IoT Security Podcast

It's cyber all day, every day, with Chase Cunningham, Dr. Zero Trust himself. He joins John and Brian to delve into the complex and ever-evolving world of online security threats. With cyber-attacks becoming increasingly sophisticated and prevalent, understanding the strategies and technologies that can safeguard our digital assets has never been more crucial.

Chase Cunningham, a seasoned cybersecurity professional, renowned author, and podcast host in his own right, joins us as our esteemed guest. With his extensive background in the industry, Chase brings a wealth of knowledge and insights to the table. From his time serving as a military strategist and chief cryptologic technician in the United States Navy to his current role as a prominent cybersecurity analyst, Chase has witnessed firsthand the evolving landscape of cyber threats and the strategies required to combat them.

During the conversation, we explore various pressing topics, including the rise of nation-state cyber attacks, the growing importance of zero-trust architecture, the impact of artificial intelligence and machine learning on cybersecurity, and the critical role of individuals and organizations in safeguarding their digital identities.

This episode should offer the listener valuable insights and practical advice from one of the industry's foremost experts. Join us as we unmask the complexities of cybersecurity and empower ourselves with the knowledge to stay one step ahead of potential threats.

Listen to Chase Cunningham on DrZeroTrust here.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

In this episode, Tammy Hawkins, a fraud specialist with over 20 years of experience, warns of the growing threat of cyberattacks on IoT devices and emphasizes the need for organizations and individuals to take proactive security measures. She offers critical advice and recommendations on how the audience — that's you! — can protect themselves against these cyber threats.

In this episode, learn about:

• Delving into the world of IoT security threats and the risks they pose in our digital landscape
• Unraveling the complexity of cybercriminal activity and how insiders contribute to security breaches
• Realizing the importance of taking a proactive approach to secure IoT devices
• Examining the role of IoT devices in organizations and the potential risks they carry
• Gaining insight into the necessity of staying informed and vigilant in the fight against cyber threats

Brian Contos and John Vecchi speak with Tammy Hawkins, a seasoned cybersecurity specialist whose career has taken her through various roles and industries. Starting in information security, Tammy transitioned to Mastercard, where her expertise lay in creating cutting-edge security products to fight the world’s best fraudsters. From there, she branched out into the gaming sector at Activision Blizzard, focusing on anti-toxicity solutions. Now, as the Director of Cybersecurity and Fraud at Intuit, Tammy is passionate about protecting small businesses and their software systems. With her comprehensive knowledge of IoT device security, Tammy's input is an invaluable asset to today's topic.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

Brian and John sit down to the mic with Vignesa Moorthy. With a seasoned background in telecommunications and cybersecurity, Vignesa Moorthy is a forward-thinking innovator in the industry. Running a successful Singapore-based telco company, he has expanded operations across Southeast Asia and evolved his company's focus to cybersecurity services. With years of hands-on experience securing customer infrastructure, Vignesa has unparalleled knowledge of the key risks facing IoT infrastructure managers in today's rapidly advancing technology landscape. His expertise in managing IoT device vulnerabilities makes him an ideal speaker on this very subject.

In this episode, you will hear about:

• Insights into Southeast Asia's cybersecurity landscape and the solutions implemented to combat threats.
• The indispensable role of data leak prevention and IoT infrastructure protection for ensuring data security.
• The explosive growth of IoT devices and the best practices to address inherent vulnerabilities.
• The importance of cooperation and ongoing education across stakeholders in the IoT domain.
• How staying alert and adaptable can be game-changers for businesses in cybersecurity.

The pain of taking ineffective actions and not seeing results can be overwhelming. But don't lose hope. In this episode, we'll explore the best practices for managing IoT vulnerabilities and improving overall device security, giving you the peace of mind you deserve.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

Are you tired of feeling helpless and exposed when using IoT devices? Have you been told to simply 'be careful' without any real solutions? In this episode, we get our ears on some expert insights and practical solutions to help you take control of your privacy. From understanding the risks and vulnerabilities to mastering cybersecurity challenges and envisioning a safer future - this episode is a must-listen for every privacy-conscious individual using IoT devices.

In this episode, you will hear:

• Valuable insights into privacy risks and vulnerabilities within IoT devices and discover expert solutions to tackle them.
• The importance of increasing consumer awareness for preserving privacy while using IoT devices.
• The complexities of cybersecurity challenges and integrating security measures within IoT devices and regulations.
• The technical aspects of IoT devices, such as encryption, protocols, and shared infrastructure.
• Future plans by empowering users and cooperating with protection authorities and organizations for a more secure IoT environment.

