In this special holiday fundraising episode I have not one but two special guests joining a small panel to discuss the current state of mobile security and the pitfalls of social engineering. Mike Jones is a former Anonymous hacker and founder of the Haunted Hacker security podcast and magazine. Jonathan Scott is a Mobile Security Researcher and the author of the Pegasus ID software.

 I was also joined by Jim Kuiphof, Director of Information Security for Spectrum Health, Richard Melick from Zimperium, Brian Schneble and Mitch Milligan from Sentinel One, Claudio Cattai and Chuck Chessor from Netskope.

 Talking Points:

• Can you really be hacked with just a mobile text message?
• Is your data 'really' gone after you wiped your phone?
• Did you know that your smart watch is listening when you wash your hands?
• Is Pegasus the only Nation State malware out there?
• How will this affect TeleHealth on mobile devices?
• What can we do to start reigning this issue?
• How do we protect ourselves from different social mobile attacks?

Episode Sponsors:

We are very to have 3 great sponsors for this fundraiser episode. Many thanks to Sentinel One for being a second year sponsor, and to Netskope and Zimperium for helping raise funds for 3 great charities! North Kent Connect, Toys for Tots and Hand for Help.  Thank you very much!

In this episode I sit down with Lloyd Guyot,  Mike Peterson and Steve Barnes to discuss the state of cybersecurity in 2021. Lloyd is a Client Solutions Advisor for Optiv, Mike is a Cybersecurity Consultant for Cadre and Steve is a Systems Engineer for Fortinet.

Talking Points:

• How do we secure the new hybrid workforce?
• Is SASE where is needs to be going into 2022?
• Do you think there is ransomware fatigue?
• How is Social Engineering just security marketing hype?

We cover a veritable cornucopia of security topics for your listening pleasure!

Episode Sponsor:

This episode is sponsored by Fortinet. Fortinet is a leader in the Gartner® Magic Quadrant™ for Network Firewalls and moving towards a Zero Trust Access future. Fortinet is based out of Sunnyvale, California. 

In this episode I have a special guest joining me to talk about a 'Passwordless Future'.  Jorel VanOs is the Chief Information Security Officer for the insurance company that is taking off like a rocket ship, Acrisure.  This is continuing a great conversation that was discussed in the Security Leadership panel at this year's C3 Tech Advisors IT Summit.

Talking Points:

• What are companies not understanding about Multi Factor Authentication (MFA)?
• Why do banks use Email/SMS in this age of basic data already being out there?
• If security keys are the answer then why aren't companies not using them more?
• What is this upcoming MFA apocalypse/reckoning I keep hearing about?
• What are somethings that a SMB can do right now when it comes to better use of MFA?
  • Google Voice/Fi?
  •  Apple/Google need to convert their phones into an open standard 
  •  Why can't your mobile phone provider use their verification as an MFA 

Podcast Charity:

 On behalf of Jorel's work in creating the Work + Shelter charity to support women in India, #RealTalkwithAaronBregg is donating $100 each to the following local charities for helping shelter women: 

• Safe Haven Ministries
• Degage Ministries

 Episode Sponsor:

This episode was sponsored by Yubico.  Yubico is a global authentication leader based of out Sweden(!) with a US office in Palo Alto.

Episode Giveway:

We are giving away (5) new Yubico BioKeys!  All you have to do is be a new subscriber to the #RTWAB YouTube Channel and then message me on LinkedIn with your name, email address and company that you work for.  A fair trade of a little bit of information for a great new security product!

In this episode we are going to do things a little different. I am very to have Rebecca Harvey take over the hosting duties.  She will be interviewing myself and my awesome mentee, Natasha Young, about the last 6 months of our participation in WomSA mentorship program.

If you are interested in becoming either a mentor or a mentee, I highly encourage you to set aside sometime to listen to this episodes.  Kudos to Rebecca for being a great guest host and to Natasha for being a great mentee!

In this episode I talked with Dave Golding about Security Posture Management as a Service.  What the heck is it? Are misconfigurations just FUD from vendor marketing teams?  Dave is a Sales Executive for AppOmni.

Talking Points:

• What the heck is Security Posture Management anyways?
• What is your CASB not doing (not in a bad way)?
• What is the biggest problem with default configuration that you are seeing with customers?
• What is one of the biggest surprises that you are seeing in the industry?
• What about best practice policies?

