By Matthew Hall
The podcast currently has 10 episodes available.
My friend and former colleague at Microsoft’s public sector practice, Bryan Hunt, provides a great overview of our present threat landscape and a series of reminders with which to start the year. Ransomware, criminal enterprise, and re-visitation of fundamental practices round out the show. How can you spend the money necessary to get in front of the breach or assault? What’s happening with the spike in bitcoin or other cryptocurrencies? What’s driving that? And what about the cost of the breach or a ransomware recovery? Do you pay? Do you prevent it? How do you balance the economics?
Bryan Hunt on LinkedIn
Host: Matthew Hall, CISSP, CHFI, Security +
Apply 1.5 CEUs to any security, IT, project management continuing education certification maintenance.
Law Enforcement Round-Up Links: Information Assured Links to Articles, Sources, Tools, and References
FBI Crime Statistics
It’s that fun time of the year when we all have or will be voting. Families, counties, and the country stand divided and under the influence of foreign intelligence services and criminal enterprise. Our panel discusses many of these topics, including coverage on deep fakes, censorship issues, disinformation campaigns, and the real threat of foreign influence and election intervention. How can we verify what we think we know? How can we better discern what’s out in the environment? In the news summary, Matt reviews the Federal Election Assistance Commission, the Google News Initiative, and a potpourri of stories that show the impacts from disinformation regarding False Claims of Hacked Voter Information Likely Intended to Cast Doubt on Legitimacy of U.S. Elections to how Twitter and other platforms censor stories related to the election.
Our panel discussion with Darren Mott, FBI Special Agent (Ret.) AKA “The Cybur Guy,” John Virden, Assistant Vice President for Security, Compliance, and Risk Management and CISO at Miami University, and Sam Horowitz, Chief Information Security Officer at UCSB, focuses on our impending election.
Show Links: https://start.me/p/RMpwyD/information-assured-2020
It's national insider threat awareness month -- yeah, I didn't know either, but now you do too! We take a brief survey of the Chinese perspectives on national security, including EC-8 surveillance sorties along the South China Sea, an assertion by the Chinese government that they do not interfere with US internal affairs, and the US response to alleged Chinese espionage emerging from the Houston Embassy. A couple of arrest reports for an ex-US Army Special forces officer and a Chinese national throwing a hard drive in a dumpster complement our coverage of North Korean bank heists and $250 million in cryptocurrency seizures.
Our interview with Darren Mott, FBI Special Agent (Ret.) AKA "The Cybur Guy" focuses on Cyber Counterintelligence.
Chinese hackers face US justice; the US Secret Service forms a permanent Cyber Crime task force; the UK’s National Crime Agency’s Operation Venetic yields 746 arrests; Fresno county identity theft arrest and a flamboyant, FBI most wanted Russian hacker’s 5 million dollar bounty rounds out the law enforcement update. Our interview with John Virden follows the roundup.
John Virden, Assistant Vice President for Security, Compliance, and Risk Management and CISO at Miami University, and I discuss the 2020 Verizon Data Breach Investigations Report 2020.
Host: Matthew Hall, CISSP, CHFI, Security +
Apply .5 CEUs to any security, IT, project management continuing education certification maintenance.
Show OutlineTags: Security,UCSB,Miami,Russian,Hacker, Evil,Evil Corp,Virus,Crime,Cybercrime,Fraud,BEC,CEU,CISSP,CSF,Framework,Cyber,Cybersecurity,Infosec,InformationAssurance,Virden,Ransomware,Ransom, China,FBI,Most Wanted
Categories: Security,UCSB,SECLAB,CSF,CISSP,CEU
Support the show (https://www.patreon.com/utterlymental?fan_landing=true)AWS denial of service, on-going investigations $4.7million business email compromise scam, a student-led missing person cyber investigation initiative, NZ’s seizure of $90 million in assets of alleged Russian criminal enterprise, DDOS service for hire sentencing, and mapping out the deep fake landscape rounds out the law enforcement update. Our interview with Giovanni Vigna follows the roundup.
Professor and security entrepreneur Giovanni Vigna (UCSB Sec Lab and Founder of Lastline TDI) and I discuss contemporary issues related to his research and experience regarding the current cybersecurity threat landscape:
IoT threats, drones, privacy, surveillance, the society meets tech, deep fakes, corporate and personal Protections, and his background as a security entrepreneur round out the interview.
Host: Matthew Hall, CISSP, CHFI, Security +
Apply .5 CEUs to any security, IT, project management continuing education certification maintenance.
