Future of Threat Intelligence

By Team CymruBusiness

Future of Threat Intelligence episodes

November 26, 2024EP 6 — CREtelligent’s Anthony Romano on Transforming Due Diligence in Commercial Real Estate
In this episode of The Future of CRE Sustainability, Sean speaks with Anthony Romano, CEO of CREtelligent. They discuss the evolution of technology in commercial real estate, focusing on how platforms like CREtelligent Radius streamline the due diligence process, enhancing efficiency for lenders and property owners.

Anthony also highlights the importance of understanding emerging environmental risks, such as climate change impacts, and how data analytics can aid in making informed investment decisions. Additionally, they explore the role of AI in revolutionizing property identification and risk assessments, paving the way for a more sustainable future in the industry.

Topics discussed:
The evolution of technology in commercial real estate and its impact on due diligence processes, leading to increased efficiency and reduced transaction times.
The role of data analytics in enhancing decision-making for lenders and property owners, enabling them to access crucial information quickly and effectively.
Emerging environmental risks that commercial real estate investors should be aware of, including water, soil, and air quality concerns related to property transactions.
The significance of climate change and its potential impacts on commercial property investments, emphasizing the need for proactive risk assessment strategies.
The integration of AI in environmental risk assessments, allowing for faster analysis and improved accuracy in identifying potential hazards associated with properties.
The importance of understanding zoning and use analysis as property types are reimagined, particularly in the context of adaptive reuse projects.
Strategies for future-proofing commercial real estate investments, including awareness of market trends and the adoption of sustainable practices and technologies.
The growing trend of asset owners exploring renewable energy and microgrid solutions to mitigate risks and ensure reliable energy access for their properties.
The potential for geospatial intelligence tools to enhance site selection processes in commercial real estate, improving the identification of property boundaries and adjacent parcels.
19 min
November 21, 2024Cybersecurity Analyst & Author Deb Radcliff on the Intersection of Fiction and Cybersecurity
In our latest episode of the Future of Threat Intelligence, David speaks with Deb Radcliff, Cybersecurity Analyst, Journalist, & Author of the Breaking Backbones hacker trilogy, who shares her unique journey from investigative journalism to writing her books. She discusses the importance of understanding hacker culture and the human side of cybercrime, emphasizing that many hackers are driven by curiosity rather than malice.

Deb also explores the ethical implications of artificial intelligence and the challenges of maintaining privacy in an increasingly tech-driven world. With insights drawn from her experiences and fiction, Deb offers a thought-provoking perspective on the future of cybersecurity and the role of storytelling in shaping our understanding of it.

Topics discussed:
How the Breaking Backbones trilogy humanizes hackers, portraying them as complex individuals rather than mere criminals in a tech landscape.
Deb emphasizes the importance of understanding social engineering and its role in both hacking and cybersecurity defenses.
The ethical implications of artificial intelligence are discussed, highlighting potential risks and responsibilities in its development and use.
Privacy and autonomy are critical themes, with Deb advocating for individual rights in an increasingly monitored and tech-driven society.
Deb reflects on her early experiences with hackers, illustrating the wild west nature of the cybersecurity landscape in the 1990s.
The conversation emphasizes the need for collaboration between tech experts and creatives to address cybersecurity challenges effectively.

Key Takeaways:
Explore the hacker culture to gain insights into motivations and behaviors that can inform better cybersecurity practices.
Advocate for ethical AI development by engaging in discussions about its implications on privacy and security in society.
Educate yourself and others about social engineering tactics to enhance awareness and improve defenses against cyber threats.
Promote privacy rights by supporting initiatives that protect individual autonomy in an increasingly digital and monitored world.
Collaborate with creatives and tech experts to develop innovative solutions that address the challenges of cybersecurity.
Participate in cybersecurity training programs to improve your understanding of current threats and effective response strategies.
Engage in conversations about the ethical use of technology to foster a culture of responsibility among developers and users.
Utilize storytelling techniques to communicate complex cybersecurity concepts, making them more relatable and understandable for broader audiences.
Stay informed about emerging technologies and their potential impacts on security to proactively adapt your strategies and practices.
27 min
November 15, 2024Threat Hunter Ryan Chapman on Critical Security Mistakes Against Ransomware
In our latest episode of the Future of Threat Intelligence podcast, David chats with Ryan Chapman, Threat Hunter, Author & Instructor at SANS Institute. They explore the alarming evolution of ransomware tactics, including the rise of multi-extortion strategies where attackers not only encrypt data but also threaten to leak sensitive information.

