The Security Strategist

In cybersecurity, manual processes such as using spreadsheets for application security are becoming increasingly inadequate. These traditional methods are time-consuming and error-prone and struggle to scale with the growing volume of threat sophistication. 

Automation, particularly in Software Composition Analysis (SCA), is a beacon of hope in the face of these challenges. It brings relief by streamlining the identification and response to security threats, providing a more efficient and effective solution. 

In this podcast, Chris Lindsey, application security evangelist for Mend.io., and Richard Stiennon, Chief Research Analyst at IT-Harvest, discuss how SCA tools can help identify vulnerabilities and the benefits of dependency automation.  

Key Takeaways:

• Manual processes in application security are inefficient and cannot keep up with the speed of innovation.
• Upgrading dependencies is crucial to address security vulnerabilities and reduce security debt.

Chapters:

00:00 - Introduction and Background

02:23 - The Limitations of Manual Processes in Application Security

06:40 - The Role of Software Composition Analysis in Identifying Security Threats

10:02 - The Importance of Upgrading Dependencies in Application Security

13:44 - Integrating Automation into the CI/CD Pipeline for Application Security

21:05 - MEND.IO: Scalable and Comprehensive Security Solutions

Understanding Cybersecurity Compliance: PCI DSS 4.0, NIS2, and DORA Directives Explained

Compliance with cybersecurity standards is essential for any organisation to protect sensitive information, maintain customer trust, and mitigate the risks associated with data breaches and cyber threats. Adhering to recognized frameworks and regulations, not only safeguards the integrity, confidentiality, and availability of data but also demonstrates a proactive commitment to security best practices. 

Join Chris Steffen and Uri Dorot, Senior Product Marketing Manager at Radware, as they delve into the critical aspects of compliance with cybersecurity standards. 

Themes

• Compliance
• PCI DSS 4.0 
• NIS2 
• Dora

Chapters

00:00 - Introduction and Overview

02:20 - Complying with the Latest Cybersecurity Standards: PCI DSS 4.0

09:37 - Understanding and Implementing NIST 2: Enhancing Cybersecurity in the EU

19:28 - Preparing for DORA: Operational Resilience for Financial Organisations

23:08 - Conclusion and Key Takeaways

Who knew that improv could revolutionise your cybersecurity strategies? Imagine your team, prepared and ready, responding to threats with the quick wit and adaptability of seasoned improvisers! 

Communication and collaboration are the secret sauce of robust cybersecurity. Improv supercharges team communication and cranks up problem-solving skills to eleven. 

In this podcast, Jeremy Strozer, Artistic Director at Wild Atlantic Theatre, and Paulina Rios Maya, Head of Industry Relations, discuss how improv can become your secret weapon against cyber criminals. 

Key Takeaways:

• Improv techniques can enhance the adaptability of cybersecurity teams during incidents.
• Communication and collaboration are critical in cybersecurity, and improv can improve team communication.

Chapters:

00:00 - Introduction

01:33 - Becoming Interested in Improv

03:00 - Using Improv in Strategic Planning

04:49 - Playing Out Scenarios

06:39 - Improving Communication in Teams

08:06 - Identifying and Mitigating Security Threats

09:02 - Conclusion

Podcasts are revolutionising how we raise awareness about cybersecurity. 

They offer an interactive and engaging way to bring essential topics like AI, zero trust, and the human element into everyday conversations. By breaking down these complex issues into relatable and exciting discussions, podcasts make cybersecurity accessible and understandable to a broader audience.

In this podcast, Chris Steffen, VP of Research at EMA and Paulina Rios Maya, Head of Industry Relations at EM360Tech, discuss the transformative power of podcasts in the cybersecurity world. 

Key Takeaways

• Podcasts are a valuable tool for educating and engaging the cybersecurity industry.
• Cybersecurity professionals should advocate for themselves and discuss cybersecurity in accessible and engaging formats.

