Security Confidential

Security Confidential

By Dark Rhiino SecurityNewsTech News
Download on the App Store

Security Confidential episodes

  • S10 E5 What is Hack-back?

    Shea has over 25 years in cybersecurity, risk, and technology. Including incident response planning, crisis management, security assessments, developing and maturing cybersecurity programs, and more.

    00:00 Introduction
    01:07 Our Guest
    02:39 The policy question that made me pause my vacation
    05:16 Diversity in Cyber
    06:22 Echelon Risk
    07:05 Has the Executive Mindset changed?
    12:52 Hack-Back and the Biden administration
    18:50 News from Shea
    ----------------------------------------------------------------------
    2023 Central Ohio InfoSec Summit (https://www.infosecsummit.com/website/44575/home/) – it’s titled “Beyond Checking the Box: Putting Compliance at the Forefront of Decision-Making” being presented by Amelia Fisher
    https://echeloncyber.com/
    Hack-Back
    https://www.techdirt.com/2023/01/27/biden-administration-declares-war-on-the-internet-clears-path-for-offensive-hacking-efforts-by-federal-agencies/https://www.securityweek.com/us-national-cyber-strategy-pushes-regulation-aggressive-hack-back-operations/https://www.darkreading.com/ics-ot/bidens-cybersecurity-strategy-calls-for-software-liability-tighter-critical-infastructure-securityhttps://slate.com/news-and-politics/2023/01/biden-cybersecurity-inglis-neuberger.htmlhttps://www.newyorker.com/magazine/2018/05/07/the-digital-vigilantes-who-hack-backhttps://techbeacon.com/security/why-hack-back-still-worst-idea-cybersecurity
    ---------------------------------------------------------------------
    To learn more about Shea visit https://www.linkedin.com/in/sheanangle/
    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com
    ----------------------------------------------------------------------
    SOCIAL MEDIA:
    Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!
    Instagram: @securityconfidential and @OfficialDarkRhinoSecurity
    Facebook: @Dark-Rhino-Security-Inc
    Twitter: @darkrhinosec
    LinkedIn: @dark-rhino-security
    Youtube: @Dark Rhino Security ​

    21 min
  • S10 E4 Why is the U.S Banning Tiktok?

    Continuing our Conversation with Navy SEAL, Mike Rice  


    00:00 Introduction 

    00:18 Our Guest 

    00:30 The Future of War 

    05:06 Is China our biggest threat?

     09:13 TikTok and other Chinese Apps 

    11:40 Spy Balloons? Weather balloons? What was it? 

    16:13 Where do you see the war in Ukraine headed?

     17:58 Who is the Wagner group? 

    18:41 Russia

    24 min
  • S10 E3 How Smartwatches lead Iran to US Troops

    Host Rory Meikle chats with Mike Rice. Mike is a retired Navy Seal officer who started out his Military career as an enlisted marine corp infantry. This is part 1 of their conversation.


    00:00 Introduction

    00:18 Our Guest

    00:33 The Navy SEAL Team

    04:05 What made you shift to SEAL Team?

    08:16 What was the atmosphere like in BUD/S?

    11:09 How was the SEAL Team Technology after 9/11?

    13:21 Leveraging Technology

    17:39 Where do you see technology affect you the most?

    21:40 Stories with Mike

    25 min
  • S10 E2 The Secrets of Linkedin's Algorithm

    David is a SOC Analyst, Cyber Mentor, Educator, and Founder and Creator of CyberTech Dave. He holds a Master of Science degree in Information Systems and has a wide array of skills ranging from Teaching to Virus Removal. David is passionate about Cybersecurity and enjoys using his platform to teach people how to protect themselves and stay safe online.  


    00:00 Introduction 

    00:17 Our Guest  

    01:12 Using LinkedIn to break into Cybersecurity 

    07:30 Fake Profiles on Linkedin 

    08:30 Having a complete profile 

    10:19 the LinkedIn Algorithm  

    14:20 Useful Certifications and Resources 

    26:39 Davids Book about Women in Cyber 

    32:28 SOC fatigue

     36:27 What role does Automation has? 

    37:46 Will Automation replace a SOC Analyst? 

    39:30 How can Clients improve their Cybersecurity? 

    42:35 Risk Assessments: Who should be leading? 

    45:20 Connecting with David


    ---------------------------------------------------------------------- 

    To learn more about David visit https://www.linkedin.com/in/david-meece-cybertech-dave/ 

    To learn more about Dark Rhino Security at https://www.darkrhinosecurity.com

    ----------------------------------------------------------------------  

    SOCIAL MEDIA: Stay connected with us on social media, where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

    Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

    Facebook: @Dark-Rhino-Security-Inc

     Twitter: @darkrhinosec 

    LinkedIn: @dark-rhino-security 

    Youtube:  @Dark Rhino Security ​ 

    ----------------------------------------------------------------------

      https://securityplus.training/

    50 min
  • S10 E1 Helping Pave the way for Women in Cyber

    #SecurityConfidential #DarkRhinoSecurity 

    Jax is a cyber influencer, author, speaker, podcaster, President, and Founder of Outpost Gray. With over 13 years of experience working in IT and cyber, both private and public sectors. Jax spent a significant portion of her life serving in the Special Operations Command, spearheading global Cyber, Electronic Warfare, and Intelligence operations. She is also the co-host of the cybersecurity podcast 2CyberChicks.   


