Security Serengeti

In this episode we talk about hiring in Information Security.  This discussion was triggered by an article on not hiring losers, so we discuss the article and then transition into more generic hiring information for both people doing the hiring, and trying to get hired.

Supporting Articles:Losers Exist, Don’t Hire Themlevels.fyiCreating a High-Performing Cybersecurity TeamWork Rules, by Laszlo Bock

If you found this interesting or useful, please like and subscribe, and follow us @serengetisec for more!  Without that social validation, we just sulk around the house all day.

Our episode last week went so long, we split it into two.  We continue the conversation this week discussing a study showing that simulated phishing attacks may increase susceptibility?  Additionally, and article discussing stealing Site Reliability Engineering ideas for your SOC and automation.

Article 1: Research: Simulated Phishing Tests Make Organizations Less SecureSupporting Articles:Phishing in Organizations: Findings from a Large-Scale and Long-Term Study

Article 2: Stealing More SRE Ideas for Your SOCSupporting Articles:Google SRE Book

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode we discuss T-Mobile once again at the center of attention with SIM card swapping, and Facebook notified 50k users they're the targets of surveillance as the worst of cyberpunk appears to be coming to.  All hail all corporate overlords!

Article 1: T-Mobile says new data breach caused by SIM swap attacksSupporting Articles:FBI San Francisco Warns the Public of the Dangers of SIM SwappingT-Mobile discloses data breach after SIM swapping attacks (From Feb.)

Article 2: Facebook disrupts operations of seven surveillance-for-hire firmsSupporting Articles:The Coca-Cola KillingsIs Accountability Even Possible?

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode we take a deeper dive into SANS Courses and related Certifications (technically from GIAC).  We've both taken course from them, and have been fairly impressed.

If you found this interesting or useful, please like and subscribe, and follow us @serengetisec for more!  Without that social validation, we just sulk around the house all day.

In this episode, we review Lloyd's recent announcement on not covering state sponsored attacks, an article from Anton Chuvakin on SOC technology fails, and a non-security related article on NFT's.  Just cause.

Article 1: Lloyd’s Carves Out Cyber-Insurance Exclusions for State-Sponsored AttacksSupporting Articles:Cyber War and Cyber Operation Exclusion ClausesInsurers run from ransomware cover as losses mountResistance is ... cheap? Cloudflare, Mandiant, and pals form incident response 'n' cyber insurance borgCyber insurance model is broken, consider banning ransomware payments, says think tank

Article 2: SOC Technology Failures — Do They Matter?

Article 3: NFTs Are Digital Signaling

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we discuss Risk Based Alerting, a new paradigm in alerting released in a talk at Splunk .conf in 2018.  We're big fans, and we discuss it from start to finish, and share some stats on how much it improved alerting at the companies who have implemented it.

You have to register at Splunk's .conf site to watch the talks, but it's free.  The talks themselves can be found here: https://conf.splunk.com/watch/conf-online.html

After registration and logging in, search for "Risk Based Alerting" and that will get you the majority of the talks.  

If you found this interesting or useful, please like and subscribe, and follow us @serengetisec for more!  Without that social validation, we just sulk around the house all day.

In this episode, we reviewed some recent news articles that caught our eye, including an empirical study confirming what everyone always knew about putting unpatched boxes online, Google's most recent threat intel release, and DAO's!

Article 1:  These researchers wanted to test cloud security. They were shocked by what they found

Article 2: BadgerDAO DeFi defunded as hackers apparently nab millions in crypto tokensSupporting Articles:What Are DAOs And Why You Should Pay AttentionDecentralized autonomous organizationThe DAO: How the Employeeless Company Has Already Made a Boatload of MoneyBadger

Article 3: Hackers Increasingly Using RTF Template Injection Technique in Phishing Attacks

Article 4: Google’s Threat Horizons report: Will the straightforward approach get results?

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we reviewed some recent news articles that caught our eye, including how to choose your MSP, will the UK ban default passwords, and must haves for next gen Attack Surface Management!

Article 1: What You Need to Remember When Choosing a Managed Service Provider (MSP)

Article 2: It’s about the survival of the fittest – CISOs must be brave enough to throw away their security playbook, or suffer the consequences

Article 3: Five Security Intelligence Must-Haves For Next-Gen Attack Surface Management (Requires Registration)

Article 4: New law will issue bans, fines for using default passwords on smart devicesSupporting Articles:The Product Security and Telecommunications Infrastructure (PSTI) Bill - factsheetsProduct Security and Telecommunications Infrastructure BillHow does a bill become a law?

Article 5: The Pitfall of Threat Intelligence Whitelisting: Specter Botnet is 'taking over' Top Legit DNS Domains By Using ClouDNS Service

Article 6: Suspect arrested in 'ransom your employer' criminal schemeSupporting Article: Arrest in ‘Ransom Your Employer’ Email Scheme

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

In this episode, we discuss one of our favorite tools to come out, Breach and Attack Simulation.  I hope you can tell we both think this is a real game changer.  

Articles we mention in the Podcast that we STRONGLY disagree with:THE DEFINITIVE GUIDE TO SECURITY VALIDATION: Why the market has evolved beyond Breach and Attack SimulationFour Reasons Breach And Attack Simulation Won’t Validate Security

If you found this interesting or useful, please like and subscribe, and follow us @serengetisec for more!  Without that social validation, we just sulk around the house all day.

In this episode, we review some recent news articles that caught our eye, ranging from record breaking DDOS to avoiding burnout and invisible variables!

Article 1 - Experts Analyze Proposed Bill Allowing Private Entities to 'Hack Back’

Article 2 - Are You Planning for the Quantum, Transhumanist Threat?

Article 3 - DDoS Attacks Shatter Records in Q3, Report Finds

Article 4 - 8 Daily Practices to Avoid Cybersecurity Burnout

Article 5 - THE INVISIBLE JAVASCRIPT BACKDOOR

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!