Hacked Off

Our technical director, Holly Grace, speaks to Ian Murphy the Co-Founder of LMNTRIX about different ways of catching attackers - such as threat hunting, adversarial deception, and threat intelligence.

Key Points:

0'32 Guest introduction

1'22 LMNTRIX

3'40 An over reliance on logs

8'44 What is threat hunting?

11'10 Where do you start with threat hunting?

18'30 What is deception?

32'48 Machine learning and adversarial detection

42'20 The difference between the deep web and the dark web

Download on iTunes: apple.co/2Ji61Ek

Listening time: 54 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Ian Murphy, Co-Founder of LMNTRIX

How much should you spend on cybersecurity? Whilst there isn't a definitive answer to this question or a one-size-fits all answer, our Technical Director Holly Grace Williams, takes a look at how to measure your risk to determine an answer suitable for your organisation.

0'39 According to statistics...

2'09 Estimating breach costs

6'19 Cybersecurity insurance

7'53 What's your cybersecurity maturity?

9'59 Threat modelling

13'13 What kind of security should you be investing in?

Send us you cybersecurity budget questions or thoughts on Twitter @secarma!

Useful links:

Cybersecurity Maturity Assessment - https://www.secarma.com/services/cybersecurity-assessment/maturity-assessment.html

Download on iTunes: apple.co/2Ji61Ek

Listening time: 17 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Secarma’s Technical Director Holly Grace Williams, is joined by Secarma’s People & Event manager Lucy Leaper, to discuss some of the most common cybersecurity misconceptions. From money concerns to the ‘it won’t happen to me’ attitude, Holly debunks certain cybersecurity beliefs, which may be leaving your organisation vulnerable.

Key points:

1’00 “There’s no ROI with security testing”

5’39 “Cybersecurity isn’t my responsibility”

9’59 “My hosting provider covers our cybersecurity”

13’27 “It won’t happen to me”

20’24 “I’m secure, I’ve had a Pentest”

25’17 What’s the minimum a company can do to be secure?

Which misconception do you most commonly hear? Let us know on Twitter @secarma!

Download on iTunes: apple.co/2Ji61Ek

Listening time: 32 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Lucy Leaper, People & Events Manager

Last month an iPhone bootrom exploit dubbed ‘checkm8’ was discovered by researcher axi0mX. This unpatchable vulnerability could give hackers access to iPhones but is it really something we need to be concerned about?

1’40 The new iPhone vulnerability

4’37 Discovering ‘checkm8’ and how it works

11’30 What we can learn from this vulnerability?

13’36 The price of vulnerabilities – bug bounties and brokers

20’53 Which iPhones are affected and how they’re affected

23’21 Is it really something we should be concerned about?

What level of confidence do you have in mobile devices? Do you think mobile phones can be trusted? Let us know on Twitter @secarma!

Download on iTunes: apple.co/2Ji61Ek

Listening time: 26 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

For those who missed The Future of Cyber Security in Manchester this week, our Technical Director Holly Grace Williams, presents her talk on malicious software and how automation will increase the impact of malware attacks. She also discusses the conversation she had with the Q&A panel on cybersecurity insurance.

Key points:

1'23 Malicious software hasn't really changed

2'06 A look back on some historical ransomware attacks

3'05 Wannnacry

7'43 Notpetya

14'15 Should cyber insurance be mandatory?

19'20 Self propagating malware

23'37 SamSam

Do you think cybersecurity should be mandatory? Let us know on Twitter @secarma!

Download on iTunes: apple.co/2Ji61Ek

Listening time: 26 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

In the last 12 months, 822 cyber dependent crimes were reported into Greater Manchester Police, costing the victims £1.2 million.

Neil Jones, the Detective Superintendent of GMP, is speaking to us today to raise awareness about his cyber investigation team and how they can support you after a cyber-attack. He also discusses how the new Cyber Resilience Centre, which is backed by GM police, can help support smaller businesses protect themselves from cyber-crime.

Key Points:

0’52 What is The Cyber Resilience Centre?

