The SecureWorld Sessions

In this episode, we talk to Julia Voo, one of the authors of the newly published National Cyber Power Index 2020. Which country is the most powerful in cyberspace? The NCPI takes a "whole of country" approach to measuring cyber power, ranking 30 countries in the context of seven national objectives.

Voo is a Cyber Fellow at the Belfer Center for Science and International Affairs at the Harvard Kennedy School. She was the closing keynote at the SecureWorld Detroit-Toronto-Cincinnati virtual conference, and this is an excerpt from her presentation and fireside chat.

Resource Links:

• Julia Voo on LinkedIn: https://www.linkedin.com/in/juliavoo/

• The National Cyber Power Index 2020 report (PDF): https://www.belfercenter.org/publication/national-cyber-power-index-2020

• Trend Micro Cyber Risk Index: https://www.trendmicro.com/en_us/security-intelligence/breaking-news/cyber-risk-index.html

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we hear from Don McKeown, Information Security Manager at Wolters Kluwer Health. He talks about the various levels of culture within an organization, and the culture of security. Plus, approaches to security: blocking and tackling programs, compliance-based information security programs, and risk-based InfoSec programs.

McKeown spoke at the 2020 SecureWorld Boston virtual conference, and this is a part of his presentation.

Resource Links:

• Don McKeown on LinkedIn: https://www.linkedin.com/in/donspage/

• Trend Micro ransomware best practices: https://cybersecurityminute.com/security-blogs/ransom-from-home-how-to-close-the-cyber-front-door-to-remote-working-ransomware-attacks/

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we hear from Dan Pepper, Partner on BakerHostetler's Privacy and Data Protection team. He frequently handles security incidents, interacting with federal and state agencies and forensic service providers, and has overseen investigations including many cases of ransomware. How are attackers launching their ransomware attacks? Should you pay the ransom or not? Is it legal to pay a hacker's ransom demand? He answers these questions and more.

Pepper spoke at the virtual SecureWorld Philadelphia New York and this is a part of his presentation.

Resource Links:

• Daniel Pepper on LinkedIn: https://www.linkedin.com/in/danpepperesq

• Trend Micro ransomware best practices: https://www.trendmicro.com/en_us/forHome/campaigns/ransomware-protection.html

• Trend Micro ransomware decryptor: https://success.trendmicro.com/solution/1114221-downloading-and-using-the-trend-micro-ransomware-file-decryptor

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we are partnering with the non-profit Cybercrime Support Network (CSN) to raise awareness as part of their Youth and Cybercrime Week.

We interview Cam, who was arrested for cyberattacks when he was 14 years old and now works as a cybersecurity professional. How did he get into cybercrime and then into a role defending against it? What advice does he have for young people?

Also, we speak with Kristin Judge, CEO of Cybercrime Support Network, about how we can help direct kids to use their hacking and cyber skills for good. She also shares how kids, teens, and even college students are becoming victims of cybercrime themselves. Plus, where can individuals and SMBs turn for help if they are victims of cybercrime.

Resource Links:

• Cybercrime Support Network: https://cybercrimesupport.org

• Kristin Judge on LinkedIn: https://www.linkedin.com/in/kristin-judge-1108b624

• Trend Micro's Close the Gap program: https://www.trendmicro.com/closethegap

• Trend Micro's Zero Day Initiative: https://www.zerodayinitiative.com

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we share part of a SecureWorld presentation by Sandy Silk, Director of Information Security Education and Consulting at Harvard University. In her presentation, titled "Hey, InfoSec: Be Part of the Digital Transformation or Be Left Behind!," Silk discusses how security teams need to evolve to deliver the same digital transformation (Dx) value and benefits as other technology and data initiatives within their organizations.

