Hacked Off

Every year we are asked the question, 'what are your cybersecurity predictions for this year?', but is there really any value in predictions and have cybersecurity threats really changed that much over the years?

Holly Grace Williams, takes a look back at last years predictions to see how accurate they really were, and to discusses the most prominent threats for 2020.

Key points:

3'35 Cloud outages

4'16 Nation state attacks

4'48 SQL injection

5'26 Supply chain risk

5'52 Ransomware

10'18 Phishing

11'34 Physical Access

19'10 Holly Grace's predictions!

Download on iTunes: apple.co/2Ji61Ek

Listening time: 21 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

We invite our most popular interviewee of last year, Mike Koss, back into the studio to discuss one of the emerging cyber threats of the modern day – deepfakes. Mike discusses how this machine learning model, fakes content, and the impact it can have on business.

Key Points:

0’43 What is a deepfake?

3’32 What fake content might be used for

10’00 Faking audio

14’13 Faking videos

16’56 Faking photos

22’53 Educating and preparing organisations for deepfakes

28’05 Detecting fake content with algorithms

34’40 What should companies do now?

Download on iTunes: apple.co/2Ji61Ek

Listening time: 40 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Mike Koss, Cybersecurity Expert

Ransomware has been around since the 80's and unfortunately, due to it's effectiveness, it's not going away.

Holly Grace Williams's discusses the recent Travelex ransomware attack - what we can learn from it, how to deal with being held to ransom and predictions for the future.

Key points:

0'35 The Travelex breach

7'14 A two-part ransomware attack

9'17 Keep your systems up to date!

10'41 Why attackers use ransomware

13'23 Media response following a breach

15'38 What should you do if you're held to ransom?

Download on iTunes: apple.co/2Ji61Ek

Listening time: 21 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

According to the BSIA's report on CCTV surveillance, there is approximately 6 million cameras in the UK. But who owns these cameras and how is the data being stored and used?

Pauline Norstrom, the Founder & CEO of a boutique consultancy focusing on technology for video surveillance, joins us to discuss facial recognition and the future of AI in the industry.

Key points:

0’22 Guest introduction

3’50 The picture is not clear - how many CCTV surveillance cameras in the UK?*

5’48 The concerns of facial recognition

15’02 The benefits of video surveillance

16’00 The future of AI for video surveillance

26’10 How AI is applied in business

29’05 How AI will affect the human workforce

Useful links:

* A study by the BSIA - 'The picture is no clear: How many CCTV surveillance cameras in the UK?' https://www.bsia.co.uk/publications/publications-search-results/195-the-picture-is-not-clear-how-many-cctv-surveillance-cameras-in-the-uk.aspx

Download on iTunes: apple.co/2Ji61Ek

Listening time: 38 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Pauline Norstrom, Founder & CEO of Anekanta Ltd.

We are kicking off our new season of the Hacked Off podcast with an interview with Jenny Radcliffe, Founder & Director of Human Factor Security. Jenny speaks to Secarma’s Technical Director Holly Grace Williams, about the fascinating world of social engineering.

0’26 Guest introduction

6’05 Where companies should start with social engineering

9’32 Exploiting the pattern of life

10’56 The importance of pre-engagement research

14’07 Stumbling across other hackers!

18’19 The aim of a physical access test

32’25 Tricks of the trade

47’48 What happens after an engagement

Download on iTunes: apple.co/2Ji61Ek

Listening time: 60 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Jenny Radcliffe, Founder & Director of Human Factor Security

Catch up on November's cybersecurity news with our month in review. From the Labour Party DDoS attack to the phising attack on the new Disney Plus streaming service, Holly Grace William's discuss the importance of balancing user experience and security.

0'32 Cybersecurity highlights of November

1'05 The Labour Party DDoS attack

7'23 The Disney Plus hack

9'46 Password managers

11'48 Balancing user experience and security

Download on iTunes: apple.co/2Ji61Ek

Listening time: 16 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

'When you're doing a penetration test, do you ever find hackers?' After receiving this question a few times recently, our Technical Director Holly Grace Williams discusses how likely it is for a pentester to discover that an organisation has been breached and how to deal with this situation.

Key points:

1'10 What a pentester will do when they discover a beach

1'46 The signs of a breach

3'05 Different ways companies have discovered breaches

7'55 What action to take after discovering you've been compromised

11'44 Creating an Incidence Response Plan

Download on iTunes: apple.co/2Ji61Ek

Listening time: 16 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

With Black Friday and Cyber Monday only round the corner, Holly Grace Williams talks about cybersecurity during busy retail periods from both a consumer and retailer's point of view. Here's what to keep an eye out for and how to stay safe!

1'49 The NCSC's guidance for Black Friday.

2'47 The kind of phishing attacks consumers need to keep an eye out for.

9'44 Attackers aren't always after your credit card details

10'57 Cybersecurity for retailers around busy retail seasons

12'51 Why your website might be targeted by a DDoS attack.

15'59 Creating an Incident Response Plan

17'20 Security testing in preparation for peak retail periods

What are your cybersecurity concerns when shopping online? Let us know your thoughts on Twitter @secarma!

Useful links:

Black Friday advice from NCSC: https://www.ncsc.gov.uk/blog-post/lets-have-cyber-chat-about-black-Friday

DDoS Protected Hosting: https://www.ukfast.co.uk/ddos-protection.html

Download on iTunes: apple.co/2Ji61Ek

Listening time: 20 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

After running a poll on Twitter earlier in the year asking "Is SMS based multi-factor authentication better than no multi-factor authentication or should it never be used?", Holly Grace Williams discusses the pros and cons of password managers and multi-factor authentication.

Key points:

1'15 How passwords managers work

2'21 The concerns with password managers

4'00 Weighing up the risk

6'29 Two-factor authentication

10'10 Two-factor authentication vs two-step authentication

13'00 Googles research: How effective is basic account hygiene at preventing hijacking

What are your thoughts on password managers and multi-factor authentication? Lets us know on Twitter @secarma!

Download on iTunes: apple.co/2Ji61Ek

Listening time: 20 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

There have been a lot of security breaches this month, including NordVPN, Avast and Adobe all falling victim to cyber crime. Holly Grace Williams takes a look at the NordVPN's server breach, what we can learn from it and then discusses why you might want to choose a Virtual Private Network.

Key points:

1'03 The NordVPN breach

2'08 Why use a Virtual Private Network?

4'37 Which VPN should you use?

8'43 How NordVPN's breach has impacted the VPN conversation

11'19 What features to look for

13'30 Who is responsible when using a third party provider?

16'00 Summary

Download on iTunes: apple.co/2Ji61Ek

Listening time: 18 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma