pm73media

ABC

"A", always

"B", be

"C", closing

ALWAYS BE CLOSING

Always be closing.

 -- Blake; GlenGarry GlenRoss, David Mamet, 1992

Now we are taking some liberties there with that bit… but apply that philosophy to secure code development… now swap in Integrating or Developing for Closing…

ABD…

"A", always.

"B", be.

"D" Developing… or… well you get the point

On this episode of InSecurity, Matt Stephenson speaks with Manish Gupta, CEO of ShiftLeft about the importance of dynamic software development. Can focusing on Continuous Integration/Continuous Development prevent more scenarios like what we saw with Solarwinds? Manish has helped build some of the most important security solutions in the world. The bad guys are only getting better, so we need to make sure we are doing it better and faster than they are.

About Manish Gupta

Manish Gupta is the CEO of ShiftLeft, a company specializing in NextGen Static Analysis. He was previously the Chief Product and Strategy Officer at FireEye, helping grow the company from approximately $70 million to more than $700 million in revenue, growing the product portfolio from 2 to more than 20 products.

Prior to that, he was VP of Product Management for Cisco's $2 billion security portfolio. He also served as a VP/GM at McAfee and iPolicy networks.

Manish has an MBA from the Kellogg Graduate School of Management, MS in Engineering from the University of Maryland and a BS in Engineering from the Delhi College of Engineering.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts me in front of crowds, cameras, and microphones all over the world. I am the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts and ThreatVector as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

I know not with what weapons World War III will be fought, but World War IV will be fought with sticks and stones

 -- Albert Einstein

If we wish to fight, the enemy can be forced to an engagement even though he be sheltered behind a high rampart and a deep ditch. All we need do is attack some other place that he will be obliged to relieve. If we do not wish to fight, we can prevent the enemy from engaging us even though the lines of our encampment be merely traced out on the ground. All we need do is to throw something odd and unaccountable in his way.

 -- Sun Tzu, The Art of War

On the new InSecurity, Matt Stephenson has a chat with author and Corner Alliance CEO Alan Pentz about playing the long game with China. When your rival has 4000 years of history and a BILLION more people, the contest takes on some different parameters. As we move into the 4th Industrial Revolution, who will better leverage technology like 5G, AI, automation and augmented reality? We're bringing someone who is boots on the ground in the campaign to improve how government can work with private industry.

About Alan Pentz

Alan Pentz (@apentz) is the CEO of Corner Alliance. He has over twenty years of experience in government consulting with Corner Alliance, SRA, Touchstone Consulting, and Witt O'Brien's, and has worked with government leaders in the R&D and innovation communities across DHS, Commerce, NIH, state and local government, and the non-profit sector among others.

Before consulting, Alan served as a speechwriter and press secretary for former U.S. Senator Max Baucus and as a legislative assistant for former U.S. Representative Paul Kanjorski. He holds an MBA from the University of Texas at Austin.

Alan is a life long fan of the Philadelphia Eagles (yes, they booed Santa Claus) and his hero is Ben Franklin, a famous polymath, patriot, diplomat, scientist, politician, and was still the founding father you most want to have a beer with.

Winning the Long Competition: The Key to the Next American Century

For the first time since the Space Race, the United States is facing a serious competitor with a plan to achieve technological dominance: China. Between China 2025 and the Belt and Road Initiative, it's become clear that the Chinese government is determined to capture the economic power that new technologies like AI, automation, 5G, and the cloud represent. And with economic power comes military power, and then political power. To win this competition, the US must return to the historical model it used to build the interstate highway system, put a man on the moon, and build the computer and the Internet—but has become an afterthought over the past few decades. In Winning the Long Competition, Alan Pentz lays out a roadmap for increasing our investment and innovation in core areas. He shows government managers where to invest and points innovators to areas where the funding will be plentiful. As we move into the next American century, the only way forward is to harness all the resources and creativity of both our public and private sectors.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts me in front of crowds, cameras, and microphones all over the world. I am the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts and ThreatVector as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

ELLIE: How do you know you're not deluding yourself? As for me, I'd need proof. PALMER: Proof. Did you love your father? ELLIE: Huh? PALMER: Your Dad, did you love him? ELLIE: Yes, very much. PALMER: Prove it.

