Ready, Set, Secure

We have a special episode today! The guys join Digital Shadows CISO Rick Holland on the Shadow Talk podcast to chat about lessons learned from the Uber breach, educating users, and looking at your 2023 cybersecurity plans.  

Things Mentioned:

·      https://resources.digitalshadows.com/threat-intelligence-podcast-shadowtalk

·      https://www.uber.com/newsroom/security-update/

·      https://www.nytimes.com/2022/09/15/technology/uber-hacking-breach.html

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Keep up with Set Solutions

·      Twitter: https://twitter.com/setsolutionsinc

·      LinkedIn: https://www.linkedin.com/company/setsolutionsinc/

·      Instagram: https://www.instagram.com/set_solutions_inc/

·      YouTube: https://www.youtube.com/c/SetSolutions/

·      Facebook: https://www.facebook.com/SetSolutionsInc/

Host: Michael Farnum 

·      LinkedIn: https://www.linkedin.com/in/mfarnum/

·      Twitter: https://twitter.com/m1a1vet

Co Host: Greg Porterfield

·      LinkedIn: https://www.linkedin.com/in/gporterfield/

·      Twitter: https://twitter.com/GregPorterfield

Guest: Rick Holland 

·      LinkedIn: https://www.linkedin.com/in/rickhholland/

·      Twitter: https://twitter.com/rickhholland

As the collective hangover of BlackHat and DefCon finally subsides we’ve rounded up two of our first time attendees to recap! Join us with first time BlackHat attendee, Greg Porterfield, and first time DefCon attendee, Jamie Zolan, as they discuss tips for noobs, some of the coolest things they saw, and squash some of the rumors surrounding these two top cybersecurity conferences. 

Things Mentioned:

·      https://www.theregister.com/2022/08/25/north_korean_malware_black_hat/

·       https://www.bleepingcomputer.com/news/security/microsoft-disrupts-russian-hackers-operation-on-nato-targets/

·       https://lonelyhackers.club/post/defconguide/

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Keep up with Set Solutions

·      Twitter: https://twitter.com/setsolutionsinc

·      LinkedIn: https://www.linkedin.com/company/setsolutionsinc/

·      Instagram: https://www.instagram.com/set_solutions_inc/

·      YouTube: https://www.youtube.com/c/SetSolutions/

·      Facebook: https://www.facebook.com/SetSolutionsInc/

Host: Michael Farnum 

·      LinkedIn: https://www.linkedin.com/in/mfarnum/

·      Twitter: https://twitter.com/m1a1vet

Co Host: Greg Porterfield

·      LinkedIn: https://www.linkedin.com/in/gporterfield/

·      Twitter: https://twitter.com/GregPorterfield

Guest: Jamie Zolan 

·      LinkedIn: https://www.linkedin.com/in/jamiezolan/

Produced by: Set Solutions

Edited by: Lauren Lynch

When it comes to your external API’s obscurity cannot prevent a breach - it will merely delay one until a more determined attacker comes along. So, what can you do to protect your organization? 

On this episode Hacker, Educator, Speaker, Author, Podcast Host, and CyCognito Tech Evangelist Phillip Wylie joins us in the studio to further break down why obscurity is a poor defense strategy and how you can secure your API’s through external attack surface management. 

Things Mentioned:

·       https://www.uscybersecurity.net/csmag/securing-apis-through-external-attack-surface-management-easm/

·       https://www.setsolutions.com/staffing/

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Keep up with Set Solutions

·      Twitter: https://twitter.com/setsolutionsinc

·      LinkedIn: https://www.linkedin.com/company/setsolutionsinc/

·      Instagram: https://www.instagram.com/set_solutions_inc/

·      YouTube: https://www.youtube.com/c/SetSolutions/

·      Facebook: https://www.facebook.com/SetSolutionsInc/

Host: Michael Farnum 

·      LinkedIn: https://www.linkedin.com/in/mfarnum/

·      Twitter: https://twitter.com/m1a1vet

Co Host: Greg Porterfield

·      LinkedIn: https://www.linkedin.com/in/gporterfield/

·      Twitter: https://twitter.com/GregPorterfield

Guest: Phillip Wylie 

·      LinkedIn: https://www.linkedin.com/in/phillipwylie/

·      Twitter: https://twitter.com/PhillipWylie

·      YouTube: https://www.youtube.com/c/PhillipWylie

·      Website: https://www.thehackermaker.com

·      Podcast: https://thehackerfactory.simplecast.com/

Produced by: Set Solutions

Edited by: Lauren Lynch

There are a ton of tools and processes for figuring out a bill of materials, finding vulnerabilities, and building remediations for modern software. But doing all of that for firmware is a completely different story. And firmware security affects very critical pieces of your infrastructure.  Today Michael and Greg are joined by NetRise Co-Founder and CEO Tom Pace to discuss the importance of firmware security and how you can start getting control of it.