    00:00 Introduction 

    00:16 Our Guest 

    01:52 Being in the Special Forces as a Woman 

    04:30 Cultural Support Team Program 

    07:47 Jaxs’ Current Mission 

    09:29 What is an Entry-Level Job? 

    11:49 How Jax began her journey into Cybersecurity 

    16:07 Data Breaches: What’s broken? 

    18:07 Company Policies and Bringing Awareness 

    19:38 Compliance isn’t security 

    23:17 NIST vs CMMC vs ISO 

    27:03 Who uses CMMC? 

    30:56 Resources for CMMC  

    32:12 What should the Federal Government be adopting? 

    36:45 HackBack 

    41:58 Connect with Jax

     ---------------------------------------------------------------------- 

     To learn more about Jax visit https://www.linkedin.com/in/iamjax/ 

    https://twitter.com/outpostgray 

    https://iamjax.me/ 

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

    ----------------------------------------------------------------------  

    SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

    Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

    Facebook: @Dark-Rhino-Security-Inc 

    Twitter: @darkrhinosec 

    LinkedIn: @dark-rhino-security 

    Youtube:  @Dark Rhino Security ​ 

    ---------------------------------------------------------------------- 

    Articles and Resources Mentioned in this Video:  

    Jaxs' Book: https://www.amazon.com/Cybersecurity-Career-Master-Plan-cybersecurity/dp/1801073562/ref=sr_1_2?crid=2NPCHKN8K746B&keywords=jaclyn+scott&qid=1645818712&sprefix=jaclyn+scott%2Caps%2C181&sr=8-2&redirectFromSmile=1 


    Cultural Support Team Program: https://arsof-history.org/articles/v12n2_cst_timeline_page_1.html 


    NICE and NIST Frameworks: 

    https://resources.infosecinstitute.com/topic/what-is-the-nice-cybersecurity-workforce-framework/ 

    https://www.cisa.gov/nice-cybersecurity-workforce-framework 

    https://www.securityprogram.io/a-guide-to-common-security-standards/ 


    Target Breach: https://www.darkreading.com/attacks-breaches/target-ignored-data-breach-alarms 

    JP Morgan Breach: https://archive.nytimes.com/dealbook.nytimes.com/2014/10/02/jpmorgan-discovers-further-cyber-security-issues/ 


    HackBack: https://foresite.com/blog/what-is-the-proposed-hack-back-bill/ 

    Computer Fraud and Abuse Act: https://www.sciencedirect.com/topics/computer-science/computer-fraud-and-abuse-act#:~:text=The%20Computer%20Fraud%20and%20Abuse%20Act%20of%201986%20makes%20it,or%20foreign%20commerce%20or%20communication.  


    Active Cyber Defense Certainty Act https://www.billtrack50.com/BillDetail/1133039

    44 min
  • S9 E10 Biological Viruses vs Computer Viruses

    Wendy is a keynote speaker, Principal Cloud Security Architect, and senior security advisor. She has worked for Cisco, PWC, and Deloitte. Has a doctorate from the University of Oxford. She is currently with OneWeb. Prior to joining OneWeb, Wendy was Experian’s DevSecOps Security Managing Adviser and defined the strategy for the organization's global DevSecOps transformation initiative.  Wendy is active in the community, regularly sharing experiences through keynotes, Blogs, and Black Hat.  

    00:00 Introduction 

    00:21 Our Guest 

    01:40 Transitioning from Medical Genetics to Cyber 

    04:50 The importance of having people from different fields 

    07:41 Comparisons between Biological Virus and Breach 

    12:09 Low Earth Orbit Constellation 

    18:18 Hackers are Collaborative  

    22:01 100% Security 

    26:30 Understanding the Risk

     30:40 Building a Culture of Awareness  

    35:35 DevSecOps 

    38:50 Controlling that 3rd party risk 

    43:15 Connecting with Wendy


    VkzkH79NmeR5yCZidDzz

    47 min
  • S9 E9 How Paris Hilton Helped My Career

    Bob Carver CISM, CISSP, M.S. began his security career working in the financial industry. Later, Bob became the first full-time security employee hired to start the dedicated security monitoring and incident response team for Verizon Wireless. He has been involved in cyber risk management, policy, threat intelligence, and analytics. He was recognized by LinkedIn as one of the Top 5 Influencers in the World to follow in Cybersecurity. Most recently, he was on the expert panel for CES (Consumer Electronics Show) in Las Vegas discussing "Focusing on Security in Product Innovation."   


    00:00 Introduction 

    00:18 Our Guest 

    01:47 Bobs Beginning  

    05:02 How did Bob land his position at Verizon?

     08:00 Budget issues 

    11:02 Why are companies so ineffective with Cybersecurity? 

