Cyber Security Weekly Podcast

Interview with Lenovo's David Rabin, Vice President of Global Commercial Marketing and Daniel Fields, Executive Director APAC of Services, Sales & Marketing discussing the Lenovo 3S strategy, preparation of end devices and edge computing in the lead up to the 5G roll out. Includes discussion on the trends in the Asia Pacific region, ThinkShield, Lenovo's PC authentication and security application and the 2020 release of the foldable PC and Motorola Razr foldable phone.

Recorded 5 December, 2019 in Taipei, Taiwan at the Canalys Channels Forum 2019.

MySecurity Media were media partners to the event and attended courtesy of Canalys.

Recorded via Sydney and Melbourne, interview with David Banger, author of ‘Digital is Everyone’s Business - a guide to transition’. Following our book review in Issue 9 of the Australian Cyber Security Magazine. Be one of the first 10 listeners to this podcast for your chance to receive a free copy.

Set out in five parts to address: mindset, technology, relevance, innovation and digital, David's book establishes the framework for executives to manage the people and business transformation, in a rather simplistic (yet breaking down the complex) and adaptable step-by-step approach.

Part 2 on Technology is invaluable in addressing costs, capability, criticality, and communicating context, in addition to a number of critical assessment models, with an ultimate focus being on the ‘customer’. Part 3 on Relevance address the risk management approach, not just strategically and for the organisation, but also for career and professional development. Doing so is a natural segway to ‘rightsizing’ and analysing the roles and leaderships skill sets.

Part 4 and 5 address innovation and digital. Nigel writes, “Strategic technical innovation will require investment prior to mass market penetration. The identification and agreement of milestones for this innovation approach are important as the return on the investment could potentially be delayed.” The importance of Pre-Digital Assessments (PDAs) and Responsibilities, Activities and Initiatives (RAI) is explained and need to be considered at the outset. For digital potential, the three key areas to consider is timing, clarity and duration. Organisations that have achieved successful digital business models have outperformed the industry average of profitability by 25 per cent. A great digital business is one with customer intimacy and global scale.

Recorded 21 November 2019.

Link to the Book Review and to get a copy, visit https://issuu.com/apsm/docs/acsm_issue9/22 (https://issuu.com/apsm/docs/acsm_issue9/22)

Interview recorded in front of the conference audience at Cyber Security Asia 2019, Phnom Pehn, Cambodia, 5 November 2019 #CSA2019

Similar to the impact of drones, across all market verticals, the rise of the robot will be a new challenge with the obvious ‘pros and cons’ for consumers, corporations, governments and security providers. This session examines societal change, crime risk and establishing public policy and public space suitable for a safe digital transformation. This session will discuss:

• Robots will be part of the IoT and Industrial IoT landscape – what will be the associated cyber risks to consider. • Robots and Drones present a risk of ‘fireant’ warfare” – what is the consequence of this risk in civil society. • What public policy should be put in place for the convergence of AI/ML, Robotics and Human Computer Interface Technologies – and the cyber risk associated with these technologies

Doron Sivan is an information security expert and advisor to banks, municipalities, multi-national enterprises, and various Israeli government branches on analyzing scenarios of cyber-attacks on critical systems. He holds a BSc in Physics and an MBA, is the author of several books used by the Israeli Defense Forces (IDF) to instruct cyber intelligence units, and lectures in the prestigious 8200 IDF Intelligence Unit.

Doron founded Cronus Cyber Technologies in order to provide a unique software based solution for automated Penetration Testing. His company is a global provider of machine-based penetration testing and predictive Attack Path Scenario™ (APS) solution called CyBot where their patented technology imitates human ethical hackers operating practices to discover, predict, analyze, and mitigate the risk of sophisticated global cyber attacks – all in real time. Cronus has also been awarded “Most Innovative MSSP Solution” by CDM and listed as “One of 12 companies transforming the cyber industry” by CBInsights.

Interview with Dr. Mark van Staalduinen, Innovation Manager, TNO, Singapore and a Seconded Cybercrime Expert, INTERPOL.

Recorded at Cyber Security Asia 2019 #CSA2019, Phnom Penh, Cambodia, held 4-5 November 2019. Mark presented on Blockchain Technology: Detecting and Solving Cybercrime.

