Dark Reading Confidential Episode 5: Christofer Hoff, chief secure technology officer at LastPass, shares the human side of the story of how he led his team through a major cyber incident and built from the ground up a security team and security culture. In this frank conversation, Hoff has some valuable advice for how to handle and rebound from a cybersecurity incident.

Have a listen.

Episode 4: The National Institute of Standards and Technology's (NIST) release of its new post-quantum cryptography standards last summer was the quiet start of a new chapter in cybersecurity. Now no longer something that can be filed away for future reference, post-quantum encryption has officially landed on the desks of cybersecurity leaders worldwide.

We wanted to explore what comes next, so we recruited some world-class experts to help get answers. This episode of Dark Reading Confidential digs the world of quantum computing from a cybersecurity practitioner's point of view -- with guests Matthew McFadden, vice president, Cyber, General Dynamics Information Technology (GDIT) and Thomas Scanlon, professor, Heinz College, Carnegie Mellon University. 

They give practical advice on how to manage the upgrade of post-quantum standards across an array of systems, and how to prioritize the most critical cryptography vulnerabilities inside your organization. From threat actors to regulators, the pressure to update to post-quantum standards is on. This episode of Dark Reading Confidential is focused on what to do about it. 

Take a listen.

Episode 3: On September 11, 2019, two cybersecurity professionals were arrested in Dallas County, Iowa and forced to spend the night in jail -- just for doing their jobs. Gary De Mercurio and Justin Wynn ultimately found themselves used as pawns in a very public and ugly power dispute between the local county Sheriff's office and the state, forced to justify the physical penetration test that the state of Iowa had hired them to conduct. Despite the criminal charges against them eventually being dropped, the saga that night five years ago continues to haunt De Mercurio and Wynn personally and professionally. In this episode, the pair and Coalfire's CEO Tom McAndrew share how the arrest and fallout has shaped their lives and careers as well as how it has transformed physical penetration tests for the cybersecurity industry as a whole. 

Episode 2: When a business gets infected with ransomware - its systems and data locked down by cybercriminals - there is rarely a quick fix to get back up and running. Sometimes the nature of the attack and the lack of backup options force the victim organization to pony up and pay ransom to the attackers. That's typically where a ransomware negotiator – often a third-party incident responder – steps in. These are the experts who communicate and negotiate with the ransomware attackers on the ransom demands, with the goal of decrypting locked-down systems so the victim business can get fully back up and running. In Episode 2 of Dark Reading Confidential, we meet two professional ransomware negotiators who share their real-world stories of the delicate deal-making process with cybercriminals who hold victims' computer systems and data for ransom. Among their stories: How they negotiated with cybercriminals to restore operations in a hospital NICU where lives were at stake, and a negotiation on behalf of a church, when the attackers themselves got "a little religion."

The first episode of Dark Reading Confidential dives into the complicated relationship between the Security and Exchange Commission (SEC) and the Chief Information Security Officer (CISO) within publicly traded companies. Frederick “Flee” Lee, CISO of Reddit, Beth Waller, a practicing cyber attorney who represents many CISOs, and Ben Lee, Chief Legal Officer of Reddit, chat with Dark Reading’s editor-in-chief Kelly Jackson Higgins and senior editor Becky Bracken.

Breaking News: Dark Reading's brand-new podcast, Dark Reading Confidential, is coming this month. Dark Reading Confidential brings you rare, firsthand stories from cybersecurity practitioners in the cyber trenches. Join us for our inaugural episode, "The CISO and the SEC," with our guests Reddit CISO Fredrick Lee, Reddit Chief Legal Officer Ben Lee, and cybersecurity and data privacy attorney Beth Burgin Waller, who will share their stories and insights on the new SEC cyber incident reporting rules. Subscribe so you won't miss this or any episodes.