The SecureWorld Sessions

When an Iowa Sheriff arrested Coalfire pentesters Gary DeMercurio and Justin Wynn on the job, it sent shockwaves through the cybersecurity community. The two InfoSec professionals faced felony charges, jail time, and the possibility of a criminal record for doing what they were hired to do. And information security professionals faced a possible chilling effect around a common strategy for testing defenses.

Now, Gary and Justin tell their story to the SecureWorld audience during a candid interview. They will take us through what happened to them and share what they learned in the process.

Resource Links:

• Trend Micro, "15 Years of the Zero Day Initiative": http://bit.ly/TM_ZDI_15

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

We are asking questions about the SolarWinds data breach fallout. How did the SolarWinds breach impact everything related to legal and compliance? And how does it change the way you should look at Vendor Risk Management? We get answers from Glenn Kapetansky, CSO and Technology Capability Lead, at Trexin Group; and Rebecca Rakoski, Co-Founder and Managing Partner, at XPAN Law Partners, a cybersecurity law firm.

Also, don't miss Trend Micro's Incident Response Playbook, available for free download, below.

Resource Links:

• Glenn Kapetansky on LinkedIn: https://www.linkedin.com/in/kapetansky

• Rebecca Rakoski on LinkedIn: https://www.linkedin.com/in/rebecca-rakoski-esq-1460b116

• Trend Micro Incident Response Playbook: https://www.trendmicro.com/vinfo/us/security/news/managed-detection-and-response/cyberattacks-from-the-frontlines-incident-response-playbook-for-beginners

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

"We were not prepared for a SolarWinds type of supply chain attack," says Cedric Leighton, CNN Analyst and U.S. Air Force Colonel (Ret.).

In this podcast episode, Leighton examines how wide the impact of the SolarWinds cyberattack might be, possible collateral damage from the attack, and the most likely nation-state behind it all. Plus, Leighton explains the top nation-state cyber threats during 2021.

Resource Links:

• Cedric Leighton on LinkedIn: https://www.linkedin.com/in/cedricleighton

• Trend Micro report, "Turning the Tide: Security Predictions for 2021": https://www.trendmicro.com/vinfo/us/security/research-and-analysis/predictions/2021

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

Long-term predictions are risky, but Rik Ferguson likes to predict things a decade into the future. Rik is Vice President of Security Research at Trend Micro. Building off his Project 2020, Rik is now working on Project 2030.

In our interview, we get a glimpse of the future of AI, the future of malware, the future of wearables, the future of ransomware, and more. Also, we discuss implications of the 2020 SolarWinds data breach. If predictions are your thing, do not miss this episode!

Resource Links:

• Rik Ferguson on LinkedIn: https://www.linkedin.com/in/rikferguson/

• Trend Micro report fact check-Project 2020 in Review (PDF): https://2020.trendmicro.com/wp-content/uploads/2020/10/REP00_Project_2020_Summary_200928US_Web.pdf

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

What does the 2021 cyber law and privacy law landscape look like? Our first guest is attorney Jordan Fischer of Beckage Law. And how can you ensure total data discovery and then manage that big data with security and compliance in mind? Our second guest is Arun Gandhi, Vice President at 1touch.io, which specializes in this area.

Also, we have new research from Trend Micro about 2021 cyber threat trends.

Resource Links:

• Jordan Fischer on LinkedIn: https://www.linkedin.com/in/jordan-fischer-cipp-e-cipp-us-cipm-706b4147

• Trend Micro report, "Turning the Tide: Security Predictions for 2021": https://www.trendmicro.com/vinfo/us/security/research-and-analysis/predictions/2021

• Arun Ghandi on LinkedIn: https://www.linkedin.com/in/arungandhi/

• 1touch.io and the Inventa platform: https://1touch.io/

• SecureWorld virtual conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

What does a resilient and secure organization look like? What are key strategies and technologies these organizations should have? How does a resilient organization empower its employees? In this episode, we glean insights from Adam Leisring, Chief Information Security Officer at Paycor.

Also, we have new research from Trend Micro. The latest report is called "Inside the Bulletproof Hosting Business: Cybercriminal Methods and OpSec," and it's a fascinating read. See the link below to download. Thanks to Trend Micro for being our Premiere Podcast Partner.

Resource Links:

• Adam Leisring on LinkedIn: https://www.linkedin.com/in/leisring/

• Trend Micro report, "Inside the Bullet Proof Hosting Business": https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/inside-the-bulletproof-hosting-business-cybercrime-methods-opsec

• SecureWorld Virtual Conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we are learning about modern cybersecurity leadership. We hear from Yaron Levi, CISO of Blue Cross and Blue Shield of Kansas City.

Levi shares about what security professionals need to do now to lead. And he helps us consider the following questions: Why is information security mainly reactive instead of proactive? Why do most organizations view security as a technology problem instead of a business risk problem? How come so many organizations lack a clear security strategy? And why do security leaders fall back on "silver bullet" solutions? There are reasons for all of these things, and as Levi explains, there is a better path for modern cybersecurity leaders to take.

Resource Links:

• Yaron Levi on LinkedIn: https://www.linkedin.com/in/yaronrl/

• Trend Micro report on SLUB Malware Watering Hole: https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/operation-earth-kitsune-tracking-slub-s-current-operations

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we talk to Mark Nunnikhoven, Vice President of Cloud Research at Trend Micro. 2020 was the cloud's biggest year, and we're talking about securing the cloud into the future.

How do we make cloud security usable? How do we make cloud security stable? What does building in this environment look like right now, and what is the state of DevSecOps? What can we do about misconfigurations in the cloud? What are cloud security opportunities and challenges? And are cloud platform security tools enough to secure your data?

Resource Links:

• Mark Nunnikhoven on LinkedIn: https://www.linkedin.com/in/marknca/

• Trend Micro Cloud Migration Best Practices: https://www.trendmicro.com/en_us/business/products/hybrid-cloud/cloud-migration-security.html

• Trend Micro Cloud One Conformity: https://www.trendmicro.com/en_us/business/products/hybrid-cloud/cloud-one-conformity.html

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we talk to cybersecurity leaders in the oil and natural gas industry. Experts from the ONG-ISAC (Oil and Natural Gas Information Sharing and Analysis Center) answer the following questions:

• What does the cyber threat landscape look like for the petroleum industry, and what are the potential impacts? • What are barriers to sharing threat intelligence and benefits of doing so? • How do you see cyber threats evolving in 2021 and beyond for the energy sector?

Also, details on Trend Micro's white paper on the vulnerabilities for the water and energy sectors.

• ONG-ISAC: https://ongisac.org/

• Trend Micro whitepaper, "Exposed and Vulnerable Critical Infrastructure: Water and Energy Industries": https://documents.trendmicro.com/assets/white_papers/wp-exposed-and-vulnerable-critical-infrastructure-the-water-energy-industries.pdf

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we talk to James Goepel about the Cybersecurity Maturity Model Certification (CMMC). He discusses this important new certification for supply chain security within the U.S. Department of Defense (DoD) system, addressing the following:

• Why was the CMMC created? • Who needs the CMMC? • How will the CMMC work? • Will the CMMC spread beyond the DoD?

James is a former member of the Board of Directors for the CMMC Accreditation Body, and is now CEO of Fathom Cyber.

Also, Trend Micro shares details of its Midyear Security Roundup.

Resource Links:

• James Goepel on LinkedIn: https://www.linkedin.com/in/james-goepel-gc-cto-cyber/

• Trend Micro Midyear Security Roundup: https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/securing-the-pandemic-disrupted-workplace-trend-micro-2020-midyear-cybersecurity-report

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.