That is, of course, Jodie Foster as Ellie Arroway and Matthew McConaughey as Palmer Joss in Robert Zemeckis's 1997 adaptation of Carl Sagan's 1984 novel Contact

On this week's InSecurity, Matt Stephenson got some time with ethical hacker Ted Harrington, author. He is the author HACKABLE: How to Do Application Security Right, Exec Partner at Independent Security Evaluators and co-creator of IoT Village at DEFCON and beyond! If you need more reasons to listen, he's just awesome and has some really interesting insight into what developers, companies and even regular people need to consider in keeping their assets secure… dig it

About Ted Harrington

Ted Harrington (@SecurityTed) is the Executive Partner at Independent Security Evaluators (ISE).

ISE is a company of ethical hackers most commonly known for their work hacking cars, medical devices, web applications, and password managers. ISE is a leader of ethical hackers, helping companies build better, more secure software.

Ted is an author, keynote speaker, consultant, and podcast host, specializing in penetration testing, secure software development, and related areas of cybersecurity.

He recently published the best-selling book HACKABLE: How to Do Application Security Right.

ISE has helped hundreds of companies fix tens of thousands of security vulnerabilities, including Google, Amazon, and Netflix. 

Ted and his team also founded and continue to organize IoT Village, an event whose hacking contest is a three-time DEF CON Black Badge winner.

Hackable: How to Do Application Security Right

If you don't fix your security vulnerabilities, attackers will exploit them. It's simply a matter of who finds them first. If you fail to prove that your software is secure, your sales are at risk too. Whether you're a technology executive, developer, or security professional, you are responsible for securing your application. However, you may be uncertain about what works, what doesn't, how hackers exploit applications, or how much to spend. Or maybe you think you do know, but don't realize what you're doing wrong. To defend against attackers, you must think like them. As a leader of ethical hackers, Ted Harrington helps the world's foremost companies secure their technology. Hackable teaches you exactly how. You'll learn how to eradicate security vulnerabilities, establish a threat model, and build security into the development process. You'll build better, more secure products. You'll gain a competitive edge, earn trust, and win sales.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts me in front of crowds, cameras, and microphones all over the world. I am the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts and ThreatVector as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

"Diversity and independence are important because the best collective decisions are the product of disagreement and contest, not consensus or compromise." 

 -- The Wisdom of Crowds; James Surowiecki,

On this week's InSecurity, Matt Stephenson has a chat with Pulsedive co-founders Grace Chi and Dan Sherry about the joy and pain of security startup life. In the world of the Threat Intelligence research, the best people are often looking for the best tools. Why not build a community around some stellar tools so the Wisdom of the Crowd can push security in the directions it needs to go? Grace and Dan want to help heard the cats to solve the problems

About Grace Chi

Grace Chi (@euphoricfall) is Co-Founder and COO of Pulsedive. Her wealth of experience includes directing complex growth campaigns and operations across technology, cybersecurity, and real estate markets. She draws on interdisciplinary interests, fearlessness in the face of criticism, and history in product marketing, strategic development, and customer success to identify and execute on the most impactful areas for growth. Grace is an avid watercolorist on weekends and a hyper-serious cooperative board gamer.

About Dan Sherry

Dan Sherry (@netbroom) is Co-Founder and CEO of Pulsedive. He has years of industry experience doing incident response, security engineering, and security operations across both government and Fortune 500 financial services. He is all too familiar with the struggles of filtering noise from open source threat intelligence, and sees Pulsedive as the first step to solving this problem. Dan's top advisors are his three cats. He plays the ukulele when he's not staying up all night debugging Pulsedive.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts me in front of crowds, cameras, and microphones all over the world. I am the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts and ThreatVector as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

DevSecOps?

SecDevOps?

Jeff… Kevin?

Wait… what?

On this episode of InSecurity, Matt Stephenson has a chat with Refactr co-founder & CEO Mike Fraser about the World of DevSecOps and the role it plays in contemporary Cybersecurity ecosphere. We dig into the relevance of low-code/no-code and FINALLY get handle on Conway's Law as it applies to security. No idea what we're talking about? Tune in and find out…

About Mike Fraser

Mike Fraser (@itascode) is the Co-founder, CEO, Chief Architect of Refactr. He started his career in the US Air Force working on F-15 weapon systems and later as a cybersecurity engineer. Mike has founded multiple tech companies and is a regular speaker at industry events, including Hashiconf, various Microsoft events, Red Hat AnsibleFest and All Day DevOps. He has published several articles including on TechCrunch, RSA 365, CRN, and The New Stack, and appeared on the cover of Channel Pro Magazine.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts me in front of crowds, cameras, and microphones all over the world. I am the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts and ThreatVector as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

Legendary UCLA mens' basketball coach John Wooden famously  instructed his team, every year on the first day of practice, how to put on their socks and tie their shoes.

I think it's the little things that really count. The first thing I would show our players at our first meeting was how to take a little extra time putting on their shoes and socks properly.

The most important part of your equipment is your shoes and socks.

You play on a hard floor. So you must have shoes that fit right. And you must not permit your socks to have wrinkles around the little toe--where you generally get blisters--or around the heels.

It took just a few minutes, but I did show my players how I wanted them to do it. Hold up the sock, work it around the little toe area and the heel area so that there are no wrinkles. Smooth it out good. Then hold the sock up while you put the shoe on. And the shoe must be spread apart--not just pulled on the top laces. You tighten it up snugly by each eyelet. Then you tie it. And then you double-tie it so it won't come undone--because I don't want shoes coming untied during practice, or during the game. I don't want that to happen.

I'm sure that once I started teaching that many years ago, it did cut down on blisters. It definitely helped. But that's just a little detail that coaches must take advantage of, because it's the little details that make the big things come about.

 -- John Wooden as told to Devin Gordon

When you are in the leadership business… what do you when the entire world gets turned upside down and everyone is looking at you for direction?

How do you find the little details in order to bring the big things about?

On this week's InSecurity, Matt Stephenson has a chat with Jillian Lappetito, president of Leaderology and a member of 4 NCAA Champion and 2 World Champion US National Waterpolo teams. Influenced by the leadership of an Army Ranger father and world class coaches and teammates, Jillian now channels her experience into coaching and mentoring others. With a mantra of Fearless Authenticity, Jillian is helping develop tomorrow's leaders' ability to meet any challenge they may face.

About Jillian Lappetito

Jillian Lappetito is the President of Leaderology (@leaderologyllc) and responsible for developing the company's go-to-market efforts and strategic direction.  

Jillian is a former member of the U.S. Senior National Team for Women's Water Polo and won four NCAA National Championships at UCLA.

After her athletic career, she transitioned from the pool to the board room, becoming Vice President of Business Development for Brainard Strategy, where she led the company's highest revenue-generating market supporting Fortune 500 clients.

Jillian has grown up around the influence of leaders, whether it was her Army Ranger father, her water polo coaches or mentoring rising stars herself in the business community. It is her belief that truly remarkable leaders bring diligence and intentionality to their daily leadership practices, working hard and striving for continuous development.

While with the National Team, she received her M.B.A. from UC Irvine and graduated with a Bachelor's Degree from University of California, Los Angeles.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts him in front of crowds, cameras, and microphones all over the world. He is the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts, and ThreatVector as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

It tells me that goose-stepping morons like yourself should try reading books instead of BURNING them

 -- Henry Jones, Sr – Indiana Jones and the Last Crusade

If you like my opinions, you'll love my latest book. If youdon't like my opinions, I encourage you to buy 3 copies of the book, so you have the satisfaction of burning them. 

 -- Ira Winkler - LinkedIN

On this week's InSecurity, Matt Stephenson speaks with Ira Winkler, president of Secure Mentem and author of multiple books, including You CAN Stop Stupid. We take a frank look at the people and systems involved in the world of cybersecurity and look to point out what is stupid about all of it and what can be done to stop stupid behavior and fix stupid systems.

