Technically U

This podcast episode traces the history of telecommunications, from early signaling methods to the current era of smartphones and 5G.

It highlights the increasing interconnectedness of devices through the Internet of Things, emphasizing the importance of robust cybersecurity measures in this evolving landscape.

Furthermore, the episode discusses the transformative potential of generative AI in optimizing networks and creating new services, ultimately envisioning a future of ubiquitous connectivity and intelligent networks.

The episode concludes by noting the industry's focus on leveraging data, AI, and diversification to meet future challenges.

Intro: (0:00)

From Smoke Signals: (1:00)

Smartphones: (2:20)

4 to 5G: (2:40)

Internet of Things - IoT: (3:10)

Connected Home Devices: (3:25)

Privacy And Security: (3:50)

AI - RAN: (4:20)

Future of Telecom - Our Predictions: (5:15)

This podcast episode, "Unlocking Identity and Access Management (IAM) Security," explains the importance of Identity and Access Management in cybersecurity.

IAM, a framework of policies and technologies, manages digital identities and controls access to organizational resources.

The episode details how IAM works, including identity and access management functions, authentication methods, and role-based access control. It highlights the benefits of IAM, such as enhanced security, improved operational efficiency, and better compliance.

Finally, the podcast discusses the future of IAM, emphasizing the role of AI and Zero Trust models.

Intro: (0:00)

What is IAM?: (0:38)

Why is it Important?: (1:00)

SSO: (2:10)

Identity Management: (2:40)

Access Management: (3:20)

RBAC: (3:32)

AI: (4:30)

Risk: (5:10)

Key Takeaways: (5:50)

This podcast explains synthetic identity theft, a rapidly growing type of fraud where criminals combine real and fake personal information to create false identities.

The podcast details how this scam works, including information gathering, credit building, and the final "bust-out" fraud. It also outlines different types of synthetic identity theft, offers protection strategies, and provides steps to take if you become a victim.

Finally, it directs listeners to resources for further information and reporting.

Intro: (0:00)

What is Synthetic Identity Theft: (0:45)

Bust-Out Explained: (2:20)

Types of Synthetic Identity Theft: (3:10)

Protecting Ourselves: (3:50)

Checking Credit Reports: (4:40)

Credit Freezing: (5:25)

Signs to look for: (5:55)

Reporting Fraud: (6:30)

Challenges Tracking Scammers: (8:10)

Technologies That Can Help: (9:05)

Biometric Scanning: (9:40)

Blockchain Security: (10:10)

Recap: (11:30)

Report Fraud and Useful Resources:

National Cybersecurity Alliance: https://www.staysafeonline.org/

Federal Trade Commission (FTC) www.IdentityTheft.gov or 877-438-4338 https://www.bbb.org/scamtrackerhttps://www.bbb.org/article/news-releases/16951-bbb-tip-identity-thefthttps://www.experian.com/fraud/center.html

FTC Free Annual Credit Report: https://www.annualcreditreport.com/gettingReports.actionThree Credit Agencies: Equifax, Experian, and TransUnion

HIPAA 2.0, a significant update to the Health Insurance Portability and Accountability Act, introduces stricter cybersecurity measures for healthcare organizations.

Key changes include mandatory multi-factor authentication, encryption, network segmentation, and routine security testing.

The new regulations also demand enhanced incident response plans with faster breach reporting and system restoration timelines. Greater accountability is placed on business associates, requiring yearly compliance certifications.

Finally, the update shifts from optional to mandatory security controls, necessitating proactive risk management and improved cybersecurity infrastructure.

Sorry for the unique pronunciation of HIPAA.

