The network perimeter basically no longer exists, and the latest security solutions need to account for the new normal. Aaron Chen and Shane Davis with Sophos join us to talk about how the network security landscape has changed just in the last couple of years, new business cybersecurity and connectivity priorities, and the latest Sophos products that address them, including XDR (extended detection and response) and the XGS firewall series - along with the Xstream protection included within.

Learn more about Sophos https://www.firewalls.com/brands/sophos.html.

In headlines, we talk US government action on cybersecurity, businesses willing to pay the ransom if attacked, and a nuclear North Korean cyber attack.

See the stories:

Biden Sets Red Line for Putin Over Ransomware Attacks

https://www.securityweek.com/biden-sets-red-line-putin-over-ransomware-attacks

Senators draft bill that would require many entities to report cyber breaches within 24 hours

https://www.cnn.com/2021/06/16/politics/bill-report-cyber-breach-24-hours/index.html 

60% of Businesses Would Consider Paying a Ransomware Demand

https://www.infosecurity-magazine.com/news/businesses-consider-paying-ransom 

North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute

https://thehackernews.com/2021/06/north-korea-exploited-vpn-flaw-to-hack.html

Find the latest from us on our blog https://firewalls.com/blog. 

Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns.

Thanks very much for listening!

The network perimeter basically no longer exists, and the latest security solutions need to account for the new normal. Aaron Chen and Shane Davis with Sophos join us to talk about how the network security landscape has changed just in the last couple of years, new business cybersecurity and connectivity priorities, and the latest Sophos products that address them, including XDR (extended detection and response) and the XGS firewall series - along with the Xstream protection included within.

Learn more about Sophos https://www.firewalls.com/brands/sophos.html.

In headlines, we talk US government action on cybersecurity, businesses willing to pay the ransom if attacked, and a nuclear North Korean cyber attack.

See the stories:

Biden Sets Red Line for Putin Over Ransomware Attacks

https://www.securityweek.com/biden-sets-red-line-putin-over-ransomware-attacks

Senators draft bill that would require many entities to report cyber breaches within 24 hours

https://www.cnn.com/2021/06/16/politics/bill-report-cyber-breach-24-hours/index.html 

60% of Businesses Would Consider Paying a Ransomware Demand

https://www.infosecurity-magazine.com/news/businesses-consider-paying-ransom 

North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute

https://thehackernews.com/2021/06/north-korea-exploited-vpn-flaw-to-hack.html

Find the latest from us on our blog https://firewalls.com/blog. 

Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns.

Thanks very much for listening!

Cybersecurity jobs are there for the taking, whether for prospective students or career changers willing to train, as employers desperately search for qualified staff. Dr. Marc Rogers of Purdue University joins us to talk about the shortage of cybersecurity pros in our home state of Indiana and beyond, and how a new website serves as a cyber career matchmaking tool. Dr. Rogers also discusses Purdue's Cyber Apprenticeship Program, the need for companies of all stripes to recognize their cyber exposure, and the state of cybersecurity and cyber threats today. 

In cyber headlines, it's a ransomware-a-palooza...

Feds recover millions from pipeline ransom hackers, hint at U.S. internet tactic

https://www.nbcnews.com/tech/security/u-s-recovers-millions-pipeline-ransom-because-hackers-mistake-n1269889

REvil, A Notorious Ransomware Gang, Was Behind JBS Cyberattack, The FBI Says

https://www.npr.org/2021/06/03/1002819883/revil-a-notorious-ransomware-gang-was-behind-jbs-cyberattack-the-fbi-says

New Triple Extortion Tactic

https://www.foxbusiness.com/technology/hackers-jbs-ransomware-new-triple-extortion-tactic 

Fujifilm confirms ransomware attack

https://www.securitymagazine.com/articles/95369-fujifilm-confirms-ransomware-attack

Capitol Hill vendor hit by ransomware attack: report

https://thehill.com/policy/cybersecurity/557272-capitol-hill-vendor-hit-by-ransomware-attack-report 

The rise of cybersecurity debt

https://techcrunch.com/2021/06/04/the-rise-of-cybersecurity-debt/?guccounter=1


Find the latest from us on our blog https://firewalls.com/blog. 

Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns.

Thanks very much for listening!

Cybersecurity jobs are there for the taking, whether for prospective students or career changers willing to train, as employers desperately search for qualified staff. Dr. Marc Rogers of Purdue University joins us to talk about the shortage of cybersecurity pros in our home state of Indiana and beyond, and how a new website serves as a cyber career matchmaking tool. Dr. Rogers also discusses Purdue's Cyber Apprenticeship Program, the need for companies of all stripes to recognize their cyber exposure, and the state of cybersecurity and cyber threats today. 

In cyber headlines, it's a ransomware-a-palooza...