2’44 Why cyber-crime reports are so low

6’34 The support you receive after reporting cyber-crime

11’52 Government backed cybersecurity products and services

19’10 Raising the awareness of the GM cyber investigation team

24’06 How the Cyber Resilience Centre can help Manchester based businesses

Useful links:

Small Business Guide - https://www.ncsc.gov.uk/collection/small-business-guide

10 Steps to Cyber Security - https://www.ncsc.gov.uk/collection/10-steps-to-cyber-security

Cyber Essentials - https://www.secarma.com/services/cybersecurity-assessment/cyber-essentials.html

Download on iTunes: apple.co/2Ji61Ek

Listening time: 37 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Neil Jones Detective Superintendent | Head of Cyber & Innovation | The Cyber Resilience Centre for Greater Manchester

What does vulnerability management, mean to you? How do you deal with these issues and track this information? Our Technical Director, Holly Grace Williams discusses the process of pulling together vulnerability information and how certain industry scoring systems for vulnerabilities can be misleading.

Key points:

0’43 Keeping track of vulnerability information

3’30 Vulnerability aggregation

6’10 Scoring vulnerabilities with CVSS

12’45 ‘High risk’ can mean different things

19’25 Grouping assets into services

27’52 Reporting vulnerabilities to the board

29’24 Tracking vulnerability recurrence

We’d love to hear how you’re tracking vulnerability information? Let us know on social via Twitter or LinkedIn!

Useful links:

Common Vulnerability Scoring Systems version 3.1 - https://www.first.org/cvss/calculator/3.1

OWASP Top 10 - https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project

Download on iTunes: apple.co/2Ji61Ek

Listening time: 36 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Introducing our new monthly podcast updating you with the latest cybersecurity news, we kick off ‘A Month in Review’ with some security conference controversy! Our Technical Director Holly Grace Williams discusses the BSides Twitter battle about corporate involvement and the controversial talk Crown Sterling presented at Blackhat.

Key points:

1’00 The benefits of security conferences

4’29 The ‘Twitter battle’ about corporate involvement at BSides

11’17 Corporate sponsorship for corporate talks

13’34 A controversial "Sponsored Session" at BlackHat

22’26 Vetting sponsored talks and audience participation

23’49 The fallout following BlackHat's "Sponsored Sessions"

29’34 An very brief intro to Cryptography and Quantum

How do you think conferences should handle corporate sponsorship?

Let us know your thoughts on Twitter @secarma or email us at [email protected]

Download on iTunes: apple.co/2Ji61Ek

Listening time: 37 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Some of the most common cybersecurity issues have been around for decades and whilst basic security practices can help protect organisations against these threats, businesses are still struggling to implement security basics. We talk phishing, patching and supply chain risk with the new Head of InfoSec at The University of Salford, Greg van der Gaast and why organisations need to be playing the long game when it comes to security.

0’22 Guest introduction

0’54 Why do companies struggle with security basics?

9’41 How to prioritise security

10’24 Phishing, patching and supply chain risk

34’16 Playing the long game

37’00 CISO certifications – are they worth it?

45’20 Security consistency

50’34 Visibility is everything!

Do you see IT and Security as distinct entities, or do you see them as security as a function of IT? Reach out to us on Twitter @secarma or email us at [email protected]

Download on iTunes: apple.co/2Ji61Ek

Listening time: 55 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Greg van de Gaast, Head of InfoSec at The University of Salford

Cybersecurity isn’t just a barrier. If leveraged correctly, it can help to improve and grow your business.The Cyber Foundry project, a European regional development fund program, has been designed to encourage and demonstrate to SMEs how to do just that.

In this episode, we speak to the Project Manager of The University of Manchester, Brian Higgins, who runs us through delivering this unique initiative. We cover how businesses in all sectors are at risk of cyber crime, some common security problems, and how crime groups are operating like businesses themselves!

Key points:

0’29 Guest introduction

0’46 Educating SMEs about security by design

3’30 What the Cyber Foundry Project does

8’32 All types of businesses need to consider cybersecurity

16’04 The ‘head in the sand ethos’

17’35 Ransomware is a business model!

29’20 Your business has more electronic systems than you realise

37’49 Building a community to better understand cybersecurity for SMEs

Useful links:

Cyber Foundry - https://gmcyberfoundry.ac.uk/

What are your cybersecurity concerns as an SME? Reach out to us on Twitter @secarma or email us at [email protected]

Download on iTunes: apple.co/2Ji61Ek

Listening time: 44 minutes

Hosted by: Holly Grace Williams, Technical Director at Secarma

Guest: Brian Higgins, Project Manager at The University of Manchester