Episode Sponsor:

This episode is sponsored by AppOmni.  AppOmni is a SaaS Security Management Software.  They are based out of San Francisco California.  As always, part of the sponsorship fees goes towards charities in West Michigan!

In this episode I sit down with Corwin Tobias, to take a deeper dive into maturing a Security Awareness program.  Corwin is the Information Security Awareness Ambassador for Blue Yonder.  I had the pleasure of working with Corwin when he was working on the Information Security Training Team for Spectrum Health.

Talking Points:

• How to quip your staff to identify key risks
• Does an employee know what to do when they make a mistake?
• A Human Firewall sounds good but doesn't always work in real life because cyber criminals adapt
• What are some things that people get wrong about Security Awareness? (Information Security Compliance fallacies)
• What departments does information security frustrate the most? Why is it important to identify them?
• Metrics are more granular than you think? It's not all about volume

In this episode I talk with Tim O'Connor about what companies don't understand about Security Awareness programs. Tim is the Manager of Knowledge Services for Cadre Information Security.

Talking Points:

• Security Awareness is  more than just Phishing awareness training
• What doesn't the business get about Security Education?
• Risk Assessments and Vulnerability Assessments are two different things
• The importance of Table Top exercises
• Brand Name Protection
• IT is NOT where the cybersecurity buck stops

Episode Sponsor:

This episode is sponsored by Cadre Information Security.  Cadre is a trust security partner based out of Cincinnati Ohio.  As always, parts of the sponsorship fee goes to Michigan charities.  In 2021 #RTWAB has raised over $3,000!

In this episode I have a special co-host, Alex O'Meera to help me interview my guest, Jim Jakary about Security Operation Center (SOC) as a Service. Alex is a newly minted Senior Security Engineer for Spectrum Health (congrats!) and Jim is an Account Executive for Expel. This was the first remote broadcast in a long time and definitely contained lots of #RealTalk!

Talking Points:

• We already have a security program, what can SOCaaS do to further help?
• Should be looking at metrics to help guide you?
• Can SOCaaS help your program with alert fatigue?
• Can a mature VM program help setup your SOC as a Success?
• Do you have the tools in place to help setup your SOC as a Success?

Podcast Sponsor:

This episode is sponsored by Expel, Expel is a Security Operations Center as a Service company that is based out of Herdon Virginia.  As always proceeds from the sponsorship will go to charities in West Michigan.

In this special milestone episode I talked with Ryan Dengate and Tim Vandermel about setting up a SIEM and SOC program before you try and tackle implementing SOAR.  Ryan is a Technical Engineer Lead and Tim is a Global Account Executive.  They both work for a great West Michigan company called C3 Tech Advisors. 

Talking Points:

• What are they seeing/hearing from customers right now
• Do SMBs understand the importance of cyber liability insurance how SIEM/SOC programs can help?
• Where do you start your program?
• What are things you can do to 'get ready' to implement them?
• What are some of the biggest challenges?
• Can SOAR help with resource issues?

Episode Sponsor:

This episode is sponsored by C3 Tech Advisors.  C3 is based out of beautiful West Michigan and offers both security solutions and Telecomm voice and data solutions as well.  As always have of the sponsorship fee goes to charities throughout Michigan!

In this episode I have a special co-host Natasha Young. Natasha is my WomSA security mentee. Here and I had a chance to speak with Stephanie Aceves about endpoint solutions as a security AND business tool.  Stephanie is an Threat Response Subject Matter Expert Leads for Tanium.

Talking Points:

• What’s the difference between EDR and what Tanium does? Specifically, how can end-point management systems close the gap between traditional detection systems and automation while still being able to manage time sensitivity?
• What are some of the lessons learned from recent cyber attacks, such as SolarWinds, Microsoft Exchange, and the Colonial Pipeline where a tool like Tanium (end-point management) could have prevented or mitigated the damage?
• President Biden signed an executive order recently, this past May to improve cybersecurity in America.  In the executive order talked about Improving Detection of Cybersecurity Incidents on Federal Government Networks. “The Federal government should lead in cybersecurity, and strong, Government-wide Endpoint Detection and Response (EDR) deployment coupled with robust intra-governmental information sharing are essential.” Where can Tanium be used with some of the statements made around EDR?
• What does this executive order mean for Tanium and has the company adopted this as an opportunity to help other companies? 

Podcast Sponsor:

This episode was sponsored by Tanium. Tanium is an endpoint security solution and they are based out of Kirkland, Washington. As always proceeds from the sponsorship will go towards charities in Michigan.