Security Confidential

Dallas is a US Army Veteran and Cyber Professional. He has worked for many companies including PerimeterX, Blue Shield, PayPal, and HUMAN where he is currently the Threat Intelligence Analyst. He is skilled in Python, SQL, Information Security, JavaScript, Networking, and recently obtained a new certification in Cyber Threat Management   

00:00 Introduction 

00:16 Our Guest 

00:45 What’s new from Dallas 

02:34 HUMAN + Perimeter X 

03:51 Cyber is not secure! 

05:34 Phishing Emails 

09:25 2 Human behaviors that cause breaches 

13:24 Analyst Fatigue 

15:56 Having Humans perform Automation is not proper automation 

20:07 Realtor, Angel Investor, and more projects from Dallas 

24:23 HBO Documentary with Dallas 

35:32 More news from Dallas 

38:14 Connecting with Dallas  

Article Mentioned:  https://www.businesswire.com/news/home/20210330005240/en/White-Ops-Reintroduces-Itself-as-HUMAN-Signaling-Cybersecurity-Company%E2%80%99s-Dedication-to-Protecting-Enterprises-from-Bot-Attacks 

About HUMAN: https://www.humansecurity.com/newsroom/tag/in-the-news

----------------------------------------------------------------------  

To learn more about Dallas visit https://www.linkedin.com/in/dallascbaker/ 

https://www.instagram.com/realdallasbaker/

 To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

----------------------------------------------------------------------  

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! 

 Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube: @Dark Rhino Security ​

#SecurityConfidential #DarkRhinoSecurity 

Philippe is the Founder and CEO of CrowdSec, an open-source multiplayer firewall that is able to analyze visitor behavior & provide an adapted response to all kinds of attacks. Phillipe has also received an MBA in Computer Sciences from EPITA, as well as created 5 start-ups and seeded 10 of them. In his spare time, Philippe is a frequent public speaker, FPV drone pilot, horse rider, and Certified Rescue diver.

00:00 Introduction 

00:20 Our Guest 

02:15 Philippe’s Origin Story 

07:42 Becoming a Leader 

14:51 The Captain America Approach 

18:20 Approaching Unknown Unknowns 

22:34 How to monetize an open-source platform 

26:19 Free Users

 27:15 Where is Open source going? 

28:34 CrowdSecs big announcement 

32:01 Malevolent IP addresses Growing 

33:25 Ensuring Accuracy 

37:32 More about Philippe  

Article Mentioned:  https://health.clevelandclinic.org/barometric-pressure-headache/ 

To learn more about Philippe visit https://www.linkedin.com/in/philippehumeau/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

----------------------------------------------------------------------  

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @Dark Rhino Security ​

#SecurityConfidential #DarkRhinoSecurity 

John Shegerian (pronounced "SHUH-GARE-EE-UHN") is the co-founder and Chairman/CEO of ERI, the largest fully integrated IT and electronics asset disposition provider and cybersecurity-focused hardware destruction company in the United States. He is also the co-author of the #1 best-selling book "The Insecurity of Everything: How Hardware Data Security is Becoming the Most Important Topic in the World” and the host of the IMPACT podcast.  

00:00 Introduction 

00:10 Our Guest  

01:34 Johns Origin Story 

05:34 The secret to success: Doing good for others 

07:56 Advice for Future Entrepreneurs 

11:00 ERI: SOC2 Compliance 

12:05 What are the steps for recycling electronics? 

15:33 Gold, Copper, Precious Metals 

18:30 Is there a recycling issue forming with EV cars? How JB Straubel is involved 

25:21 Hardware Hacking 

30:55 What to do before throwing electronics away 

38:07 Anything you can’t recycle? 

42:03 A FREE COPY OF JOHNS BOOK 

44:33 Johns Book  

47:11 Rental Car Agencies 

48:20 Anything new for John

 ----------------------------------------------------------------------  

To learn more about John visit https://johnshegerian.com 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

----------------------------------------------------------------------  

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! 

 Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @Dark Rhino Security ​ 

---------------------------------------------------------------------- 

Articles Mentioned  

United Nations Article:  https://ewastemonitor.info/gem-2020/ 

https://www.businesswire.com/news/home/20170914006135/en/Fortune-Magazine-Calls-Electronic-Waste-%E2%80%98Dead-but-Not-Forgotten%E2%80%99----ERI-Featured-in-Report-About-Cybersecurity 

https://fortune.com/2017/09/06/electronic-waste-recycling-cybersecurity/  

Information and photos about John:  

https://impactpodcast.com/ 

https://eridirect.com/category/news/ 

https://johnshegerian.com/gallery/ 

https://eridirect.com/  

1992 LA Rodney King Riots:  

https://www.britannica.com/event/Los-Angeles-Riots-of-1992

 https://www.npr.org/2017/04/26/524744989/when-la-erupted-in-anger-a-look-back-at-the-rodney-king-riots 

https://www.nbclosangeles.com/news/local/timeline-rodney-king-beating-lapd-verdict-1992-la-riots/2880027/

Brian started his career as a systems analyst for the United States Army then became a Senior Systems Analyst for the United States Airforce. From then on, Brian grew extensive experience with a background in managing risk, security, compliance, business continuity, and governance for SaaS providers. He is currently a Security Test Manager for Adobe.   

00:00 Introduction 

01:05 The Army or the Airforce? Is one better than the other? 

01:40 Brians Background 

03:07 Pivoting into a new role 

07:14 Credentials: What is important to get? 

12:17 Is cybersecurity about a mindset or skill? 

13:12 Communicating the Mindset 

19:00 Risk Assessment process 

24:30 100% Compliance  

31:00 Getting pushback 

33:47 Risk Quantification 

36:36 Third-party risk 

47:39 News for Brian

 ----------------------------------------------------------------------  

To learn more about Brian visit https://www.linkedin.com/in/briandavisit/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

----------------------------------------------------------------------  

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @Dark Rhino Security ​

Kenneth is a Senior Cyber Security Consultant at EY where he specializes in SIEM and SOAR technologies. He is also the Founder and owner of Ellington Cyber Academy, an E-Learning platform that teaches and trains people on how to use various SIEM and SOAR technologies so that they can transition or upskill themselves in their careers. On top of all that, Kenneth is also a part-time Associate cybersecurity instructor at the University of Houston and a Cybersecurity trainer at Blacks In Cybersecurity.   

00:00 Introduction 

03:08 The Chicken Tender Sub 

04:13 How important are ingredients? 

05:24 Passion for educating others 

06:30 Leaving an impression with teaching 

07:40 Being a good student 

09:34 Tips you won’t get in College 

11:06 Explaining in business terms 

12:38 Why Cybersecurity? 

14:35 An opportunity at Publix 

15:30 Cyber Bootcamp 

18:55 Why choose an analyst role? 

20:45 SIEM vs Log Management System 

23:10 What do you need for a good SIEM platform? 

27:07 What is the role of SOAR 

29:19 Ai and Analyst fatigue  

32:25 No human elements 

36:17 Common mistakes when implementing a SIEM 

37:38 Can you ever be done tuning a SIEM 

39:25 The Ellington Cyber Academy 

41:00 How does ECA compare? 

45:00 ECA’s goals in the future 

48:02 News for Kenneth 

 ----------------------------------------------------------------------  

To learn more about Kenneth visit https://www.linkedin.com/in/kenneth-ellington/  

 The Ellington Cyber Academy:  https://kenneth-ellington-s-school.teachable.com/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

----------------------------------------------------------------------  

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @Dark Rhino Security ​

#SecurityConfidential #darkrhinosecurity  

Justin is a corporate M&A attorney, Author, Tedx and keynote speaker, and business advisor, with a deep background in cybersecurity. He uses a unique skill set to collaborate with executives to create and implement multi-layered strategies to better manage cybersecurity and data protection.  He co-hosts the “She Said Privacy/ He said Security” Podcast with his wife Jodi.    

00:00 Introduction 

01:52 Origin Story 

03:19 Remote work: How attackers are successful 

07:57 Cyber Proctology Exam 

10:00 The Digital Seatbelt of the 21st Century 

13:17 Cyber being an afterthought: How to change the mindset 

14:20 Where does our Data go? 

17:57 Can you have privacy? 

19:10 Credibility Gap 

27:00 Privacy Laws in Tech (Samsung, Tesla, Healthcare) 

35:10 Data Reimagined: Building Trust 

39:52 Bad Actors 

42:48 Defense in Depth 

48:38 A Message from Justin 

 --------------------------------------------------------- 

Justin and Jodi's Book: https://www.amazon.com/Data-Reimagined-Building-Trust-Byte-ebook/dp/B0BDVQ97YQ

Justin and Jodi's Podcast: https://open.spotify.com/show/5q8B2oYUPajIvmvZiLa4K4

To learn more about Justin visit  https://www.linkedin.com/in/justinsdaniels/

 To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

--------------------------------------------------------- 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @Dark Rhino Security ​

Finishing off the Cyber Horror Story train is our Tech team..some of them.  

