Just Unsecure

This is all about driving, measuring and management of Security culture in an organization. Our guest Richard  Uhunmwagho is a seasoned cybersecurity & data privacy leader with years of experience across various sectors, leveraging my knowledge and expertise across diverse geographical regions, sectors, and regulated industries.

Professional focal points include Information Security/IT Risk management, IT Governance (GRC), Regulatory Compliance Assurance, Data Privacy and Protection, Business continuity & Operational Resiliency, Internal Audit, Security Awareness & Training and successfully managing enterprise risk management programs - end-to-end.

He has helped organizations set up and run effective security awareness programs with the intended objectives in changing human behaviours and habits in dealing with cyber threats.

 Enjoy the session like we did and do not forget to LIKE , SUBSCRIBE, LISTEN and SHARE 

#SecurityAwareness #SecurityinOrganisations #SecurityCulture

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about  some security news ,  events hot topics  such as the 

#VULNERABILITIES
1. New Chrome 0-Day Bug Under Active Attacks – Update Your Browser ASAP!
https://thehackernews.com/2021/06/new-chrome-0-day-bug-under-active.html

2. Vulnerabilities Expose Fortinet Firewalls to Remote Attacks
https://www.securityweek.com/vulnerabilities-expose-fortinet-firewalls-remote-attacks

3. Fastly's global outage: Here's what went wrong
https://www.zdnet.com/article/fastlys-global-outage-heres-what-went-wrong/

4. Attackers are hunting for this critical VMware vCentre flaw
https://www.zdnet.com/article/patch-now-attackers-are-hunting-for-this-critical-vmware-vcentre-flaw/

#BREACHES
5. Largest password data breach in history has been leaked online
https://techxplore.com/news/2021-06-largest-password-breach-history-leaked.html

6. Hackers Steal Wealth of Data from Game Giant EA
https://www.vice.com/en/article/wx5xpx/hackers-steal-data-electronic-arts-ea-fifa-source-code

7. Exclusive: NATO Classified Cloud Platform Compromised
https://ddosecrets.substack.com/p/exclusive-nato-classified-cloud-platform

#ATTACKS
8. New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure 
https://thehackernews.com/2021/06/new-tls-attack-lets-attackers-launch.html

9.Al Jazeera repels cyber-attacks that sought to disrupt media network
https://portswigger.net/daily-swig/al-jazeera-repels-cyber-attacks-that-sought-to-disrupt-media-network

#MALWARE
10. This data and password-stealing malware is spreading in an unusual way
https://www.zdnet.com/article/this-data-and-password-stealing-malware-is-spreading-in-an-unusual-way/

#ARREST
11. Feds seize two domains used by SolarWinds intruders for malware spear-phishing op
https://www.theregister.com/2021/06/02/feds_seize_nobelium

UPDATES and POLICIES
12. DOJ recovers pipeline ransom, signals more aggressive approach to cybercrime
https://blog.malwarebytes.com/malwarebytes-news/2021/06/doj-recovers-pipeline-ransom-signals-more-aggressive-approach-to-cybercrime/

13. NIST Publishes Ransomware Guidance
www.infosecurity-magazine.com/news/nist-publishes-ransomware-guidance

GOOGLES GOOD DEEDS

Google Expands Open Source Vulnerabilities Database

https://github.com/google/osv

https://osv.dev/list

Google open-sources tools to bring fully homomorphic encryption into the mainstream
https://github.com/google/fully-homomorphic-encryption



Thanks for listening and do not forget to SUBSCRIBE, LISTEN, SHARE and LIKE

#Security News #cybersecurity #InformationSecurity #cloudsecurity  #cloud #Change 
#vulnerabilities #securityawareness  #datasecurity #Breach
#cybernews #cybersecurityafrica #cyberattack #Securitynews

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk to a special guest on Business Security Architecture

He is Oluwaseyi Ojo. An alumnus of John F. Kennedy School of Government, Executive Education Program of the prestigious Harvard University. A seasoned Business Security Architect with passion and focus on Governance, Quality, Risk and Compliance and deep competencies in Cybersecurity Management, Business Security Architecture, Enterprise Architecture, Enterprise Risk Management, IT Governance, Project Management, Business Continuity Management, Cyber Threat Intelligence, Network Security, Cloud Security, Digital/Cloud Forensics, Solution Architecture, Information Security and Assurance. 