Ryan emphasizes the critical mistakes organizations make, such as failing to implement basic security practices and allowing administrative privileges for general users. He also discusses the importance of leveraging internal data for effective threat hunting. Tune in to gain insights on strengthening your organization's defenses against ransomware attacks!

Topics discussed:
The evolution of ransomware tactics, highlighting the shift from simple encryption to sophisticated human-operated attacks.
The rise of multi-extortion strategies, where attackers threaten to leak sensitive data in addition to encrypting it.
Why organizations often fail to implement basic security practices, leading to increased vulnerability to ransomware attacks.
The importance of restricting administrative privileges for general users is emphasized to enhance overall security posture.
The value of better visibility through proper logging and monitoring to detect and respond to threats effectively.
Leveraging internal data as intelligence is crucial for effective threat hunting and identifying potential vulnerabilities within the organization.
The significance of ongoing education and training in cybersecurity to keep defenses robust against evolving threats.

Key Takeaways:
Implement basic security practices, such as restricting administrative privileges for general users, to reduce the risk of ransomware attacks.
Conduct regular audits of Active Directory permissions to ensure proper access controls and minimize potential vulnerabilities.
Utilize full tunnel VPNs for remote users to secure all traffic and enhance protection against external threats.
Enable comprehensive logging on hosts, including PowerShell and Active Directory events, to improve visibility and incident response capabilities.
Leverage internal data as intelligence by analyzing alerts and indicators of compromise (IOCs) to identify potential threats.
Educate employees on recognizing phishing attempts and other social engineering tactics to prevent initial access for attackers.
Collaborate with threat hunting teams to share insights and findings, fostering a proactive approach to cybersecurity.
Monitor for unusual service names or processes that appear on fewer devices to identify potential threats in your environment.
Document all findings during threat hunting sessions, regardless of whether a threat is identified, to build organizational knowledge.
Stay updated on the latest ransomware tactics and trends to adapt your security strategies and defenses accordingly.
26 min
November 15, 2024EP 5 — IBM’s Frederico Egli on Adapting Office Spaces for the Hybrid Work Model
In this episode of The Future of CRE Sustainability, Sean speaks with Frederico Egli, Head of Real Estate for the US at IBM, who shares his journey from advertising to leading sustainable real estate initiatives. He discusses the importance of creating an "intelligent portfolio" that consolidates office spaces to reduce carbon footprints and enhance operational efficiency.

Frederico also explores how the hybrid work model is reshaping office design, emphasizing the need for collaborative spaces that foster meaningful interactions. Additionally, he highlights the role of technology, including IoT and AI, in driving sustainability efforts and optimizing real estate decisions.

Topics discussed:
The significance of sustainability in real estate decisions, focusing on how IBM integrates climate change directives into its portfolio management strategies.
The concept of an "intelligent portfolio," which emphasizes reducing office space while maintaining operational efficiency and minimizing environmental impact.
The impact of the hybrid work model on office design, shifting the focus from traditional workstations to collaborative spaces that encourage teamwork and innovation.
The role of technology, particularly IoT and AI, in gathering data to optimize energy use and improve sustainability in existing buildings.
IBM's initiative to repurpose existing vacant spaces, such as moving into a former Meta office in Austin, to promote sustainability and cost-effectiveness.
The challenges of convincing CFOs about the financial benefits of sustainable investments and how technology is making these solutions more economically viable.
The importance of listening to employee feedback to create workspaces that enhance productivity and align with the needs of the workforce.
The evolving role of real estate professionals, requiring collaboration with HR and marketing to create spaces that meet both business and employee needs.
Predictions for the future of commercial real estate, focusing on purpose-driven spaces that foster collaboration and innovation rather than just traditional office setups.
30 min
November 08, 2024T. Rowe Price’s Matthew Winters on Threat Hunting as the Scientific Method
In our latest episode of the Future of Threat Intelligence podcast, David speaks with Matthew Winters, Lead Threat Hunter at T. Rowe Price. Matthew shares his unconventional journey into cybersecurity, highlighting the importance of soft skills and creativity in threat hunting that he has picked up along the way.

He explains that threat hunting is akin to applying the scientific method to networks, starting with hypotheses rather than alerts. Matthew and David also explore the critical role of threat intelligence in shaping effective hunting strategies and the essential skills needed to build a successful threat hunting team. Tune in for valuable insights on enhancing your cybersecurity posture!