Chapters

00:00 - Introduction and Launching the Podcast

03:17 - Advocating for Cybersecurity and Thought Leadership

07:03 - Exploring AI and Zero Trust in Cybersecurity

09:31 - The Human Factor in Cybersecurity

13:36 - Continuous Improvement in the Cybersecurity Industry

17:40 - Conclusion and Where to Find More

Integration and communication between Cloud Security and the Security Operations Center (SOC) is now a top priority for effective security. Cloud Security teams focus on securing cloud infrastructure, managing identity and access, and ensuring data protection, while SOC teams monitor, detect, and respond to threats in real time. Effective collaboration between these teams is crucial to addressing the unique challenges and dynamic threats seen increasingly today targeting cloud platforms.

Despite their shared goal of safeguarding organisational assets, Cloud Security and SOC teams often operate in silos, leading to communication gaps and inefficiencies. Bridging this gap requires unified strategies, shared tools, and streamlined processes that enable real-time information sharing and coordinated responses. By integrating Cloud Security with the SOC, organisations can enhance threat visibility, improve incident response times, and fortify their security posture.

In this episode of the EM360 Podcast, Brad LaPorte, Advisor at Lionfish Tech Advisors, speaks to Dan Flaherty, Senior Product Marketing Manager at Palo Alto Networks, to discuss:

• The gap between cloud security and the SOC
• The importance of prioritizing cloud visibility for the SOC
• A platform approach for stronger cloud security

00:00 - Introduction and Background

01:10 - Organizational Disconnect: DevSecOps vs. SOC

23:59 - The Need for a Unified, Centralized Platform

27:45 - The Future of Cloud Security: Unified, Ubiquitous, and Uninterrupted

30:33 - Conclusion

Recent research shows that 86% of security leaders today do not have the tools they need to effectively prevent account takeovers. Organizations today are using more cloud applications than ever, and with the interconnected nature of the cloud, entry into one application can result in lateral movement to others—making the time to a breach faster than ever before. So how do we detect compromised accounts before it's too late?

Abnormal Security is expanding beyond email to provide full account takeover protection for some of today's most used applications: Salesforce, Dropbox, Workday, AWS, Azure and more. By understanding cross-platform human behavior, Abnormal AI can detect anomalous activity—remediating compromised accounts no matter where or how they originate.

In this episode of the EM360 Podcast, Mick Leach, Field CISO at Abnormal Security, speaks to Jeremy Strozer, Director, Agile U Strategies and Communications, to discuss:

• Organizational application usage
• Account takeover concerns
• Security team limitations
• Visibility and controls
• Account takeover remediation

00:00 - Introduction

00:59 - Definition and Occurrence of Account Takeovers

05:33 - Exploiting Trusted Relationships

09:43 - Leveraging AI and Behavioral-Based Detection

12:29 - API Integration and Visibility

14:53 - Customized Models for Each Organization

20:25 - Future of Account Security

22:43 - Conclusion

Today, small businesses face significant challenges. Limited resources, tight budgets, time constraints, and inadequate training often leave them vulnerable. Hackers quickly exploit these weaknesses, targeting small and medium-sized businesses (SMBs) with sophisticated threats. 

Managed Service Providers (MSPs) are tasked with the daunting responsibility of safeguarding diverse client environments, each with its own unique set of platforms and security needs. Traditional security measures often fall short against the ever-evolving tactics of cyber adversaries, putting both MSPs and their clients at risk. The next generation of cybersecurity detection and response solutions offers a path forward. Leveraging artificial intelligence and machine learning, these advanced tools can predict, identify, and mitigate threats in real time. This provides robust protection against the most sophisticated cyber threats.

By adopting cutting-edge technologies like Guardz, MSPs can enhance their security posture, ensuring comprehensive protection for their clients and staying ahead of cyber adversaries. Guardz's advanced capabilities simplify the complexities of cybersecurity, making it accessible and effective even for SMBs with limited resources.

In this episode of the EM360 Podcast, Richard Stiennon, Chief Research Analyst at IT-Harvest, speaks to Dor Eisner, CEO and Co-founder of Guardz, to discuss:

• MSPs
• Security Infrastructure 
• AI in security infrastructure
• Next-generation cybersecurity

00:00 - Introduction and Background of Guardz

02:36 - Challenges for MSPs in Cybersecurity

05:25 - The Unified Approach and Automation in Guards

07:18 - Guardz' Focus on MSPs and Small Businesses

08:14 - The Power of AI in Enhancing Guards' Offering

11:30 - The Impact of Guards on the MSP Space

13:21 - Securing Small Businesses and Compliance

18:07 - Marketing Support and Bringing Business to MSPs

19:02 - Conclusion and Call to Action

The 2024 Attack Intelligence Report thoroughly analyses the latest trends, tactics, and techniques used by cyber adversaries. This year's report highlights a significant increase in sophisticated attacks, including advanced persistent threats (APTs) and highly targeted ransomware campaigns. By leveraging the MITRE ATT&CK framework, the report offers valuable insights into the evolving threat landscape, helping organisations understand the strategies and methods employed by malicious actors.