Things Mentioned:

•  https://www.setsolutions.com/events/
•  https://www.darkreading.com/endpoint/post-macro-world-container-files-distribute-malware-replacement
• https://www.bleepingcomputer.com/news/security/lockbit-ransomware-abuses-windows-defender-to-load-cobalt-strike/
•  https://industrialcyber.co/regulation-standards-and-compliance/dhs-releases-cybersecurity-requirements-for-critical-pipeline-owners-operators/ 

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Greg Porterfield

Produced by: Set Solutions

Edited by: Lauren Lynch

Michael and Greg are back after a short summer hiatus to discuss the latest report from the Kiteworks team around privacy and compliance. They’re joined by Kiteworks CISO Frank Balonis who deep dives into getting executive buy in for privacy platforms, swaying your company’s user base with quick wins, and protecting data flowing between third party applications. 

Things Mentioned:

·       https://www.setsolutions.com/events/

·       https://iapp.org/news/a/american-data-privacy-and-protection-act-heads-for-us-house-floor/

·       https://www.darkreading.com/vulnerabilities-threats/critical-bugs-atlassian-confluence-workspaces-open

·       https://info.kiteworks.com/report-2022-sensitive-content-communications-privacy-and-compliance-report?utm_campaign=2022%20Sensitive%20Content%20Communications%20Privacy%20and%20Compliance%20Report&utm_source=Set%20Solutions

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Greg Porterfield

Produced by: Set Solutions

Edited by: Lauren Lynch

Music Credit: Inspired by Kevin MacLeod
Link: https://incompetech.filmmusic.io/song/3918-inspired
License: http://creativecommons.org/licenses/by/4.0/

This week Michael and our new cohost Greg are joined by Senior Security Consultant, Leo Magallon, to discuss the ever-expanding Identity in the Cloud. Listen in as Leo shares the origin of identity, how organizations currently defend their users, and where the technology is heading. 

Things Mentioned:

• https://www.mandiant.com/resources/unc3524-eye-spy-email
• https://www.darkreading.com/operations/identity-and-access-management-looking-ahead-to-2021
• https://www.darkreading.com/edge-articles/why-we-need-to-consolidate-digital-identity-management-before-zero-trust

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Greg Porterfield

Produced by: Set Solutions

Edited by: Lauren Lynch

Cyber-attacks have evolved rapidly over the last decade and insurance companies have been forced to adapt quickly. What was once considered add on coverage now must be strictly reviewed as a breach can cost an insurer millions. Consequently, premiums are rising – leaving customers struggling to secure coverage. 

This week Michael is joined by CyberArk’s VP of Sales Strategy and Development, David Adamczyk, and Dean and Draper Agent, Nolen Bucek, to discuss how the right tools and cybersecurity strategy can help you secure coverage, pass audits, and save on your premiums! 

Things Mentioned:

·      https://techmonitor.ai/technology/cybersecurity/is-revil-back-ransomware

·      https://www.darkreading.com/vulnerabilities-threats/pipedream-response-shows-best-case-for-industrial-security

·      https://www.deandraper.com

·      https://www.cyberark.com/cyber-insurance/

Do you have questions for the host? Reach out to us on our website at https://www.setsolutions.com/contact/

Host: Michael Farnum 

Produced by: Set Solutions

Edited by: Lauren Lynch

This week we have not one but two special guests! Ron Eddings and Chris Cochran join us from Axonius to discuss the importance of proper asset management to GRC, the importance of strong fundamentals when it comes to cybersecurity, and their passion project: Hacker Valley Media! 

Things Mentioned:

• https://www.bleepingcomputer.com/news/security/github-can-now-alert-of-supply-chain-bugs-in-new-dependencies/
• https://www.bleepingcomputer.com/news/security/new-malware-targets-serverless-aws-lambda-with-cryptominers/
• https://hackervalley.com

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Host: Michael Farnum 

Produced by: Set Solutions

Edited by: Lauren Lynch

It’s a tale as old as time – developers and security teams have historically butted heads over how security impacts application development and vice versa. But it doesn’t have to be this way! This week host Michal Farnum is joined by Senior Security Consultant, Greg Porterfield, and Imperva’s Director of Technology, Peter Klimek, to discuss how RASP (Runtime Application Self-Protection) can easily run inside your code and maybe even save your weekends. 

Things Mentioned:

• https://www.setsolutions.com/its-a-feature-gap/
• https://www.infosecurity-magazine.com/news/cadbury-warns-of-easter-egg-scam/
• https://jfrog.com/blog/large-scale-npm-attack-targets-azure-developers-with-malicious-packages/
• https://www.imperva.com/blog/imperva-protects-from-new-spring-framework-zero-day-vulnerabilities/

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Host: Michael Farnum 

Produced by: Set Solutions

Edited by: Lauren Lynch

On this week’s show Senior Security Consultant, Greg Porterfield, and Senior Director of Applicant Security Products at Rapid7, Dan Kuykendall, join host Michael Farnum to discuss the “Categorical Blindspot” that is API’s. Hacking them, securing them, and everything in between!  

Things Mentioned:

·      https://healthitsecurity.com/news/logan-health-faces-lawsuit-in-wake-of-hacking-incident

·      https://www.bleepingcomputer.com/news/security/revil-ransomware-member-extradited-to-us-to-stand-trial-for-kaseya-attack/

·      https://thehackernews.com/2022/03/russian-pushing-its-new-state-run-tls.html 

·      https://apis.guru/graphql-voyager/

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Host: Michael Farnum 

Produced by: Set Solutions

Edited by: Lauren Lynch