Technically U

AI Knows What You Share – Stay in Control!

This Technically U podcast episode focuses on the privacy risks of using AI tools. The episode highlights how AI models learn from user inputs, potentially storing sensitive information, and how publicly available data can be used to create AI-generated content, even from deleted posts.

It also addresses the malicious use of AI by cybercriminals, such as creating deepfakes and convincing phishing emails. The podcast emphasizes the importance of critical thinking and strong cybersecurity practices when using AI, advising users to treat AI as a tool and always verify information.

Finally, it stresses the permanence of online information and the need for vigilance to protect personal data.

Report Fraud and Useful Resources:

Federal Trade Commission (FTC) www.IdentityTheft.gov or 877-438-4338 https://www.bbb.org/scamtrackerhttps://www.bbb.org/article/news-releases/16951-bbb-tip-identity-theft

National Cybersecurity Alliance: https://www.staysafeonline.org/

FTC Free Annual Credit Report: https://www.annualcreditreport.com/gettingReports.action

FIDO2: https://fidoalliance.org/fido2/

Three Credit Agencies: Equifax, Experian, and TransUnion

Intro: (0:00)

Beware! AI Is Building A Profile On You!: (0:10)

Think Before You Type: (1:15)

Your Shared Data Sticks Around: (1:55)

Be Privacy-Aware: (2:10)

Watch What Others Post About You: (3:00)

Hackers Are Using AI: (3:25)

AI Mimicked Voice Scams: (3:45)

Be Smarter Than AI: (4:00)

Fabrication vs Reality: (5:15)

Education, Awareness, and Skepticism: (5:30)

This podcast episode discusses home network security, explaining how quickly hackers can compromise unsecured networks—often in seconds—due to factors like default settings, weak passwords, and outdated firmware.

The episode details the types of information hackers seek, including personal data, financial information, and access to IoT devices. Crucially, it provides practical steps to improve home network security, such as changing default passwords, using strong and unique passwords, enabling encryption, and regularly updating software.

The podcast emphasizes proactive security measures as essential for protecting personal information and preventing network exploitation.

Finally, the episode advocates for educating household members about cybersecurity best practices.

Report Fraud and Useful Resources:

Federal Trade Commission (FTC) www.IdentityTheft.gov or 877-438-4338 https://www.bbb.org/scamtrackerhttps://www.bbb.org/article/news-releases/16951-bbb-tip-identity-theft

National Cybersecurity Alliance: https://www.staysafeonline.org/

The Hackers News: https://thehackernews.com/

NIST: https://www.nist.gov/

Cisa: https://www.cisa.gov/topics/cybersecurity-best-practices

FTC Free Annual Credit Report: https://www.annualcreditreport.com/gettingReports.action

FIDO2: https://fidoalliance.org/fido2/

Three Credit Agencies: Equifax, Experian, and TransUnion

Part One: (0:00)

Hackers Breaching Homes: (0:55)

Change Default Router Settings: (1:45)

Strong Unique Passwords: (3:15)

Update Router Firmware: (4:35)

Protecting IoT Devices: (5:40)

What Hackers Are After?: (6:40)

Your First Line of Defense: (8:10)

Using WPA3 - WPA2 Encryption: (8:35)

Router Firewall: (9:30)

Using A Guest Network: (10:55)

MFA: (12:00)

FIDO2 Spoof Proof Devices: (13:30)

Educating Family Members: (14:25)

Part Two - Household Best Practices: (14:45)

Family Meeting - Online Safety: (15:40)

Guest Network Isolation: (18:00)

Parental Controls: (19:40)

Staying Ahead of The Curve: (22:05)

Automatic Updates: (23:40)

Balancing Security and Convenience: (25:00)

Working With Teenagers: (27:00)

Parental Controls for Preteens: (28:45)

Leading By Example: (30:30)

This podcast episode focuses on job seeker scams and hiring fraud, explaining how scammers operate and offering crucial advice for job hunters.

Examples of scams involving fake job postings, too-good-to-be-true offers, and upfront payment requests are detailed. The episode provides practical steps to protect oneself, including thorough company research and caution regarding unsolicited offers.

Finally, it outlines procedures for reporting scams and securing finances if victimized, and it concludes by offering helpful resources.