Feds recover millions from pipeline ransom hackers, hint at U.S. internet tactic

https://www.nbcnews.com/tech/security/u-s-recovers-millions-pipeline-ransom-because-hackers-mistake-n1269889

REvil, A Notorious Ransomware Gang, Was Behind JBS Cyberattack, The FBI Says

https://www.npr.org/2021/06/03/1002819883/revil-a-notorious-ransomware-gang-was-behind-jbs-cyberattack-the-fbi-says

New Triple Extortion Tactic

https://www.foxbusiness.com/technology/hackers-jbs-ransomware-new-triple-extortion-tactic 

Fujifilm confirms ransomware attack

https://www.securitymagazine.com/articles/95369-fujifilm-confirms-ransomware-attack

Capitol Hill vendor hit by ransomware attack: report

https://thehill.com/policy/cybersecurity/557272-capitol-hill-vendor-hit-by-ransomware-attack-report 

The rise of cybersecurity debt

https://techcrunch.com/2021/06/04/the-rise-of-cybersecurity-debt/?guccounter=1


Find the latest from us on our blog https://firewalls.com/blog. 

Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns.

Thanks very much for listening!

We're fortunate to have two excellent interviews to share on this episode of Ping. First, we discuss the op-ed Cyber Security as Counter-Terrorism: Seeking a Better Debate (https://warontherocks.com/2021/05/cyber-security-as-counter-terrorism-seeking-a-better-debate/) with co-authors Emma Schroeder and Trey Herr with the Atlantic Council's Cyber Statecraft Initiative. They suggest the way many view cyber crime as being single, major catastrophic events is wrong, when in reality cyber crime is similar to real-world terrorism, with an ongoing landscape of danger. Hear some tips they offer to better address vulnerabilities and reframe the conversation.

Then, in lieu of our regular headlines segment, we welcome writer and former IT pro Lance Whitney to discuss the status of the DarkSide ransomware group following the Colonial Pipeline attack, plus a ransomware warning to healthcare organizations shared by the FBI. And finally, we touch on a consumer caution - the practice of vishing - or voice phishing - and how Amazon orders are being used for evil.

See his stories at TechRepublic: https://www.techrepublic.com/meet-the-team/us/lance-whitney/

And find the latest from us on our blog https://firewalls.com/blog. 

Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns.

Thanks very much for listening!

We're fortunate to have two excellent interviews to share on this episode of Ping. First, we discuss the op-ed Cyber Security as Counter-Terrorism: Seeking a Better Debate (https://warontherocks.com/2021/05/cyber-security-as-counter-terrorism-seeking-a-better-debate/) with co-authors Emma Schroeder and Trey Herr with the Atlantic Council's Cyber Statecraft Initiative. They suggest the way many view cyber crime as being single, major catastrophic events is wrong, when in reality cyber crime is similar to real-world terrorism, with an ongoing landscape of danger. Hear some tips they offer to better address vulnerabilities and reframe the conversation.

Then, in lieu of our regular headlines segment, we welcome writer and former IT pro Lance Whitney to discuss the status of the DarkSide ransomware group following the Colonial Pipeline attack, plus a ransomware warning to healthcare organizations shared by the FBI. And finally, we touch on a consumer caution - the practice of vishing - or voice phishing - and how Amazon orders are being used for evil.

See his stories at TechRepublic: https://www.techrepublic.com/meet-the-team/us/lance-whitney/

And find the latest from us on our blog https://firewalls.com/blog. 

Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns.

Thanks very much for listening!

In the latest case of real world implications stemming from a cyber attack, operations of the Colonial Pipeline, supplying almost half of the gasoline to the east coast of the U.S., stopped suddenly. Why? Colonial was the victim of a ransomware attack connected to the DarkSide group. We dissect the details of the attack, how it happened, what it means, how Russia may factor in, and when things might return to normal in a supersized headlines segment.

Also in headlines, hear about newly discovered vulnerabilities in IoT and OT devices thanks to Microsoft threat hunters, and how one UK company's phishing email training simulation couldn't have gone more wrong.

See the stories:

Colonial pipeline hack claimed by Russian group DarkSide spurs emergency order from White House

https://www.nbcnews.com/tech/security/colonial-pipeline-hack-claimed-russian-group-darkside-spurs-emergency-rcna878 

https://www.axios.com/colonial-pipeline-hack-fbi-darkside-b9bce545-c37e-4377-ad35-4c280ce04460.html

https://www.bbc.com/news/business-57050690 

Microsoft Discovers 25 Critical Vulnerabilities in IoT Security Affecting Google, Amazon, Samsung, and Other Devices, SDKs and Libraries

https://www.cpomagazine.com/cyber-security/microsoft-discovers-25-critical-vulnerabilities-in-iot-security-affecting-google-amazon-samsung-and-other-devices-sdks-and-libraries/

Train firm’s ‘worker bonus’ email is actually cybersecurity test

https://www.theguardian.com/uk-news/2021/may/10/train-firms-worker-bonus-email-is-actually-cyber-security-test

Get info on all things network security through our blog, https://firewalls.com/blog.

Please do rate and review us wherever you listen, and reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review or comment, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first.

Thanks for listening!