These three brave souls WANTED to try the Lil Nitro Gummy Bear Challenge.  

Some information: 

-The Lil Nitro Gummy bear has 9 million Scoville units! 

-The instructions are to chew the gummy bear for 30 seconds and then swallow. 

-We ate right before starting this challenge...

-After swallowing the gummy bear, the challenge begins; who can withstand the heat for 5 minutes?

 -It is 900 times hotter than a jalapeno

#SecurityConfidential #DarkRhinoSecurity 

Brian is the Vice President of Worldwide Channels and Alliances at DTEX Systems. Brian has extensive experience in MSSP, Channel, Strategic Alliances, and OEM for high-growth security solution providers. Brian has a long history with cybersecurity OEMs starting with CA where I first met him. Brian has been with McAfee, Fireeye, Cylance, Stellar Cyber, and is now with DTEX Systems.   

00:00 Introduction 

01:18 Technology trends 

02:30 Is the industry overcrowded? 

05:49 DTEX: who are they and what do they do? 

08:45 Compromised Machines

 9:26 Endpoint detection 

13:48 Where is DTEX Classified? 

15:32 Managing Vulnerabilities on the endpoint

18:19 Working with Sectors

 20:39 Customer Profile: How small is too small? 

24:05 DTEX Cloud 

25:23 Trends with Investors 

28:00 Remote work: Can you trust your employees? 

30:00 Remote work: Fake Linkedin Profiles 

33:53 More about Brian

 ---------------------------------------------------------- 

Boise States Cyber Dome Program: https://www.boisestate.edu/news/2022/10/12/welcome-to-the-cyberdome/ 

https://www.boisestate.edu/cybersecurity/ 

To learn more about Brian visit https://www.linkedin.com/in/brian-stoner-146a56/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

-------------------------------------------------------------  

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! 

 Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @Dark Rhino Security ​

#SecurityConfidential #DarkRhinoSecurity

Greg Tomchick is a former professional athlete. He played in the minor league for three seasons for the St. Louis Cardinals. He is the author of the book Growing into you. He is driven by a passion for cybersecurity from an experience he had with a former company. He is currently the Partner and CEO of Valorr. They focused on identifying and mitigating cyber threats upfront and when necessary,  countering cyber attacks with targeted and strategic responses.  

00:00 Introduction 

01:36 Gregs Origin Story 

04:15 Incubation Technologies

05:42 The right mindset 

10:26 Cyberattack 

15:12 Cybersecurity is a business problem 

15:56 100% Cyber security? 

16:56 Stimulation Output 

17:50 How much cybersecurity is enough? 

19:17 The process at Valor 

22:38 Communicating with the Department of No 

24:50 Advise for CEOs when talking about digital risk 

27:16 Talking to the executive team 

30:02 The Proactive side 

31:58 Threat Actors 

34:00 Third-Party Risk and Communicating with Vendors 

37:50 Laws 

43:12 Gregs Book 

46:00 More about Greg   

To learn more about Greg visit https://www.linkedin.com/in/greg-tomchick/    

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! 

 Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @DarkRhinoSecurity ​

#SecurityConfidential #DarkRhinoSecurity 

Kevin is the director of cybersecurity data and application protection for Cleveland Clinic. He has over two decades of experience in software development and cybersecurity.  He has done work in embedded systems and attack surface reduction and has a couple of patents related to this. He is the president-elect for the Northern Ohio HIMSS Chapter. In his spare time, he supports Velosano in fundraising for cancer research.   

00:00 Introduction 

02:12 From Rockwell to Cybersecurity 

04:53 Nation-state actors 

07:32  FedEx and Merck Cyber insurance lawsuit 

09:04 Cybersecurity awareness for healthcare. Is it discussed? 

13:08 Getting the Executive's attention 

18:19 Healthcare Data 

21:55 Purple Team/Red Team: What is their role? 

27:40 Getting the word out about Cyber 

33:03 Embedded Systems: How big of a threat are they and how do we manage it? 

37:22 Compromised Chips 

38:16 Open source components: What are the risks? 

41:06 Updating the law? Can we secure everything? 

45:24 Velosano: fundraising for cancer research.  

47:42  More about Kevin   

To learn more about Kevin visit https://www.linkedin.com/in/kevintambascio/    

Cleveland Clinic: https://my.clevelandclinic.org/giving 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: @securityconfidential and @OfficialDarkRhinoSecurity 

Facebook: @Dark-Rhino-Security-Inc 

Twitter: @darkrhinosec 

LinkedIn: @dark-rhino-security 

Youtube:  @Dark Rhino Security ​