Report Fraud and Useful Resources:

Federal Trade Commission (FTC) www.IdentityTheft.gov or 877-438-4338

IC3 - Internet Crime Complaint Center: https://www.ic3.gov/

ITRC - Identity Theft Resource Center: https://www.idtheftcenter.org/ or 888-400-5530

https://www.bbb.org/scamtrackerhttps://www.bbb.org/article/news-releases/16951-bbb-tip-identity-theft

National Cybersecurity Alliance: https://www.staysafeonline.org/

The Hackers News: https://thehackernews.com/

NIST: https://www.nist.gov/

CISA: https://www.cisa.gov/topics/cybersecurity-best-practices

FTC Free Annual Credit Report: https://www.annualcreditreport.com/gettingReports.action

FIDO2: https://fidoalliance.org/fido2/

Three Credit Agencies: Equifax, Experian, and TransUnion

Part One: (0:00)

What Is Job Seeker Fraud?: (0:50)

Scammers Tactics: (1:55)

Detecting Fraudulent Postings: (2:40)

Skeptical Application Process: (3:30)

Skeptical Interview Process: (3:55)

Offers Too Good To Be True: (5:00)

Phishing Emails: (6:35)

Fake Check Scams: (8:30)

Part Two - Protecting Yourself and Helpful Resources: (10:30)

Don't Rush Offer Acceptance: (11:05)

Create A Checklist: (11:30)

Research The Company: (12:25)

Limit Information Sharing During Interviews: (13:35)

Request A Copy of The Offer: (15:20)

If A Victim - Report It: (16:50)

Credit Freeze and Bank Notifications: (18:00)

Monitor Bank And Credit Statements: (19:38)

Identity Theft Resource Center: (20:10)

Final Thoughts: (21:25)

This podcast episode discusses email spoofing, a type of digital deception where attackers fake the sender's email address.

The episode explains how scammers operate, using examples of real victims, and provides practical steps to protect oneself, such as verifying email addresses and enabling multi-factor authentication. It also offers advice on recovering from a spoofing attack, including reporting the incident and changing passwords.

Finally, the episode lists helpful resources to learn more about email security and stay informed about current scams.

Report Fraud and Useful Resources:

Federal Trade Commission (FTC) www.IdentityTheft.gov or 877-438-4338 https://www.bbb.org/scamtrackerhttps://www.bbb.org/article/news-releases/16951-bbb-tip-identity-theft

ITRC - Identity Theft Resource Center: https://www.idtheftcenter.org/

National Cybersecurity Alliance: https://www.staysafeonline.org/

The Hackers News: https://thehackernews.com/

NIST: https://www.nist.gov/

Cisa: https://www.cisa.gov/topics/cybersecurity-best-practices

FTC Free Annual Credit Report: https://www.annualcreditreport.com/gettingReports.action

FIDO2: https://fidoalliance.org/fido2/

Anti-Phishing Working Group: www.apwg.org

Three Credit Agencies: Equifax, Experian, and TransUnion

Intro: (0:00)

What is Email Spoofing?: (1:05)

The Dangers of Email Spoofing: (5:00)

Enabling MFA or FIDO2: (6:00)

Password Managers: (6:39)

Looking for Typos and Grammatical Errors: (7:45)

Links and Attachments: (8:04)

DKIM - DMARC - SPR: (8:55)

If a Victim: (9:50)

Available Resources: (12:40)

Part Two: (14:15)

Being Careful What You Share: (15:30)

What can organizations do: (16:30)

Email Filtering Systems: (17:10)

Employee Training: (17:50)

More Resources: (21:25)

Psychology: (22:50)

This podcast episode explains DMARC, a crucial email authentication protocol that protects domains from unauthorized use.

It describes how DMARC works by aligning sender domains with recipient addresses and allowing domain owners to control how unauthenticated emails are handled (accepted, quarantined, or rejected).

The episode also covers related protocols, SPF and DKIM, which verify sender legitimacy and email integrity, respectively.

Finally, it provides practical steps for implementing DMARC, emphasizing its importance for enhancing email security and protecting brand reputation.

Intro: (0:00)

What is DMARC?: (0:52)

ow Does It Work?: (1:30)

What is SPF?: (3:25)

What is DKIM?: (4:20)

Why Do We Need DMARC?: (5:25)

SPF - A Deeper Dive: (6:10)

DKIM - A Deeper Dive: (6:57)

DMARC - A Deeper Dive: (8:50)

Real World Example: (10:00)

Quarantine, Monitoring, Rejecting: (11:00)

Reporting: (12:40)

Challenges: (13:30)

Enforcement Policies: (14:33)

Resources: (17:30)

LoRa is a long-range, low-power wireless communication technology, while LoRaWAN is a network protocol built on top of LoRa that manages data transmission between devices and a central server.

Together, they offer significant advantages for Internet of Things (IoT) applications, including low cost, energy efficiency, scalability, and global reach.

The podcast explores their key differences, benefits, and expanding applications in various sectors, highlighting their potential to create a more connected world. Future advancements involve integration with 5G and hybrid solutions, further broadening their capabilities.

