Protecting People

How is an insider threat incident response like a murder investigation?

You start with motive, then leverage investigative tools and knowledge of people to unearth a trail of mistakes. (Yes, it’s actually quite exciting!)

In this episode, series host Sai Chavali speaks with fellow Protecting People host Brian Reed, Cybersecurity Evangelist at Proofpoint, about insider threat cases and what makes a successful incident response.

Join us as we discuss:
The three buckets of insider threats
Specific insider threat cases every investigator should study
Asking “who, what, why, and when” to protect against insider threats
How incident response can be like a murder investigation



Check out these resources we mentioned:
Report mentioned at [5:47]


2020 Cost of Insider Threats: Global Report 
Proofpoint blog post mentioned at [8:19]


The Top 10 Biggest and Boldest Insider Threat Incidents, 2020-2021 

For more episodes like this one, subscribe to us on Apple Podcasts, Spotify, and the Proofpoint website, or just search for Protecting People in your favorite podcast player.

Five Minute Forecast for the week of October 4th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. 

The U.K. makes plans to strike back against future cyber attacks 
President Biden rallies international support in the fight against ransomware 
Six thousand Coinbase customers fall victim to an account recovery vulnerability 

Joining us is Selena Larson, Proofpoint Senior Threat Analyst, to talk about a series of campaigns by prolific threat actor, TA544.

Five Minute Forecast for the week of September 27th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. 

No honor among thieves as REvil is caught stealing by its own affiliates 
America’s food supply under attack from Ransomware 
New mobile malware emerges in North America 

Joining us is Adam McNeil, Senior Threat Researcher at Cloudmark to discuss a new mobile malware emerging in the U.S. and Canada.

Gone are the days of 2016 when we saw 12 million ransomware attachments randomly blasted out per day. It’s 2021 now, when threat actors selectively deploy ransomware against high value targets across the victim organization’s entire network in order to secure initial access.

Why is initial access so often overlooked in protecting against the multiplicity of ransomware threats?

In the inaugural episode of our Threat Digest series, series hosts Selena Larson and Crista Giering, Senior Threat Intelligence Analysts at Proofpoint, interview Daniel Blackford, Senior Threat Researcher at Proofpoint, about initial access and what can happen afterwards. 

Join us as we discuss:

The evolution of ecrime in the past five years
Initial access, dwell time, and the prevalence of Cobalt Strike activity
What white glove ransomware treatment is like
Tips for protecting your org against multiple malign actors at various stages of an attack


Check out the report we mentioned during the podcast:
-The First Step: Initial Access Leads to Ransomware  

For more episodes like this one, subscribe to us on Apple Podcasts, Spotify, and the Proofpoint website, or just search for Protecting People in your favorite podcast player.

Listening on a desktop & can’t see the links? Just search for Protecting People in your favorite podcast player.

Five Minute Forecast for the week of September 20th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. 

The government blitz on cyber crime takes aim at Bitcoin 
Grief ahead for victims of one ransomware gang 
The FBI counts the cost of romance scams 

Joining us is Proofpoint Senior Threat Researcher, Daniel Blackford, to discuss the relationship between ransomware and cryptocurrency.

Guess how many organizations found they had an insider threat incident at least once — 69%.

Of the remaining 31%, it’s most likely the case that they simply don’t have the capability to identify insider threats, not that they were incident-free.

In this episode, series host Sai Chavali speaks with Proofpoint’s Deborah Watson, Resident CISO, and Jeremy Wittkop, Senior Director, Technology Services, PCMS, about jumpstarting a successful insider threat program.

Join us as we discuss:

What insider threats are and where they can come from
How to monitor for the unknown
Why insider threat training needs to be frequent and reinforced
How to build and measure your insider threat program


For more episodes like this one, subscribe to us on Apple Podcasts, Spotify, and the Proofpoint website, or just search for Protecting People in your favorite podcast player.

Five Minute Forecast for the week of September 13th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. 

Cyber criminals infiltrate the UN 
Vacation’s over as REvil returns 
And Yandex is battered by a history-making attack 

Joining us is Proofpoint Threat Analyst, Davide Canali, to discuss a cryptocurrency spin on one of the oldest attacks in the books.

Five Minute Forecast for the week of September 6th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. 
• Billions of devices at risk from Bluetooth bugs 
• Ransomware source code leaked online 
• Funny business on Banksy’s website – but for once the artist isn’t to blame 
Joining us is Sherrod DeGrippo, Proofpoint’s Vice President, Threat Research and Detection, to discuss the perennial threat of business email compromise.

Five Minute Forecast for the week of August 30th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. 

Tech’s biggest hitters join the fight against cyber attacks 
Samsung reveals a secret ‘kill switch’ hidden in its televisions 
Attackers are still profiting from fear and doubt over the pandemic  

Joining us is Selena Larson, Proofpoint Senior Threat Intelligence Analyst, to discuss how cyber criminals are continuing to use the pandemic in their attacks.

Five Minute Forecast for the week of August 23rd. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. 

Anonymous sources confirm a potentially serious breach at the State Department 
Data theft puts telecom giants in the spotlight 
A ransomware gang seeks insider help 

Joining us is Selena Larson, Proofpoint Senior Threat Intelligence Analyst, to talk the insider threat of ransomware.