The Virtual CISO Moment

On today's show:

Russian Hackers Govt Org Teams Phish https://www.bleepingcomputer.com/news/security/russian-hackers-target-govt-orgs-in-microsoft-teams-phishing-attacks/

Tenable CEO Slams Microsoft Response https://www.bankinfosecurity.com/tenable-ceo-slams-microsoft-for-failing-to-quickly-patch-bug-a-22719

Virtual CISO Provider https://vcisoservices.com CFO Security Buy In https://cybersec.xmcyber.com/s/10-tips-to-get-buy-in-from-your-cfo-for-security-projects-9898

ChatGPT MacOS Malware https://www.hackread.com/chatgpt-to-expose-notorious-macos-malware/

Security Implications of ChatGPT Whitepaper https://cloudsecurityalliance.org/artifacts/security-implications-of-chatgpt/

CU Intersect Conference https://cuintersect.com/

From February 15, 2023 - Aaron Robel is a CISO with a positive, energetic, and transparent approach that fosters trust and collaboration across the business. He has a consistent track record for developing high-performing security programs and teams that bring business value while maintaining the organization's risk posture. We discuss infosec in the financial services sector, as his current role is CISO for a credit union and I am a former bank CISO and currently work with several financial institutions as a virtual CISO.

Carlos Rodriguez is CEO & Fractional Chief Information Security Officer - vCISO - Sr. Cybersecurity ConsultantCEO & Fractional Chief Information Security Officer - vCISO - Sr. Cybersecurity Consultant at CA2 Security. He specializes in enabling cyber risk management transformation, balance and simplification. We discuss SMB cybersecurity needs, the direction of the vCISO discipline, and the mission of service.

US Hunts Chinese Malware https://thecyberwire.com/stories/f6e34b4362104d2aadbb814b9ae7557c/us-hunts-chinese-malware-staged-to-interfere-with-us-military-operations

Pentagon Suffers Air Force Comm Compromise https://www.forbes.com/sites/thomasbrewster/2023/07/29/exclusive-pentagon-suffers-critical-compromise-of-air-force-communications/

vCISO Services, LLC https://vcisoservices.com

Hackers Abusing Windows Search https://thehackernews.com/2023/07/hackers-abusing-windows-search-feature.html

Understanding New SEC Rule https://news.sophos.com/en-us/2023/07/31/understanding-the-new-sec-cybersecurity-rules-a-guide-for-executives/

Flipper Zero Third Party Apps https://www.bleepingcomputer.com/news/security/flipper-zero-now-has-an-app-store-to-install-third-party-apps/

LIST – Best Malware Protection Solutions https://cybersecuritynews.com/best-malware-protection-solutions/

On today's episode:

SEC Cyber Incident Disclosure Rules https://www.helpnetsecurity.com/2023/07/26/sec-cybersecurity-incident-disclosure-rules/

VMWare Flaw https://www.infosecurity-magazine.com/news/vmware-patches-flaw-exposing-admin/

Tech Leaders Turn to Painkillers, Alcohol https://www.hr-brew.com/stories/2023/07/17/tech-turning-to-painkillers-alcohol

Iran Android Spyware https://www.hackread.com/iran-android-stalkerware-app-spyhide-hack/

Maximus Data Breach https://www.bleepingcomputer.com/news/security/8-million-people-hit-by-data-breach-at-us-govt-contractor-maximus/

Backdoor in Police Radios https://www.vice.com/en/article/4a3n3j/backdoor-in-police-radios-tetra-burst

Stern Security Healthcare Data Breach Report https://www.sternsecurity.com/blog/2023-velocity-healthcare-data-breach-report/

John Sternstein Discussion - https://youtu.be/0ll5SDxlSXk

Gary Chan Discussion - https://youtu.be/XR6Y27m5330

https://www.chicagomagiclounge.com/purchase-tickets-weekendhttps://www.chicagomagiclounge.com/now-appearing#the-weekend

From February 14, 2023 - Ted Ilanchelian is President of CMIT Solutions of Brentwood and Franklin, a one-stop technology solution provider offering Small and Midsized Businesses (SMBs) enterprise-level IT infrastructure support and cybersecurity solutions at an affordable price. He is passionate about helping SMBs, noting that "attitude" is one of the most significant infosc threats SMBs face. Watch or listen to find out more!

James Bierly is the owner and principal cybersecurity consultant for Secure Point Solutions in Central Iowa. With 13 years in the Navy operating on both surface ships and submarines as a Sonar Analyst, he has had an unusual transition from military to civilian; from physical security to selling cars, he ultimately found opportunities to learn Information Technology while working overseas.

Denny Wan is a recognised global thought leader in Reasonable Security and cyber risk quantification methodologies. He is a Cyber Security Risk Expert with current certifications in CISSP, ISO 27001 LA, PCI Professional (converted from PCI QSA). He provides thought leadership in threat modelling, policy-based mitigation strategy development and process integration design. His recent article, "Targeting cyber security investment – the FAIR approach," is a practical guide for prioritising cyber security investments.

Webinar - "Defensible Cyber Risk Disclosure"

Event:

https://events.cpaaustralia.com.au/event/20a4d506-05b6-475f-ad12-805b9dcf6bbd/summary

Slide:

https://www.securityexpress.com.au/wp-content/uploads/2023/07/Defensible-Cyber-Risk-Disclosure-summary.pdf

2. FAIRCON2023

October 17 & 18 at Fairmont Washington D.C. Hotel.

https://www.fairinstitute.org/2023-fair-conference

On today's episode:

Kevin Mitnick: https://www.msn.com/en-us/news/us/pioneering-hacker-kevin-mitnick-fbi-wanted-felon-turned-security-guru-dead-at-59/ar-AA1e8kyP

Mallox ransomware: https://thehackernews.com/2023/07/mallox-ransomware-exploits-weak-ms-sql.html

DDoS new methods: https://arstechnica.com/security/2023/07/attackers-find-new-ways-to-deliver-ddoses-with-alarming-sophistication/

Island browser on AWS Marketplace: https://www.helpnetsecurity.com/2023/07/20/island-enterprise-browser-aws-marketplace/

Poll: https://www.linkedin.com/feed/update/urn:li:ugcPost:7087465445724692480/

Europe IoT regulations: https://cy.bugprove.com/s/an-overview-of-iot-regulations-checklist-for-uk-psti-eu-red-and-cra-9756

Zyxel flaw: https://www.infosecurity-magazine.com/news/zyxel-flaw-exploited-ddos-botnets/

Previous video episodes of The Virtual CISO Moment podcast: https://youtube.com/vciso

My email: [email protected]

From February 7, 2023 - Dustin Sachs is an expert in cyber supply chain risk management, Sr. Manager GRC at World Fuel Services, a doctoral candidate at Colorado Tech, a mentor at Springboard, and a future CISO. He is passionate about giving back to the cybersecurity community and also about GRC.