Topics discussed:
Threat hunting as applying the scientific method, starting with hypotheses instead of relying solely on alerts.
The importance of threat intelligence as a foundational element for effective threat hunting and proactive defense strategies.
Key skills for threat hunters include technical knowledge, creativity, and the ability to reassess and redefine problem statements.
A hybrid approach to data analysis is recommended, utilizing both network and endpoint data for comprehensive threat visibility.
The challenges of measuring threat hunting effectiveness, and suggestions for metrics like defenses created and impact on adversaries.

Key Takeaways:
Explore veteran programs to facilitate career transitions into cybersecurity, leveraging the unique skills and experiences of military personnel.
Adopt the scientific method in threat hunting by formulating hypotheses before analyzing data, ensuring a structured approach to investigations.
Utilize threat intelligence to inform your threat hunting strategies, focusing on real-world adversary behaviors and techniques relevant to your organization.
Encourage creativity within your team by identifying individuals with a "MacGyver Drive" who can think outside the box to solve complex problems.
Implement a hybrid data analysis approach by integrating both network and endpoint data to gain comprehensive visibility into potential threats.
Define clear boundaries between threat hunting, incident response, and red teaming to maintain focus and effectiveness in each discipline.
Measure the effectiveness of your threat hunting program by tracking metrics such as defenses created and the impact on adversaries.
Foster a culture of continuous learning within your threat hunting team to enhance skills and adapt to evolving cybersecurity challenges.
Leverage tools like graph databases to analyze relationships between threats and improve the precision of your hunting efforts.
Challenge your team to reassess problem statements regularly, ensuring they are asking the right questions to drive effective threat hunting.
20 min
October 31, 2024Marsh’s Gregory Van den Top on Understanding Cyber Risk in Business Strategy
In our latest episode of the Future of Threat Intelligence podcast, David speaks with Gregory Van den Top, AI Practice Leader for Europe at Marsh. They explore the critical importance of understanding cyber risk as an integral part of business strategy, rather than a technical afterthought.

Gregory emphasizes the need for organizations to conduct thorough risk assessments and quantify potential impacts, particularly in light of the growing threat of ransomware. He also highlights the significance of fostering a strong link between cybersecurity and executive leadership to enhance organizational resilience. Tune in for actionable insights to strengthen your cyber risk management approach!

Topics discussed:
Why cyber risk should be integrated into overall business strategy, not treated as a separate technical issue.
How conducting thorough risk assessments helps organizations understand their current cyber risk landscape and potential vulnerabilities.
How quantifying cyber risk is essential for informed decision-making and aligning with organizational goals, particularly for financial stakeholders.
Why ransomware poses a significant threat, requiring organizations to prioritize awareness, preparedness, and proactive incident response measures.
How building resilience in cybersecurity involves not just response plans but also protective measures to prevent incidents from occurring.
How establishing clear roles and responsibilities, including board-level oversight, enhances the management of cyber risk across the organization.
Why cybersecurity education for non-technical stakeholders is crucial for fostering a comprehensive understanding of risks and promoting informed discussions.

Key Takeaways:
Integrate cyber risk assessments into your overall business strategy to ensure a holistic approach to risk management.
Quantify cyber risks to provide tangible insights for decision-makers, particularly for CFOs and other financial stakeholders.
Prioritize awareness and preparedness for ransomware threats by implementing proactive incident response plans and training programs.
Establish clear roles and responsibilities for cybersecurity within your organization, including board-level oversight for better risk management.
Foster a culture of cybersecurity education among all employees to enhance understanding and promote informed discussions about risks.
Develop a robust incident response plan that includes forensics, legal advice, and communication strategies to mitigate the impact of breaches.
Engage in regular tabletop exercises using AI tools to simulate cyber incidents and improve your organization’s resilience and response capabilities.
Collaborate with cybersecurity experts to stay updated on emerging threats and best practices for managing cyber risk.
Review and update your cybersecurity policies and practices regularly to adapt to the evolving threat landscape and organizational changes.
19 min
October 29, 2024EP 4 — Station A’s Kevin Berkemeyer on Data-Driven Decisions for Renewable Energy Projects
In this episode of The Future of CRE Sustainability, Sean speaks with Kevin Berkemeyer, Co-founder & CEO at Station A. Together they explore the transformative role of technology in clean energy for commercial real estate. Kevin discusses how Station A’s innovative software simplifies the evaluation of buildings, enabling quick, data-driven decisions for renewable energy projects.

