The Virtual CISO Moment

From March 7, 2023 - Dave Sobel is the host of the Business of Tech podcast (https://www.businessof.tech/), a leading IT services focused news and analysis podcast and YouTube show, and owner of MSP Radio. He is regarded as a leading expert in the delivery of technology services, with broad experience in both technology and business. He owned and operated an IT Solution Provider and MSP for over a decade, both acquiring other organizations and eventually being acquired. Dave holds a bachelor's degree in Computer Science from the College of William and Mary. He is a dynamic voice within the IT community, a former member and facilitator for Heartland Technology Groups and passionate about collaborating with clients and peers on utilizing technology to advance organizations.

Dr. Fredrick Scholl is the Cybersecurity Program Director, Quinnipiac University. He is a cybersecurity thought leader and innovator, passionate about enabling success for people and businesses. He has a unique combination of skills and experience in academia, business and technology. His accomplishments range from the server room to the board room.

Chinese iMessaging Smishing https://thehackernews.com/2023/09/chinese-speaking-cybercriminals-launch.html

UK Military Hit By LockBit https://www.infosecurity-magazine.com/news/sensitive-data-uk-army-potentially/

Virtual CISO and Infosec Risk Management Services https://vcisoservices.com

Ransomware Attacks Go Beyond Data https://www.helpnetsecurity.com/2023/09/04/ransomware-preparedness-strategies/

University of Sydney Data Breach https://www.bleepingcomputer.com/news/security/university-of-sydney-data-breach-impacts-recent-applicants/

SEC Rule Puts Strain on CISOs https://www.darkreading.com/risk/proposed-sec-cybersecurity-rule-will-put-unnecessary-strain-on-cisos

10 Types of AI Attacks CISOs Should Track https://www.darkreading.com/threat-intelligence/10-types-of-ai-attacks-cisos-should-track

Forever 21 Breach https://techcrunch.com/2023/08/31/forever-21-data-breach-half-million/

Reality of Cyberinsurance https://www.securityweek.com/the-reality-of-cyberinsurance-in-2023/

Fake Version of Signal App  https://www.forbes.com/sites/thomasbrewster/2023/08/30/malicious-signal-app-planted-on-google-play-by-china-linked-cyber-spies/

Intersection of Cybersecurity and Mental Health https://www.softsideofcyber.com/cybersecurity-and-mental-health/amp/

SEC Regs Prompt 10 CISO Questions https://www.techtarget.com/searchsecurity/post/SEC-cyber-attack-regulations-prompt-questions-for-CISOs

From March 1, 2023 - Caroline McCaffery is a lawyer who started a data privacy and cybersecurity technology company called ClearOPS to provide technology to virtual CISOs. B2B2B It is a customer relationship management tool + work automation for managing security programs, such as vendor management, gap analysis, security posture and security questionnaire response. She also hosts The vCISO Chronicles, a new podcast series focused on telling the stories of virtual CISOs.

For this month's special last Wednesday episode, Dan Greenhaus, Senior Cybersecurity Analyst. joins us. He has two decades of experience involving healthcare and financial industries which has imbued him with versatility and broad-spectrum experience as a security and infrastructure professional. He has hands-on experience in preventing, detecting, and responding to real-world threats. He also was recently the victim of cyber bullying and offers insight into strategies to help - it is something that can happen to anyone.

Heather Noggle is the Owner of Codistac. People, processes, and technology are essential components of any modern successful business. Properly assessing risk and opportunity - paramount. Cybersecurity awareness and behavior within your organization is essential for your company’s reputation and ability to protect against potential cyber risks. Translating technical information and workflows into regular language (and back again) is her superpower. She is the host and producer of the YouTube series Cybersecurity for People (https://www.youtube.com/@heathernoggle).

Poland Rail Cyber Attack https://www.bbc.com/news/world-europe-66630260

KmsdBot Targeting IoT https://thehackernews.com/2023/08/kmsdbot-malware-gets-upgrade-now.html

DeepFake Video Call Dangers https://www.bloomberg.com/news/articles/2023-08-25/deepfake-video-phone-calls-could-be-a-dangerous-ai-powered-scam

Customized LMs https://www.helpnetsecurity.com/2023/08/28/customized-llms/

Rhysida Ransomware Attack https://www.bleepingcomputer.com/news/security/rhysida-claims-ransomware-attack-on-prospect-medical-threatens-to-sell-data/

Initial Access Brokers https://cybersec.flare.systems/s/initial-access-brokers-russian-hacking-forums-and-the-underground-corporate-access-economy-10273

Five Skills to Learn for Ethical Hacking https://infosecwriteups.com/5-skills-to-learn-before-ethical-hacking-e3de68559c04

Cybersecurity for People https://www.youtube.com/@heathernoggle

Service Providers Servers Wiped https://www.theregister.com/2023/08/23/ransomware_wipes_cloudnordic/

Critical Zoho Vuln Exploited https://thehackernews.com/2023/08/lazarus-group-exploits-critical-zoho.html

Virtual CISO Services https://vcisoserices.com

Wiffy Recon Malware https://thehackernews.com/2023/08/new-whiffy-recon-malware-triangulates.html

JupiterX WordPress Plugin Vuln https://www.bleepingcomputer.com/news/security/jupiter-x-core-wordpress-plugin-could-let-hackers-hijack-sites/

Duolingo’s Vulnerable API Exploited https://www.infosecurity-magazine.com/news/data-26m-duolingo-users-leaked/

Unplug Barracuda ESG Now https://www.scmagazine.com/news/fbi-unplug-exploited-barracuda-esg-appliances-now

Spear Phishing https://www.esecurityplanet.com/networks/how-to-prevent-spear-phishing-attacks/

From February 28, 2023 - Dennis Davoren is a vCISO, PhD Candidate, and Green Belt Six Sigma. He also is a veteran, having been an Air Force Instructor and Command Pilot along with being a Commander. He is an experienced leader with a demonstrated successful history of working in the Military, Marketing & Advertising industry, and Cyber Security/IT field. Skilled in Intelligence Analysis, Enterprise Risk Management, Financial Risk Management, Intelligence, and Risk Assessment. He is a Subject Matter Expert(SME) on Government Regulation Compliance(GRC) and CMMC 2.0 implementation. He holds a Master of Science degree focused on Cyber Security Management. We discuss the virtual CISO field and how risk management in flying translates to risk management in information security.