Weblink to the Proposed 2025 HIPAA 2.0 Document: https://www.federalregister.gov/documents/2025/01/06/2024-30983/hipaa-security-rule-to-strengthen-the-cybersecurity-of-electronic-protected-health-information

HIPPA 2.0: (0:45)

Addressable To Mandatory: (1:09)

MFA: (1:19)

Encryption At Rest and In Transit: (1:45)

Network Segmentation: (2:45)

Routine Security Checks: (3:30)

Consequences for Non-compliance: (4:20)

Documentation: (4:50)

72 HR Restoration: (5:25)

24 HR Reporting: (5:50)

Compliance: (6:15)

Faster Notifications: (7:25)

Health Providers' Burdens: (8:35)

Challenges: (9:30)

FTC - HHS Information: (11:10)

GDPR: (11:50)

Takeaways: (12:50)

This AI voiced podcast episode explains User and Entity Behavior Analytics (UEBA), a cybersecurity solution using machine learning to detect anomalies in user and device activity.

UEBA collects data, models normal behavior, and flags deviations as potential threats, such as unusual login locations or data transfers.

This system offers benefits, including improved threat detection, reduced IT workload, and lowered costs by preventing breaches.

Key components include analytics, integration with existing tools, and alert/response mechanisms.

Finally, the podcast highlights the importance of proper implementation and the future potential of AI-driven improvements in UEBA.

Intro: (0:00)

What is UEBA?: (0:45)

How UEBA works: (2:25)

UEBA Behavioral Modelling: (3:00)

Integration into other security tools: (4:00)

UEBA Cost Savings: (5:11)

Challenges and Considerations: (5:45)

Privacy Concerns: (6:19)

Future of UEBA: (6:40)

This three-part podcast episode, "Securing the Digital Frontier: The Power of Vulnerability Management," explains the importance of vulnerability management in cybersecurity.

It outlines the process, which involves identifying, assessing, and mitigating security weaknesses in systems and applications.

Key components discussed include asset discovery, vulnerability scanning, patch management, and penetration testing.

The episode highlights the benefits of a robust vulnerability management program, such as preventing cyberattacks and improving compliance, while emphasizing its essential nature for all organizations, regardless of size.

The podcast concludes by encouraging listeners to adopt proactive vulnerability management practices.

NIST: https://nvlpubs.nist.gov/nistpubs/CSWP/NIST.CSWP.29.pdf

ISO Standards: https://www.iso.org/standards.html

The Center for Internet Security Controls (CIS): https://www.cisecurity.org/controls

SOC2: https://us.aicpa.org/interestareas/frc/assuranceadvisoryservices/serviceorganization-smanagement

PCS-DSS: https://www.pcisecuritystandards.org/about_us/

COBIT: http://isaca.org/

HITRUST: https://hitrustalliance.net/

CMMC 2.0: https://dodcio.defense.gov/CMMC/

CISA: https://www.cisa.gov/topics/cybersecurity-best-practices

Part One

Intro: (0:00)

What is Vulnerability Management?: (0:50)

Key Components of Vulnerability Management: (1:45)

Remediation and Risk Management: (5:20)

Lifecycle Framework: (6:35)

Benefits of Vulnerability Management: (9:00)

Strengthening Risk Management: (10:10)

Key Industries: (10:50)

Part Two: (12:09)

NIST - ISO 27001 Frameworks: (12:30)

Common Management Tools: (13:30)

Keeping Up With The Challenges: (16:50)

Vulnerabilities Management Misconceptions: (19:00)

Real-World Examples: (22:20)

Critical Infrastructures - ICS: (27:20)

Emerging Trends: (29:00)

Outsourcing - VMaaS: (30:45)

Proactive Vulnerability Management: (31:30)

Part Three - Training Security Awareness: (33:33)

This need-to-know podcast episode explains cyber attestation, an independent verification process assessing an organization's cybersecurity posture.

The episode details the five key aspects of cyber attestation: independent assessment, compliance verification, risk management assurance, trust and transparency, and ongoing monitoring.

It emphasizes the importance of cyber attestation for protecting against cyber threats, achieving regulatory compliance, building business credibility, and avoiding financial losses.