Kevin also emphasizes the importance of leveraging AI and analytics to streamline project comparisons, the evolving landscape of energy storage, and strategies for prioritizing clean energy investments across large portfolios.

Topics discussed:
The transition from an innovation team to a software and analytics team to address market challenges in evaluating commercial buildings for clean energy.
The significance of data collection in assessing building performance, including load data, bill data, and structural characteristics to inform renewable energy proposals.
How Station A's technology serves as a lead generation solution for developers and EPCs, helping them identify optimal project sites for solar and storage.
The evolution of building owners using Station A's data to prioritize their own properties for renewable energy projects, enhancing their market readiness.
The role of AI in automating the evaluation process, including image processing to detect rooftop obstructions and streamline proposal comparisons.
The importance of incorporating local and federal incentives, such as those from the IRA, to maximize the financial viability of clean energy projects.
Addressing misconceptions about clean energy by highlighting advancements in technology and market conditions that make renewable investments more accessible and viable.
The challenges of managing diverse project execution across various geographies and the need for reliable provider networks to ensure project success.
The growing interest in energy storage solutions and how they can enhance the value proposition of solar projects through demand charge management and grid services.
The impact of evolving market dynamics, including interest rates and political climate, on financing options and the overall appetite for renewable energy investments.
33 min
October 24, 2024Splunk’s David Bianco on Differentiating Threat Hunting and Red Teaming
In our latest episode of the Future of Threat Intelligence podcast, David Bianco, Staff Security Strategist at Splunk, shares his insights on the evolving landscape of threat hunting. He introduces the PEAK threat hunting framework, emphasizing its role in enhancing security measures.

David also discusses the critical differences between threat hunting and red teaming, highlighting how both approaches can complement each other. He also divesinto the essential skills needed for building an effective threat hunting team and offers actionable advice on measuring the success of threat hunting programs.

Topics discussed:
The PEAK threat hunting framework, designed to enhance proactive cybersecurity measures and improve threat detection capabilities.
The distinction between threat hunting and red teaming and their complementary roles in strengthening security defenses.
Hypothesis-based threat hunting and the importance of formulating and testing hypotheses to identify potential threats.
Baseline threat hunting as a method to understand normal activity, aiding in the detection of anomalies.
Key skills for an effective threat hunting team, including knowledge of threat actors, technology stacks, and data analytics expertise.
How metrics for measuring threat hunting success are essential for demonstrating impact and driving continuous improvement in security programs.

Key Takeaways:
Adopt the PEAK threat hunting framework to structure your threat hunting initiatives and enhance your cybersecurity posture effectively.
Differentiate between threat hunting and red teaming to understand their unique roles and how they can complement each other in security.
Formulate clear hypotheses for threat hunting activities to guide your investigations and improve the chances of identifying real threats.
Conduct baseline threat hunting to establish normal activity patterns, making it easier to detect anomalies and suspicious behavior.
Build a diverse threat hunting team by incorporating members with expertise in threat intelligence, data analytics, and incident response.
Implement actionable metrics to measure the success of your threat hunting program and demonstrate its impact on overall security.
Start small with your threat hunting efforts, focusing on manageable projects that can scale as you gain experience and success.
Encourage collaboration between threat hunters and other security teams to share knowledge and improve overall detection capabilities.
Continuously educate your team on the evolving threat landscape to stay ahead of potential risks and enhance threat hunting effectiveness.
Utilize existing data analytics tools to analyze collected data during threat hunting, enabling informed conclusions about threat actor activities.
26 min
October 17, 2024S&P Global’s Eric Hanselman on Integrating Threat Intelligence into Business Strategy
In our latest episode of the Future of Threat Intelligence podcast, David speaks with Eric Hanselman, Chief Analyst at S&P Global, about the critical role of threat intelligence in today’s cybersecurity landscape. Eric emphasizes the need for organizations to integrate threat intelligence operationally, moving beyond mere threat feeds to develop comprehensive threat models.

He discusses the importance of maintaining operational hygiene, building a peer ecosystem for information sharing, and aligning security strategies with overall business objectives. Eric also offers valuable insights on navigating the complexities of cybersecurity and the future of threat intelligence.

