InfoSec ICU

By Information Security at the Medical University of South Carolina

The Health Information Security podcast from the Medical University of South Carolina... more

· Technology

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about InfoSec ICU:

How many episodes does InfoSec ICU have?

The podcast currently has 48 episodes available.

InfoSec ICU episodes:

November 06, 2019 Industry Phishing Report, Scoring Hosts’ 2019 Predictions, and the Problem w/ mHealth
Steve is back in studio for a special 100th Infosec ICU episode. The guys discuss an industry state of phishing report, the cover the problem with mHealth, and they revisit their bold cyber predictions for 2019 they made in 2018.
As always they end with One Cool Thing.
Show Notes

Resources:
Cofense Phishing Report
https://cofense.com/phishing-report-2019/
2018 Prediction Infosec ICU Episode
https://podcast.musc.edu/podcast/infosec/e56-infosecicu/
mHealth
https://www.medicalnewstoday.com/articles/322865.php
One Cool Thing
Couch to 5k
http://www.c25k.com/
14 year old Inventor
https://news.slashdot.org/story/19/11/01/2241213/14-year-old-inventor-solves-blind-spots
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Steve Cardinal @sgcardinal

...more
49min
October 30, 2019 The Privacy Episode! Digital Assistants spies and Interview with Privacy Expert Kellie Mendoza
Its the PRIVACY Episode! Gerry and Matt review privacy implications of SRLabs recently released research on using digital assistants as eavesdropping devices. They interview Privacy Officer Kellie Mendoza for her perspective and reflect afterward on the interview.
As always they end with One Cool Thing.
Show Notes

Resources:
Digital Assistant Spies
https://www.scmagazine.com/home/security-news/iot/malicious-voice-apps-can-turn-alexa-and-google-home-devices-into-spies-say-researchers/
Kellie Mendoza Expert Interview
https://education.musc.edu/MUSCApps/FacultyDirectory/Mendoza-Kellie
One Cool Thing
Man internally brews beer
https://arstechnica.com/science/2019/10/man-charged-with-dwi-after-alcohol-fermenting-yeast-in-his-gut-got-him-wasted/
Top 10 Strategic Tech Trends in 2020
https://www.gartner.com/smarterwithgartner/gartner-top-10-strategic-technology-trends-for-2020/
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Matt Jones (TBD)

...more
44min
October 16, 2019 Malware Analysis, Infosec Job Market, and MFA
Gerry and Brandon discus various methods for malware analysis, the infosec job market, and multifactor authentication.
As always they end with One Cool Thing.
Show Notes

Resources:
Malware Analysis
https://app.any.run/
Infosec Job Market
https://www.cyberseek.org/heatmap.html
Black Hills Information Security – 5 Year Path: Success in Infosec
FBI Warning Around MFA
https://www.zdnet.com/article/fbi-warns-about-attacks-that-bypass-multi-factor-authentication-mfa/

One Cool Thing
Malware Traffic Analysis
http://malware-traffic-analysis.net/index.html
cyberseek.org
https://www.hex-rays.com/products/ida/
https://www.winitor.com/
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
42min
October 09, 2019 Offensive Pentester Paul Ihme Interview and Reflections
Gerry and Brandon interview professional red teamer and penetration test expert Paul Ihme.
As always they end with One Cool Thing.
Show Notes

Resources:
Paul Ihme
https://www.linkedin.com/in/ihme/
One Cool Thing
Security Onion
https://github.com/Security-Onion-Solutions/security-onion/wiki/IntroductionToSecurityOnion
Wappalyzer
https://www.wappalyzer.com/
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
47min
October 02, 2019 Malspam Trends and Apple Security News
Gerry and Brandon discuss trends in malspam, a permanent iOS vulnerability, and a significant webkit exploit campaign.
As always they end with One Cool Thing.
Show Notes

Resources:
Malspam Trends
https://www.zdnet.com/article/most-malspam-contains-a-malicious-url-these-days-not-file-attachments/
iOS Permenant Vulnerability
https://www.healthcareinfosecurity.com/apple-ios-has-permanent-bootrom-vulnerability-a-13159
Webkit Zeroday for Mac and iOS
https://arstechnica.com/information-technology/2019/09/webkit-zeroday-exploit-besieges-mac-and-ios-users-with-malvertising-redirects/
One Cool Thing
Wu-Tang: An American Saga
https://www.youtube.com/watch?v=w37TQZwnjXY
Asset Discovery
https://rumble.run/
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
37min
September 25, 2019 Public Cloud Breaches, IoT Physical Security, National Cyber Security Awareness Month
Gerry and Brandon discuss an absurd amount of public cloud misconfigurations, IoT door locks, and things you can do to be involved with October’s National Cyber Security Awareness.
As always they end with One Cool Thing.
Show Notes

