Talking Threat Intelligence

Talking Threat Intelligence

By LifeRaft Inc.Technology
Download on the App Store

Talking Threat Intelligence episodes

  • ChatGPT and Beyond: AI's Impact on Threat Intelligence

    Are AI-driven threats lurking within your organization's walls? Liferaft’s Chief Innovation Officer Eduardo Capouya and Senior Vice President of Engineering Matt Hogan join us on the show today. In this episode, Matt and Eduardo delve into the pressing challenges companies face, particularly regarding privacy, security, and ethical concerns in the era of AI. They reveal the risks associated with the use of AI models like ChatGPT, such as the unintentional disclosure of sensitive information and the potential for biased decision-making.

    Resources mentioned in this episode:

    • LifeRaft Labs: https://liferaftlabs.com/

    • OpenAI: https://openai.com/

    • Never miss an episode by subscribing to the show on Spotify, Apple Podcasts, or wherever else you listen to these episodes. And if you’d like more insights on building a successful threat intelligence program, be sure to check out our website at LiferaftInc.com/blog.

      24 min
    • How to Build an Effective Tech Stack for Security Teams

      Chief Security Officers (CSOs) encounter significant challenges when constructing an effective tech stack for their organization's security. These challenges include grappling with integration issues among diverse security solutions, keeping pace with rapidly evolving threats while operating within budgetary constraints, and striking a delicate balance between robust security measures and user-friendliness. Additionally, complying with stringent regulatory requirements and safeguarding data privacy further complicate the process. 


      The consequences of getting the tech stack wrong can be severe, potentially leading to security vulnerabilities, data breaches, financial losses, reputational damage, and legal ramifications. It could also hinder the organization's ability to effectively defend against physical threats and stay ahead in an increasingly complicated landscape.


      So how can they get it right?


      John Gill, Executive Vice President at Kaseware, is on the podcast this week. In this episode, he delves into the intricacies of building an effective tech stack for security teams. He also reveals the most common mistakes CSOs make when evaluating potential solutions. 


      In this episode, expect to learn...

      • The dangers of looking for the "magic solution" that solves everything.
      • How to create a structured Plan to Identify Suitable Technologies
      • The seven factors to consider when selecting security technologies
      • Picking best-of-breed technologies vs. all-in-one solutions.
      • Best Practices for merging physical and cybersecurity roles in organizations

      • Resources:


        • Contact John Gill by Email: [email protected]
        • Kaseware: https://www.kaseware.com

        • Finally, if you enjoyed this episode, make sure to subscribe to the show on Apple Podcasts, Spotify, or wherever you listen to podcasts. And if you're interested in learning more about building a successful threat intelligence program, be sure to check out our website at LiferaftInc.com.

          35 min
        • How to Protect Your Organization From Workplace Shootings

          The prevalence of active shooter situations in the workplace has seen a disconcerting increase in recent years. These distressing incidents, once considered improbable within work environments, have sadly become an alarming reality. News reports continue to remind us that no workplace or industry is immune to such acts of violence. And this sobering trend has prompted companies of all sizes to prioritize employee safety by implementing comprehensive training programs aimed at equipping individuals with the skills and knowledge needed to navigate and survive active shooter events.

          But while traditional survival training methods, including the widely-known run, hide, fight strategy advocated by the FBI, have been widely disseminated, they may not provide the most effective approach to ensure survival in active shooter situations. These methods, while offering some guidance, often oversimplify the complexities and realities of high-stress scenarios. So to better prepare employees, a more comprehensive, adaptable, and practical training approach is essential to address the nuanced challenges presented by active shooter incidents.

          So what’s the answer?

          On the show today is Michael Julian, creator of the A.L.I.V.E. Active Shooter Survival Training Program and President of MPS Security & Protection. During our discussion, he shares his unique method for surviving active shooter situations. Additionally, Michael provides insights on how security leaders can enhance the effectiveness of their training sessions and highlight common pitfalls that companies often encounter when teaching survival training to their employees.

          Resources:

          • ALIVE Active Shooter Survival: www.alivetraining.com 

          • Michael Julian on LinkedIn: www.linkedin.com/michaeljulian

          • Finally, if you enjoyed this episode, make sure to subscribe to the show on Apple Podcasts, Spotify, or wherever you listen to podcasts. And if you're interested in learning more about building a successful threat intelligence program, be sure to check out our website at LiferaftInc.com.