Our guest in this episode is Anna Maria Mandalari.

Brian and John talk with Anna Maria Mandalari, a talented IoT privacy and security expert who has dedicated her career to understanding and addressing the vulnerabilities of IoT devices. Beginning her education journey in Italy, Anna specialized in Telematics before pursuing a Ph.D. in Internet measurements in Madrid. Her expertise in networking eventually led her to London's Imperial College, where she began focusing on IoT privacy and security. Now, Anna works at University College London, where she collaborates with other experts to develop innovative solutions for safeguarding consumer privacy in the IoT space.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

In this episode, John and Brian talk with Mark Weatherford, a skilled cybersecurity veteran with a diverse background in both government and private sectors. Having held positions such as CISO for California and Colorado and serving in the Obama administration as the Deputy Under Secretary for Cybersecurity, Mark has a unique perspective on IoT security and critical infrastructure protection challenges. In addition to his government roles, Mark has ventured into the private sector, working with startups and as the Chief Security Officer at NERC. His expertise in IoT security is incredibly valuable for cybersecurity professionals looking to stay informed in this rapidly evolving field.

Listen in for a conversation on:

• Navigating the complicated obstacles involved in securing IoT devices and defending crucial infrastructure
• Identifying the underestimated hazards linked to the perception that air-gapped networks are entirely protected from breaches
• Acknowledging the powerful impact of education and awareness in tackling IoT security challenges
• Recognizing the importance of implementing more regulatory measures and policies for bolstering IoT device security
• Investigating the escalating threats of IoT attacks and the need for integrating security solutions within IoT devices

As a cybersecurity professional, staying up-to-date on IoT security challenges is crucial to protecting critical infrastructure. Don't fall for the common misconceptions - Mark Weatherford will share the truth with John and Brian about the complex challenges of securing IoT devices and infrastructure. Stay informed and stay protected.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

In this episode, Brian and John dive into the world of Capture the Flag competitions in the realm of cybersecurity. Our special guest, Rachael Tubbs from IoT Village, discusses the rise of CTFs and how they are becoming a popular feature at cybersecurity conferences like Defcon. We explore how IoT Village is leading the way in making these conferences more accessible, exhibiting a range of innovative devices, and even holding a free virtual conference. We also discuss the challenges of developing security life cycles for IoT development and how the limited security mindset of small companies is a concerning trend across the 50 billion devices in use. Tune in for an exciting and informative look into the rapidly evolving world of cybersecurity.

Topics covered in this episode include:

• Introduction to Capture the Flags (CTFs) and their importance in security
• Background of IoT Village
• Defcon CTF and its value
• IoT Village's response to pandemic

Rachel Tubbs is a psychology graduate who developed an interest in understanding human motivation. She started working as a contractor for the US Government's Defense Counterintelligence Security Agency, where she was introduced to the world of cybersecurity. However, she found that the private sector was more suited to her, and she eventually found a position at IoT Village, a security consulting and research firm founded by Independent Security Evaluators. Rachel has been with IoT Village for almost three years now.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

In this episode, Brian and John speak with Julie Tsai. Julie Tsai is a seasoned cybersecurity expert with over 25 years of experience in Silicon Valley, navigating the complex world of securing IoT environments. With a diverse background that includes a liberal arts degree and a minor in economics from Stanford, Julie has honed her skills in system administration, DevOps, and DevSecOps. She has worked with numerous tech startups, helping them overcome security challenges and achieve compliance with minimal resources. Julie's unique problem-solving approach and ability to adapt quickly to new challenges have made her a sought-after expert in cybersecurity.

In this episode, the gang discusses how to:

• Tackle intricate cybersecurity challenges using minimal resources for maximum protection
• Explore the driving forces behind psychological and emotional triggers in cybersecurity threats
• Gain insight into the essential nature of visibility and understanding within IoT security
• Achieve equilibrium between networking and prioritizing the use of connected devices
• Streamline processes and harmonize tools to ensure the security of your IoT environment

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

Unlock the secrets to secure your connected world with powerful IoT security solutions.