#BusinessSecurityArchitecture #informationsecurity #SecurityArchitecture #cybersecurity #Africa #CyberAfrica #CybersecurityAfrica

Thanks for Listening and do not forget to SUBSCRIBE, LISTEN and SHARE

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about  some security events, news , hot topics  such as the 

-Cisco HyperFlex web interface has critical flaw 
-Nagios IT monitoring vulnerabilities 
-Canada Post reveals supplier data breach
- Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices 
-FBI issues warning about Fortinet vulnerabilities after APT group hacks local gov’t office 
-Over 40 Apps With More Than 100 Million Installs Found Leaking AWS Keys
-Experts warn of a new Android banking trojan stealing users' credentials
-CISA used new subpoena power to contact US companies vulnerable to hacking
-UK funds new African cybercrime office
-Top 10 Services that should not be exposed to the Internet directly
-FBI to share compromised passwords with Have I Been Pwned
-WARNING!!!
Nobelium (The Hackers known for Solarwinds hack) launched this week’s attacks by gaining access to the Constant Contact account of USAID.



Thanks for watching and do not forget to SUBSCRIBE, LISTEN, SHARE and LIKE

#cybersecurity #InformationSecurity #cloudsecurity  #cloud 
#vulnerabilities #securityawareness  #datasecurity #Breach
#cybernews #cybersecurityafrica #cyberattack

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk to a special guest on adapting Security Operations to the new realities - DevSecOps.

She is a certified InfoSec&GRC professional with an MSc in Computer Security and Audit and an MBA in HRM. She is  currently working for one of the biggest UK retailers. 

She is one of the early certified CISSP in Nigeria. Her name is Aijay Okani 

Thanks for watching and do not forget to SUBSCRIBE, LISTEN and SHARE

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about  some security events, news , hot topics  such as the 

-Security Researcher Dan Kaminsky is dead
-F5 Big-IP Vulnerable to Security-Bypass Bug
-NSA: Top 5 vulnerabilities actively abused by Russian govt hackers
- Checklist for Offboarding Remote Employees 
-REvil ransomware gang claims it stole top-secret tech designs 
-Hundreds of customer networks hacked in Codecov supply-chain attack
-Password manager Passwordstate hacked to deploy malware on customer systems
-Tiki app aims to hand ownership of personal data back to the individual


Thanks for watching and do not forget to SUBSCRIBE, LISTEN, SHARE and LIKE

Welcome to another edition of Just Unsecure series on information and cyber security matters as it relates to Africa. In this series we will talk about  some security events  such as the 

-FBI, CISA warn Fortinet FortiOS vulnerabilities are being actively exploited
-NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers
-Four in 10 South African ransomware victims pay the criminals 
-Security pro seizes expired DR Congo top-level domain, takes over 50% of DNS traffic
-Major BEC Phishing Ring Cracked Open with 3 Arrests
-CISA releases tool to review Microsoft 365 post-compromise activity

Thanks for watching and do not forget to follow us on Twitter, LinkedIn, Spotify, Google and Apple podcast.

Hello and welcome to our Podcast on Information and Cyber Security , This episode we will talk about the following

1.  Who we are
2. Why now
3. What is Just Unsecure and Purpose 
4. Biggest lessons so far 
5. Pitfalls
6. Security Topic of the week. Our own Opinions on the Topics below. 
   • Mobile and Privacy Security -Both iOS and Google Android Privacy issues.
   • Supplier risk management - The SolarWinds compromise
7. Vulnerabilities
   • Microsoft Exchange Server vulnerability (Proxy Logon
8. WHAT WILL YOU DO (Question for Us)
   • You receive a document from a third party vendor that you are to fill out in regards to your company's security processes, tools, etc.   Upon opening the document you realize that it is already filled out with another companies details. You now have the Head of IT and Security's full details. The companies policies, processes, list of tools etc.

The other company is located  in Europe. What should I do and who should I report to?

Thanks for listening