Ready, Set, Secure

While technical building blocks are important to building your security operations center (SOC), some of the most important considerations are identifying what data sources you ingest and determining what kind of metrics indicate success. Today on the podcast Senior Security consultant, Paul Kay, and former Data Analytics practice manager, Brandt Varni, chat with Michael to discuss how to avoid wrong data, too little data, or too much data, and vanity metrics.

Things Mentioned:

• https://www.wired.com/story/ukraine-it-army-russia-war-cyberattacks-ddos/
• https://www.darkreading.com/attacks-breaches/ransomware-trained-on-manufacturing-firms-led-cyberattacks-in-industrial-sector
• https://www.theregister.com/2022/02/23/secureframe_security_compliance_investment/

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Host: Michael Farnum 

Produced by: Set Solutions

Edited by: Lauren Lynch

This week Michael and Hutch bring in Chief Strategy Officer, Brian Kenyon, of Island to discuss Islands launch and how they secured our most used tool – the browser.  

Things Mentioned:

·      https://www.dhs.gov/news/2022/02/03/dhs-launches-first-ever-cyber-safety-review-board

·      https://www.bleepingcomputer.com/news/security/mfa-adoption-pushes-phishing-actors-to-reverse-proxy-solutions/

·      https://www.island.io

·      https://www.youtube.com/watch?v=MYvm7XAZgb4

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Lauren Lynch

Welcome back to our conversation about Operational Technology. Listen in as VP of Engineering Jonathan Townsend and Senior Solutions Architect Jarrod Cunningham discuss the processes of IT to OT security and how technology is adapting, making new and simpler ways to access your off-site devices. 

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Sydney Hirt

Music Credit: Inspired by Kevin MacLeod

Link: https://incompetech.filmmusic.io/song/3918-inspired

License: http://creativecommons.org/licenses/by/4.0/

We hope you NEVER need to work with Zachary Hinkel, but in the event of a breach he’s just the person you want on your team. This week Michael and Hutch sit down with Zac to discuss his role as a Ransomware Negotiator, what the ransom process looks like once an organization is breached, and the folks behind the big business of Ransomware.  

Things Mentioned:

·      https://www.cnn.com/2021/10/14/media/mike-parson-st-louis-post-dispatch/index.html

·      https://www.cyberscoop.com/coalfire-security-pros-arrested-for-breaking-into-iowa-courthouse-are-still-bitter/

·      https://www.eff.org 

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Lauren Lynch

Music Credit: Inspired by Kevin MacLeod
Link: https://incompetech.filmmusic.io/song/3918-inspired
License: http://creativecommons.org/licenses/by/4.0/

It’s back! We’re running another month long CTF and brought back last year’s 4-time winner Cody Wheat to talk about how he got started, how CTF’s are training the next generation of security professionals, and what to expect this year. Also joining us is Greg Porterfield to talk about some of the challenges the team put together this year. 

Things Mentioned:

·      https://cybersecurity-journal.com/2021/09/17/hackers-approach-unhappy-workers-to-be-accomplices/

·       https://threatpost.com/azure-zero-day-supply-chain/169508/

·       https:/www.bleepingcomputer.com/news/security/atandt-lost-200m-in-seven-years-to-illegal-phone-unlocking-scheme/

·       https://ctf.setsolutions.com

·       houstonseccon.org 

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Sydney Andrus

Music Credit: Inspired by Kevin MacLeod
Link: https://incompetech.filmmusic.io/song/3918-inspired
License: http://creativecommons.org/licenses/by/4.0/

After a short break for Black Hat and DefCon the guys are back to talk about a topic that isn’t always fun but is very important to enterprise organizations – cybersecurity insurance. In this episode Nolen Bucek from Dean & Draper discusses what your policy can look like, what to look out for, and how outside events can affect your ability to secure proper coverage. 

Things Mentioned:

·      https://www.insurancejournal.com/news/national/2021/08/27/629122.htm

·      https://www.darkreading.com/vulnerabilities-threats/one-year-later-a-look-back-at-zerologon

·      https://www.nextgov.com/cybersecurity/2021/08/white-house-tasks-nist-producing-another-cybersecurity-framework/184868/

·      https://risky.biz

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Lauren Lynch

Music Credit: Inspired by Kevin MacLeod
Link: https://incompetech.filmmusic.io/song/3918-inspired
License: http://creativecommons.org/licenses/by/4.0/

This week Wilsonart CISO and Cybersecurity Awareness Evangelist Adam Traylor joins Michael and Hutch for our first live stream! Listen in as the trio discusses promoting cybersecurity best practices across your organization and some of the fun new tools available for training and monitoring. 

Things Mentioned:

·      https://www.securitymagazine.com/articles/95568-building-a-culture-of-cybersecurity-3-key-takeaways-from-the-2021-sans-report

·      https://www.bleepingcomputer.com/news/microsoft/new-petitpotam-attack-allows-take-over-of-windows-domains/

·      https://www.zdnet.com/article/kaseya-says-it-has-now-got-the-revil-ransomware-decryption-key-and-it-works/#ftag=RSSbaffb68

·      https://risky.biz

·      https://hackernoon.com/cybersec-games-part-i-backdoors-and-breaches-96393b0z

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Lauren Lynch

White Hat Hacker Len Noe is back to talk to Michael and Hutch about a fascinating topic – bio hacking. Sporting multiple implants himself Len discusses the many common (and some not so common) uses of microchip implants, the subculture behind them, and what the future holds.

Things Mentioned:

·      https://thehackernews.com/2021/07/magecart-hackers-hide-stolen-credit.html

·      https://www.bleepingcomputer.com/news/security/cisa-disable-windows-print-spooler-on-servers-not-used-for-printing/

·      https://www.zdnet.com/article/the-chris-krebs-case-for-including-election-systems-as-critical-infrastructure/?&web_view=true

·      http://pegleg.org

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Lauren Lynch

Music Credit: Inspired by Kevin MacLeod
Link: https://incompetech.filmmusic.io/song/3918-inspired
License: http://creativecommons.org/licenses/by/4.0/

This week looks a little different from our regular show as we take an internal conversation around securing Operational Technology from the Thunder Dome (AKA the Set Solutions slack channel) to the podcast. Listen in as VP of Engineering Jonathan Townsend and Senior Solutions Architect Jarrod Cunningham discuss the underutilized practice of OT security and why your organization should consider the investment. 

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Lauren Lynch

Music Credit: Inspired by Kevin MacLeod
Link: https://incompetech.filmmusic.io/song/3918-inspired
License: http://creativecommons.org/licenses/by/4.0/

In Episode 30, Michael and Hutch sit down with Len Noe and Andy Thompson of CyberArk to discuss their upcoming virtual Attack and Defend event where they will go head-to-head in a real-world endpoint hacking and defense simulation.

Registration Link: https://www.cyberark.com/attack-defend-cloud/

Things Mentioned:

• https://www.bleepingcomputer.com/news/security/network-security-firm-coo-charged-with-medical-center-cyberattack/
• https://www.infosecurity-magazine.com/news/uk-us-cooperate-cybersecurity/

Do you have questions for the hosts? Reach out to us on our website at https://www.setsolutions.com/contact/

Hosts: Michael Farnum and Justin Hutchens

Produced by: Set Solutions

Edited by: Sydney Andrus

Music Credit: Inspired by Kevin MacLeod
 Link: https://incompetech.filmmusic.io/song/3918-inspired
License: http://creativecommons.org/licenses/by/4.0/