The podcast also outlines the process of a cyber attestation audit, from preparation to certification and follow-up.

Ultimately, the episode promotes cyber attestation as a strategic investment for enhancing security and building trust.

Intro: (0:00)

What is Cyber Attestation?: (1:20)

Real World Examples: (3:00)

Attestation Process: (4:00)

Ongoing Monitoring: (5:20)

Where Are We Headed?: (5:45)

Doing Due Diligence: (6:15)

Key Benefits: (7:45)

This podcast episode explains cyber attack vectors, the methods hackers use to breach systems. It differentiates attack vectors from related terms like attack surface (all vulnerabilities) and threat vector (initial access point).

The episode then details common attack vectors, including phishing, malware, and insider threats, and discusses how attackers exploit both technical vulnerabilities and human weaknesses.

Finally, it provides actionable defensive strategies such as employee training, multi-factor authentication, and regular security audits to mitigate risks.

Resources:

SANS Institute: https://www.sans.org/

NIST: https://www.nist.gov/

CISA: https://www.cisa.gov/

Intro: (0:00)

What is an Attack Vector?: (1:05)

Definition of Attack Surface: (1:25)

Definition of Threat Vector: (1:45)

Real World Attack: (2:30)

How Hackers Attack Vulnerabilities: (3:10)

Social Engineering: (4:10)

Types of Attack Vectors: (5:20)

Protection: (6:45)

Continuous Monitoring: (8:35)

Endpoint Detection And Response: (9:50)

Cloud Security: (10:20)

Encryption: (11:09)

Resources -

NIST, FTC: (12:00)

Behavioral Analytics: (13:15)

Red Team - Blue Team: (13:45)

Final Thoughts: (15:20)

Metro Ethernet is a networking technology using carrier Ethernet to connect various locations within a metropolitan area. Offering scalable bandwidth from 1 Mbps to 100 Gbps, it provides secure and reliable connections for businesses and residences.

Different connection types are available, including point-to-point, multi-point, and hub-and-spoke configurations.

Applications range from interconnecting offices and data centers to providing internet access and supporting cloud services. Its flexibility and scalability make it a popular choice for various users, with services often delivered over fiber optics.

Intro: (0:00)

What is Metro E?: (0:40)

Speeds Up to 100 Gbps: (1:05)

Metro E Topologies: (1:45)

Metro E Security: (3:25)

Cyberspace Security and Resilience in a Digital World is a podcast episode exploring the ever-expanding realm of cyberspace.

The episode defines cyberspace, highlighting its key components and growth driven by the Internet of Things (IoT), artificial intelligence, and cloud computing. It emphasizes the increasing reliance on cyberspace for daily activities and the resulting heightened vulnerability to cyber threats.

The podcast offers practical advice on enhancing cybersecurity, including tips on password management, phishing awareness, software updates, and data protection.

Finally, it encourages listeners to adopt proactive cybersecurity measures to mitigate risks in the digital age.

FIDO2: https://fidoalliance.org/fido2/

Report Fraud and Useful Resources:

Federal Trade Commission (FTC) www.IdentityTheft.gov or 877-438-4338 https://www.bbb.org/scamtrackerhttps://www.bbb.org/article/news-releases/16951-bbb-tip-identity-theft

National Cybersecurity Alliance: https://www.staysafeonline.org/

FTC Free Annual Credit Report: https://www.annualcreditreport.com/gettingReports.action

Three Credit Agencies: Equifax, Experian, and TransUnion

Intro: (0:00)

What is Cyberspace?: (0:32)

Why is Security Important in Cyberspace?: (1:50)

Biggest Threats in Cyberspace: (2:40)

What is Ransomware?: (3:00)

What is Email Phishing?: (3:20)

What is Social Engineering?: (4:05)

Practicing Good Habits: (4:30)

MFA and FIDO2: (5:18)

VPNs and Public Wi-Fi: (6:20)

Backing Up Essential Data: (7:05)