mnemonic security podcast

Your phone is spying on you | Privacy miniseries

Do you know what your favourite apps are doing with your data? And who exactly are these entities that are capitalising on selling this kind of information?

We’re kicking off our new miniseries about privacy with investigative journalist Martin Gundersen.

Martin works at NRK, the Norwegian public broadcaster, where he writes about IT security, privacy and social media. He’s here to tell Robby about what he’s found after working on a news story about data brokers, companies that gain access to mobile app data, since 2019. His findings have received international attention, and he talks with Robby about the privacy risks associated with these companies and shares his thoughts about what we can do to prevent or limit being tracked.

Stay tuned for more episodes on privacy in the coming weeks.

https://nrkbeta.no/2020/12/03/my-phone-was-spying-on-me-so-i-tracked-down-the-surveillants/

Technical level: 1/5

Host: Robby Peralta
Producer: Paul Jæger

Send us Fan Mail

What are you doing to make the internet a safer and more private place?

This episode, Robby welcomes John Todd, Executive Director of the non-profit organisation Quad9. Quad9 is a free, recursive DNS solution that partners with threat intelligence providers from all over the world to block websites that try to harm our computers (through things like malware, spyware, botnets, phishing sites, etc.).

John chats with Robby about their DNS system, how they’re different from most paid services, and their charter to making the internet a safer and more private place. He also shares some war stories and discusses what effects they’re seeing from COVID-19 in their feed.

https://www.quad9.net/

Technical level: 2/5

Host: Robby Peralta

Producer: Paul Jæger

https://mnemonic.no/podcast 

Send us Fan Mail

Nuclear cyber security | OT miniseries

We’re continuing our Operational Technology (OT) miniseries where we look into the security challenges in the OT space.

This time, Robby is joined by Nicholas Burnet and Guido Villacis from EDF Energy, Europe’s largest nuclear provider. EDF owns and operates eight (soon nine) nuclear power stations in the UK, and Nicholas and Guido work at EDF’s unit for New Nuclear Build, as CISO and Instrumentation & Control (I&C) Cyber Security Lead respectively.

During their conversation, they discuss where IT fits in in a modern nuclear power plant, and where the boundary between IT and OT is in their organization. Nicholas and Guido also share how they navigate their threat landscape, and finding the balance between what you connect and what you choose to disconnected from the wider world.

Technical level: 1/5

Host: Robby Peralta

Producer: Paul Jæger

https://mnemonic.no/podcast 

Send us Fan Mail

We're kicking off 2021 with a timely conversation about software security, this time with two individuals that are more than qualified for the job - Dr. Daniela S. Cruzes and Espen Johansen.

Dr. Cruzes  is a Professor at the Norwegian University of Science and Technology (NTNU) and Senior Research Scientist at SINTEF, and has been working with Espen Johansen (Product Security Director at Visma) on strategies to incorporate security into development processes. As you will tell from their conversation they have made tremendous progress, and have lots of experience to share for those of you that would like to do the same. 

Building an Ambidextrous Software Security Initiative:
https://www.igi-global.com/gateway/chapter/259177

Technical level: 1/5

Host: Robby Peralta

Producer: Paul Jæger

https://www.mnemonic.no/podcast 

Send us Fan Mail

Technology isn't the problem | OT miniseries

For our last episode in 2020, we’re continuing our Operational Technology (OT) miniseries where we look into the security challenges in the OT space. 

This episode, Robby is joined by Mitchell Impey, ICS Security Analyst at the Danish Energy and Telecommunications company Norlys. Mitchell explains how he does threat hunting in their OT environment, affecting their more than 1,5 million customers. He also dives into what you need to have in place to do proper threat hunting.

But what does all of this have to do with lemons?

https://www.businesswire.com/news/home/20201020005075/en/Cybersecurity-is-the-New-Market-for-Lemons-Research-Supports

Technical level: 2/5

Host: Robby Peralta

Producer: Paul Jæger

https://mnemonic.no/podcast   

Send us Fan Mail

SIEM is DEAD?

Ready to time travel through the last 20 years of security monitoring? To guide us we have Dr. Anton Chuvakin, recognized security expert and the man behind the term EDR! Anton shares from his long experience in the field, among other as VP of Research and Distinguished Analyst at Gartner and working with security solution strategy at Google Cloud.

Anton chats with Robby about the evolution of Security Information Event Management (SIEM) technology, its mission and reputation. As you can imagine, he also has a lot to say about the future of security monitoring.

Technical level: 4/5

Host: Robby Peralta

Producer: Paul Jæger

https://www.mnemonic.no/podcast 

Send us Fan Mail

Are we secure enough? Are we exposed? What are our key cyber risks?

Our podcast guest this week is a veteran in the IT space in the financial sector, and has extensive experience communicating security posture to stakeholders. Erik Blomberg, CISO in the Swedish Handelsbanken, chats with Robby about what management really is wondering about, and how to communicate the value your security team is delivering to the organization. 

He also shares how he’s worked to translate tech terms into actual business value, and how the CISO role has changed in recent years.

Technical level: 1/5

Host: Robby Peralta

Producer: Paul Jæger

https://www.mnemonic.no/podcast 

Send us Fan Mail

Morten and Robby recorded this session as part of their virtual presentation at the CERT-IS conference in Iceland last month. The episode is also available in video: https://youtu.be/Izfb7-wA_0I 

For this episode, Robby welcomes Morten Weea from mnemonic’s Threat Intelligence team. Morten is a PhD candidate researching decision-making in incident response and an experienced Incident Handler that often works with advanced persistent threats (APTs).

Robby picks his brain about what actually goes down when a customer calls after realizing what shouldn’t have happened, has happened.
Or even more importantly, what his advice is for organizations before a serious incident occurs. They also discuss when it’s appropriate to trigger a full-scale incident response, and what sort of incidents shouldn’t. 

Technical level: 2/5

Host: Robby Peralta

Producer: Paul Jæger

Send us Fan Mail

For this episode, we’re happy to have Sebastian Takle from the DNB Financial Cyber Crime Center (FC3) with us to share how one of the largest banks in the Nordics works with Threat Intelligence. Sebastian is Subject Lead for Threat Intelligence at FC3, and in his conversation with Robby he explains their threat actor centric approach to TI.

We also get to hear what threat actors they are observing and are most concerned about, and the importance of identifying who.

Technical level: 1/5

Host: Robby Peralta

Producer: Paul Jæger

https://www.mnemonic.no/podcast 

Send us Fan Mail

Why is it so difficult for security people to speak to developers? And the other way around…

For this episode, Robby has invited a veteran to the software security game, Nick Murison, Security Practice Lead at Miles. Nick started off as a penetration tester, and has been passionate about software security and training developers to think about security upfront for close to two decades.

They speak about software security within the development lifecycle, and bridging the gap between developers and security people. Nick also explains how he believes more organizations can get security into their development, and dives into the question “is DevOps really increasing or decreasing your security risks?"

Send us Fan Mail