What’s this about human hacking, you ask? Yes, while there are scenarios where people are indeed inserting and injecting technology under their skin and into their bodies—this is called “biohacking”—that’s not what we are talking about here. Rather, this is about the psychological hacking of one’s mind to change the way they think about something, to change the way they approach a particular situation, or to flat-out get them to trust someone that is untrustworthy.

Everyone is susceptible to this at some level. Think you’re not? Lucky you (but really, you are, sorry). Even if you think you aren’t at risk personally, your employees and business partners certainly are.

YOUR EDUCATORS

- Masha Sedova, Co-Founder, Elevate Security

- James Stanger, Chief Technology Evangelist , CompTIA

- Rachel Tobac, CEO, SocialProof Security

YOUR MODERATORS

- Sean Martin, CISSP, Founder and Editor-in-Chief, ITSPmagazine

- Marco Ciappelli, Co-Founder, ITSPmagazine

Join us for this need-to-know webcast to learn:

- How social engineering and human hacking works

- The potential impact social engineering can have on a business

- How to spot a social engineering attack

- Ways to train your staff so they don’t fall victim

The complete series of webcasts, podcasts, articles, and supporting material can be found on ITSPmagazine at: https://itspmagazine.com/cybersecurity-for-small-medium-business

Enjoy, get involved, and share!

Risk management can be hard — and not because of the unlimited number of things that could go wrong from a cyber perspective. Rather, because it’s difficult to figure out which risks are real and which of those risks are relevant to your organization.

To that end, I was thrilled to connect again with John Grim, Senior Manager, Investigative Response at Verizon to look at the Verizon Data Breach Digest cases and how they can help organizations operationalize their risk and security management programs.

Following the details captured in the scenarios, John paints some pictures for us to chew on, breaking down how the attacks originate, how the target is reached, how the internal victims and stakeholders are impacted, how companies can respond, and how non-victim organizations can prepare and protect their business from a similar attack.

After listening to our conversation, I would encourage you to take a look at these cases and use them as a resource to define, implement, and validate your risk and security management programs.

In today’s chat, Marco Ciappelli and Sean Martin connect with Patrick Heim, Operating Partner and Chief Information Security Officer for ClearSky ventures, and Richard Seiersen, author, startup advisor and former LendingClub CISO, to learn more about this year’s Innovation Sandbox during RSA Conference 2019.

All of our RSA Conference coverage, including these chats on the road, is made possible by the generosity of our sponsors. We’d like to thank edgescan, Bugcrowd, and STEALTHbits for their support and encourage you to have a look at their directory listing on ITSPmagazine to see how they can help you with your risk, security and compliance programs.

Edgescan: https://www.itspmagazine.com/company-directory/edgescan

Bugcrowd: https://www.itspmagazine.com/company-directory/bugcrowd

STEALTHbits: https://www.itspmagazine.com/company-directory/stealthbits

For more Chats on the Road to RSA Conference 2019, please visit:

https://www.itspmagazine.com/itsp-chronicles/chats-on-the-road-to-rsa-conference-2019-san-francisco

Ladies and Gentlemen,

 WELCOME TO THE INTERSECTION OF IT SECURITY AND SOCIETY, welcome to ITSPmagazine.

This is Marco Ciappelli, and you are about to listen to another episode of my podcast series The Cyber Society.

Let's face it: the future is now. 

We are already living in a cyber society, so we need to stop ignoring it or pretending that is not affecting us.


Here is where IT security and society truly intersect. Here is where we discuss the impact that technology and cybersecurity - or the lack of - have on our everyday life.

Here is where we look at all the internet-connected conveniences, we raise our voice and call for awareness, and we educate ourselves about information security, privacy, and cyber safety.

Because there is no better place than here, and no better time than now, to talk about the future of this digitally connected world.

_______________________

Today’s guest is Ted Harrington | Executive Partner at ISE (Independent Security Evaluators) and organizer of the @IoT Village


So What is this conversation about?

It is about the World Economic Forum, which is an organization able to foster collaboration across industries, academia, and governments — including leaders of nations — in order to resolve the world’s most pressing international problems.

It is about cybersecurity, which is now officially recognized as one of the top 5 global threats. This is why WEF created a Center for Cybersecurity.

If InfoSec experts and practitioners already knew about the importance of their job, this would represent the ultimate validation and it would confirm that this is the leadership issue we all know it is.

140 participants representing about 90 organizations and 25 nations spent two days together discussing how the cybersecurity challenge could be addressed and resolved as a cross-border issue, with no nationality.

Curiously — but maybe not too surprisingly — one of the core topics was application security and how its vulnerability is a key factor in today’s cybersecurity landscape.

Respecting the commitment to secrecy that the participating experts have to maintain in regards to who was there, in order to allow an open conversation, this story paints a fascinating and hopeful future made of cooperation amongst nations for the common good, and it shows that the cybersecurity community efforts to ring the alarm bells have not gone unheard.

This is the most optimistic I have been in a while.



Maybe it will rub off on you if you listen.

Let's listen...

_______________

May I interest you in some more of The Cyber Society Podcast?

Here you go: https://www.itspmagazine.com/itsp-chronicles/once-upon-a-time-a-group-of-cybersecurity-experts-met-at-the-world-economic-forum

Selena Templeton and co-host Marco CIappelli chat with Whitney Merrill, a privacy and data attorney who also founded the crypto village at DEFCON, about cyberbullying, anonymity and privacy rights.