Topics discussed:
Insights on the evolving role of threat intelligence in modern cybersecurity strategies and operations.
How organizations must integrate threat intelligence operationally to effectively manage risks and inform day-to-day security decisions.
Why simply having a threat feed is insufficient; understanding and updating threat models is crucial for effective risk management.
How operational hygiene, including good backups and data protection, is essential for defending against ransomware and other cyber threats.
The value of building a community for information sharing enhances collaboration and provides valuable reality checks among cybersecurity professionals.
Aligning security strategies with business objectives ensures that security measures support overall organizational goals and operations.
Looking ahead and maintaining a forward-thinking perspective is vital for anticipating future cybersecurity challenges and opportunities.

Key Takeaways:
Integrate threat intelligence into daily operations to enhance your organization’s ability to respond to emerging cybersecurity threats.
Develop comprehensive threat models that are regularly updated to reflect the evolving risk landscape and inform strategic decisions.
Prioritize operational hygiene by ensuring robust data protection measures and effective backup systems to mitigate ransomware risks.
Build a network of cybersecurity peers for information sharing to gain insights and reality checks on current security practices.
Align your security strategies with business objectives to ensure that cybersecurity efforts support overall organizational goals and operations.
Stay informed about emerging technologies, such as GenAI, and assess their potential impact on your security posture.
Engage in end-user research to understand the pain points of security teams and develop solutions that address their challenges.
Look beyond immediate threats and focus on long-term strategic planning to anticipate future cybersecurity challenges.
Foster a culture of collaboration within your organization to enhance communication between security teams and other business units.
Regularly evaluate and refine your security practices to ensure they remain effective in the face of evolving threats and technologies.
21 min
October 10, 2024Church & Dwight’s David Ortiz on Building Effective Cyber Risk Management Strategies
In our latest episode of the Future of Threat Intelligence podcast, host David Monnier welcomes David Ortiz, Global CISO at Church & Dwight. David shares insights from his extensive career in information technology and cybersecurity, emphasizing the importance of understanding the evolving threat landscape.

David touches on the critical role of threat intelligence in decision-making, the challenges posed by sophisticated phishing techniques and deepfakes, and the necessity of integrating cybersecurity into business strategy. He also highlights the significance of collaboration across various teams and the responsible use of AI in enhancing security measures for organizations.

Topics discussed:
The importance of understanding the evolving threat landscape for effective cybersecurity management in organizations.
How threat intelligence plays a crucial role in identifying and mitigating risks, helping CISOs make informed decisions.
How advanced email gateways and spam filters need to evolve to combat increasingly sophisticated phishing attacks and deepfake technologies.
Why integrating cybersecurity into overall business strategy is essential for achieving security by design and enhancing data privacy measures.
The value of collaboration with diverse partners, including legal teams and law enforcement, strengthens cybersecurity resilience and response capabilities.
The importance of comprehensive cybersecurity awareness training to empower employees in recognizing and responding to potential threats.
The responsible use of AI tools is vital for enhancing security measures while maintaining data privacy and compliance standards.

Key Takeaways:
Assess your organization's attack surface to identify vulnerabilities and prioritize protecting critical assets effectively.
Implement a robust threat intelligence program to enhance decision-making and stay informed about emerging cybersecurity threats.
Upgrade email gateways and spam filters to counteract sophisticated phishing attacks and improve overall email security.
Integrate cybersecurity practices into your business strategy to ensure security by design and enhance data privacy initiatives.
Collaborate with various stakeholders, including legal teams and law enforcement, to strengthen your cybersecurity posture and incident response.
Conduct regular cybersecurity awareness training for employees to empower them in recognizing and responding to potential threats.
Monitor the responsible use of AI tools within your organization to balance innovation with data privacy and security compliance.
Engage with third-party vendors to assess their security practices and manage supply chain risks effectively.
Foster a culture of accountability and ownership among team members to ensure everyone understands their role in reducing cyber risk.
Seek mentorship from experienced professionals in both cybersecurity and business to develop a well-rounded skill set for leadership roles.
16 min

About Future of Threat Intelligence

From the publisher's feed

Welcome to the Future of Threat Intelligence podcast, where we explore the transformative shift from reactive detection to proactive threat management. Join us as we engage with top cybersecurity…

Share Future of Threat Intelligence

Sign up to save your podcasts

Future of Threat Intelligence

Future of Threat Intelligence episodes

About Future of Threat Intelligence

More shows like Future of Threat Intelligence

Risky Business

Risky Bulletin