Security Confidential

Security Confidential

By Dark Rhiino SecurityNewsTech News
Download on the App Store

Security Confidential episodes

  • A Discussion with Ilya Bodner Found of Bold Penguin

    Ilya Bodner joins us on Security Confidential. Ilya is the found and CEO of Bold Penguin a highly successful technology company serving major insurance companies. Ilya has created a great company and achieved great success. He has received much recognition including business executive of the year and Columbus Business First 40 under 40 Class of 2019.  In this episode Ilya discusses:

    00:00 Introduction 

    01:34 Journey from Russia to the CEO of Bold Penguin 

    05:00 Partner/Co-Founder Relationships 

    09:03 Three legs of the stool for business success 

    14:25 Lessons from working with VCs 

    17:40 How to land your first customer 

    23:26 Origins of the name Bold Penguin 

    26:00 Why pick insurance as the prime sector for a tech startup? 

    28:53 Competing with insurance companies on their own products 

    32:14 Is cybersecurity a business problem or an IT problem? 

    35:47 Making cybersecurity accessible to SMBs 

    36:37 Should cyber insurance be tied to effectivity of implemented controls? 

    39:40 What does a startup enthusiast do next? 

    41:25 Career opportunities at Bold Penguin

    To learn more about Ilya Bodner

    To learn more about Dark Rhino Security


    43 min
  • S4 E5 Foreign Cyber Espionage Capabilities

    Ross Young joins us on Security Confidential to talk about cybersecurity. Ross is the CISO of Caterpillar Financial Services Corporation, a lecturer at Johns Hopkins University, and the Co-Host of the CISO Tradecraft podcast, and the inventor of the OWASP Threat and Safeguard Matrix. Ross is also a veteran of CIA and NSA.

    00:00 Introduction 

    00:55 How Ross became CISO of Caterpillar Financial Service 

    03:04 Scholarship for Service 

    04:10 Foreign cyber espionage capabilities 

    07:01 The elusive identity online 

    07:50 Compliance frameworks = great cybersecurity? 

    12:47 Can cybersecurity be used for revenue generation? 

    20:30 Learning from vendors selling in cybersecurity place 

    22:55 Vulnerability management in the cloud 

    27:02 How do you develop a resilient software system 

    31:50 OWASP Threat and Safeguard Matrix 

    37:58 Accounting for The X-Factor and Zero Day threat in cybersecurity 

    41:45 CISO Tradecraft


    The videocast for this episode

    To learn more about Ross Young 

    To learn more about Dark Rhino Security

    44 min
  • S4 E4 Should the office of the CISO be separate from IT?

    We are joined by Rob Oden for a discussion on cybersecurity. Rob is an Air Force veteran and has over 16 years of experience in cybersecurity and is a practicing security architect. This is part 2 of our interview with him. Rob provides insights into the many issues prevalent in cybersecurity and relevant to anyone serious about making their cyber environment safer.  

    00:00 Introduction 

    01:50 Why does being compliant not equate to great cybersecurity? 

    13:53 No good deed goes unpunished 

    16:50 Technology vs Process in cybersecurity

    21:45 The Prevention Paradox 

    28:54 Gov't Policies addressing cybersecurity 

    34:41 Cybersecurity business problem or an IT Problem? 

    37:37 Should the office of the CISO be separate from IT? 

    40:26 How to quantify cybersecurity risk?

    44:08 The insider threat and the executive order governing it? 

    54:10 How to leverage the most underutilized cybersecurity asset? 

    01:00:20 Vulnerability management 

    01:07:18 Rob's favorite cybersecurity organizations  

    To learn more about Rob Oden https://www.linkedin.com/in/robertoden/ 

    To learn more about Dark Rhino Security https://www.darkrhinosecurity.com

    To watch the videocast of this episode https://youtu.be/FnEilYhfrOw

    1 hr 12 min
  • S4 E3 Compliance does not correlate to Cybersecurity

    The FAIR way to assess cybersecurity risk is discussed in this episode of Dark Rhino Security's Security Confidential. Chad Weinman is the VP of Professional Services at Risk Lens. Risk Lens is a software company that has codified the FAIR based approach to assessing cybersecurity risk. Chad has performed many consulting engagements helping clients quantify cyber risk.