In the latest case of real world implications stemming from a cyber attack, operations of the Colonial Pipeline, supplying almost half of the gasoline to the east coast of the U.S., stopped suddenly. Why? Colonial was the victim of a ransomware attack connected to the DarkSide group. We dissect the details of the attack, how it happened, what it means, how Russia may factor in, and when things might return to normal in a supersized headlines segment.

Also in headlines, hear about newly discovered vulnerabilities in IoT and OT devices thanks to Microsoft threat hunters, and how one UK company's phishing email training simulation couldn't have gone more wrong.

See the stories:

Colonial pipeline hack claimed by Russian group DarkSide spurs emergency order from White House

https://www.nbcnews.com/tech/security/colonial-pipeline-hack-claimed-russian-group-darkside-spurs-emergency-rcna878 

https://www.axios.com/colonial-pipeline-hack-fbi-darkside-b9bce545-c37e-4377-ad35-4c280ce04460.html

https://www.bbc.com/news/business-57050690 

Microsoft Discovers 25 Critical Vulnerabilities in IoT Security Affecting Google, Amazon, Samsung, and Other Devices, SDKs and Libraries

https://www.cpomagazine.com/cyber-security/microsoft-discovers-25-critical-vulnerabilities-in-iot-security-affecting-google-amazon-samsung-and-other-devices-sdks-and-libraries/

Train firm’s ‘worker bonus’ email is actually cybersecurity test

https://www.theguardian.com/uk-news/2021/may/10/train-firms-worker-bonus-email-is-actually-cyber-security-test

Get info on all things network security through our blog, https://firewalls.com/blog.

Please do rate and review us wherever you listen, and reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review or comment, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first.

Thanks for listening!

While HTML email is nothing new, a recently discovered trick means a pretty wide open security flaw has been there all along, too. Security researcher, engineer, & tech columnist Ax Sharma joins us to explain how just a bit of code in the wrong hands can manipulate the "external sender" warning on your organization's emails - to either remove it altogether or change it to trick unsuspecting users into malicious clicks. Ax also tells us what solutions are out there to cut your risk. See the full story:

Attackers can hide 'external sender' email warnings with HTML and CSS

Plus, we dive deeper into the story of Facebook and the 533 million users whose data was exposed. Ax discusses the difference between a breach and data scraping, how social media users should protect their privacy, and Facebook's responsibility in this incident.

In headlines, we talk about a ransomware attack targeting a major police department, another update on SolarWinds & Russia's role, and we hear more about the current state of the ransomware threat.

See the stories:

Hackers threaten to release DC police data in apparent ransomware attack

https://www.theverge.com/2021/4/27/22405339/washington-dc-police-hack-data-department-ransomeware-babuk

Report: Russia 'likely' kept access to US networks after SolarWinds hack

https://www.engadget.com/russia-us-network-access-after-solarwinds-hack-192305973.html

Ransomware extortion demands are growing, and so is the downtime caused by attacks

https://www.zdnet.com/article/ransomware-extortion-demands-are-growing-and-so-is-the-downtime-caused-by-attacks/

Ransomware: don’t expect a full recovery, however much you pay

https://nakedsecurity.sophos.com/2021/04/27/ransomware-dont-expect-a-full-recovery/

Get info on all things network security through our blog, https://firewalls.com/blog.

Please do rate and review us wherever you listen, and reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review or comment, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first.

Thanks for listening!

While HTML email is nothing new, a recently discovered trick means a pretty wide open security flaw has been there all along, too. Security researcher, engineer, & tech columnist Ax Sharma joins us to explain how just a bit of code in the wrong hands can manipulate the "external sender" warning on your organization's emails - to either remove it altogether or change it to trick unsuspecting users into malicious clicks. Ax also tells us what solutions are out there to cut your risk. See the full story:

Attackers can hide 'external sender' email warnings with HTML and CSS

Plus, we dive deeper into the story of Facebook and the 533 million users whose data was exposed. Ax discusses the difference between a breach and data scraping, how social media users should protect their privacy, and Facebook's responsibility in this incident.

In headlines, we talk about a ransomware attack targeting a major police department, another update on SolarWinds & Russia's role, and we hear more about the current state of the ransomware threat.

See the stories:

Hackers threaten to release DC police data in apparent ransomware attack

https://www.theverge.com/2021/4/27/22405339/washington-dc-police-hack-data-department-ransomeware-babuk

Report: Russia 'likely' kept access to US networks after SolarWinds hack

https://www.engadget.com/russia-us-network-access-after-solarwinds-hack-192305973.html

Ransomware extortion demands are growing, and so is the downtime caused by attacks

https://www.zdnet.com/article/ransomware-extortion-demands-are-growing-and-so-is-the-downtime-caused-by-attacks/

Ransomware: don’t expect a full recovery, however much you pay

https://nakedsecurity.sophos.com/2021/04/27/ransomware-dont-expect-a-full-recovery/

Get info on all things network security through our blog, https://firewalls.com/blog.

Please do rate and review us wherever you listen, and reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review or comment, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first.

Thanks for listening!