (https://blubrry.com/mysecurity/65214595/episode-212-cybersecurity-taskforce-webinar-session-capacity-building-for-resilience-2020/)

Episode 209 - Australia & Israel National Cybersecurity Strategy Insights - AICC Counterpart Series (https://blubrry.com/mysecurity/63959881/episode-209-australia-israel-national-cybersecurity-strategy-insights-aicc-counterpart-series/)

Episode 87 - Australia’s Offensive Cyber Capability and Deterrence In Cyberspace, interview with Fergus Hanson, ASPI’s International Cyber Policy Centre (https://blubrry.com/mysecurity/35765482/episode-87-australias-offensive-cyber-capability-and-deterrence-in-cyberspace-interview-with-fergus-hanson-aspis-international-cyber-policy-centre/)

Episode 82 – 4th Joint Cyber Security Centre launched by the Hon Christian Porter MP, Australia’s Federal Attorney-General (https://blubrry.com/mysecurity/35437645/episode-82-4th-joint-cyber-security-centre-launched-by-the-hon-christian-porter-mp-australias-federal-attorney-general/)

Interview with Mohan Koo, Chief Technology Officer and Co-Founder of DTEX Systems and Hai Tran, Chief Executive Officer of the Australian Cyber Collaboration Centre (A3C).

DTEX Systems has announced 2020 fiscal year new annual revenue growth of 300% over fiscal year 2019. DTEX has seen a sharp increase in global demand and adoption of its Workforce Cyber Intelligence platform which provides organizations a human-centric approach to insider threat protection, employee monitoring, remote workforce security, shadow IT awareness and data loss prevention while maintaining employee privacy and regulatory compliance.

DTEX also achieved a 97 percent customer retention rate as customers adopted InTERCEPT 6.0, the company’s cloud-based next-generation insider threat solution. Key sectors of growth and accelerated customer adoption were seen in the financial services, manufacturing, oil and gas, chemical, technology, healthcare, and pharmaceutical industries.

“DTEX’s focus on the human aspects of cybersecurity in addition to its technical leadership make them an invaluable addition to the A3C program,” said A3C CEO, Hai Tran. “A truly effective cybersecurity program must not only account for the data, machines and applications within an organization, but how the workforce that are using those tools on a day-to-day basis are trained, protected and supported. We support DTEX on its efforts to balance security with worker privacy and look forward to its continued collaboration with the A3C community.”

Recorded 9 October, 2020 via Sydney and Adelaide.

Bill Nelson is the CEO of Global Resilience Federation (GRF). Previously, Nelson was the President and CEO of the Financial Services Information Sharing and Analysis Center (FS-ISAC).

In his 12 years, Nelson led FS-ISAC in its response to major cyber and physical threats and vulnerabilities that affected the financial services industry, including partnering with Microsoft to take down four major botnet infrastructures. He was also responsible for creating the Sector Services Division of FS-ISAC, which was established to assist other sectors and became the genesis for launching Global Resilience Federation.

Nelson was named the fifth most influential person in the field of financial-information security by the publication Bank Info Security and he also received the prestigious RSA Award for Excellence in Information Security.

Before joining FS-ISAC, Nelson was the Executive Vice President of NACHA, the electronic payments association, where he oversaw the development of the ACH Network into one of the largest electronic payment systems in the world, processing nearly 14 billion payments by the time he transitioned to FS-ISAC.

In this podcast with Jane Lo, Singapore Correspondent, Bill shares his insights on the cyber threat intelligence information sharing landscape during the period when he was the President and CEO of FS-ISAC and how incidents such as the Sony Hack in 2014 and the Central Bank of Bangladesh influenced the ways organisations came to view information sharing. He also discusses how recent cyber incidents in operational technology have matured the conversations between public and private sectors, and why the focus on recovery is critical.

Information on the virtual summit with highlights including Captain Scott Kelly’s keynote, and presentations by security practitioners on emerging concepts and trending threats, can be found here: https://grf.org/virtual-summit-overview (https://grf.org/virtual-summit-overview).