About Ira Winkler

Ira Winkler (@irawinkler) is President of Secure Mentem and Author of the forthcoming books, You Can Stop Stupid and Security Awareness for Dummies. He is considered one of the world's most influential security professionals and was named "The Awareness Crusader" by CSO magazine in receiving their CSO COMPASS Award. Ira is one of the foremost experts in the human elements of cyber security and is known for the extensive espionage and social engineering simulations that he has conducted for Fortune 500 companies globally.

He continues to perform these espionage simulations, as well as assisting organizations in developing cost effective security programs. He and his work have been featured in a variety of media outlets including CNN, The Wall St Journal, USA Today, San Francisco Chronicle, Forbes, among other outlets throughout the world. Ira began his career at the National Security Agency, where he served as an Intelligence and Computer Systems Analyst. After leaving government service, he went on to serve as President of the Internet Security Advisors Group, Chief Security Strategist at HP Consulting, and Director of Technology of the National Computer Security Association. He has also served on the graduate and undergraduate faculties of the Johns Hopkins University and the University of Maryland. 

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts him in front of crowds, cameras, and microphones all over the world. He is the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts, and ThreatVector as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

How great would it be to actually be able to GO TO the doctor's office?

Remember when it was a thing for people to actually do that? To actually go to the doctor's office

Did we really need to do that as often as we did?

Or at least as often as we should have?

According to our friends at MedicalEconomics.com, patients are ready for easier access to healthcare professionals. In the early days of COVID19, 71% of patients had considered telemedicine half had already gone through with a virtual appointment. Patient adoption at the beginning of 2020 was up 33% over the previous year and Venture capital fundingfor telemedicine companies surged in the first quarter of 2020 to $788 million. The market is expected to reach $185.6 billion by 2026.

Here's a tough question: Does it actually help?

On this week's InSecurity, Matt Stephenson has a chat with Pete Fronte, founder & CEO of Altura, a 20 year old company who has built a mechanism that connects medical clinical studies with the people who need to be studied. In the contemporary world of telehealth and everything-from-home, people need access more than ever. COVID is the new horror on the block. People still need access to studies on cancer, heart disease and every other healthcare issue that existed prior to 2020… check it out

About Pete Fronte

Pete Fronte is the founder and President/CEO of Altura. During the past 20 years Mr. Fronte has been a leader in engaging people for better health via health studies, health experience surveys and health programs. He has been a catalyst for developing innovative processes and technology to accelerate the study and adoption of new medical interventions (e.g. drugs, biologics, medical devices, wearables). Pete's passion centers on expanding participation in health studies by engaging and enabling patients and health care providers (HCPs). He is a recognized leader in patient centered outreach including Patient Study Life Cycle™ management. Today he continues to lead the expansion of clinical research, evidence based medicine and real word studies into primary care and organized healthcare settings nationally. Mr. Fronte has spearheaded innovative technology such as Altura's Study Engagement Platform which HCP Studies mobile app which is available in 23countries. Pete's experience includes collaborating with medical groups, integrated health systems, pharmacy and medical management companies, research centers, institutional review boards (IRBs) and study sponsors to design and implement innovative study awareness and patient centered projects that include HIPAA compliant utilization of various forms of electronic health data as well as mobile applications and web portals. Mr. Fronte is currently a member of the Institutional Review Board at St. Joseph Health in Orange County California and is active in various healthcare and clinical research trade associations. He is a national speaker and writer on subjects such as; innovative patient and HCP engagement programs for clinical studies, and health program, site based clinical research operations and the integration of clinical research within primary care and organized healthcare systems.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts him in front of crowds, cameras, and microphones all over the world. He is the regular host of the InSecurity podcast and video series at events around the globe.