Resources:
Public Cloud Misconfigurations
https://www.zdnet.com/article/99-percent-of-all-misconfiguration-in-the-public-cloud-go-unreported/
Digital and IoT Physical Security
https://threatpost.com/hack-of-high-end-hotel-smart-locks-shows-iot-security-fail/147178/
National Cyber Security Awareness Month
https://niccs.us-cert.gov/national-cybersecurity-awareness-month-2019
One Cool Thing
BSides Charleston
https://bsideschs.ticketbud.com/bsideschs2019
Awesome Threat Detection
https://github.com/0x4D31/awesome-threat-detection
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
37min
September 18, 2019 Insider Threats with M & A and Jeffrey Smith Interview on Cyber Insurance
Gerry and Brandon discuss risk when working through merger and acquisitions and Gerry interviews Cyber Risk Underwriter’s Jeffrey Smith about cyber insurance.
As always they end with One Cool Thing.
Show Notes

Resources:
Mergers and Acquisitions Put Your IP at Risk
https://www.scmagazine.com/home/opinion/executive-insight/ma-gone-bad-the-brutal-truths-about-insider-threat/
Interview with Cyber Risk Underwriter’s Jeffrey Smith
Interview Commentary and Cyber Insurance
One Cool Thing
Python 2 EOL
Canary Tokens
https://canarytokens.org
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
1h
September 11, 2019 HIC-MISO, Insider Threats, and NIST Securing PACS
Gerry and Brandon discuss Health Industry Cybersecurity Matrix – Information Sharing Organizations (HIC-MISO), ask how insider threats can affect your organization, and mention a NIST initiative for securing PACS systems.
As always they end with One Cool Thing.
Show Notes

Resources:
Health Industry Cybersecurity – Matrix of Information Sharing Organizations (HIC-MISO)
https://healthsectorcouncil.org/hic-miso/
Insider Threats
https://www.ekransystem.com/en/blog/insider-threat-statistics-facts-and-figures
Securing PACS
https://www.nccoe.nist.gov/projects/use-cases/health-it/pacs
One Cool Thing
Talos Ghida
https://blog.talosintelligence.com/2019/09/ghida.html
JPCERT – Logon Tracer
https://blogs.jpcert.or.jp/en/2017/11/visualise-event-logs-to-identify-compromised-accounts—logontracer-.html
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
0min
September 04, 2019 Telehealth Cybersecurity Considerations, Google and UChicago Lawsuit Updates, and Siri says Sorry
Gerry and Aaron discuss the current state of a HIPAA lawsuit featuring Google and UChicago Medical Center as defendants. They discuss the emerging security concerns surrounding Telehealth and what NIST is doing about it. They wrap up the main show discussing yet another major player in the market apologizing for letting humans hear private recordings.
As always they end with One Cool Thing.
Show Notes

Resources:
Google, Medical Center Ask Court to Dismiss Privacy Lawsuit
https://www.healthcareinfosecurity.com/google-medical-center-ask-court-to-dismiss-privacy-lawsuit-a-12999
Apple apologizes for humans listening to Siri clips, changes policy
https://nakedsecurity.sophos.com/2019/08/30/apple-apologizes-for-humans-listening-to-siri-clips-changes-policy/
National Cybersecurity Center of Excellence (NCCoE) Securing Telehealth Remote Patient Monitoring Ecosystem https://www.federalregister.gov/documents/2019/08/29/2019-18666/national-cybersecurity-center-of-excellence-nccoe-securing-telehealth-remote-patient-monitoring
One Cool Thing
Tropical TidBits
https://www.tropicaltidbits.com/storminfo/
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
45min
August 28, 2019 Oops we lost your DNA, Patient Privacy Reform, and Solving the Cyber Security Problem
Gerry and Brandon discuss a breach at Massachusetts General Hospital, patient privacy reform around addiction treatment, and how to solve the cyber security problem.
As always they end with One Cool Thing.
Show Notes

Resources:

Breach at Massachusetts General Hospital
https://www.idigitalhealth.com/news/data-breach-of-10k-at-mgh-puts-study-participants-genetic-info-at-risk
Patient Privacy Reform for Addiction Treatment
https://healthitsecurity.com/news/hhs-proposes-reform-of-patient-privacy-rules-for-addiction-treatment
Solving the Cyber Security Problem
https://www.hackread.com/solving-cyber-security-problem-mission-impossible/

One Cool Thing
Red Canary’s Atomic Red Team
https://github.com/redcanaryco/atomic-red-team
Data Science at the Command Line
https://www.datascienceatthecommandline.com
Contact
Email [email protected]
Twitter:

* Gerry Auger (@Gerald_Auger)
* Brandon Stephens (@bstephens418)

...more
56min

FAQs about InfoSec ICU:

How many episodes does InfoSec ICU have?

The podcast currently has 48 episodes available.