    13:38 Cyber professionals not addressing business security implications 

    18:40 Malvertising

     21:31 Not downloading everything off the internet  

    26:15 Curing your problems with a tool 

    28:26 Budgeting: Where should you prioritize? 

    32:22 ChatGPT 

    33:47 Cyber Insurance 

    37:29 Multifactor Authentication  

    43:06 File Storing System 

    45:48 Modern-day Bonnie and Clyde 

    47:43 Connecting with Bob 

     ---------------------------------------------------------------------- 

    Bobs video on Malvertising: https://www.linkedin.com/feed/update/urn:li:activity:7029053209889411072/ 

    Bob's Twitter: @cybersecboardrm  

     Bob's LinkedIn https://www.linkedin.com/in/bobcarver/ 

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

    ----------------------------------------------------------------------  

    SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! 

     Instagram: @securityconfidential and @OfficialDarkRhinoSecurity

     Facebook: @Dark-Rhino-Security-Inc 

    Twitter: @darkrhinosec 

    LinkedIn: @dark-rhino-security 

    Youtube:  @Dark Rhino Security

     --------------------------------------------------------------------- 

    Articles Mentioned: 

     https://cybermagazine.com/cyber-security/executive-profile-bob-carver-verizon-wireless 

    https://www.wired.com/2005/02/paris-hilton-hacked-or-not/



    VkzkH79NmeR5yCZidDzz

    51 min
  • S9 E8 Confessions of a CIA Spy

    Peter Warmka is a Keynote Speaker, Author, Cybersecurity/Insider Threat Consultant, Founder of Counterintelligence Institute, and a retired senior intelligence officer with the U.S. Central Intelligence Agency (CIA) where he specialized in clandestine HUMINT (human intelligence) collection.


    00:00 Introduction

    00:19 Our Guest

    01:39 How do you become a CIA Intelligence Officer?

    05:59 Human Intelligence Gathering

    08:27 Knowing the risks within the job

    13:24 The Counterintelligence Institute

    13:53 Statistics and TED talks

    19:42 Change the name of Cybersecurity

    22:03 Getting into the mind of a Hacker

    27:19 Why would anyone target me?

    30:11 Panama Papers

    32:28 Success with Employee Awareness

    34:57 Being cautious on the Social Media

    40:45 Fake Profiles on Social Media

    42:32 Advanced AI technology/ ChatGPT

    43:20 The Dangers of Linkedin

    49:43 Peters Book: Confessions of a CIA Spy

    53:10 Contact Peter

     ----------------------------------------------------------------------  

    More About Peter:

    https://www.counterintelligence-institute.com/upcoming-events

    https://www.amazon.com/Confessions-CIA-Spy-Human-Hacking-ebook/dp/B08QYZJ13K?ref_=ast_author_mpb

    https://www.linkedin.com/in/peterwarmka/ 

     ----------------------------------------------------------------------  

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

     ----------------------------------------------------------------------  

    SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

    Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

    Facebook: @Dark-Rhino-Security-Inc 

    Twitter: @darkrhinosec 

    LinkedIn: @dark-rhino-security 

    Youtube:  @Dark Rhino Security

    56 min
  • S9 E7 Everybody has a Boss

    Eric is an entrepreneur and the CTO of SOOS, a software technology company. He has 15+ years of experience in leadership, business strategy, and software team transformation with a broad set of skills. On top of that, Eric has formal training as a software and mechanical engineer.    


    00:00 Introduction

     00:19 Our Guest 

    01:20 Software Engineering out of College 

    04:23 Being a Stay-at-Home-Dad 

    05:57 Entrepreneurship to Corporate  

    07:33 Everybody has a boss 

    08:53 Giving Interview Feedback  

    11:25 Opinionated Questions in an Interview 

    13:30 What is SOOS? 

    16:33 Minimum Viable Product (MVP) 

    24:27 Software tools: What works and what doesn’t? 

    29:18 People should become more aware 

    36:12 Compliance 

    41:03 SOOS tools 

    46:10 More news from Eric

     ---------------------------------------------------------------------- 

    Articles Mentioned:  

    https://soos.io/news/soos-launches-free-community-edition-sca-tool 

    https://soos.io/news/soos-partners-with-secureframe 

    https://soos.io/news/new-soos-partnership-with-rkvst-makes-it-easier-to-create-and-share-sboms 

    https://www.linkedin.com/pulse/importance-giving-feedback-after-interviews-sacha-dixon/ 

    https://www.federalreserve.gov/paymentsystems/regcc-faq-check21.htm

     ---------------------------------------------------------------------- 

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

    ----------------------------------------------------------------------  

    SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! 

    Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

    Facebook: @Dark-Rhino-Security-Inc 

    Twitter: @darkrhinosec 

    LinkedIn: @dark-rhino-security 

    Youtube:  @Dark Rhino Security ​

    48 min

About Security Confidential

From the publisher's feed

Security Confidential provides weekly interviews and insights into the world of cybersecurity. Produced entirely in-house by MSSP & global risk management firm Dark Rhiino Security.