Security Confidential

#CyberHorrorStories #DarkRhinoSecurity #shorts

This October we wanted to do something different. So we came up with Cyber Horror Stories. These are 2-10 minute scary stories from your favorite guests. Now hold on, You'll still have new episodes of Security Confidential every Friday at 7 am EST on your favorite Podcast app/9 am EST on Youtube. But now, you'll also have new Cyber Horror Stories every Monday, Wednesday, and Friday as well

Share and spread the word!

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!

Instagram: https://www.instagram.com/securityconfidential/

Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/

Twitter: https://twitter.com/darkrhinosec

LinkedIn: https://www.linkedin.com/company/dark-rhino-security

Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos

Ranbir Bhutani is the CEO and vCISO of CyberCulture, a partner at Ingram Advisory Group, and a vCISO at many companies. He has a master's in cybersecurity from the University of Maryland global campus.  

00:00 Introduction 

01:00 CyberCulture and Ingram Advisory Group: What is the mission of both companies  

03:06 Why not take a corporate job? 

07:25 Myth busting #1: 100% Cyber security 

08:57 CyberCulture: Meaning behind the name 

10:50 Penalize Employees 

13:30 Myth busting #2: Achieving Compliance 

16:00 Why are companies so reactionary to their cyber issues? 

16:56 How to take cybersecurity from a cost sector to a revenue sector? 

19:05 Zero Trust Frameworks 25:07 Cloud Infrastructure  

26:35 Process steps for how the program should be operated 

36:15 Mitigation vs Outsourcing of Risk 

37:38 Do the boards understand 3rd party Risk? 

40:50 Landscape of CyberSecurity evolving 

44:00 A Message from Ranbir  

To learn more about Ranbir visit  https://www.linkedin.com/in/ranbir-b-725286175/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: https://www.instagram.com/securityconfidential/ 

Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/ 

Twitter: https://twitter.com/darkrhinosec 

LinkedIn: https://www.linkedin.com/company/dark-rhino-security 

Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos

Greg is the CEO of CryptoStopper, a ransomware protection service that automatically detects and stops active ransomware attacks. He has been a technology entrepreneur since 1998 and has founded many businesses. Including Axis Backup, a backup and disaster recovery company for the insurance industry, that he founded a few years before CryptoStopper. He is skilled in disaster recovery, Cloud computing, and Network security just to name a few.   

00:00 Introduction 

01:30 Starting your own businesses 

02:20 Tips for future entrepreneurs  

03:26 The fear of Failure 

05:13 Entrepreneurship: should it be taught in schools? 

07:50 Cryptostopper 

11:42 Access Recovery 

12:52 Getting a disaster recovery program 

19:57 Wannacry 

24:19 Anatomy of a Ransomware attack 

25:20 When would SOC notice Ransomware 

28:20 Russia 

30:16 Ransomware 

35:54 Layered Security 

37:48 Vendor Consolidation or Defense in Depth? 

40:37 Damage Mitigation and Prevention 

44:10 More about Greg  

To learn more about Greg visit https://www.linkedin.com/in/gedwardswpd/ 

https://kitcaster.com/greg-edwards/  

Cryptostopper: https://www.getcryptostopper.com/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

SOCIAL MEDIA:

Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!

Instagram: @SecurityConfidential

Facebook: @DarkRhinoSecurity Inc

Twitter: @Darkrhinosec

LinkedIn: @DarkRhinoSecurity

Youtube: @DarkRhinoSecurity

Brian is the CEO of SideChannel. Creator and Host of the CISO life podcast and a professor at Boston College. Brian is a Security Confidential alum and an expert in Cybersecurity  

00:00 Introduction 

03:40 What’s new with SideChannel 

09:02 #CISOLife 

10:30 Roe v. Wade and Data 

21:20 SMB: I’m not a target 

23:21 Understanding Controls: A whiteboard demonstration 

26:43 Top 3 things to do 

37:35 Risk and Probability by Impact: A whiteboard demonstration 

42:22 Upcoming News for Brian   

Brians Book: https://www.wiley.com/en-us/Cybersecurity+Risk+Management%3A+Mastering+the+Fundamentals+Using+the+NIST+Cybersecurity+Framework-p-9781119816287