"If you don't assume that there's going to be some level of detect and respond kind of fail back mechanism, then you're going to come up and be very disappointed one day because you didn't build those layers of defense in, but you should 100% lead with prevention, if you ask me." - Jay Leek

In this episode, John and Brian speak with Jay Leek. Jay is a venture capitalist investor with a unique background in cybersecurity, having served as a consultant, corporate executive, and the first CISO in private equity. He is the co-founder of Send Ventures, a venture capital firm investing in the best early-stage cybersecurity startups in the world.

Jay Leek's career path has been a winding one, from consulting to being the first CISO in private equity. He then started a fund that has done well and has partnered with a four-time CISO to start a venture fund. Through this, Jay and his team have invested in the best, brightest, and most exciting cybersecurity startups. After meeting with 500 companies, Jay and his team learned that prevention is possible when the team, technology and total addressable market are in the right place. After four years of searching, they finally found a company that could actively defend and remediate security risks. Jay and his team have made it their mission to help CISOs solve their security problems and provide the best possible solutions.

In this episode, John and Brian speak with Jay about the following:
1. How former Fortune 500 CISOs are leveraging their experience to help the world's biggest companies through venture capital investments.
2. How companies are leveraging automation and preventive approaches to combat the shortage of security professionals.
3. How CSOs are tackling the problem of IoT security through prevention measures.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

When Steven Edwards, an IT Guy turned Security Analyst, discovered the unexpected challenge of securing an expansive attack surface that includes refrigerators, vending machines, and scanners across multiple private address spaces, he had to be tenacious and curious to protect his organization from attack.

"No matter what the tragedy is, it's beholden upon us to learn from it, to grow and improve. And I think we have done that in a lot of ways." - Steven Edwards

In this episode, Brian Contos and John Vecchi talk with Steven Edwards. Steven Edwards was a "Regular IT Guy," content with his work and comfortable with his life. But when a coworker advised him to move into cybersecurity, he took it. He returned to school, got his master's degree, and never looked back. With a curious and tenacious mindset, he was able to find a prosperous career, and when the pandemic hit, he saw how the business model was changing in ways he had seen before. He recognized the need for companies to recognize their security vulnerabilities and to invest in the solutions to protect their assets, but the biggest challenge was convincing those who held the checkbook. As he continued to work in the field, he found that the attack surface had broadened and that IoT security was an ever-growing challenge. Steven Edwards has a master's degree in cybersecurity and enjoys the challenge of solving problems and learning new things in the security field.

In this episode, Brian and John discuss with Steven:
1. The need for those with an investigative mindset and their curiosity to enter into the security field.
2. How the remote work model has changed the security mindset and how organizations must adapt.
3. The challenge of identifying, cataloging, and patching devices such as phones, TVs, and printers in the network.

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast

When tech industry veteran Dave Bang discovers that vendors have been using their phones to gain access to secure networks, he embarks on an urgent mission to secure the OT networks and prevent an attack before it's too late.

In this episode, you will learn about leveraging the strengths of OT and IT security to build a comprehensive cybersecurity strategy.

"My experience has been they're not as quick to that as the OT folks are. The OT folks are starting to see there are big benefits to learning some of the IT stuff, right? There's efficiencies to be gained, there's automation to be used, things like that."

Brian Contos and John Vecchi recently sat down and spoke with Dave Bang, an IT industry veteran with 30 years of experience in desktop support, OS life cycles, security, application security, architecture, and OT security. He focuses on security awareness and leveraging his expertise to bridge the IT and OT security gap.

After working in IT for almost 30 years, Dave Bang had a newfound passion for OT security. He started partnering with manufacturing folks to bring their security game up to snuff. He realized the threats were the same, but the motivations were different. He soon uncovered that companies were not ready for the cross-pollination of OT and IT security when he noticed a vendor representative downloading files from the internet and then uploading them to a PLC. Dave was shocked to discover this was happening in many places and had to act. Dave Bang is now working to bring visibility to the OT side and to understand the passion and priorities that come with it.

In this episode, you will learn answers to the following:
1. What is the difference in security priorities between IT and OT networks?
2. How can companies effectively leverage best-of-breed tools to secure their IoT devices?
3. What potential attack vectors arise when vendors connect their laptops to the PLC devices?

Let’s connect about IoT Security!

Follow Phillip Wylie at https://www.linkedin.com/in/phillipwylie
https://youtube.com/@phillipwylie

The IoT Security Podcast is powered by Phosphorus Cybersecurity. Join the conversation for the IoT Security Podcast — where xIoT meets Security. Learn more at https://phosphorus.io/podcast