    00:00 Introduction

    00:47 Is Cybersecurity Risk used in a cavalier way?
    03:16 What are the ground rules for discussing cybersecurity risk?
    05:53 Does the disaster recovery plan cover all the risks?
    07:30 Are regulators considered threats?
    09:03 Compliance does not correlate to cybersecurity
    14:20 What is FAIR?
    17:59 Layman's approach to risk
    28:00 Is a single risk score of any relevance?
    32:20 Companies that have direction with a FAIR analysis of risk
    37:40 Chad's information for cybersecurity practitioners

    To learn more about Chad Weinman https://www.linkedin.com/in/chadweinman/  

    To learn more about Risk Lens https://www.risklens.com/  

    To learn more about FAIR https://www.fairinstitute.org/

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

    To watch the videocast of this episode visit https://youtu.be/_wYJP1UedFE

    43 min
  • S4 E2 Is a Traditional Computer Science path necessary for Cybersecurity?

    Rob Oden joins us on Security Confidential for a two part series. This is part 1 and he is going to discuss with us his personal journey from humble beginnings to a great cybersecurity architect. He shares his story and the many challenges he faced and qualities of people wanting to create success for themselves in the field of cybersecurity. 

    00:00 Introduction

    02:12 Journey from humble beginnings to cybersecurity architect
    05:30 First exposure to cybersecurity
    09:30 Taking responsibility and owning it
    14:13 The crab effect
    23:42 Is a traditional computer science path necessary for cybersecurity?
    30:23 The transition from Military to Civilian life
    39:43 The soft skills for a great career
    46:30 Check in with yourself-have a true North
    49:35 Be comfortable with being uncomfortable


    Rob can be found on linkedin https://www.linkedin.com/in/robertoden/

    Manoj Tandon can be found linkedin https://www.linkedin.com/in/manoj-tandon-drs/

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

    The video cast for this episode can be found https://youtu.be/TH2LalGB3ok


    53 min
  • S4 E1 In Cybersecurity There are Builders and Breakers, You Need Both!

    Dark Rhino Security's Security Confidential is hosted by Manoj Tandon who is joined by guest Rob Duhart Jr. He has many years of experience in cybersecurity having worked at the Department of Energy, NSA, FBI, Ford Motor Company's Red Team, and is currently the head of Federated Security for Google. 

    Rob discusses:

    00:00 Introduction01:22 Formative experiences with the FBI and APTs02:27 The best and most frequent bad actors04:01 Inspiration to get into cybersecurity05:05 Builder and Breakers in cybersecurity06:20 Finding the genius in cybersecurity15:35 Cybersecurity the great equalizer18:38 The magic of bug bounty20:50 Hiring cybersecurity professionals at Google, Microsoft, Facebook27:30 Is cybersecurity a business problem or an IT problem32:36 How to quantify cyber risk37:40 Is there an over reliance on tools in cybersecurity?39:11 The biggest cybersecurity asset in a company43:51 How has Covid 19 changed cybersecurity45:25 Should we have unified IAM?48:25 Spirituality in advancing one's career


    Rob's twitter handle is @robduhart

    He https://www.icmcp.org/ and https://sharethemicincyber.splashthat.com/

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

    The videocast for this episode can be found at https://youtu.be/M-ArRdE2DB0

    53 min
  • S4 E0 Cyber Basics: The Rundown on Ransomware
    Should you pay ransomware if you are attacked? How can you prevent from being attacked? We have all the answers on this week's episode of Security Confidential. 
    To send in your questions/topic suggestions email us at [email protected]. We look forward to hearing from you!
    Visit our website www.darkrhinosecurity.com and follow us on Twitter @DarkRhinoSec!
    6 min
  • S3 E10 The Power of the Why

    Jeff Manhardt joins us for episode of Dark Rhino Security's Security Confidential. Jeff is the chief project officer at Kaleida Health, president of the PMI Buffalo Chapter and an adjunct professor at Daemen College. Jeff believes in the art of the possible and the power of the why.  Jeff shares his insights on project management, cybersecurity, future direction of PMI with us.

