In this episode, we deep dive into two articles, linked below.Ransomware gang urges victims’ customers to demand a ransom payment

Experts fear that Biden’s cybersecurity executive order will repeat mistakes of the past

Supporting Articles mentioned:Average ransomware payouts shoot up 171% to over $300,000A new headache for ransomware-hit companies. Extortionists emailing your customers

As always, the views and opinions shared on the podcast do not reflect the views or opinions of our employers.  

If you found this interesting or useful, please follow us on Twitter @serengetisec and subscribe and review on your favorite podcast app!

This week we discussed XDR.  What is it?  How much of it is marketing speak?  How much should you care?

Here are some links to articles that were quoted or specifically mentioned:https://www.gartner.com/smarterwithgartner/gartner-top-9-security-and-risk-trends-for-2020/https://www.cynet.com/xdr-security/understanding-xdr-security-concepts-features-and-use-cases/https://www.darkreading.com/edge/theedge/xdr-101-whats-the-big-deal-about-extended-detection-and-response-/b/d-id/1339734

This week we discuss two articles around CNA (an insurer that provides cybersecurity insurance) taking down some of their systems, and an insider threat case.

CNA Links:https://www.cyberscoop.com/cna-cyber-insurance-breach/https://www.cna.com/https://assets.kpmg/content/dam/kpmg/ae/pdf/closing-the-gap.pdfhttps://woodruffsawyer.com/cyber-liability/cyber-101-liability-insurance-2021/

Insider Threat Links:https://www.bleepingcomputer.com/news/security/resentful-employee-deletes-1-200-microsoft-office-365-accounts-gets-prison/https://businessinsights.bitdefender.com/businesses-vengeful-it-contractor

Follow us @SerengetiSec on Twitter!

Hosted by David Schwendinger and Matthew Keener, welcome to the Security Serengeti!

Rather than look at the news this week, instead we take a deep dive into the name of the podcast, the Be-Know-Do model, and Certifications!

List of certifications and counts from Indeed:

CISSP - 2461 jobs

Sec+ - 1031

CISM - 615

CEH - 427

GCIH - 381

OSCP - 216

CCSP - 151

GCIA - 145

GCFA - 119

CRISC - 109

GCFE - 103

CCISO - 46

eCPPT - 13

eJPT - 0

Hosted by David Schwendinger and Matthew Keener, welcome to the Security Serengeti!

Please join us for our introductory episode where we take a look at the most recent news impacting the Information Security landscape.

The Register - Just 2.6% of 2019's 18,000 tracked vulnerabilities were actively exploited in the wild

IT Security Guru - International law firm Jones Day hacked with data posted on dark web

The Hacker News - SolarWinds Blames Intern for 'solarwinds123' Password Lapse

Medium: Anton on Security - Stop Trying to Take Humans Out of SOC … Except … Wait… Wait… Wait…