SideChannel on Youtube: https://www.youtube.com/c/SideChannel/videos 

To learn more about Brian visit https://www.linkedin.com/in/brianhaugli/ https://sidechannel.com/team_member/brian-haugli/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: https://www.instagram.com/securityconfidential/ 

Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/ 

Twitter: https://twitter.com/darkrhinosec 

LinkedIn: https://www.linkedin.com/company/dark-rhino-security 

Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos

#SecurityConfidential #DarkRhinoSecurity

Rafael is a Mentor, Motivational Speaker, Veteran, and an accomplished information and cybersecurity executive. He has many skills such as Risk Mitigation, Encryption, Vendor Collaboration, and PCI/DSS. Rafael has worked as an IT security manager and Principal Information Security Analyst for Lowes, vCiso of Fortalice Solutions, and Senior Security Architect for Sirius Computer Solutions. He is the Founder of RAYA Cyber Solutions LLC and Co-Founder of Carolinas CISO RoundTable.  

00:00 Introduction 

01:30 Rafaels Background 

05:40 How Rafael remained positive 

08:00 Motivation for everyone 

09:40 Imposter Syndrome 

12:20 Firing up that ego 

14:00 How to motivate yourself 

16:08 “It takes an entire village to keep your data safe” 

21:44 Keeping Employees/Humans aware 

29:41 Vulnerabilities  

32:35 Friction Security  

36:00 Target breach 

39:29 Third Party Risk 

43:30 Zero Trust and SASE 

45:50 Corporate Failure  

51:08 Personal Failure 

53:03 Connecting with Rafael   

To learn more about Rafael visit https://www.linkedin.com/in/rafael-nunez-jr-167347148/  

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: 

Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: https://www.instagram.com/securityconfidential/ 

Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/ 

Twitter: https://twitter.com/darkrhinosec 

LinkedIn: https://www.linkedin.com/company/dark-rhino-security 

Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos

Founder and CEO of Prevailion, Karim Hijazi joins us on this episode of Security Confidential. He is the host of the podcast the introverted iconoclast. He has been in infosec since the 90s.  He was the former director of intelligence at Mandiant. He is a serial entrepreneur. In 2011, his second company, Unveillance’s, success resulted in disrupting the malicious operations of the hacker collective, Anonymous. He has been featured in news outlets throughout the country.   

00:00 Introduction 

01:40 Why entrepreneurship? What’s your driver? Advice? 

09:10 The Introverted Iconoclast 

16:20 Keeping Cyber Interesting 

18:47 Unveillance  

21:44 Anonymous 

26:01 The minds of Bad Actors

32:14 Sea Cucumbers and Armadillos  

35:22 Reducing the dwelling time 

37:03 How do I know I’m a target? 

42:00 Do you get threatened? 

43:54 How is Prevailion doing this? 

49:00 Polymorphism of Malware 

52:20 Artificial Intelligence  

54:50 Connecting with Karim  

To learn more about Karim visit https://www.linkedin.com/in/karimhijazi/ 

The Introverted Iconoclast: https://www.theintrovertediconoclast.com/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: https://www.instagram.com/securityconfidential/ 

Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/ 

Twitter: https://twitter.com/darkrhinosec 

LinkedIn: https://www.linkedin.com/company/dark-rhino-security 

Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos

#SecurityConfidential #DarkRhinoSecurity 

Paul is an experienced Cybersecurity executive with many skills, including being an expert on Cloud Computing. He has worked as an information security leader for Truist, Head of Cloud Security for SunTrust, and Security Architecture for Capital One. He is also a contributor to CIO Review and most recently in IDGs CIO Think Tank Roadmap report on Setting the Multi-Cloud Agenda.  