I have spent the last 10 years in the world of Data Protection and Cybersecurity. Since 2016, I have been with Cylance (now BlackBerry) extolling the virtues of Artificial Intelligence and Machine Learning and how, when applied to network security, can wrong-foot the bad guys. Prior to the COVID shutdown, I was on the road over 100 days a year doing live malware demonstrations for audiences from San Diego to DC to London to Abu Dhabi to Singapore to Sydney. One of the funniest things I've ever been a part of was blowing up a live instance of NotPetya 6 hours after the news broke... in Washington DC... directly across the street from FBI HQ... as soon as we activated it a parade of police cars with sirens blaring roared past the building we were in. I'm pretty they weren't there for us, but you never know...

Every week on the InSecurity Podcast, I get to interview interesting people doing interesting things all over the world of cybersecurity and the extended world of hacking. Sometimes, that means hacking elections or the coffee supply chain... other times that means social manipulation or the sovereign wealth fund of a national economy.

InSecurity is about talking with the people who build, manage or wreck the systems that we have put in place to make the world go round...

Can't get enough of Insecurity? You can find us at Spotify, Apple Podcasts, ThreatVector and Blackberry as well as GooglePlay, Gaana, Himalaya, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

Once more unto the breach, dear friends, once more;

Or close the wall up with our English dead.

In peace there's nothing so becomes a man

As modest stillness and humility:

But when the blast of war blows in our ears,

Then imitate the action of the tiger;

Stiffen the sinews, summon up the blood,

Disguise fair nature with hard-favour'd rage;

Then lend the eye a terrible aspect;

Let pry through the portage of the head

Like the brass cannon; let the brow o'erwhelm it

As fearfully as doth a galled rock

O'erhang and jutty his confounded base,

Swill'd with the wild and wasteful ocean.

Sometimes… the bad guys get in. It happens. When it happens, we need the people who know how to shut down the villainous behavior, fix what's broken and prevent it from happening again. Was it a hack? Was it a breach? Is there a difference? Does the difference matter? When the data is compromised, it is too late to worry about who did what and why they did it. It is time to  repair the damage. For that… you need experts in the world of Incidence Response.

On today's Special Episode of InSecurity, we are bringing you into a special LinkedIN LIVE event where Matt Stephenson spoke with Axon Technologies Director of Security Operations Dave Brown and BlackBerry Sr Director of International Consulting Luke Hull. These two have faced some of the biggest breaches in the world over the last 20 years. They may not have seen it all, but they have seen enough and want to help prevent the next Big Breach.

About Dave Brown

Dave Brown is Security Operations Director at Axon Technologies. With nearly 20 years of experience in intelligence-driven secure system design, infrastructure architecture, computer, and network defense, Dave has created and operated defense-in-depth initiatives in government sectors within the US Department of Defense as well as highly targeted enterprises in the global oil and gas industry.

We could tell you more about the work Dave has done… but we can't. Let's just leave it at that…

About Axon Technologies

Axon Technologies (@Axon_Tech) is a cybersecurity services company focused on protecting organizations of various sizes in this digitally connected world. Their mission is to help organizations predict, prevent, detect, respond to, and recover from cyberattacks with a combination of best of breed security technologies and a specialist team of researchers, analysts, and Incident responders to provide clients the comfort that their organization is protected 24x7. Their ​vision is to apply automation, orchestration, and machine learning into our security programs to stay one step ahead of the attackers and unleash the value of your security investment.

About Luke Hull

Luke Hull is Senior Director of International Consulting at BlackBerry. He comes from a strong risk and technical background, covering information security, intelligence and cyber operations with an extensive range of consultancy experience across a broad range of clients and an emphasis on adding business context to consultancy. In a career spanning nearly 20 years with some of the largest companies in the world, he has led and been a part of Incident Response teams at Mandian, Verizon and PriceWaterhouse Coopers.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts him in front of crowds, cameras, and microphones all over the world. He is the regular host of the InSecurity podcast and video series at events around the globe.

Twenty years of work with the world's largest security, storage, and recovery companies has introduced Stephenson to some of the most fascinating people in the industry. He wants to get those stories told so that others can learn from what has come before.

