teissPodcast - Cracking Cyber Security

This week on the podcast we are talking with Naaman Haart, a UK-based threat hunter for the cybersecurity company, Digital Guardian.

The role of the Threat hunter is a fairly new one within the industry and on this episode Naaman discusses the ins and outs of what the job entails, as well as how he hunts for, investigates and quarantines threats on a number of enterprise networks. Naaman also reveals the biggest malware trends he’s seeing at the moment.

On this week’s episode, we talk to cyber security company Tanium’s CEO Orion Hindawi and Chief Technology Officer, Ryan Kazanciyan, at their yearly conference, CONVERGE.

Is it fair to label vendors as the snake oil of the cyber security industry? How can CISOs measure risk and present their findings to the board in a comprehensive way? Can companies really avoid having a weak link in their armour? What questions should organisations be asking when it comes to protecting themselves?

Find out how Orion and Ryan responded and more on the episode.

On this week’s podcast TEISS speaks with Detective Superintendent Andrew Gould - Head of the Metropolitan Police Cyber Crime Unit about how the Met is tackling international cybercrime, how well nation states cooperate when it comes to tracking down the criminals and what he’s learned from previous work in counter terrorism that is helping in the plight to clamp down on cybercrime.

Did you know that the most popular password at the end of 2018 was "123456", followed by “password” in second place? Here's a list of the top 25 which might seem alarming...or not.

So, unsurprisingly, this week we’re talking passwords…yes, those things we love to hate…but why do we love to hate them? Why exactly are we so bad at changing our passwords regularly? What’s wrong with using the same password across multiple accounts?

To help us tackle the password conundrum, Cyber Security Specialist at ESET, Jake Moore, uncovers some tactics the hackers employ to steal our passwords and gives advice for better password management. 

This week Joe Carson, chief security scientist at Thycotic, takes us through the mind of a hacker. What reconnaissance does a hacker conduct before an attack? What are the vulnerabilities they’re looking for? When are hackers most likely to strike? Joe shares his thoughts on these questions, as well as addressing the risks of introducing IoT for ease of use but sacrificing security and how you can prevent and reduce the risk of abuse to your critical information assets.

Here we are - at the end of 2018 – and what a year it’s been in the world of cyber security. Barely a week went by without a story of another major breach hitting the headlines. It was the year of GDPR, when businesses jostled to understand and implement the required privacy regulations. Was it also Facebook’s annus horribilis? The Cambridge Analytica scandal, Russian fake news, and the failure to remove child pornography were just a few of the problems that plagued Facebook founder, Mark Zuckerburg, in recent months. So what lessons have we learned in 2018? Has the long anticipated GDPR delivered? And what sort of trends can we expect in 2019? Former CISO and Founder and CEO of Cyber Risk Aware, Stephen Burke, shared some of his thoughts on the year that was, and the year to come. 

This is Part Two of our focus on cyber extortion with Tim Lambon, Director of NYA, the Global Response Team. The episode explores the stigma attached to admitting your business has been a victim of ransomware, the emotional trauma some victims go through, how GDPR has empowered the criminals, as well as Tim’s top tips for dealing with cyber extortion.

Cyber extortion is our theme this week; the crime involving an attack or threat of an attack coupled with a demand for money or some other response in return for stopping or remediating the attack. This is the first part of a 2 part cyber extortion special where Tim Lambon, Director of the Global Response Team at NYA, discusses the different types of cyber extortion the criminals are exploiting, when to pay the ransom and when not, the negotiation process itself, how the perception of the value of data changes throughout the negotiation process and what’s the psychology behind it all…

This week we are talking about security awareness with Martin Smith MBE, Chairman of both SASIG and The Security Company. On the podcast Martin discusses the importance of humour and humanity, what is needed to inspire security culture behaviour change within an organisation, and why the security industry needs to stop isolating itself from other industries. 

TEISS speaks with Tanium’s Chief Security Officer, David Damato, at CONVERGE18 in Washington DC. On the podcast, we explore how he thinks the cyber skills gap could be bridged, how WannaCry could have been avoided, lessons he’s learnt along his career path, as well as how to talk to the board effectively.

New research from Tanium suggests that UK firms have a long way to go in building the business resilience required to withstand modern cyber threats and other major disruptions. Tanium's latest Business Resilience study reveals that 96% of business decision makers claim business resilience should be core to company strategy, however only 54% say that it definitely is…so why are they struggling to take action?