Whitney starts this conversation off by recounting her own experience of cyberbullying when she was in high school, and the frustration she experienced when she was told by teachers, the police and even AOL that there was not much they could do to trace the user. She responded to that by getting a masters degree where she explored issues associated with technology, information security, privacy, anonymity and the law.

In this podcast we talk about the difficulty of making sure the legislation is effective but not overly evasive so that it infringes on others’ freedoms; we talk about freedom of speech – we can't dole it out as we see fit; either everyone is guaranteed free speech or no one is; we discuss the need for parents to teach their kids the consequences of one’s actions, in both real life and digital life. And we also touch on why she founded the crypto village and the importance of cyber education for everyone.

I hope you are as inspired by listening to this conversation as much as we were inspired by chatting with Whitney!

Find more podcasts at: https://www.itspmagazine.com/equal-respect-and-diversity-in-infosec-and-information-technology

On today's podcast we talk about branding, advertising, and marketing in the age of Big Data, Internet of Things, Social Media, Artificial Intelligence and, of course, the World Wide Web -- the primordial soup that has given life to this Cyber Society of ours.

Unusual Gathering | Episode XVI

Conversations At The Intersection Of IT Security And Society

Marketing, Advertising, and Privacy in the Cyber Society

Guests

Kika von Klück | Thom Langford

Hosts

Sean Martin | Marco Ciappelli

This Episode:

On today's podcast we talk about branding, advertising, and marketing in the age of Big Data, Internet of Things, Social Media, Artificial Intelligence and, of course, the World Wide Web -- the primordial soup that has given life to this Cyber Society of ours.

More than one hundred years ago, John Wanamaker, an American merchant and political figure, considered by some to be a proponent of advertising and a "pioneer in marketing," proclaimed:

“Half the money I spend on advertising is wasted; the trouble is, I don’t know which half.”

So, where do we stand today?

Here is a taste of the questions we tried to answer in this lively conversation:

- Did we resolve this century-old problem with technology, or are we still wasting about half of the pie, with the only difference being that now we know where — and how — we are wasting it?

- Has creativity in advertising lost center stage, replaced by cold numbers and algorithms? Or do they work together for better results?

- Artificial Intelligence, together with humans, is already creating interesting art — can it become part of the creative process to help us expand it?

- As interactivity and micro-targeting can offer value by reaching the consumer at the right time for the product or service that is needed or desired, how much deeper can the mind be manipulated — or is already? — to create those needs and desires by giving the illusion of free will to the consumers?

- If the arrival of online advertising, big data and social media was an advertiser’s dream come true, the latest calls for privacy, transparency, diversity, trust, and ethics are reshaping the scenario. But what does the final shape look like?

Listen up and find out how we think we could balance creativity, technology, convenience, and respect for the consumers.

BTW, we had a good time and we hope you enjoy this conversation!

Learn more about sponsoring the Unusual Gatherings Podcasts:

https://www.itspmagazine.com/talk-show-sponsorships

Learn more about supporting our quest by joining us on Patreon

If you can donate $1/month, you can help us to make a difference.

https://www.patreon.com/itspmagazine

Would you like to participate in more Unusual Gatherings?

No problem ... https://www.itspmagazine.com/itspmagazine-unusual-gatherings/

The cybersecurity industry continues to whine and cry about not having enough talent from which to source their InfoSec employees. Indeed, there are challenges in this space that need to be addressed; there’s no questioning that. But are organizations approaching this challenge the wrong way? Are they doing things, using things, and missing things that are putting them in this position? Are they hurting themselves rather than rising to the challenge in a way that puts the candidates and employees at the front of the story?

Marco Ciappelli and Sean Martin had the opportunity to chat with Kirsten Renner from Novetta and of Car Hacking Village fame. As a long-time recruiter, Kirsten suggests that we may be leveraging processes and technologies to our disadvantage, forgetting about the human element of the whole process. To sum it up: Kirsten says recruiting companies, hiring managers, and their extended recruiting team needs to “Ask the right questions and then shut up and listen.”

Here are some of the things discussed in this episode:

- How and where should you be looking — and participating — to find InfoSec talent?

- Who is involved in the hiring process? Is everybody on the same page and participating in the process with the human element at the forefront of the program?

- Are you asking the right questions? Do you know what the right questions even are? Are you paying attention and truly listening to the answers?

- Are you using technology and processes to your disadvantage? Are you filtering out too many potential candidates?

- What can the candidates do to have a better shot at being seen and working through some of these technological and process filters?

- Where does recruiting sit within your organization? Is it part of your HR team? Is that the right decision?

- How and where can the community work together to help each other?

It’s time to take Kirsten’s advice by doing what she says — I am going to ask her a few questions and then shut up and listen.

Want more from The Academy? Great! You can find more episodes and articles here: https://www.itspmagazine.com/the-academy-column-infosec-and-cybersecurity-education

In this episode, Sean Martin is joined by Dinis Cruz, the CISO for the Photobox Group, to talk about automating and scaling the end user security awareness decision-making process through the use of ChatOps — which is essentially the use of a chat platform and supporting technologies to operationalize and decentralize the sharing of information and decisions.

One key point that Dinis makes as he walks us through some real-world scenarios he is implementing is that security teams often make the mistake of trying to own everything. Dinis suggests that there is value in the security team focusing on demonstrating what can be done through a quick proof of concept and then to hand the project over to others within the organization that have the resources and deep skillsets to see the project reach its full potential.

There are a number of great nuggets in here from Dinis — we hope you enjoy the conversation.

Are data breaches ever going to stop? Or, is there too much value for the attackers? Are we heading in the right direction, or is the problem too complex to control?