The SecureWorld Sessions

Are CISOs getting sued? Yes. Investors filed a lawsuit that specifically names the CISO of SolarWinds as a defendant. Is this the beginning of a trend to sue the Chief Information Security Officer after a cyber incident?

#InfoSec twitter reacts, and so do the experts on today's podcast: Rebecca Rakoski is co-founder and Managing Partner of XPAN Law Partners, and Glenn Kapetansky is Interim CISO at the University of Chicago Medical School and CSO at Trexin.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner, and for providing new research for this episode after analysis of millions of Linux security events.

Resource Links:

• SecureWorld News story, "Suing the CISO: SolarWinds Fires Back": https://www.secureworld.io/industry-news/ciso-lawsuit-solarwinds

• Trend Micro's Linux Threat Report 2021 1H: https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/linux-threat-report-2021-1h-linux-threats-in-the-cloud-and-security-recommendations

• SecureWorld conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this true cybercrime episode, we uncover the case of an insider threat scheme at an AT&T Wireless call center. Court documents reveal how rogue employees collected approximately $1 million in bribes.

Plus, Dr. Larry Ponemon discusses the Insider Threat risk, and John Grimm discusses Insider Threat best practices.

Resource Links:

• Trend Micro report, Risks in Telecommunications IT: https://www.trendmicro.com/en_us/research/21/g/risks-in-telecommunications-IT.html

• SecureWorld conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

In this true cybercrime episode, we interview Myra Rosario-Fuentes, Senior Threat Researcher at Trend Micro, who just completed an in-depth, two-year research project on Dark Web markets, especially those selling exploits that hackers use to take advantage of security holes in networks and devices.

How much is a Zero Day exploit worth on the Dark Web? How did COVID-19 impact cybercriminals on the Dark Web? Also, we discuss access-as-a-service on the Dark Web, the latest on ransomware operators and affiliate programs, and more.

Resource Links:

• New Trend Micro Report, "The Rise and Fall of the N-day Exploit Market in Cybercriminal Underground": https://newsroom.trendmicro.com/2021-07-13-Nearly-a-Quarter-of-Exploits-Sold-on-Cybercriminal-Underground-Are-More-Than-Three-Years-Old

• Myra Rosario-Fuentes on LinkedIn: https://www.linkedin.com/in/mayra-rosario-fuentes

• SecureWorld conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

In this true cybercrime podcast episode, we interview Alexander Urbelis, cyber attorney and threat intelligence expert, who uncovered a cyberattack against the World Health Organization at the start of the coronavirus pandemic.

Resource Links:

• Trend Micro phishing and ransomware white paper: https://resources.trendmicro.com/rs/945-CXD-062/images/Reduce-Phishing-Ransomware_Trend-Micro.pdf

• Alexander Urbelis on LinkedIn: https://www.linkedin.com/in/alex-urbelis-25aaab1/

• SecureWorld conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

In this true cybercrime episode, we interview Cam, who was arrested for hacking when he was 14 years old. One of his focused cyberattacks was against SeaWorld San Diego. Now, he works as a cybersecurity professional. How did he get into cybercrime and then into a role defending against it? It all started with gaming.

Resource Links:

• Trend Micro's Close the Gap program: https://www.trendmicro.com/closethegap

• Trend Micro's Zero Day Initiative: https://www.zerodayinitiative.com

• SecureWorld conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

How can we scale up the development of our collective cybersecurity talent pipeline, and what role can you play in this? How can your organization help develop talent? How can your alma mater or current university play a part in this? Hear about a model for this kind of work underway through partnerships at New York University Tandon School of Engineering.

Our expert panelists:

1. Geoff Brown, CISO, City of New York, and Head of NYC Cyber Command 2. Liat Krawczyk, Assistant Vice President of the New York City Economic Development Corporation 3. Nasir Memon, Vice Dean at NYU Tandon, and Founder of NYU's Cybersecurity Program 4. Jim Routh, Former CISO at Mass Mutual, Aetna, and other enterprises 5. Joel Caminer, Sr. Director of Cybersecurity Education, NYU Tandon

Resource Links:

• Trend Micro special supported SCORE program: https://www.score.org/technology-resources

• NYU Tandon Cybersecurity Program: https://cybersecurity-strategy-masters.nyu.edu/landing-page

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

Listen in as U.S. state cybersecurity leaders discuss key topics:

• coming year priority projects • the ransomware surge and preparing for security incidents • their organization's security culture and training to deal with issues • innovative, special projects they are most excited about moving forward

Featured presenters on this podcast panel:

• Vinod Brahmapuram, CISO, State of Washington • Deborah Blyth, CISO, State of Colorado • Maria Thompson, former Chief Risk Officer, State of North Carolina • Moderated by Dan Lohrmann, CSO, Security Mentor, and former CSO, State of Michigan

Resource Links:

• Trend Micro CISO resource portal: https://www.trendmicro.com/en_us/business/campaigns/art-of-cybersecurity/ciso.html

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

Nancy Rainosek is the Chief Information Security Officer (CISO) for the State of Texas. She knows all about ransomware incident response. Her team played a key role in remediation after a coordinated ransomware attack hit 22 state agencies in Texas in a single day.

1. What was that ransomware day like for Rainosek and her team? 2. Was there a common vulnerability among the attacked agencies? 3. What did Texas learn during the ransomware attack that can help your organization now?

Resource Links:

• Trend Micro special report on ransomware: https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/modern-ransomwares-double-extortion-tactics-and-how-to-protect-enterprises-against-them

• Nancy Rainosek on LinkedIn: https://www.linkedin.com/in/nancy-rainosek-4144893

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

Josh Jackson is Founder and Executive Director of the AI Association, which advocates for the furtherance of artificial intelligence and automation in the United States. In this wide-ranging discussion about AI, Jackson unpacks the following:

1. How should we define artificial intelligence? 2. Where is the intersection of cybersecurity and AI? 3. What does the AI arms race look like, and what about AI ethics? 4. What if your organization does not have an AI strategy?

Resource Links:

• Trend Micro report on ICS Security: https://www.trendmicro.com/vinfo/us/security/news/internet-of-things/keeping-cyber-risk-under-control-spotting-and-thwarting-ics-threats

• Josh Jackson on LinkedIn: https://www.linkedin.com/in/joshjacksonco

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.

Shawn Tuma is a nationally known "breach quarterback" or "incident response coach" who walks victimized companies through the fallout of a ransomware attack. In this episode, he discusses the following:

1. What stages do organizations and security teams experience during a ransomware attack?

2. Would making ransomware payments illegal disrupt this cybercrime business model?

3. Is the Colonial Pipeline cyberattack a watershed moment for security?

Tuma is Co-Chair of the Cybersecurity & Data Privacy Practice Group at Spencer Fane LLP.

Resource Links:

• Trend Micro special report, "What We Know About the DarkSide Ransomware and the US Pipeline Attack": https://www.trendmicro.com/en_us/research/21/e/what-we-know-about-darkside-ransomware-and-the-us-pipeline-attac.html

• Shawn Tuma on LinkedIn: https://www.linkedin.com/in/shawnetuma

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

• SecureWorld webinars, eSummits, and online training: https://www.secureworldexpo.com/resources?cat=remote-sessions

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Thank you to Trend Micro, a global leader in cloud and XDR security, for being our premier podcast partner.