Resource Links:

• Trend Micro's Close the Gap initiative: https://www.trendmicro.com/closethegap

• Trend Micro security blog: https://www.trendmicro.com/vinfo/us/security/news

• Sandy Silk on LinkedIn: https://www.linkedin.com/in/sandysilk

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

CISO Milinda Rambel Stone and Human Resources VP Susan Hanson, both of Provation Medical, worked together on a pandemic plan completed just as the COVID-19 pandemic hit the U.S. They discuss these questions:

How does a pandemic plan fit with a Business Continuity Plan (BCP)? How did the business, including information security, communicate during this time? How was the plan communicated to executive leadership? How has the BCP helped cybersecurity and other parts of the business work together? And what if your BCP needs some work or you don't have one yet?

Resource Links:

• Trend Micro update on COVID-19 cybercrime: https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/coronavirus-used-in-spam-malware-file-names-and-malicious-domains

• Trend Micro Security Blog: https://www.trendmicro.com/vinfo/us/security/news/

• Milinda Rambel Stone on LinkedIn: https://www.linkedin.com/in/milindastone/

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we are speaking with Joshua Cloud, Director of Information Security at NFI, as he answers three important questions for us:

1. What is Artificial Intelligence (AI)? 2. What is Machine Learning (ML)? 3. How can we use AI and ML in cybersecurity and cyber defense?

Also, new research, just published by Trend Micro, our premiere podcast partner, on unveiling critical security flaws in programmable industrial machines.

Resource Links:

• Research: Trend Micro report, "Hidden Risks of Industrial Automation Programming." https://www.trendmicro.com/vinfo/us/security/news/internet-of-things/unveiling-the-hidden-risks-of-industrial-automation-programming

• Joshua Cloud on LinkedIn: https://www.linkedin.com/in/joshua-cloud/

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we are speaking with cybersecurity and technology influencer Chuck Brooks about emerging technologies that can help you defend your organization in cyberspace. Brooks covers everything from the future of quantum computing and the encryption debate to China in tech, election cybersecurity, 5G concerns, and low-hanging cybersecurity fruit companies should address now.

Also, new research on device and supply chain security in healthcare from Trend Micro, our premiere podcast partner.

RESOURCE LINKS:

• Trend Micro research, "Exposed Devices and Supply Chain Attacks: Overlooked Risks in Healthcare Networks" https://www.trendmicro.com/vinfo/us/security/news/internet-of-things/exposed-medical-devices-and-supply-chain-attacks-in-connected-hospitals

• Chuck Brooks on LinkedIn: https://www.linkedin.com/in/chuckbrooks/

• SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we hear from Joe Zurba, Chief Information Security Officer at Harvard Medical School. He details the challenging Identity and Access Management landscape the school faces and how it navigates IAM. Zurba was a keynote speaker at the 2020 SecureWorld Boston virtual conference.

Also, updates on ThiefQuest (EvilQuest), the quickly-evolving macOS malware. We're sharing new research from Trend Micro, our premiere podcast partner.

Resource Links:

• Research: Trend Micro's updates on ThiefQuest malware: https://blog.trendmicro.com/trendlabs-security-intelligence/updates-on-thiefquest-the-quickly-evolving-macos-malware/

• New SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.

In this episode, we are speaking with cybersecurity researcher, pentester, and author Vinny Troia. His new book is "Hunting Cyber Criminals: A Hacker's Guide to Online Intelligence Gathering Tools and Techniques." He explains how he tracked down the alleged hackers behind Gnostic Plays, Shiny Hunters, NSFW, and the The Dark Overlord groups. And it turns out, there are some very tight connections between these groups. Troia reveals the identities of two teenage hackers that he says are responsible for a whopping 42% of all non-payment card data breaches from 2017 to mid-2020.

Also, new hacker infrastructure and underground hosting 101 research, just published by Trend Micro, our premiere podcast partner.

RESOURCE LINKS:

• Research: Trend Micro's *NEW* Hacker Infrastructure findings: https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/hacker-infrastructure-and-underground-hosting-101-where-are-cybercriminal-platforms-offered

• Report: The Dark Overlord revealed: www.thedarkoverlord.info

• New SecureWorld VIRTUAL conferences: https://www.secureworldexpo.com/events

• SecureWorld Remote Sessions webcast briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions

The SecureWorld Sessions podcast gives you access to people and ideas that impact your cybersecurity career and help you secure your organization.