Drones snooping on royals, FBI announces an insider threat conviction, more COVID 19 fraud prevention resources from both Google and the UK Government, cybercrime unit announced in Cumbria, and how Apple approached looting theft from its retail outlets, round out our law enforcement and technology section followed by a conversation with TBI’s Assistant Director for Technology and Innovation, Rich Littlehale.
We talk through the International Association of Chiefs of Police Digital Evidence Taskforce on issues ranging from encryption, sensor data, personal data, policy considerations, and extra-territorial data custody. We start off with a discussion related to the importance of digital transformation in law enforcement.
Rich and I discuss
Host: Matthew Hall, CISSP, CHFI, Security +
Apply .5 CEUs to any security, IT, project management continuing education certification maintenance.
Show OutlineCOVID fraud warnings, the UK’s National Cyber Security Centre's suspicious email reporting service, Dubai’s police deal with COVID fraud, Microsoft tracks ransomware groups, a fake FBI special agent starts dating, porn blackmail, counter-drone tech, and the Metropolitan Police force’s virtual police academy highlight our law enforcement round-up followed by a conversation with retired FBI Supervisory Special Agent Scott Augenbaum the author of The Secret to Cybersecurity: A Simple Plan to Protect Your Family and Business from Cybercrime. As a generous nod to our listeners, Scott will send you a personal copy of his book if you are one of the first five to send him an email: Information Assured Podcast as the title (email available address on the show website).
Scott and I discuss
Scott reveals his four truths of cybersecurity during our conversation, and he delivers with an energy and enthusiasm I think you’ll appreciate. I’ve had the pleasure of working with Scott for many years, and he was indirectly responsible for my training and professional experiences with ENCASE and FTK through a regional ICAC team in Tennessee.
Overview
Fraud warnings, rapid DNA tests for arrestees, electronic facial identification, London cold case, serial child porn conviction, Russian hacking e-commerce platform takedown, and Chinese espionage highlight our law enforcement round-up followed by a conversation on the NIST Cybersecurity Framework with Salvador Ortega.
Salvador and I walk through the NIST Cybersecurity Framework’s significant functions and categories and discuss our operational perspectives emerging under each function, category, and sub-category. “The Framework is voluntary guidance, based on existing standards, guidelines, and practices for organizations to better manage and reduce cybersecurity risk. In addition to helping organizations manage and reduce risks, it was designed to foster risk and cybersecurity management communications amongst both internal and external organizational stakeholders.”
Salvador Ortega, CISSP, Director of Cybersecurity at Vanderbilt University Medical Center, joins me to discuss the Framework in the context of his 13 years at VUMC. I’ve had the pleasure of working with Sal for many years, and he’s demonstrated a fact-based approach to analyzing security risks and vulnerabilities. It’s a pleasure to have this experienced practitioner for our discussion.
Host: Matthew Hall, CISSP, CHFI, Security +
Apply .5 CEUs to any security, IT, project management continuing education certification maintenance.
Outline
How do you run your business when everything around you falls apart? The idea of business continuity usually sits on the back burner until the event happens, and this event is here. This episode covers a few February cyber-crimes and then turns to address the Coronavirus outbreak and how Lisa and I work from our central coast of California home during the crisis. The positive news is that we will get through this event. It will change the way we conduct business and manage our workplace thanks to technologies that facilitate remote work, instruction, business, and security.
Host: Matthew Hall, CISSP, CHFI, Security +
Apply .5 CEUs to any security, IT, project management continuing education certification maintenance.
OutlineThe monthly fraud, hacking, threat, technology, and management development recap framed through the lens of 30 years of experience in law enforcement, medicine, oil and gas, high tech, investment banking, and higher education.
The FBI received 467,361 cybercrime complaints in 2019 including a detailed account of a case in Dallas Federal Court where the alleged perpetrators targeted corporations and lonely ladies.
“... more than $3.5 billion in losses to individual and business victims. The most frequently reported complaints were phishing and similar ploys, non-payment/non-delivery scams, and extortion. The most financially costly complaints involved business email compromise, romance or confidence fraud, and spoofing, or mimicking the account of a person or vendor known to the victim to gather personal or financial information.”
The wrap up concludes with a summary of a 2019 ransomware report and actual attack impacts on cities like Baltimore and New Orleans. It concludes with what you can do by way of prevention and incident response recommendations.
Host: Matthew Hall, CISSP, CHFI, Security +
The podcast currently has 10 episodes available.