00:00 Introduction 

01:58 Pauls Background 

13:24 Learning to take risks with your job 

17:31 Advice for your career 

19:00 More about Paul's background  

26:00 Clear Program 

28:04 Malware and Bad Actors 

37:20 True Stories 

42:05 Microsoft, Google, Amazon 

45:10 The Cloud 

47:00 Top 5 tips for Companies to look at when mobilizing 

49:50 Asset managers  

51:45 Connecting with Paul  

To learn more about Paul visit https://www.linkedin.com/in/paulhamman/ 

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: https://www.instagram.com/securityconfidential/ 

Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/ 

Twitter: https://twitter.com/darkrhinosec 

LinkedIn: https://www.linkedin.com/company/dark-rhino-security 

Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos

Dallas is a US Army Veteran and Cyber Professional. He has worked for many companies including PerimeterX, Blue Shield, and PayPal. He is skilled in Python, SQL, Information Security, JavaScript, Networking, and more.     

00:00 Introduction 

01:10 Did you get your skills from the military? 

08:41 Transitioning to civilian life  

14:25 Rules of thumb when designing a website so you’re less prone to getting hacked 

21:45 Credit Card frauds 

26:35 Analyze, Understand, and Influence 

29:48 Ransomware Attacks 

31:05 Raising employee awareness about Phishing  

34:39 Making Cyber interesting 

39:11 HUMAN Security 

47:06 How many companies have it right? 

49:20 Tips for Small Businesses 

56:40 Upcoming events for Dallas  

To learn more about Dallas visit https://www.linkedin.com/in/dallascbaker/   

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

SOCIAL MEDIA:

Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!

Instagram: @SecurityConfidential

Facebook: @DarkRhinoSecurity Inc

Twitter: @Darkrhinosec

LinkedIn: @DarkRhinoSecurity

Youtube: @DarkRhinoSecurity

#SecurityConfidential #DarkRhinoSecurity 

Joshua is the CISO at H&R Block. He has deep experience in designing and building information security programs. He is an expert on Zero Trust. His approach to information security is to transparently support and drive business initiatives, leveraging security capabilities to differentiate companies from their competition. Josh has spoken at InfoSec World, InfraGard, and ISSA and he is a SANS mentor. In short, he is a master of helping companies reduce risk.   

00:00 Introduction 

01:14 Joshuas Background 

05:18 Why having different backgrounds in cyber is so important 

15:06 Using Cybersecurity as a competitive advantage 

17:04 Brand Loyalty program 

23:35 How do you measure and monitor risk? 

30:30 Establishing a culture in Cybersecurity 

33:10 Getting the Cyber sec people to understand the business  

36:00 Understanding the WHY

37:36 Amazon, Microsoft, Google myth 

40:40 Zero Trust vs SASE

45:00 Prevention, Detection, and Response 

48:10 3rd Party Risk 

50:12 More about Joshua  

Women In Security KC https://www.wiskc.org/ or https://www.linkedin.com/company/wiskc/ 

H&R Blocks Accelerate Program https://www.hrblock.com/careers/ 

Anam Cara: A Book of Celtic Wisdom by John O'Donohue https://www.amazon.com/Anam-Cara-Book-Celtic-Wisdom/dp/006092943X 

Atomic Habits: An Easy & Proven Way to Build Good Habits & Break Bad Ones by James Clear https://www.amazon.com/Atomic-Habits-Proven-Build-Break/dp/0735211299 

To learn more about Joshua visit https://www.linkedin.com/in/brownjosh/  

To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com 

SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!  

Instagram: https://www.instagram.com/securityconfidential/ 

Facebook: https://m.facebook.com/Dark-Rhino-Security-Inc-105978998396396/ 

Twitter: https://twitter.com/darkrhinosec 

LinkedIn: https://www.linkedin.com/company/dark-rhino-security 

Youtube: https://www.youtube.com/channel/UCs6R-jX06_TDlFrnv-uyy0w/videos