Reviewing accepted risks is a crucial part of a risk management program. In today's #cybersunday, Michael talks about some important best practices like considering risk tolerance changes, involving business units in your review process, and others.

Want to reach out to the host? Email us at [email protected]

Hosted By: Michael Farnum

Editing By: Lauren Lynch

Some recent notable #cybersecurity breaches have come from #socialengineering attacks. Humans are always going to fall for this, but we can help lessen the success of these attacks via awareness training. Michael talks in today’s #cybersunday about how #securityawarenesstraining can be targeted and doesn’t have to be so boring and difficult. 

Want to reach out to the host? Email us at [email protected]

Hosted By: Michael Farnum

Editing By: Lauren Lynch

If you're looking for an MDR (Managed Detection and Response) vendor, the temptation is to think of them as a product company versus a services company. On this #cybersunday, Michael talks about why that happens, why it can lead to more confusion when trying to decide which vendor to go with, and some of the things you need to think about that can help you choose.

Want to reach out to the host? Email us at [email protected]

Hosted By: Michael Farnum

Editing By: Lauren Lynch

The Barracuda ESG Vulnerability is still causing havoc, with the vendor telling their customers to replace the box. In this CyberSunday, Michael discusses some of the implications and considerations of this kind of vulnerability in an important and widely-deployed security device. 

Things Mentioned:

·      https://www.mandiant.com/resources/blog/barracuda-esg-exploited-globally

·       https://www.infosecurity-magazine.com/news/barracuda-appliances-exploited/

·      https://www.rapid7.com/blog/post/2023/06/08/etr-cve-2023-2868-total-compromise-of-physical-barracuda-esg-appliances/

Want to reach out to the host? Email us at [email protected]

Hosted By: Michael Farnum

Editing By: Lauren Lynch

There are a few paths to getting into cybersecurity, and not all of them are considered “technical”. But what does that mean? In this #CyberSunday, Michael talks about a discussion around GRC as a career path and if it is “technical” or not. 

Things Mentioned:

·      https://www.linkedin.com/posts/mikesportfolio_cybersecurity-informationsecurity-infosec-activity-7097581791925993472-6ZN7?utm_source=share&utm_medium=member_desktop

How do you work towards a solution for a problem like Shadow IT with people when everyone wants to try to throw tech at it? On today's #CyberSunday, I talk about how using security champions in your company can help. 

#ShadowIT #cybersecurity #securitychampions

We all know about Shadow IT, and we know it is a big issue (bigger these days with the ease of workload deployment in the cloud). But are we also aware that there is Shadow Security? What is Shadow Security, and is it a problem? Here's my take on today's #CyberSunday.

#shadowit #shadowsecurity #cloud #cloudsecurity #workloads #risk #cybersecurity 

Knowing your audience when you're giving information about your #cybersecurity program, efforts, etc. is extremely important. Are they technical? Are they even in the field? Is the information helpful to YOU or to THEM?  Make sure you're not wasting their time or yours by taking into consideration to whom you are speaking before you actually speak.

On today's #CyberSunday, I talk about three real scenarios in which I have been involved where the audience was not fully taken into consideration, and a bit of the fallout each time.

#KnowYourAudience

Operational/Operations Security is the practice of making sure sensitive data/information about your operations doesn't leak out. in today's #CyberSunday, I give a few real examples of OpSec failure I have noticed recently and what some of the consequences could be.

#OpSec #cybersecurity

A friend of mine recently experienced a #breach in his organization. There were two lessons that stood out to me as he was going through the post-mortem, and I'm sharing them on today's #cybersunday.

#Cybersecurity #lifelessons