What is LoRa?: (1:18)

What is LoRaWAN?: (1:55)

How Does It Work: (2:49)

Cost Effective - No Data Plans: (3:30)

Security - Authentication - Encryption: (3:45)

Uses of LoRaWAN: (4:45)

Smart City Uses: (5:35)

Street Lights Data: (6:45)

Waste Management Uses: (7:00)

Safe Guards: (7:25)

Unlicensed Spectrum Interference: (8:00)

Asset Tracking: (8:30)

The Future of LoRaWAN: (9:25)

AI Integration: (9:40)

Block Chain: (10:15)

Challenges: (11:20)

5G Wireless Integration: (12:09)

Shared Spectrum: (12:34)

LoRaWAN Open Standard: (13:15)

Key Takeaways: (13:50)

Wavelength services, offered by carriers, provide dedicated point-to-point connections using fiber optic cabling and DWDM technology for high-bandwidth data transmission.

Two main types exist: non-protected, offering a single connection with potential for service disruption, and protected, providing automatic failover to a backup connection for higher reliability.

Protected wavelengths offer various protection schemes (revertive or non-revertive) to manage traffic routing during and after outages. The increasing demand for secure and reliable data transmission makes wavelength services crucial for businesses and government agencies, especially with the rise of technologies like Edge Computing and 5G.

Intro: (0:00)

What is Fiber Optics?: (0:44)

What is Wavelength Services: (2:15)

Security - Protected Wavelengths: (3:00)

Revertive and Non-Revertive Options: (3:25)

Edge Computing: (5:20)

Encrypted Wavelength Services: (7:00)

Current Business Uses: (10:10)

Cybersecurity threat hunting is a proactive approach to identifying and mitigating cyber threats that traditional security measures often miss. The process involves creating hypotheses, investigating system data using advanced tools, and analyzing findings to neutralize threats.

Organizations benefit from enhanced detection, faster response times, and a strengthened security posture. Outsourcing threat-hunting services provides access to 24/7 monitoring and expert analysis.

The future of threat hunting will leverage AI, automation, and predictive analysis to combat increasingly sophisticated cyberattacks across emerging technologies.

Intro: (0:00)

What is Threat Hunting?: (0:20)

First Step - Hypothesis Creation: (0:50)

Investigation Phase: (1:30)

Behavioral Analytics: (2:25)

Analysis And Detection: (2:50)

Neutralization Stage: (3:08)

What Happens When A Threat Is Detected: (3:55)

Post Incident Analysis: (4:40)

Benefits of Threat Hunting: (5:45)

THaaS - Threat Hunting As A Service: (7:15)

AI and Machine Learning: (8:55)

Inhouse and 3rd Party Support: (13:35)

Thinking Like An Adversary: (13:55)

Qualities of a good Threat Hunter: (15:40)

Humans and AI Working Together: (17:40)

This podcast episode explains Privileged Access Management (PAM) and its related concept, Privileged Identity Management (PIM), highlighting their crucial roles in cybersecurity.

It details how PAM works by identifying, monitoring, and controlling access to high-privilege accounts, emphasizing its benefits in reducing security risks and improving compliance.

The episode differentiates PAM from PIM, explaining that PIM focuses on temporary, role-based access, while PAM manages the broader access environment.

Finally, it discusses future trends in PAM, including its expanding application in cloud, DevOps, and IoT contexts.

What is PAM?: (1:10)

How Does PAM work: (1:40)

Access Control: (2:30)

Detailed Reporting: (3:00)

Who are Privileged Users?: (3:20)

Other Privileged Users: (4:00)

PIM - Privileged Identity Management: (5:25)

Best Practices: (7:35)

Continuous Session Monitoring: (8:50)

Emerging PAM Trends: (9:50)

Automation: (10:45)

Major Challenges: (11:20)

Part Two: (12:20)

Resources: (14:10)

Risk of Privileged Accounts: (16:00)

Service Accounts: (19:00)

Real World Examples: (22:40)

Healthcare: (23:05)

Financial Institutes: (25:00)

Government Agencies: (26:49)

The podcast episode explains the Government Emergency Telecommunications Service (GETS), a program managed by CISA that provides priority access to phone networks during emergencies for essential personnel.

GETS uses a special dialing sequence and PIN to prioritize calls, bypassing congested lines without interrupting existing calls. The service is crucial for national security and public safety, enabling reliable communication for government leaders, first responders, and others involved in critical infrastructure.

Registration requires organizational affiliation and approval, after which users receive a GETS card with a unique PIN. The service supports voice, data, and fax transmissions, offering nationwide coverage and redundancy across multiple carriers.

CISA - https://www.cisa.gov/resources-tools/services/government-emergency-telecommunications-service-gets

What is GETS: (0:55)

Who Are GETS users: (2:06)

What Makes GETS so Reliable: (3:00)

How To Obtain GETS: (4:15)

Other Supported Communications: (5:00)

Key Features of GETS: (5:30)

Real World Examples: (6:00)

The Power of Voice Calls During an Emergency: (11:33)

Future of GETS: (12:30)

CISA Available Training: (14:35)

CISA.gov/GETS: (16:00)