Understanding the findings of the 2024 Attack Intelligence Report is not just crucial; it's empowering for businesses aiming to bolster their cybersecurity defences. The detailed breakdown of adversary behaviours equips security teams to proactively identify vulnerabilities, implement effective countermeasures, and develop robust incident response strategies. By staying informed about the latest attack patterns and techniques, organizations can better protect their assets, data, and reputation in an increasingly complex cyber threat environment.

In this episode of the EM360 Podcast, Jeremy Strozer, Geopolitical Strategist and Cyber Intelligence Analyst, speaks to Caitlin Condon, Director of Vulnerability Intelligence at Rapid7, to discuss: 

• 2024 Attack Intelligence Report
• zero-day exploits
• mass compromise events
• network edge devices
• multi-factor authentication

00:00 - Introduction and Background of the Report

01:39 - Key Findings: Prevalence of Zero-Day Exploits

06:15 - The Evolving Nature of Ransomware

08:31 - Importance of Multi-Factor Authentication

09:01 - Addressing Common Vulnerabilities for Better Security Practices

11:21 - Tackling the Security and Human Root Causes of Cyber Threats

13:13 - Conclusion and Call to Action

As artificial intelligence (AI) becomes increasingly integral to business operations, enterprises face new risks from Shadow AI—unauthorised or unmanaged AI tools and projects that bypass standard security protocols. The potential consequences of Shadow AI are severe, introducing vulnerabilities, compromising data integrity, and leading to compliance breaches, posing significant threats to the organization's overall security framework.

For C-level executives, understanding the impact of Shadow AI is not just crucial, but it's your responsibility to safeguard your enterprise's AI investments. Unauthorized AI projects can undermine strategic initiatives and expose the company to significant risks. By implementing comprehensive governance policies, strict access controls, and continuous monitoring, you can mitigate these risks effectively. Foster a culture of security awareness and ensure regular audits to maintain compliance and protect data integrity. Proactively addressing Shadow AI not only secures your AI assets but also aligns them with your business objectives, enhancing your competitive edge and ensuring sustainable growth. 

In this episode of the EM360 Podcast, Chris Steffen, VP of Research at EMA speaks to Shannon Murphy, Global Security & Risk Strategist at Trend Micro, to discuss:

• Shadow AI
• C-level execs
• Zero Trust
• AI risk
• Security strategies

00:00 - Introduction and Background

02:06 - Challenges of Shadow AI

03:00 - Visibility in Managing AI Risks

06:18 - Protecting Against AI-Driven Threats with Zero Trust

09:03 - Zero Trust as a Journey

13:17 - Talking to CISOs: Anecdotes Becoming Trends

19:14 - Emerging Use Cases for AI in SOC Teams

20:08 - Conclusion

Security Operations Center (SOC) analysts are the backbone of organisations' defence against cyber threats. However, the high-pressure environment, constant vigilance, and demanding workload can lead to serious burnout. This condition not only hampers analysts' performance and job satisfaction but also poses a threat to overall security.

Organisations must recognize the signs early to mitigate SOC analyst burnout and implement supportive measures. Consolidated platforms like XDR with precise use of machine learning can significantly alleviate the burden on SOC analysts. 

Platforms can streamline operations by providing a unified interface and automating repetitive tasks, thereby reducing workload and enabling analysts to focus on more strategic activities. By leveraging these technologies, companies can create a more supportive work environment and maintain a resilient and effective cybersecurity team.

In this episode of the EM360 Podcast, Brad LaPorte, Advisor at Lionfish Tech Advisors, speaks to Dan Flaherty, Senior Product Marketing Manager at Palo Alto Networks, to discuss:

• SOC Analyst burnout 
• SOC Platforms 
• Automation use cases
• Machine learning in the SOC