Mark provided a spotlight on compliance and how regulation continues to intensify as cryptocurrency transforms the way people transfer value and move money. While headlines often focus on the use of cryptocurrencies for criminal activities, like money laundering and ransomware, the reality is that cryptocurrencies, like Bitcoin, can be much friendlier to cops than they are to criminals when trying to trace the proceeds of crime or find stolen funds. In fact, blockchain technology can provide information and tracing capabilities not available with more traditional forms of payment like cash or even the traditional banking system. Utilizing these unique features inherent to blockchain technology, in particular immutable ledger, law enforcement and the blockchain industry have developed software analytic and investigative tools to trace funds and detect criminal activity that would otherwise be difficult to discern.

Mark’s main interest lie in the understanding of cybercrime innovation driven by the current pace of internet technologies, like blockchain and IoT. As founder of TNO’s Dark Web program, he conducts cyber threat research and delivers training together with INTERPOL Global Complex for Innovation in Singapore Besides his scientific profile, he has a strong focus on law enforcement. He is a seconded cybercrime expert to INTERPOL Global Complex for Innovation in Singapore. He is innovation manager at TNO with focus on Dark Web, Blockchain Security and Cybercrime. He received his MSc in Electrical Engineering from Delft University of Technology (DUT) in 2003. Since 2012 full-time committed to internet-driven innovations in safety and security. Since January 2016, Dr. van Staalduinen holds position at TNO Singapore to strengthen international partnerships in his capacity of deputy director of the Singapore office.

MySecurity Media were Media Partners to #CSA2019 and attended courtesy of Thomvell International.

Stephen is a true visionary on any topic to do with social media, the future of technology, and current technological advances. This discussion delves in the challenges, opportunities and potential dangers of social media, future of work and rapid advances of technology – be it your own personal assistant that also protects you online, through to how your work day is set to change. Enjoy the discussion.

Recorded 29 October 2019 at Cebit Australia 2019, ICC Sydney. MySecurity Media were media partners to the event.

Great to see Wayne Tufek in action at CeBIT Australia 2019 delivering an Innovation Lab workshop on ‘Preparing your organisation for a cyber crisis – Rewriting the rule book’.

We dive into crisis communication and how organisations and government needs to be fully prepared in their response and communication strategy in order to stay on the front foot and drive the ‘cyber-crisis’ narrative.

Recorded 29 October 2019 at Cebit Australia 2019, ICC Sydney. MySecurity Media were media partners to the event.

Wayne Tufek is a contributor to the Australian Cyber Security Magazine, Issue 6.

We dive into Privileged Access Management (PAM) and the Microsoft Vulnerabilities Report 2019 (Microsoft Vulnerabilities Report 2019 ) with Brian Chappell, Director of Product Management, BeyondTrust. Brian recently presented at Gartner in South Africa and GovWare, Singapore, titled, "Is Your Tuesday Patched Enough? An Analysis of Microsoft’s Security Updates."

BeyondTrust Microsoft Vulnerabilities Report (https://www.mysecuritymarketplace.com/product/microsoft-vulnerabilities-report-2019/) provides the latest insight into security vulnerabilities facing organisations today, as well as a five-year trends analysis to better equip organisations to increase their IT security posture and keep networks and systems safe.

The Microsoft Vulnerabilities Report 2019 analyses the data from security bulletins issued by Microsoft throughout 2018. On the second Tuesday of every month, commonly referred to as “Patch Tuesday,” Microsoft releases fixes for any vulnerabilities affecting Microsoft products. This report compiles these releases into a year-long overview, providing a more holistic view of whether vulnerabilities are increasing, and how many Microsoft vulnerabilities could be mitigated if admin rights were secured across organisations.

As the 2019 Microsoft Vulnerabilities report is the sixth annual edition, it includes a trend comparison based on several years of data. This analysis provides a better understanding of how vulnerabilities are growing, and in which specific products. Microsoft vulnerabilities continued to rise in 2018, with a total of 700 vulnerabilities discovered.

And while there are 46 less Critical Vulnerabilities than in last year’s report, the findings indicate that the removal of admin rights would mitigate a higher percentage of Critical Vulnerabilities this year.

Of the 189 Critical Vulnerabilities discovered, 154 (81%) could have been prevented if administrator rights had been secured.

To get a copy of the Microsoft Vulnerabilities Report 2019 click here (https://www.mysecuritymarketplace.com/product/microsoft-vulnerabilities-report-2019/)

Recorded online on 22 October 2019.

Related Episodes:

Episode 172 - Privileged Access Management (PAM) with BeyondTrust CISO & CTO, Morey Haber (https://blubrry.com/mysecurity/48710291/episode-172-privileged-access-management-pam-with-beyondtrust-ciso-cto-morey-haber/)

Episode 148 - Privileged Access Management, SingHealth Breach & Beyond Trust solution addressing ASD (https://blubrry.com/mysecurity/43342483/episode-148-privileged-access-management-singhealth-breach-beyond-trust-solution-addressing-asd-top4-essential-8)

Panel session facilitated by Jeremiah Caron, Global Head of Research & Analysis, GlobalData and joined by Professor David Cheriton, Stanford University, Nick McMenemy, CEO of RenewTrak and Ravi Chandrasekaran, Senior VP, Enterprise Networking Business, Cisco.

