Sign up to save your podcasts
Or
Share Security Confidential
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Security Confidential episodes
- S12 E3 Your guide to SBOMs
Eric is an entrepreneur and the CTO of SOOS, a software technology company. He has 15+ years of experience in leadership, business strategy, and software team transformation with a broad set of skills. On top of that, Eric has formal training as a software and mechanical engineer
00:00 Introduction00:16 Our Guest02:11 Open Source is Everywhere. Even Healthcare04:45 Legal Risk using Open Source06:05 Reading the Terms and Conditions07:55 Would development time increase if you don’t use Open Source?09:16 26,448 New CVEs Reported in 202211:03 Equifax Attack affected 143 Million13:01 Therac-25 Medical Device Tragedy14:53 What is a SBOM?18:53 You need an FBOM20:21 Knowing your “ingredients”21:53 Is this a blockchain problem?23:42 How does an SBOM help me?31:48 Embedded Systems40:28 Forking a project43:10 How is SOOS staying up to date47:40 Holding companies responsible53:15 News from Eric55 min - S12 E2 Who is Responsible for Cybersecurity?
Robert Black is a Lecturer in Information Activities at Cranfield University on behalf of the UK Defence Academy. He is also the former Deputy Director of the UK’s National Cyber Deception Laboratory. At the Defence Academy, he helps educate senior military leaders about Warfare in the Information Age. His interests are several interests one of them being the role of influence and deception in cyber.
00:00 Introduction00:19 Our Guest: Robert Black01:28 Rob's Journey into Cyber06:20 The weakest link is designing systems that don’t appreciate humans are integrated as a part of the system09:17 Taking an insurance mindset10:36 Does the Lock and Key model for Cyber work on bad actors?16:12 Legality and Kinetic Response (Hack back, WannaCry attack, Liam Neeson, Crowdstrike report, U.S. Military)22:30 Striking Fear into the Hackers28:00 Does that help the SOC team?29:45 Arguing with Attorneys and Hackers33:19 Use of Deception in Tech35:32 The psychology of the adversary41:41 Who is responsible for Cybersecurity?52:43 Connecting with Rob----------------------------------------------------------------------To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com----------------------------------------------------------------------SOCIAL MEDIA:Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!Instagram: @securityconfidential and @OfficialDarkRhinoSecurityFacebook: @Dark-Rhino-Security-IncTwitter: @darkrhinosecLinkedIn: @dark-rhino-securityYoutube: @Dark Rhino Security ----------------------------------------------------------------------#darkrhinosecurity #securityconfidential #cybersecurity #cyberpodcast #ai #artificialintelligence #securitypodcast #cybernews #technews #techsoftware #informationtechnology #infosec #cybersecurityforbeginners #technewstoday56 min - S12 E1 Tech Talk Overwhelms the NonTechnical
Marius is also a public speaker, mentor, and non-executive director for many cybersecurity businesses. He was the former Cloud Security Architect and Analyst at Domino’s Pizza UK & Ireland, Analyst at Burberry, and many more.
00:00 Introduction00:18 Our Guest: Marius Poskus01:03 Physical Security to Cybersecurity04:14 Tech talk overwhelms the nontechnical11:00 How do you go about assessing risk?17:20 A message to the executives21:56 Cyber basics: How do you connect the dots?26:39 Understanding the techniques from the 3 letter agencies42:47 The Role of Offense48:58 What can we do to implement processes to look out for configurations?53:55 More about Marius----------------------------------------------------------------------To learn more about Marius visit https://www.linkedin.com/in/marius-poskus-92611b22/To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com----------------------------------------------------------------------SOCIAL MEDIA:Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!Instagram: @securityconfidential and @OfficialDarkRhinoSecurityFacebook: @Dark-Rhino-Security-IncTwitter: @darkrhinosecLinkedIn: @dark-rhino-securityYoutube: @Dark Rhino Security ----------------------------------------------------------------------#darkrhinosecurity #securityconfidential #cybersecurity #cyberpodcast #ai #artificialintelligence #securitypodcast #cybernews #technews #techsoftware #informationtechnology #infosec #cybersecurityforbeginners #technewstoday #informationsecurity #defense #depth #ciso #risk #malware #ransomware #technews #informationtechnology #oilandgas #mssp #entrepreneur #invest #businesstips #dublinohio #digitalmarketing #socialmediamarketing#follow #foryoupage #Computerscience#Security #Cyberattack #Cloudcomputing58 min - S12 E0 BONUS: The IT Security Money PitWe discuss the stigma of IT security being a bottomless money pit, as well as some cost effective solutions to help secure your network.32 min
- S11 E10 Can Cyber Mercenaries Overthrow the Government?
