The SecureWorld Sessions

In this episode, we speak to attorney Michael Simon of cybersecurity and data privacy law firm XPAN Law Group. We cover the historic move to Zoom and other remote work tools. What are the privacy, legal, and security risks of this new digital workforce? How can you avoid certain lawsuits against your organization by optimizing remote work tools?

@6:26 Simon says: "This is not the death knell for privacy. I see people write up that privacy's done, it's over with. I've got friends in the government who would tell me, 'Oh, it's all over.' No, it's not. This is the opposite. We're going to have to take and build privacy and cybersecurity far more into the things that we do, because now we're all using primarily these mechanisms. You know, we're being all digital. And that has to be built in."

RESOURCE LINKS:

• Trend Micro updates "Developing Story: COVID-19 Used in Malicious Campaigns": https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/coronavirus-used-in-spam-malware-file-names-and-malicious-domains
• "Don't let your virtual meetings expose you to privacy and security risks," by Michael Simon, XPAN Law: https://xpanlawgroup.com/dont-let-your-virtual-meetings-expose-you-to-privacy-and-security-risks/
• Connect with Michael Simon on LinkedIn: https://www.linkedin.com/in/michael-simon-9400014/
• Baseline remote work privacy & security story. Zoom sued, announces security upgrades: https://www.secureworldexpo.com/industry-news/zoom-sued-over-privacy-announces-cybersecurity-upgrades
• SecureWorld Remote Sessions daily briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions

Many cyber threats are taking on a COVID-19 theme.

In this episode, we are speaking to Myla Pilao of Trend Micro, where the Threat Research Team tracks more than 5 billion threats, daily.

@7:20 Pilao says: "So every day, we collect terabytes of threat data coming in from honey pots, from submissions from our partners, from customers, from feedback loops, from a lot of our crawling technologies. So we are attempting to combine all this collection of data from many, many sources. This gives us one big thing: the visibility of the nature and even the geolocation of the threat."

RESOURCE LINKS:

• Trend Micro Updates "Developing Story, COVID-19 Malicious Use Campaigns": https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/coronavirus-used-in-spam-malware-file-names-and-malicious-domains
• SecureWorld Remote Sessions Daily Briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep Dive Web Conferences: https://www.secureworldexpo.com/resources?cat=web-conferences

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.

They call themselves the COVID-19 CTI League. Some have labeled them superheroes in cyberspace, like the Justice League. The mission of this volunteer organization: defend hospitals and healthcare facilities against cyber attacks so that medical professionals can focus on caring for COVID-19 cases and saving lives. In this episode, we interview CTI League Co-Founder Ohad Zaidenberg.

Plus, new findings from Trend Micro reveal how big the COVID-19 cybercrime problem has become.

RESOURCE LINKS:

• Trend Micro "Developing Story: COVID-19 Used in Malicious Campaigns": https://www.trendmicro.com/vinfo/us/security/news/cybercrime-and-digital-threats/coronavirus-used-in-spam-malware-file-names-and-malicious-domains
• Connect with the CTI League: https://cti-league.com
• Follow Ohad Zaidenberg: https://twitter.com/OhadMZ
• NEW SecureWorld Remote Sessions daily briefings: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Deep dive web conferences: https://www.secureworldexpo.com/resources?cat=web-conferences

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.

Who would launch a cyberattack against the World Health Organization as it responds to the coronavirus pandemic? In this episode, we're interviewing the man who uncovered a live cyberattack against the WHO, the potential value (the why?) of such an attack, and the wave of cybercrime and fraud coming from coronavirus and COVID-19 related websites. Also, how can organizations and the enterprise safeguard against cyberattacks during the pandemic?

Plus, teleworking tips from Trend Micro and its vice president for cybersecurity, Greg Young.

RESOURCE LINKS:

• NEW SecureWorld Remote Sessions: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Trend Micro on making remote work secure: https://blog.trendmicro.com/suddenly-teleworking-securely/
• Connect with Alexander Urbelis: https://www.linkedin.com/in/alex-urbelis-25aaab1/
• 2020 Web conference schedule: https://www.secureworldexpo.com/resources?cat=web-conferences

In this episode, we're doing something new. We are sharing key learnings from our first week of daily online briefings. Called the SecureWorld Remote Sessions, this is our way of bringing security professionals together in the face of the coronavirus (COVID-19) pandemic.

Featured interviews are with: Stephen Head, Director, IT Risk Advisory Services, Experis Finance; Chris Shull, vCISO, Salem Medical Center; Jordan Fischer, Managing Partner, XPAN Law Group; and James Goepel, Board of Directors, CMMC Accreditation Body.

Plus, the latest on Microsoft Office 365 related phishing attacks from Trend Micro and its 2019 Security Roundup Report.

RESOURCE LINKS:

• NEW SecureWorld Remote Sessions: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Trend Micro 2019 Security Roundup Report : https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/the-sprawling-reach-of-complex-threats
• 2020 web conference schedule: https://www.secureworldexpo.com/resources?cat=web-conferences

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.

