How does one of the world’s largest cybersecurity companies collect and share their Threat Intelligence? 

For this episode, Ryan Olson, Vice President of Threat Intelligence (Unit 42) at Palo Alto Networks, joins Robby for a chat about Palo Alto Networks’ telemetry pool and how Threat Intelligence has evolved over the last decade.

His team, Unit 42, are responsible for collecting, analysing and producing intelligence for a large number of organisations worldwide, and Ryan shares what goes on in the Unit 42 team when an event like Log4shell occurs.

He also looks back at the major trends they observed in 2021, and what new adversary techniques and potential attack paths interests him the most these days.

Produced by Paul Jæger

Send us Fan Mail

Insider threats | In Norwegian only

Where should organisations start to protect themselves from insider threats?

For this episode on insider risks, Robby is joined by Frode Skaarnes, COO at Lørn, a startup creating digital learning programs, with long experience from The Norwegian National Security Authority (NSM), as well as Kristian Haga from mnemonic’s Governance Risk and Compliance department.

They share from their experience working to help organisations minimise their risks of insider threats towards both the public and private sector, discuss how insiders often operate and why it’s especially important to separate between intentional and unintentional insiders.

Frode and Kristian also go into what organisations can do to pre-emptively minimise their own risks, and how working from home during the pandemic has impacted how we approach this risk. 

Related reading:
https://nsm.no/regelverk-og-hjelp/rad-og-anbefalinger/grunnprinsipper-for-personellsikkerhet/introduksjon/
https://www.mnemonic.no/globalassets/security-report/we-need-to-talk-about-insider-threats.pdf 

Producer: Paul Jæger

Send us Fan Mail

Does your managed SOC suck?

Are you fighting today’s war with yesterday’s weaponry?

Morten Munck, Engagement Manager at the cybersecurity advisory company Improsec, joins Robby to discuss his much-shared article “Does your managed SOC suck?” with the top ten red flags suggesting that your managed SOC provider should step up their game.

Morten has a background from finance and telecommunication and holds a strong profile within Blue Teaming - particularly SIEM, SOC and detection engineering, and has long experience helping customers build and operate their SOCs.

During this episode, they discuss gathering the right telemetry, stale use-case catalogues, and how you know if it’s time to start looking elsewhere.

Related reading: https://improsec.com/cyber-blog/does-your-managed-soc-suck

Produced by Paul Jæger

Send us Fan Mail

Project 2030: Future trends in security

To share the findings from his new report and webseries called Project 2030, Rik Ferguson, the Vice President of Security Research at Trend Micro, chats with Robby about what role cybersecurity will play in year 2030.

Rik has used his over twenty-five years of experience in information security looking forward, sharing what he’s found when trying to anticipate the next ten years of technology, and what opportunities that will mean for cybercriminals. As well as their impact on security, both for the enterprise and for society as a whole.

In their discussions they go into what will change in the sensors and wearables space, and topics like 4D printing, neuralink and cyber-implants. As well as the ethical considerations to the worth of our data and technical tools helping us telling facts from fiction. Rik also shares what he considers the biggest collective risks going forward from a security perspective.

Related reading: https://2030.trendmicro.com/

Produced by Paul Jæger

Send us Fan Mail

CMMC: Cybersecurity Maturity Model Certification

Your security reflects your maturity.

For this episode, Robby is joined by two of mnemonic’s security experts from our Governance, Risk and Compliance department to talk about CMMC and the alphabet soup that comes with it.

Both of them have experience preparing organisations for what CMMC actually means for them. Anders Hval Olsen as an Information Security Management Implementation subject-matter expert, and Kenneth Crawford, using his long experience with US Defense and defense contracting, among other things as a Cybersecurity Manager at Lockheed Martin.

They discuss how the new cybersecurity requirements to work with the US Defense industry will influence both US organisations and international subcontractors performing everything from software development to human resource services. As well as what CMMC actually means for securing your supply chain and investing in your security posture, why they believe every security professional should have knowledge of CMMC and how CMMC 2 differs from the original certification model.

Related reading: https://www.mnemonic.no/blog/cmmc/

Producer: Paul Jæger

Send us Fan Mail

The business of cyber security: Mergers & Acquisitions

What separates the acquisitions that go well from those that don’t?

To discuss the business side of security, Robby is joined by Brian Contos; returning guest, fellow podcast host, serial security entrepreneur and CISO & Vice President of Mandiant Security Validation. 

Mandiant Security Validation, previously known as Verodin, was acquired by Mandiant little over two years ago. In this episode, Brian shares from his experience going through that process, as well as other similar transitions he’s been a part of throughout his 25 year long career in security.

In their discussions, they go into everything that leads up to an acquisition decision, picking the right company with the right DNA and how to get the two companies to fit together.

Brian also shares what he’s learned about how to start your own security company, and why he believes there’ll be more mergers and acquisitions happening in the security space in the next years than we’ve seen in the last two decades.

Producer: Paul Jæger

Send us Fan Mail

Initial Access Brokers (IABs)

The growth and professionalisation of the Initial Access Market has fascinated many in recent years. Few know as much about who the threat actors operating in these markets are, and how the market of providing others with remote access to corporate networks work as   Dmitry Shestakov, Head of Cybercrime Research at the cyber intelligence company Group-IB. 

In his conversation with Robby, Dmitry shares some of his findings after researching these underground communities over several years. He also goes into how his team of researchers work with Initial Access Brokers, and shares some light onto some of their on-going investigations.

They also discuss where these groups operate from, how many of them manage to remain uncovered, and who they actually sell their information to.

Producer: Paul Jæger

Send us Fan Mail

Communicating threat intelligence to management

For this episode, Robby has invited someone with a unique expertise of the threat landscape in the finance industry. Freddy works as a Senior Threat Intelligence Analyst at the Nordic Financial CERT, a nonprofit organisation owned by the financial institutions in Norway, Sweden, Demark, Finland and Iceland.

By receiving data from and supporting their 220 member financial institutions on tasks like incident response, anti-fraud and threat intelligence, the Nordic Financial CERT has a one of a kind overview of the threat these organisations are facing.

Freddy shares with Robby how they work to make sure their members are defending themselves against their most relevant threat actors, how they approach intelligence, and translating technical analyses to a language understood by the entire business.

They also discuss what the data the Nordic Financial CERT has access to can tell us about changes in the ecosystem of organised crime groups targeting financial institutions.

Producer: Paul Jæger

Send us Fan Mail

Buying security products

Purchasing cybersecurity solutions and services can be challenging. Not only is the industry rapidly evolving, but there is rarely a case where solutions can be compared "apples to apples."  

In this episode, we explore the procurement of cybersecurity solutions. Robby is joined by Thor Milde, SVP - Head of IT Access Management at DNB, sharing his experiences from one of the largest banks in the Nordics, and Øyvind Nordvik, BID Manager in mnemonic, with more than 10 years of experience from procurement.

They discuss where the seller and customer side have mutual interests, and the role of procurement departments. And they try to answer the question; how can we make sure we buy the right services? For the right price?

 Producer: Paul Jæger 

Send us Fan Mail

How is it possible for the insurance industry to adapt to a cyber threat landscape that is continuously changing?

To try to answer that, and explain the evolution the cyber insurance field has gone through the last few years, Robby is joined by Jens Zakarias and Paul Jæger from Riskpoint, a global insurance underwriter agency.

They dive into how cyber insurance differs from more traditional insurance, and the five things every organisation needs to have in place for an insurance company to even consider them as a client.

 Producer: Paul Jæger 

Send us Fan Mail