#SecurityConfidential #DarkRhinoSecurity
Chris Rock is a Cyber Mercenary, A three-time presenter at DEFCON, Author of The Baby Harvest, and Co-Founder of SIEMonster. Chris has spent the last 30 years in the Middle East, the US, and Asia preventing cyber attacks for governments and private organizations alike.Chris and his team excel at countering sophisticated cyber threats with the implementation of advanced SIEM methods for all types of organizations. Chris is passionate about raising the public’s awareness of modern cybersecurity threats and trends.00:19 Can Cyber Mercenaries overthrow the government?04:32 What can we do about it?09:50 SIEM logic for engineers12:43 Could the government apply policies to help?14:32 Refusing to loose Power17:55 Chris’ Research23 min - S11 E9 Terminated From Speaking at TED Global
Chris Rock is a Cyber Mercenary, A three-time presenter at DEFCON, Author of The Baby Harvest, and Co-Founder of SIEMonster. Chris has spent the last 30 years in the Middle East, the US, and Asia preventing cyber attacks for governments and private organizations alike.
Chris and his team excel at countering sophisticated cyber threats with the implementation of advanced SIEM methods for all types of organizations. Chris is passionate about raising the public’s awareness of modern cybersecurity threats and trends.00:00 Introduction00:24 Our Guest01:18 How many Chris Rocks are there?02:58 3 Cyber Threats to Society05:56 Can you use Genralative Ai for malicious reasons?09:00 The Third Cyber Threat to Society12:26 Looking for flaws in the process16:15 The Gartner Model18:16 Is it Laziness, Apathy, or Indifference?23:59 Terminated from speaking at TED Global----------------------------------------------------------------------Order his book here:https://www.amazon.com/Baby-Harvest-terrorist-criminal-laundering/dp/1515014576To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com----------------------------------------------------------------------SOCIAL MEDIA:Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!Instagram: @securityconfidential and @OfficialDarkRhinoSecurityFacebook: @Dark-Rhino-Security-IncTwitter: @darkrhinosecLinkedIn: @dark-rhino-securityYoutube: @Dark Rhino Security ----------------------------------------------------------------------#darkrhinosecurity #securityconfidential #cybersecurity #cyberpodcast #ai #artificialintelligence #securitypodcast #cybernews #technews #techsoftware #informationtechnology #infosec #cybersecurityforbeginners #technewstoday30 min - S11 E8 The Recovery of Missing and Exploited Children
#SecurityConfidential #DarkRhinoSecurity
---------------------------------------------------------------------------Your life is important to everyone around you. If you have had Suicidal thoughts, please call or chat the:988 Suicide and Crisis LifelineHours: Available 24 hours. Languages: English, SpanishYou can also chat with them online:https://988lifeline.org/---------------------------------------------------------------------------Kevin Metcalf is a former federal agent turned prosecutor, author, and founder of the National Child Protection Task Force, which brings together recognized experts in fields such as strategic legal applications, OSINT, cellular mapping and analysis, dark web investigations, and cryptocurrency to aid law enforcement agencies everywhere. Kevin has assisted with the recovery of numerous missing and exploited children and the identification and apprehension of sexual predators in multiple states.00:00 Disclaimer00:10 Introduction00:23 Our guest01:30 What is OSINT? How does it work?05:10 Privacy laws11:30 Sextortion17:51 Financial Sextortion: How it works20:00 When does it become statistically significant21:33 What lead Kevin to help children22:37 What role does law enforcement play?25:52 A special case28:45 OSINT, Mobile devices, and Kevins Books34:53 Kevin's thoughts on the ADPPA41:19 News from Kevin----------------------------------------------------------------------To learn more about The National Child Protection Task Force (NCPTF) visit: https://www.ncptf.org/Read more of Kevins Work:https://www.amazon.com/Books-Kevin-Metcalf/s?rh=n%3A283155%2Cp_27%3AKevin+MetcalfTo learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com----------------------------------------------------------------------SOCIAL MEDIA:Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!Instagram: @securityconfidential and @OfficialDarkRhinoSecurityFacebook: @Dark-Rhino-Security-IncTwitter: @darkrhinosecLinkedIn: @dark-rhino-securityYoutube: @Dark Rhino Security ----------------------------------------------------------------------#darkrhinosecurity #securityconfidential #cybersecurity #cyberpodcast #ai #artificialintelligence #securitypodcast #cybernews #technews #techsoftware #informationtechnology #infosec #cybersecurityforbeginners #technewstoday #missingchildren #NationalChildProtectionTaskForce44 min - S11 E7 What makes a great DevOps team?
Benjamin Johnson is a serial entrepreneur with a track record of success and hands-on open-source programming experience. With 20+ years as a software developer and leader, Benjamin is the CEO & Founder of Particle41, a dev firm founded by industry veterans that aims to help companies accelerate their initiatives through Software Development, DevOps, and Data Science.
