InfoSec ICU

InfoSec ICU

By Information Security at the Medical University of South CarolinaTechnology
Download on the App Store

InfoSec ICU episodes

  • Industry Phishing Report, Scoring Hosts’ 2019 Predictions, and the Problem w/ mHealth
    Steve is back in studio for a special 100th Infosec ICU episode. The guys discuss an industry state of phishing report, the cover the problem with mHealth, and they revisit their bold cyber predictions for 2019 they made in 2018.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Cofense Phishing Report
    https://cofense.com/phishing-report-2019/
    2018 Prediction Infosec ICU Episode
    https://podcast.musc.edu/podcast/infosec/e56-infosecicu/
    mHealth
    https://www.medicalnewstoday.com/articles/322865.php
    One Cool Thing
    Couch to 5k
    http://www.c25k.com/
    14 year old Inventor
    https://news.slashdot.org/story/19/11/01/2241213/14-year-old-inventor-solves-blind-spots
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Steve Cardinal @sgcardinal

    49 min
  • The Privacy Episode! Digital Assistants spies and Interview with Privacy Expert Kellie Mendoza
    Its the PRIVACY Episode! Gerry and Matt review privacy implications of SRLabs recently released research on using digital assistants as eavesdropping devices. They interview Privacy Officer Kellie Mendoza for her perspective and reflect afterward on the interview.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Digital Assistant Spies
    https://www.scmagazine.com/home/security-news/iot/malicious-voice-apps-can-turn-alexa-and-google-home-devices-into-spies-say-researchers/
    Kellie Mendoza Expert Interview
    https://education.musc.edu/MUSCApps/FacultyDirectory/Mendoza-Kellie
    One Cool Thing
    Man internally brews beer
    https://arstechnica.com/science/2019/10/man-charged-with-dwi-after-alcohol-fermenting-yeast-in-his-gut-got-him-wasted/ 
    Top 10 Strategic Tech Trends in 2020
    https://www.gartner.com/smarterwithgartner/gartner-top-10-strategic-technology-trends-for-2020/ 
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Matt Jones (TBD)

    44 min
  • Malware Analysis, Infosec Job Market, and MFA
    Gerry and Brandon discus various methods for malware analysis, the infosec job market, and multifactor authentication.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Malware Analysis
    https://app.any.run/
    Infosec Job Market
    https://www.cyberseek.org/heatmap.html
    Black Hills Information Security – 5 Year Path: Success in Infosec
    FBI Warning Around MFA
    https://www.zdnet.com/article/fbi-warns-about-attacks-that-bypass-multi-factor-authentication-mfa/
     