            29 min
          • Digital Executive Protection: Keeping VIPs Safe Online

            High-profile individuals are increasingly exposed to various online threats that can jeopardize their personal security, reputation, and the organizations they represent. The digital realm has become a playground for attackers seeking to exploit vulnerabilities and gather sensitive information about VIPs for malicious purposes. So what can security professionals do to mitigate this risk?  


            In our latest podcast episode, we sit down with Ben Barrontine, VP of Executive Services at 360 Privacy. In our conversation, Ben sheds light on the growing threats executives face online and offers insights into effective strategies for safeguarding their digital presence.


            In this episode, expect to learn...


            • Why staying off social media won't keep your data safe.
            • A glimpse into the mindset and techniques used by online attackers.
            • The growing importance of digital intelligence in physical security.
            • The biggest vulnerability of almost every VIP.
            • The four pillars of staying safe online. 

            • ...and much more.


              Resources Mentioned


              • Email Ben: [email protected]
              • Ben on LinkedIn: https://www.linkedin.com/in/benjaminbarrontine/
              • 360 Privacy: https://www.360privacy.io

              • Finally, if you enjoyed this episode, make sure to subscribe to Talking Threat Intelligence on Apple Podcasts, Spotify, or wherever you listen to podcasts. And if you're interested in learning more about building a successful threat intelligence program, be sure to check out our website at LiferaftInc.com.

                31 min
              • What Security Teams Need to Know About ChatGPT

                Imagine a world where talking to computers feels as natural as chatting with a friend. That's the power of ChatGPT, a groundbreaking technology developed by a company called OpenAI. 

                This technology has already revolutionized the way we work with computers. Instead of giving them commands, we can have real conversations with them. It's like having an incredibly smart virtual assistant at our fingertips. ChatGPT understands what we say and responds in a way that makes sense. It helps us find information quickly, provides useful suggestions, and even assists with tasks like writing. With ChatGPT, the possibilities seem endless, and it has truly changed the way we interact with technology.

                But corporate security teams are understandably worried. For starters, ChatGPT can be used by bad actors to create and spread false information like never before. This means that people are more likely to come across misleading or manipulated content, making it hard to separate fact from fiction online. Additionally, ChatGPT also represents the technological equivalent to the machine gun for cybercriminals, allowing them to create high quality phishing emails and develop new attack vectors like never before. 

                So how do security teams address these challenges? 

                In this episode, our guest Daniel Ben-Chitrit, Director of Product Management at Authentic8, breaks down what ChatGPT will mean for corporate security teams and the OSINT community. We’ll also discuss how OSINT analysts can leverage this technology effectively while maintaining security and data privacy.

                In this episode, expect to learn: 

                • The implications of using ChatGPT in threat intelligence gathering and analysis.

                • Discover the potential risks and vulnerabilities associated with integrating ChatGPT into corporate systems.

                • How to effectively mitigate security threats and protect sensitive information in the era of ChatGPT.

                • Gain insights into the challenges of distinguishing between genuine and manipulated information generated by ChatGPT.

                • Understand the impact of ChatGPT on phishing and social engineering attacks, and how to combat them.

                • Explore potential vulnerabilities in existing security systems when faced with ChatGPT-generated threats.

                • Understand the potential impact of ChatGPT on user privacy and data protection in corporate environments.

                • Discover ways to educate employees about the risks and benefits of interacting with ChatGPT in a secure manner.

                • … and much more. 

                  Relevant Resources:

                  • Authentic8: authentic8.com

                  • Email Daniel: [email protected]

                  • Daniel on LinkedIn: https://www.linkedin.com/in/danielbenchitrit/

                  • Try ChatGPT for Free: https://chat.openai.com/

                  • Sentinel-1: https://www.sentinelone.com/

                  • Joe Rogan Interviews Justin Trudeau: https://www.youtube.com/watch?v=K0YRNS0FYTQ

                  • Finally, if you enjoyed this episode, make sure to subscribe to Talking Threat Intelligence on Apple Podcasts, Spotify, or wherever you listen to podcasts. And if you're interested in learning more about building a successful threat intelligence program, be sure to check out our website at LiferaftInc.com.