The discussion covers the development of Artificial Intelligence (AI) and both advances and vulnerabilities of the technology and human interactions.

Recorded 2 October 2019, NetEvents Global IT Summit, San Jose.

You have to be quick! We recently interviewed Tarek Chaalan, Security Engineer with Red Piranha, based in Sydney and dived into a discussion about Crystal Eye Version 2.0 and 2.5. Yet before we had time to produce, Red Piranha have just announced the release of Crystal Eye 3.0.

Despite the technical skip - get some deeper insight into the Cyrstal Eye functionality and into a key member of the development team. If you're into Unified Threat Management and all that is offers, you'll enjoy this podcast!\

Crystal Eye Updated Features:

Crystal Eye 3.0 release planned first week of October!

Content Filter App – New updates to Ad Blocking, enhanced to support Google and YouTube safe search.

An option to apply custom branding in the Webgui and on block pages with partner logo is now functional.

DHCP App - App Network Map now shows device list connected to Crystal Eye.

Vulnerability Scanning App – User Interface enhancement and option to pause and resume scan added along with the addition of new section NVTs update. XML scan reports are now getting sent to vulnerability report server for availability in the Client Dashboard. Optimised memory usage.

DCHP App, Multiwan App, SSL VPN App, QOS App - network interface names mapped to aliases on the user interface.

Web Proxy Server - Backend Library has been upgraded.

Intrusion Protection and Detection App – User Interface improvements to show rule updates

Recorded 9 August, 2019, Sydney.

Previous Episode 94 - Interview with Adam Bennett - Link here (https://blubrry.com/mysecurity/36476714/episode-94-interview-with-adam-bennett-of-red-piranha-australias-only-dedicated-next-generation-firewall-manufacturer/)

Crystal Eye Virtual Chief Information Security Officer (VCISO) (https://www.mysecuritymarketplace.com/product/crystal-eye-virtual-chief-information-security-officer-vciso/)

Interview with Andrew Kay, Systems Engineer with Illumio. The Illumio Adaptive Security Platform® (ASP) secures the inside of any data centre and cloud – running any form of compute – with micro-segmentation enabled by application dependency and vulnerability maps.

Following Episode 141 (https://blubrry.com/mysecurity/42399787/episode-141-insights-to-illumio-adaptive-security-platform-micro-segmentation/) where we discussed how Illumio ASP delivers micro-segmentation by combining vulnerability data with real-time traffic visibility. This discussion dives into when and how organisations come to understand how their applications work, see where they are most vulnerable, and use that visibility to create and enforce micro-segmentation policies.

Andrew Kay has over 15 years’ experience in security and quality assurance working with organisations across Asia Pacific to strengthen their resilience to cyber threats. Having worked with major industry players like Micro Focus and HPE, Andrew now represents Illumio South Pacific as he combines his knowledge of technology and industry to design and implement solutions that prevent attackers' lateral movement, protect high-value assets and achieve compliance goals.

Illumio is supporting the Cyber Risk Meetup events in Sydney and Melbourne in 2019 and is listed on the MySecurity Marketplace, including listed reports; How to secure your crown jewel applications (https://www.mysecuritymarketplace.com/product/how-to-secure-your-crown-jewel-applications/) and How to Build a Micro-Segmentation Strategy (https://www.mysecuritymarketplace.com/product/how-to-build-a-micro-segmentation-strategy/)

Further reading:

https://www.mysecuritymarketplace.com/product/the-inevitable-costs-of-status-quo-security/ (https://www.mysecuritymarketplace.com/product/the-inevitable-costs-of-status-quo-security/)

https://www.mysecuritymarketplace.com/product/decoupling-security-from-the-network-the-evolution-of-segmentation/ (https://www.mysecuritymarketplace.com/product/decoupling-security-from-the-network-the-evolution-of-segmentation/)

For more information or to register a consultation visit https://www.mysecuritymarketplace.com/product/illumio-adaptive-security-platform/ (https://www.mysecuritymarketplace.com/product/illumio-adaptive-security-platform/)\

(https://www.mysecuritymarketplace.com/product/illumio-adaptive-security-platform/)Recorded 3 September 2019 in Sydney, Australia