In this episode, we talk to Ryan Mostiller, Senior Security Engineer at Penske Automotive Group, about how Blue Teams can help secure the organization and get credit for doing it.

Plus, details on a new initiative in response to the coronavirus (COVID-19): announcing the SecureWorld Remote Sessions.

RESOURCE LINKS:

• NEW SecureWorld Remote Sessions: https://www.secureworldexpo.com/resources?cat=remote-sessions
• Trend Micro 2019 Security Roundup Report : https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/the-sprawling-reach-of-complex-threats
• Ryan Mostiller: https://www.linkedin.com/in/ryanmostiller/

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.

In this episode, we talk to Austin Rappeport, head of threat defense and blue team member, and Chris Carlis, red team coordinator, both of Zurich Insurance Group. We look at cybersecurity through a blue team versus red team lens and how the two work together on purple team exercises to find security vulnerabilities.

Plus, Trend Micro's 2019 annual security roundup report, "The Sprawling Reach of Complex Threats."

RESOURCE LINKS:

• Trend Micro 2019 Security Roundup Report : https://www.trendmicro.com/vinfo/us/security/research-and-analysis/threat-reports/roundup/the-sprawling-reach-of-complex-threats
• Chris Carlis: https://events.secureworldexpo.com/speakers/chris-carlis/
• Austin Rappeport: https://www.linkedin.com/in/austin-rappeport-067a8161/
• SecureWorld 2020 conference schedule: https://www.secureworldexpo.com/events

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.

In this episode: InfoSec professionals are frustrated by the amount of time they spend evaluating third-party risk. David Barton of UHY Advisors says this should actually be someone else's job. He explains steps to overcome this cybersecurity frustration. Plus, in our interview with Matt Clapham, Director of Cybersecurity at GE Healthcare, he talks about finding the rarest of the rare in cybersecurity talent and a few easy steps to uncovering potential security team members.

Also, Trend Micro's Zero Day Initiative paid out seven figures in bug bounties in 2019. ZDI has an update on how you can add security research as a side hustle.

RESOURCE LINKS:

• Zero Day Initiative 2020 submission advice for security researchers: https://www.zerodayinitiative.com/blog/2020/2/19/submission-advice-for-security-researchers
• David Barton, UHY Advisors: https://www.linkedin.com/in/david-barton-203148/
• Matt Clapham, GE Healthcare: https://www.linkedin.com/in/mattclapham/
• SecureWorld 2020 conference schedule: https://www.secureworldexpo.com/events
• NIST on the cybersecurity talent gap: https://www.secureworldexpo.com/industry-news/nist-on-the-cybersecurity-talent-gap-regional-alliances

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization. In this episode: How do you develop cybersecurity advocates across the organization? Featured interviews with: Deneen DeFiore, VP & CISO, United Airlines; Zaki Abbas, VP & CISO, Brookfield Asset Management; Milinda Rambel Stone, VP & CISO, Provation Medical; Brent Lassi, CISO, Bluecore; Mike Muha, Chief Security and Privacy Officer, Workforce Software. Also, Trend Micro shares about Dynamic Challenges to Threat Detection and Endpoint Security—and how to overcome them.

RESOURCE LINKS: • SecureWorld 2020 conference schedule: https://www.secureworldexpo.com/events

• Trend Micro "Dynamic Challenges to Endpoint Security" paper: https://www.trendmicro.com/vinfo/us/security/news/security-technology/dynamic-challenges-to-threat-detection-and-endpoint-security-and-how-to-overcome-them

The SecureWorld Sessions is a cybersecurity podcast that gives you access to people and ideas that impact your career and help you secure your organization.

In this episode, we're sharing new revelations about how the Equifax data breach happened. From newly unsealed court documents in the US DOJ case, we look at 10 steps Chinese nation-state hackers are accused of taking in the attack. We also interview Graeme Payne who worked for Equifax and was fired after being blamed for human error that led to the breach. What did he learn that can benefit security teams?

Also, new Trend Micro research on the Outlaw Hacking Group and Trend Micro's hands-on workshop, "Threat Defense Challenge," at SecureWorld Philadelphia 2020.

RESOURCE LINKS:

• SecureWorld Philadelphia "Threat Defense Challenge": https://events.secureworldexpo.com/agenda/philadelphia-pa-2020/
• Trend Micro "Outlaw Hacking Group" research: https://blog.trendmicro.com/trendlabs-security-intelligence/outlaw-updates-kit-to-kill-older-miner-versions-targets-more-systems/
• Bruce Schneier podcast Interview: https://www.secureworldexpo.com/resources/bruce-schneier-market-insecurity-podcast
• Graeme Payne, formerly of Equifax: https://www.linkedin.com/in/payneg/
• 10 Steps Chinese Hackers Allegedly Took in Equifax Breach: https://www.secureworldexpo.com/industry-news/equifax-hacker-indictment-10-fast-facts
• SecureWorld 2020 conference schedule: https://www.secureworldexpo.com/events