Every week on the InSecurity Podcast, Matt interviews leading authorities in the security industry to gain an expert perspective on topics including risk management, security control friction, compliance issues, and building a culture of security. Each episode provides relevant insights for security practitioners and business leaders working to improve their organization's security posture and bottom line.

Can't get enough of Insecurity? You can find us at ThreatVector, Blackberry, Apple Podcasts and Spotify as well as GooglePlay, Gaana, SoundCloud, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!

What's your favorite Data Breach?

Come on… seriously… you know you have one… Sony? JP Morgan Chase? AdultFriendFinder? Office of Personnel Management?

What separates data breaches in your mind? The type of company? The type of data stolen? The notion of a threat to the National Infrastructure?

We can get really weird into the idea of which kind of theft poses a bigger threat.

You may say the OPM breach is huge because it put the IDs of millions of public servants and other regular people up for sale… But what about the idea that a corporate officer of an 11 figure energy company whose data on AdultFriendFinder gets accessed in a breach…

Put your tinfoil on and follow the ripples out on that one… What could a bad guy do to manipulate… oh I don't know… Purchasing decisions? Green lighting potentially controversial energy projects?

See where I'm going here… A breach is a breach is a breach is a breach…

What we need are the kind of people who live and think in an asymmetric world in order to deal with kind of asymmetric attacks we have seen over the last several years

What if we could get someone on the horn who is as asymmetric as anyone you'll ever meet?

Today might be that day

On this week's InSecurity, Matt Stephenson sits down with Robert Willis to jump all around the world of hacking, red & blue teaming, and the world of cybersecurity writ large. And then, as a special bonus, we dig into the new world Robert is creating, the Paraneon Universe… a cyberpunk comics universe written by hackers for hackers, where the tech is legit. We wouldn't have had flip phones without Start Trek… who knows what Robert & Pareneon are going to offer that will change the world…

About Robert Willis

Robert Willis (@rej_ex) Runs consulting at 1337 Inc among other things. He is a Red team, Blue team, and purple team professional. He isnt just breaking into things for clients, he's also building and running security programs.

Robert is featured in the popular Tribe of Hackers series from Wiley, whose new book Tribe of Hackers: Blue Team is out as of September 16th, 2020.

In a Previous life, Robert was a Researcher at the Breach and Attack Simulation Pioneer ThreatCare

He has worked places he can't disclose, but which I have personally verified… It's legitimate, as crazy as that sounds. Robert's most mind numbing accomplishments cannot be talked about publicly, but if you become his friend he will likely show you some insane stuff -- as long as it doesnt compromise national security.

About 1337 Inc

1337 Inc. was founded after years of building cybersecurity programs and providing services for clients of all sizes. They are trusted security partners for both consulting and deliverables for public, private, and government organizations.

They are Austin-based, but have a presence across Texas to service companies in the Dallas, Houston, and San Antonio areas as well. They  have clients across the United States, and also work internationally when needed.

Many of their employees have both civilian and military training credentials, and make it a point to be on top of the latest compliance needs — as well as recently published vulnerabilities.

1337 offers compliance mapping (ISO27001, SOC2, PCI DSS, GDPR, etc), security program and policy creation (mapping to the NIST cybersecurity framework), web application assessments, penetration testing, vulnerability assessments, threat modeling, and much more.

About Paraneon

Paraneon (@paraneonU) develops and publishes stories from a cyberpunk future. For hackers, by hackers.

Earth's landscape is split between highly technocentric cities, dry desert lands that surround them (known as the drylands), and underground worker colonies. The cities are highly futuristic; everyone who is a citizen of a city has a quality of life much higher than the colonies or drylands.

The drylands appear desolate due to dust bowls created from global warming — a problem in earth's past history. Because of this, all factory operations were moved to Mars to remediate the problems caused by production. Earth is in the healing process from the past damage caused from previous 'on-earth' factories. Due to the continued recovery from global warming and chemicals from prior manufacturing, the highest quality resources are reserved for those in the cities.

COLONIES

Every colony specializes in a different trade. Some of the colonies specialize in food production aided by technology, clean air initiatives, general robotics, general information technology, security testing and exploitation.