                    34 min
                  • Building Resilience as a Security Professional

                    In the high-pressure world of security, where professionals are constantly facing complex threats and demanding situations, building resilience is not just an advantage—it's a fundamental necessity. It's what empowers practitioners to bounce back from setbacks, adapt to challenges, and maintain their mental well-being amidst the pressures of the field. 

                    On the show today is Dr. Mary Beth Janke, a former Secret Service agent, Doctor of Clinical Psychology, and an international protection agent. Drawing from her expertise in behavioral therapy, Dr. Janke guides security professionals in developing strategies to enhance their resilience. And with her diverse background, Dr. Janke brings a unique perspective on the critical importance of resilience for success in the security industry.

                    By understanding the power of cognitive behavioral theory, she empowers individuals to transform their mindset, break negative thought patterns, and cultivate a resilient approach to their work and personal lives. And her insights provide practical tools and techniques to strengthen mental and emotional fortitude in the ever-changing landscape of physical security.

                    In this episode, expect to learn:

                    - The vital role of resilience in the success of security professionals.

                    - Exploring the connection between mental well-being and effective physical security practices.

                    - How behavioral therapy can be applied to enhance resilience in the field.

                    - Practical techniques to identify and modify negative thought patterns.

                    - Strategies for maintaining resilience in the face of stress and uncertainty.

                    - Real-life examples illustrating the transformative power of resilience in the industry.

                    - ...and much more.

                    To learn more about Dr. Mary Beth Janke and her work, visit her website at https://drmarybeth.com/, and connect with her on LinkedIn at https://www.linkedin.com/in/dr-mary-beth-wilkas-janke-88b6a565/.

                    Finally, if you enjoyed this episode, make sure to subscribe to Talking Threat Intelligence on Apple Podcasts, Spotify, or wherever you listen to podcasts. And if you're interested in learning more about building a successful threat intelligence program, be sure to check out our website at LiferaftInc.com. 

                    29 min
                  • Unveiling Digital Vulnerabilities: The Intersection of Cyber and Physical Security

                    This week, guest David Benford, managing director of Blackstage Forensics, is on the podcade. In this episode, we discuss the overlap between digital and physical security, exploring the various types of vulnerabilities businesses face in the digital realm. David shares specific examples of digital vulnerabilities he has encountered in his work and highlights the potential risks they pose to individuals and organizations. The conversation also touches upon the convergence of the cyber and digital worlds, emphasizing the need to consider both online and offline security. 

                    Key Takeaways:

                    • Why digital vulnerabilities pose real-world security risks to businesses and individuals.

                    • How personal identifying information (PII), such as home addresses, email addresses, and phone numbers, can be exposed through various channels.

                    • Why digital vulnerabilities can result in blackmail, sextortion, harassment, stalking, and reputational risks.

                    • How to build trust and put clients at ease during the onboarding process.

                    • Common mistakes that clients make such using easily guessable email addresses and sharing personal data without fully understanding the terms and conditions.

                    • How data breaches and leaks by companies can expose personal information, creating vulnerabilities.

                    • Why future trends suggest an increase in privacy and security awareness, but also a rise in new types of data breaches and attacks.

                    • How the advancement of artificial intelligence offers both advantages and challenges in detecting and combating threats.

                    • If you found our discussion on threat intelligence valuable and want to dive deeper into this topic, please subscribe to our show to never miss an episode. Additionally, make sure to visit our website at LiferaftInc.com, where you'll find a wealth of resources and insights on building a successful threat intelligence program.

                      17 min
                    • What OSINT Analysts Should Know About Alt Tech Social Networks

                      Alternative social networks present a growing challenge for corporate security teams. These non-traditional platforms, such as Gab and Chan boards, can pose significant threats to organizations, including cyber threats, physical threats, doxing, and misinformation campaigns. And without monitoring these communities, security analysts could be overlooking serious risks to the company. 


