The Cipher Podcast

PCI-DSS es una certificación que minimiza los riesgos relacionados con el procesamiento, transmisión y almacenamiento inadecuado de las tarjetas de pago, lo cual es obligatorio para todas las empresas que realizan transacciones con tarjetas. 

We dive into the future of IoT and Internet-connected devices in this episode. This episode comes in the form of a recording from a recent live stream with Prosegur USA's Director of IoT Greg Kuhn. Greg and the hosts cover what the use-cases for connected devices exist today, where things are heading, and how cybersecurity factors in.

Watch a recording of the streaming session at https://cipher.com/blog/the-future-of-connected-devices/.

Cipher torna-se a primeira empresa brasileira certificadora em segurança de PIN Security.

Neste episódio, convidamos os nossos colaboradores do time de GRC para falarmos sobre Pin Security e como funciona essa certificação.

We are kicking off Cybersecurity Awareness Month by investigating a scam technique that has resulted in $26 billion in loss since 2013. This technique is Business Email Compromise (BEC). Attackers compromise or spoof emails and convince victims to give money or perform other negative actions. To dive deep on the topic we welcome FireEye Cybersecurity Engineer Jamie Maxfield. Jamie covers some of the technical safeguards FireEye products have in place to stop scammers from defrauding companies and individuals. The episode also goes into ways people can detect these scams even if the technical safeguards are not present.

Learn more about Business Email Compromise in our recent blog post: https://cipher.com/blog/business-email-compromise.

Vulnerability management is a critical task for IT teams. Every day, software companies release patches and new vulnerabilities are discovered. In this episode, we cover the ins and outs of how teams manage vulnerabilities using traditional methods like scanning. Cipher Cyber Intelligence Manager André Pinheiro joins the episode to discuss how Cipher's brand new solution cuts the response time for patching vulnerabilities down significantly. We call the solution Proactive Vulnerability Alerting. It pushes customized notifications of vulnerabilities to companies in hours instead of days.

Read more about the new service at https://cipher.com/blog/proactive-vulnerability-alerting/.

Confira mais um episódio do nosso #CipherCast - Vazamento de senha recorrente com o nosso diretor de red team services Fernando Amatte.

Over 300,000 companies in the US could become subject to the Department of Defense (DoD) Cybersecurity Maturity Model Certification (CMMC) soon. This new certification is required for companies that do business with the DoD, either directly or as a sub-contractor. Chris Saucier is the CMMC Lead for NetBrain Technologies and he shares his expertise on the topic. The hosts go over what the new certification requires for companies now and how it could change in the future. The primary recommendation for working towards complying with the new model is for companies to start building a culture of cybersecurity awareness across the organization.

Learn more about NetBrain's CMMC offering at www.netbraintech.com/automation-for-cmmc-compliance.

Retired Navy Rear Admiral Danelle Barrett joins the podcast to discuss her strategy for managing the cybersecurity landscape of a huge organization like the Navy. She covers her first-hand experience with digital transformation at the Department of Defense. Admiral Barrett strongly advocates thinking like the adversary in order protect networks. Doing this helps leaders at organizations look critically at data collected and analyzed and make the best business and military decisions. She goes over the potential benefits and cybersecurity misconceptions of open-source software. Finally, Admiral Barrett gives career advice. 

Retired Air Force Lieutenant Colonel Vincent Sullivan joins the episode. Mr. Sullivan has extensive front-lines cybersecurity management experience. He gives advice on leadership, professional development and strategies to secure organizations.

Video monitoring and IoT use is on the rise with 5G being rolled out. In addition, security teams are turning to monitoring as buildings continue to be empty due to COVID-19 restrictions. The monitoring goal is to keep the areas secure. The Cybersecurity element of the monitoring should also be secured, or data could be stolen and access disrupted. Prosegur USA's Director of IoT Greg Kuhn joins the episode to discuss both video monitoring and how the devices are secured digitally.

 Learn more about Prosegur USA and how they help safeguard companies at www.prosegur.us. Read about YellowBox, which protects IoT devices at www.cipher.com/yellowbox.