Colonies were developed as a program to make use of earth's lower income population — which continues to expand with earth's limited quality resources. The colonies are small underground cities where families live, train, and work to save enough money for the opportunity to join a city; this is known as being "granted citizenship".

Although the opportunity to move out of a colony is available for those who can afford it, many residents opt to not leave and instead 'retire' into virtual reality. Those who choose to live full-time in virtual reality are put into a network of machinery, known as the 'Hive'. The Hives are massive underground structures, with various locations across earth. The technology within the Hive allows humans to completely abandon the physical world and exist full-time in virtual reality.

The leadership in colonies are known as Mayors. Colonies have their own police force, but city forces hold authority over them.

DRYLANDS

Groups of people decided to opt-out of the cities and colonies to live in the drylands. These people aren't just known as 'non-citizens' (like colony members), but are also known as 'drylanders'. They are not integrated with technology like the rest of the population, and consider themselves 'pure' humans.

The drylanders are mysterious, and not considered hostile. The cities and colonies don't worry about drylanders; since resources on earth are limited and the people in the drylands aren't technological or a threat, they are left alone by police and fend for themselves. Some of the drylanders are known to be able to grow small amounts of food; they then can act as traders and are granted access to the colonies through timed-passes to sell goods to members of the colonies — if they can show that they have items that are worthy of being sold.

DIFFERENCES IN LIVING CONDITIONS

Cities are highly sought after because they offer fresh food, sunlight, and fresh air. Residents are able to access all known information in what's known as 'the great library'. Information is considered a privilege reserved for city residents.

In the colonies the food is in canned or powder form, with fresh items only found when brought in by a member of the drylands.

Individuals in the colonies can only study from a shortlist of general studies and what trade their colony specializes in, limiting their knowledge only to what service they provide to society. This was accepted by those in the colonies because society teaches that information as a privilege.

Once a colony member becomes a citizen of a city their access to the 'great library' is granted.

THE BINDING

Humans living in the cities and colonies have tech implanted within them, as part of humanities evolution with technology. These modifications are done once a child has hit a certain age, in a ceremony known as the "binding".

The binding 'modifications' are required for wireless communication, learning, and access to augmented reality. When walking around in the 'real world' you can see people's avatars due to the augmented reality implants everyone receives after being binded.

You can identify someone as an avatar by a small glow around their body, which is required for identification by authorities. Avatar's are only able to access areas they are granted permission to. Avatars can exist anywhere in the cities and colonies due to an extensive camera network that give the avatars the ability to not just be seen, but to see their surroundings.

MARS 

Mars has a single city (referred to as the 'Neon Aviary'), scattered research outposts and many large factories. The majority of the population on Mars are androids. Humans on Mars exist to complete advanced research, and manage the android workforce to oversee the production of goods developed. Mars is where all androids are created.

EUROPA (Jupiter's Moon)

Humans have expanded as far as Europa (a moon of Jupiter) after discovering oceans there. There isn't a city on Europa, just a network of various research outposts.

About Matt Stephenson

Insecurity Podcast host Matt Stephenson (@packmatt73) leads the Broadcast Media team at BlackBerry, which puts him in front of crowds, cameras, and microphones all over the world. He is the regular host of the InSecurity podcast and video series at events around the globe.

Twenty years of work with the world's largest security, storage, and recovery companies has introduced Stephenson to some of the most fascinating people in the industry. He wants to get those stories told so that others can learn from what has come before.

Every week on the InSecurity Podcast, Matt interviews leading authorities in the security industry to gain an expert perspective on topics including risk management, security control friction, compliance issues, and building a culture of security. Each episode provides relevant insights for security practitioners and business leaders working to improve their organization's security posture and bottom line.

Can't get enough of Insecurity? You can find us at ThreatVector, Blackberry, Apple Podcasts and Spotify as well as GooglePlay, Gaana, SoundCloud, I Heart Radio and wherever you get your podcasts!

Make sure you Subscribe, Rate and Review!