00:00 Introduction00:20 Our Guest01:25 Behind the name: Particle4103:07 Ben’s Origin story05:14 Where did the ideas come from?08:20 Outsourcing DevOps10:45 What makes a great DevOps team?16:50 Extreme Ownership19:50 “Bridge” Personality21:30 Is there a benefit to being first to market?22:55 Monetizing Open Source28:22 Characteristics that make successful people34:02 More about Ben----------------------------------------------------------------------To learn more about Ben visithttps://www.linkedin.com/in/benjaminrjohnson/https://particle41.com/https://www.linkedin.com/company/particle41/To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com----------------------------------------------------------------------SOCIAL MEDIA:Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!Instagram: @securityconfidential and @OfficialDarkRhinoSecurityFacebook: @Dark-Rhino-Security-IncTwitter: @darkrhinosecLinkedIn: @dark-rhino-securityYoutube: @Dark Rhino Security ----------------------------------------------------------------------#darkrhinosecurity #securityconfidential #cybersecurity #cyberpodcast #ai #artificialintelligence #securitypodcast #cybernews #technews #techsoftware #informationtechnology #infosec #cybersecurityforbeginners #technewstoday37 min - S11 E6 You CAN Train Your Mind
#SecurityConfidential #DarkRhinoSecurity
This is part 2 of our discussion. Bec McKeown is a Chartered Psychologist with twenty years experience of in researching and evaluating human performance in high-risk, high-stakes organizations, including the UK Ministry of Defence. She is an expert on the ways humans behave when working in complex, uncertain, and ambiguous environments and human performance in cybersecurity. She established Mind Science which assists companies at an operational and strategic level.00:00 Introduction00:10 Does a person have the ability to pause their thoughts before taking action?05:18 What is Resilience?10:32 You can Train your mind12:34 Why do teams still fall apart under pressure?14:42 What would you say to the executive?17:26 What to do if you get the same results again?19:00 The Wicked Problem21:04 The Chain of Command28:01 Mandatory Security Awareness training: What does that have to do with me?33:30 More about BecThinking, Fast and Slow by Daniel Kahnemanhttps://www.amazon.com/Thinking-Fast-Slow-Daniel-Kahneman/dp/0374533555----------------------------------------------------------------------To learn more about Bec McKeown visit https://www.linkedin.com/in/rebeccamckeowncpsychol/To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com----------------------------------------------------------------------SOCIAL MEDIA:Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!Instagram: @securityconfidential and @OfficialDarkRhinoSecurityFacebook: @Dark-Rhino-Security-IncTwitter: @darkrhinosecLinkedIn: @dark-rhino-securityYoutube: @Dark Rhino Security ----------------------------------------------------------------------#darkrhinosecurity #securityconfidential #cybersecurity #cyberpodcast #ai #artificialintelligence #securitypodcast #cybernews #technews #techsoftware #informationtechnology #infosec #cybersecurityforbeginners #technewstoday #psychology #techpsychology #cyberchoices #trainingyourthinking36 min - S11 E5 The Psychology behind our Cybersecurity Choices and Teams - Part 1
This is part 1 of our discussion. Bec McKeown is a Chartered Psychologist with twenty years’ experience of researching and evaluating human performance in high-risk, high-stakes organizations, including the UK Ministry of Defence. She is an expert on the ways humans behave when working in complex, uncertain and ambiguous environments and human performance in cybersecurity. She established Mind Science which assists companies at an operational and strategic level.
00:00 Introduction
00:20 Our Guest
01:27 What is a chartered Psychologist?
03:40 How do you control chaos?
07:08 How we compare to mIlitary Training?
09:20 The baseline of response: How does the brain work?13:31 So how do we structure a team?
17:10 Cognitive Agility: Passing along that knowledge
20:29 Getting Comfortable with being uncomfortable
Thinking, Fast and Slow by Daniel Kahneman
https://www.amazon.com/Thinking-Fast-Slow-Daniel-Kahneman/dp/0374533555
---------------------------------------------------------------------
To learn more about Bec McKeown visit https://www.linkedin.com/in/rebeccamckeowncpsychol/To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com----------------------------------------------------------------------SOCIAL MEDIA:Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!Instagram: @securityconfidential and @OfficialDarkRhinoSecurityFacebook: @Dark-Rhino-Security-IncTwitter: @darkrhinosecLinkedIn: @dark-rhino-securityYoutube: @Dark Rhino Security ----------------------------------------------------------------------#darkrhinosecurity #securityconfidential #cybersecurity #cyberpodcast #ai #artificialintelligence #securitypodcast #cybernews #technews #techsoftware #informationtechnology #infosec #cybersecurityforbeginners #technewstoday #psychology #techpsychology #cyberchoices26 min
About Security Confidential
From the publisher's feed
Security Confidential provides weekly interviews and insights into the world of cybersecurity. Produced entirely in-house by MSSP & global risk management firm Dark Rhiino Security.