                      To address this issue, Neil Spencer, Director of Market Strategy and Partnerships at Liferaft, is back on the podcast. This week, he breaks down what alternative social networks are and how security teams can effectively monitor these platforms. In this episode you will learn:    


                      - Learn why monitoring smaller, obscure communities on these networks is critical for comprehensive threat intelligence.

                      - Understand how alternative social networks can create echo chambers and contribute to the spread of misinformation campaigns.

                      - Explore the importance of detecting early warnings and indicators of potential threats in the digital space.

                      - Find out why brand protection is becoming a crucial piece of corporate security scope.

                      - Hear real-world examples of how smaller, alternative social networks have provided early warnings of potential threats.

                      - Learn about the long history of white supremacists using these networks to post manifestos before violent events.

                      - Discover how monitoring these networks can help organizations get ahead of threats and plan effective mitigation strategies.

                      - Gain insights into the implications of a threat to an organization's brand, both financially and from a physical security perspective.

                      - Understand the significance of monitoring alternative social networks for both emerging and mainstream platforms.


                      Resources:


                      • Neil Spencer on LinkedIn 
                      • Bellingcat
                      • TechCrunch
                      • Authentic8
                      • 5 Alt-Tech Social Networks You Need to Know

                      • If you found this discussion on the importance of monitoring alternative social networks informative, please consider subscribing to our podcast on your preferred platform to stay up-to-date with our latest episodes. And if you're interested in learning more about building a successful threat intelligence program, check out the website at Liferaftinc.com for more resources and information. We appreciate your support and look forward to bringing you more valuable insights in the future.

                        25 min
                      • OSINT on Telegram, TikTok, and Chanboards

                        Alt-tech social networks have exploded in popularity in recent years. And thanks to lax content moderation rules, these communities have become havens for criminal groups and other bad actors.


                        This creates new challenges for security teams.

                        On the one hand, many professionals may not even be aware of some of the new channels where people conjugate online. So as a result, organizations gathering open-source intelligence online could overlook serious threats to their operations.

                        On the other hand, alt-tech social networks present new opportunities to discover and investigate threat intelligence. This is especially true in forums and communities with relaxed content moderation guidelines.

                        So where should investigators and security practitioners get started?

                        In a recent webinar, our very own Director of Strategy and Partnerships Neil Spencer hosted a panel to explore how to collect intelligence, investigate threats, and mitigate security risks facing your organization using new alt-tech social networks. In particular, the group decided to focus on some of the largest and fastest-growing of these communities, namely Telegram, Chan Boards, and TikTok.

                        He was joined by Head of Intelligence at Securitas SIU, Mike Evans; Assistant Deputy Director, Intelligence Operations at Secure Community Network, Nathan Otto; and the Director of Research and Analytics at 2430 Group, Lindsay Wright.

                        Learn more:

                        * 5 Tips for Conducting OSINT on Alt-Tech Social Networks

                        Never miss an episode by subscribing to the show on Spotify, Apple Podcasts, or wherever you listen to episodes.

                        57 min
                      • OSINT for VIP Protection: The Mistakes Most Analysts Make with Chris Grow

                        On this episode of Talking Threat Intelligence, we're joined by Chris Grow, Managing Partner at LeMareschal LLC, to discuss the common mistakes that OSINT analysts make when providing intelligence for VIP protection. Chris is an expert in the field of open-source intelligence and has years of experience working with close protection teams. He'll be sharing his insights on the most frequent errors that analysts make, as well as strategies to minimize the risk of failure.

                        Some of the key topics we'll be covering include: how your bias as an American can negatively impact the intelligence you provide to an agent in the field, misconceptions about OSINT, the dangers of providing too much information for EP personnel on the ground, and how OSINT analysts should prepare before their VIP departs for a trip. Chris will also discuss how he vets potential new employees and common red flags to look for during the interview process.

                        Resources:

                        • Contact Chris Grow
                        • Don't miss this enlightening episode! Join the conversation and subscribe to Talking Threat Intelligence now. And if you're interested in learning more about building a successful threat intelligence program, be sure to check out our website at LiferaftInc.com/blog.

                          31 min

                        About Talking Threat Intelligence

                        From the publisher's feed

                        Staying up to date with rapidly evolving world of corporate security requires continuous learning and adaptability. Join us every other Tuesday as we interview top experts working at the intersection…