Talking Threat Intelligence

In July, retail giant Target announced they will start closing their San Francisco stores at 6 p.m. The decision represents a drastic move on the part of management to curb rampant theft and shoplifting.

And Target isn't the only one struggling with this problem. Nationwide, retailers have reported a spike in thefts and violent incidents.

Not only does that bite into the bottom line. It also threatens the safety of customers and employees.

One possible solution gaining traction with loss prevention pros: open source intelligence, or OSINT tools.

In the latest edition of the LifeRaft Security Conversations Series, Intelligence Solutions Executive Katherine Neil discusses the role OSINT tools can play in preventing theft and shopping as well as practical tips you can apply yourself.

In this episode, you will learn:

* How to use OSINT tools to combat theft and other security risks at retail outlets

* 5 useful keywords for uncovering bad actors online

* The biggest mistake security teams with social media monitoring program

* What is the "Shoplifters' Wikipedia" and where to find it

* Where to find criminal "How-to" guides

* The new retail scam to avoid

* The Deep Web: What security professionals need to know

* 3 little-known websites where criminals communicate online

* How well-meaning employees can accidentally compromise your organization's security

When security leaders picture insider threats to their organization, they tend to imagine malicious individuals that want to harm the business. But that's not always the case.

Increasingly, the biggest risk to a company's security is the "accidental" insider threat.

Accidental insider threats represent ordinary employees that by-pass your security protocols. And in most cases, these are well-intentioned workers that just want to do their jobs.

Yet these individuals can create serious risks for your organization.

In this conversation, LifeRaft's Director of Information Security and Privacy Suofagha Kiakubu discusses how leaders can address these accidental insider threats, the downsides of compliance driven education programs, and how to build a "security aware" culture across the entire organization.

In this episode you will learn:

* What security leaders need to know about accidental insider threats

* How strict rules and protocols can actually increase the risk of security incidences

* What your colleagues in other departments probably aren't telling you

* Why just "ticking the boxes" with compliance-driver security programs falls short

* How to build a "security awareness" culture across your organization

* How to create security training programs your colleagues will love

* The future of cybersecurity: the three biggest trends to watch over the next 10 years

In the past, executive protection consisted mostly of beefy guys in suits with sharp eyes and a quick trigger finger.

But nowadays, protectors know their work is more about collecting and interpreting intelligence to keep the client safe. And much of that information is collected online.

As a result, open web sources, like forms, marketplaces, social media, have become key points for intel.

In this conversation, Liferaft OSINT analyst Kyle Baker chats about the role OSINT tools can play in executive protection. He also discusses some investigative tips and tricks you can apply yourself.

In this interview, you will learn:

* The number one personality traits of a savvy OSINT analyst.

* How to develop an OSINT skill set (even if you are a total beginner).

* Why OSINT tools make you better at your job.

* Social media monitoring 101: How to start a threat intelligence program from scratch.

* What you should know about doxxings.

* How your Amazon wish list can compromise your organization’s security.

* Why you’re struggling with alert fatigue (and how to deal with it)

Corporate America spends billions each year on sophisticated cyber security defenses. But these innovative measures are increasingly vulnerable to a very low tech hacking technique: social engineering.

Social engineering is the practice of manipulating people into revealing confidential information. The attackers and the type of information they seek out vary. But their objectives could include everything from stealing passwords and banking numbers to accessing secured facilities.

Why?

Criminals now it’s far easier to exploit human vulnerabilities than hacking software bugs. And that can leave organizations vulnerable.

In this interview, LifeRaft market strategist Neil Spencer outlines exactly what is social engineering and how organizations can protect themselves. 

During this conversation, you'll learn:

* What a British illusionist can teach us about physical security.

* The new phone scam to avoid.

* The surprising reason why attackers target ordinary employees before high-ranking executives.

* The psychological principal of ”truth bias” and how attackers exploit this vulnerability.

* The key emotions social engineers target when manipulating victims.

* The incredible true story of how a European hacker swindled Facebook and Google out of $100 million.

* How safe are your friends and family from social engineering attacks.

* The new type of social engineering attacks to avoid.

* The popular social network that leaves professionals the most vulnerable to social engineering attacks.

* Pre-Texting. How criminals create online personas to launch sophisticated attacks.

* How to protect yourself and your organization from these types of attacks.

At LifeRaft, we know many of our customers are concerned about the rise of alt-tech social networks.

New moderation rules have forced millions to abandon mainstream offerings from Silicon Valley. That has resulted in the rise of new sites like Gab, Parler, Minds, and others.

This creates a big challenge for security professionals.

No one wants to be caught off guard by a threat that you later learn was published right in plain sight. But if you’re only monitoring mainstream social networks, it could mean overlooking a serious risk to your organization.

In this interview, we check in with LifeRaft OSINT analyst Spencer Oliphant. He advises clients on how to monitor social media to safeguard their people and operations.

* What are alt-tech social networks and why they’re relevant to security professionals (0:20).

* Why alt-tech social networks have exploded in popularity (1:07).

* What kind of content you can find in these communities (2:40).

* The best approach to learning how threat actors operate in these spaces (4:35).

* The fastest-growing alt-tech social network to watch right now (5:15).

* The secret internet comment section invisible to ordinary web surfers (6:25).

* Whether Parler is still relevant to security professionals following its recent shutdown (9:20).

* The most important alt-tech social networks for security professionals to watch right now (12:23).

* How these communities will likely evolve over the next few years (13:05).