    One Cool Thing
    Malware Traffic Analysis
    http://malware-traffic-analysis.net/index.html
    cyberseek.org
    https://www.hex-rays.com/products/ida/
    https://www.winitor.com/
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    42 min
  • Offensive Pentester Paul Ihme Interview and Reflections
    Gerry and Brandon interview professional red teamer and penetration test expert Paul Ihme.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Paul Ihme
    https://www.linkedin.com/in/ihme/
    One Cool Thing
    Security Onion
    https://github.com/Security-Onion-Solutions/security-onion/wiki/IntroductionToSecurityOnion
    Wappalyzer
    https://www.wappalyzer.com/
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    47 min
  • Malspam Trends and Apple Security News
    Gerry and Brandon discuss trends in malspam, a permanent iOS vulnerability, and a significant webkit exploit campaign.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Malspam Trends
    https://www.zdnet.com/article/most-malspam-contains-a-malicious-url-these-days-not-file-attachments/
    iOS Permenant Vulnerability
    https://www.healthcareinfosecurity.com/apple-ios-has-permanent-bootrom-vulnerability-a-13159
    Webkit Zeroday for Mac and iOS
    https://arstechnica.com/information-technology/2019/09/webkit-zeroday-exploit-besieges-mac-and-ios-users-with-malvertising-redirects/
    One Cool Thing
    Wu-Tang: An American Saga
    https://www.youtube.com/watch?v=w37TQZwnjXY
    Asset Discovery
    https://rumble.run/
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    37 min
  • Public Cloud Breaches, IoT Physical Security, National Cyber Security Awareness Month
    Gerry and Brandon discuss an absurd amount of public cloud misconfigurations, IoT door locks, and things you can do to be involved with October’s National Cyber Security Awareness.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Public Cloud Misconfigurations
    https://www.zdnet.com/article/99-percent-of-all-misconfiguration-in-the-public-cloud-go-unreported/
    Digital and IoT Physical Security
    https://threatpost.com/hack-of-high-end-hotel-smart-locks-shows-iot-security-fail/147178/
    National Cyber Security Awareness Month
    https://niccs.us-cert.gov/national-cybersecurity-awareness-month-2019
    One Cool Thing
    BSides Charleston
    https://bsideschs.ticketbud.com/bsideschs2019
    Awesome Threat Detection
    https://github.com/0x4D31/awesome-threat-detection
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    37 min
  • Insider Threats with M & A and Jeffrey Smith Interview on Cyber Insurance
    Gerry and Brandon discuss risk when working through merger and acquisitions and Gerry interviews Cyber Risk Underwriter’s Jeffrey Smith about cyber insurance.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Mergers and Acquisitions Put Your IP at Risk
    https://www.scmagazine.com/home/opinion/executive-insight/ma-gone-bad-the-brutal-truths-about-insider-threat/
    Interview with Cyber Risk Underwriter’s Jeffrey Smith
    Interview Commentary and Cyber Insurance
    One Cool Thing
    Python 2 EOL
    Canary Tokens
    https://canarytokens.org
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    1 hr
  • HIC-MISO, Insider Threats, and NIST Securing PACS
    Gerry and Brandon discuss Health Industry Cybersecurity Matrix – Information Sharing Organizations (HIC-MISO), ask how insider threats can affect your organization, and mention a NIST initiative for securing PACS systems.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Health Industry Cybersecurity – Matrix of Information Sharing Organizations (HIC-MISO)
    https://healthsectorcouncil.org/hic-miso/
    Insider Threats
    https://www.ekransystem.com/en/blog/insider-threat-statistics-facts-and-figures
    Securing PACS
    https://www.nccoe.nist.gov/projects/use-cases/health-it/pacs
    One Cool Thing
    Talos Ghida
    https://blog.talosintelligence.com/2019/09/ghida.html
    JPCERT – Logon Tracer
    https://blogs.jpcert.or.jp/en/2017/11/visualise-event-logs-to-identify-compromised-accounts—logontracer-.html
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    0 min
  • Telehealth Cybersecurity Considerations, Google and UChicago Lawsuit Updates, and Siri says Sorry
    Gerry and Aaron discuss the current state of a HIPAA lawsuit featuring Google and UChicago Medical Center as defendants. They discuss the emerging security concerns surrounding Telehealth and what NIST is doing about it. They wrap up the main show discussing yet another major player in the market apologizing for letting humans hear private recordings.
    As always they end with One Cool Thing.
    Show Notes

    Resources:
    Google, Medical Center Ask Court to Dismiss Privacy Lawsuit
    https://www.healthcareinfosecurity.com/google-medical-center-ask-court-to-dismiss-privacy-lawsuit-a-12999
    Apple apologizes for humans listening to Siri clips, changes policy
    https://nakedsecurity.sophos.com/2019/08/30/apple-apologizes-for-humans-listening-to-siri-clips-changes-policy/
    National Cybersecurity Center of Excellence (NCCoE) Securing Telehealth Remote Patient Monitoring Ecosystem https://www.federalregister.gov/documents/2019/08/29/2019-18666/national-cybersecurity-center-of-excellence-nccoe-securing-telehealth-remote-patient-monitoring
    One Cool Thing
    Tropical TidBits
    https://www.tropicaltidbits.com/storminfo/
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    45 min
  • Oops we lost your DNA, Patient Privacy Reform, and Solving the Cyber Security Problem
    Gerry and Brandon discuss a breach at Massachusetts General Hospital, patient privacy reform around addiction treatment, and how to solve the cyber security problem.
    As always they end with One Cool Thing.
    Show Notes

    Resources:


    Breach at Massachusetts General Hospital
    https://www.idigitalhealth.com/news/data-breach-of-10k-at-mgh-puts-study-participants-genetic-info-at-risk
    Patient Privacy Reform for Addiction Treatment
    https://healthitsecurity.com/news/hhs-proposes-reform-of-patient-privacy-rules-for-addiction-treatment
    Solving the Cyber Security Problem
    https://www.hackread.com/solving-cyber-security-problem-mission-impossible/


    One Cool Thing
    Red Canary’s Atomic Red Team
    https://github.com/redcanaryco/atomic-red-team
    Data Science at the Command Line
    https://www.datascienceatthecommandline.com
    Contact
    Twitter:

    * Gerry Auger (@Gerald_Auger)
    * Brandon Stephens (@bstephens418)

    56 min

About InfoSec ICU

From the publisher's feed

The Health Information Security podcast from the Medical University of South Carolina