Cybersecurity: Amplified And Intensified

Gareth is the founder and CEO/CTO of a decentralized and encrypted email service called Telios. He's previously been a software engineer for over 13 years working in the automotive and banking industry, but in the last few years has shifted his focus towards building on the decentralized internet.

This episode is available on YouTube: https://youtu.be/LRYhz8kb4rg

[email protected]

Shiva Maharaj

Today we're discussing where our data lives, how can we find most of it and who controls your data.

This episode is available on YouTube: https://www.youtube.com/watch?v=IkPftZRMgcA

Brian J. Weiss is the CEO of ITECH Solutions that provides IT Services across the United States.

Brian J. Weiss

00:00 - Intro

Shiva Maharaj

On this episode I'll share my thoughts on the recent White House announcement below.

This episode is available on YouTube: https://youtu.be/EHtnyGM0TCE

WASHINGTON, June 1 (Reuters) - The White House said on Wednesday that any offensive cyber activity against Russia would not be a violation of U.S. policy of avoiding direct military conflict with Russia over its invasion of Ukraine.

White House press secretary Karine Jean-Pierre commented on statements from U.S. cyber command chief General Paul Nakasone, who told Sky News on Wednesday the United States has conducted a series of digital operations in support of Ukraine.

https://www.reuters.com/world/white-house-cyber-activity-not-against-russia-policy-2022-06-01/

Shiva Maharaj

On this episode we're joined by Vince Crisler of Dark Cubed, Matt Lee of PAX8, Allan Liska of Recorded Future, Jon Murchison and Xavier Salinas of Blackpoint Cyber and John Wetzel of Recorded Future to discuss ongoing events and incidents as they relate to cybersecurity.  

This episode is available on YouTube: https://www.youtube.com/watch?v=5WspCPjlFic

Check out the following podcasts. 

Blackpoint Cyber

Recorded Future

Matt Lee

Shiva Maharaj

Or at least that's my analysis of CISA Alert AA22-137A

It doesn't matter what fancy tools you have if you're using and configuring them incorrectly. 

This episode is also available on YouTube: https://youtu.be/MJLpCTG_kqI

In this episode I'm going to review CISA Alert (AA22-137A)

Weak Security Controls and Practices Routinely Exploited for Initial Access

Cyber actors routinely exploit poor security configurations (either misconfigured or left unsecured), weak controls, and other poor cyber hygiene practices to gain initial access or as part of other tactics to compromise a victim’s system. This joint Cybersecurity Advisory identifies commonly exploited controls and practices and includes best practices to mitigate the issues. This advisory was coauthored by the cybersecurity authorities of the United States,[1],[2],[3] Canada,[4] New Zealand,[5],[6] the Netherlands,[7] and the United Kingdom.[8]

Download the PDF version of this report (pdf, 430kb).

Max Shuftan is the Director, Mission Programs & Partnerships at the SANS Institute.

Max leads a business unit at SANS Institute focused on (1) growing the global cybersecurity talent pipeline and increasing Diversity, Equity, and Inclusion (DEI) in the cyber workforce, and (2) fostering a stronger cybersecurity workforce through technical skills training and certification plus security awareness training of the State, Local, and Education (SLED) community.

https://www.linkedin.com/in/maxwell-shuftan-3786b21a/

SANS Mission: https://www.sans.org/mission/

These will be quick. I dive into questions submitted from listeners and discuss articles and/or evolving incidents.

This episode is available on YouTube: https://www.youtube.com/watch?v=LzMXur-vnw0

This weeks questions;

Shiva Maharaj