    00:46 The Power of the Why and the Art of the Possible

    03:50 How has the Pandemic affected project management
    05:40 Regulatory mandates and issues as result of Covid 19
    07:53 Telehealth and change management
    09:31 How to make cultural change happen
    11:37 Have the metrics changed by which projects are measured
    12:57 The future of of project management techniques
    15:50 Collisions are important
    16:54 How should cybersecurity be incorporated into Project Management
    17:55 Is cybersecurity a business problem or IT problem?
    18:49 Has cybersecurity taken a back seat in healthcare?
    20:57 Project Management Institute's (PMI) future
    23:47 Advise to PMI chapters on providing value
    28:32 PMI changes to PMP certifications
    30:30 Expectations of Dark Rhino as a PMI  hosting provider
    33:30 Adding value to PMI Hosted Chapters
    34:36 PMI Buffalo April Training Sessions on Remote Workforce and sprinting

    The videocast for this episode can be found at https://youtu.be/tOmR5MiIjHI

    To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com

    37 min
  • S3 E9 Why Microsoft 365 is difficult

    The Microsoft 365 environment is complex to administer from a cybersecurity perspective. There are very expensive options from Microsoft that add advanced security elements to the 365 environment. In addition to cost, ease of use and knowledge can become limiting factors dependant on the capability of the organization when implementing Microsoft's advanced security. Dark Rhino Security and Infocyte partnered to build a managed service offering that dramatically simplifies the evaluation, compilation, and remediation of security gaps present in a companies Microsoft 365 environment. Chris Auger from Infocyte and Tyler Smith, a co-founder of Dark Rhino Security, host this episode of Security Confidential and explain how to benchmark against the CIS standards a Microsoft 365 environment and how to remediate the gaps in a simplified manner. The end result is a highly secure Microsoft 365 environment.

    Chapter Markers  

    00:14 Introduction
    03:10 Microsoft 365 Security Overview
    04:50 Why Microsoft 365 is difficult
    05:30 Why set it and forget is the wrong answer
    08:00 Anatomy of an attack, attack chain
    13:20 The attack vectors
    15:33 Cost structure of M365 tools
    20:15 Dark Rhino Security Microsoft 365 Security Assessment
    23:48 Security controls analyzed as part of assessment
    25:08 Value of Dark Rhino Security in the Process
    26:15 Is Tenable used under the hood?
    27:15 Does MFA solve the security gaps?
    29:35 What is out of domain forwarding and will they block it?
    32:47 Does Small Business really have the risk
    42:35 Timeline for Assessments

    The Video for this episode can be found at https://youtu.be/KWSVZhUFM-Y


    To get the free vulnerability scan of up to 10,000 nodes in your network call Dark Rhino Security at 614.401.3025 or visit https://www.darkrhinosecurity.com or email [email protected]

    45 min
  • S3 E8 Business Lessons from a Bowhunter

    #SecurityConfidential #DarkRhinoSecurity

    This week on Security Confidential host Manoj Tandon has Jordan Graham as his guest. Jordan has been in the cybersecurity business for over 3 years and a six sigma black belt. He is a former Marine with an extensive background in process management. Jordan is an avid Bowhunter and is a participant on the podcast "The Bowhunters Heritage".  In this episode of Security Confidential Jordan discusses how his learnings and techniques as a bowhunter apply to cybersecurity. The topics discussed in this episode are

    00:10 Introduction

    01:44 Why Bowhunting?
    07:09 Overcoming a disadvantaged position, Cyber Insurance!
    13:32 The objective SWOT analysis to get the highest chance for success
    17:39 The hunters mentality for business success
    19:50 Be decisive
    22:14 Turning a disadvantaged position to an advantaged one
    25:47 Addressing unknown-unknowns in cybersecurity
    32:01 The role of patience in threat hunting
    37:20 Lessons from the Marine Corp
    44:32 The Bowhunters Heritage

    To learn more about Dark Rhino Security please visit https://www.darkrhinosecurity.com

    The videocast for this episode can be found at https://youtu.be/SxCC09iryt8

    47 min

About Security Confidential

From the publisher's feed

Security Confidential provides weekly interviews and insights into the world of cybersecurity. Produced entirely in-house by MSSP & global risk management firm Dark Rhiino Security.