The Virtual CISO Moment

Wes Spencer is VP and Channel Chief for FifthWall Solutions, one of the largest cyber insurance brokers in the country. He has served as a senior executive and advisor from Fortune 500 to funded startups and was awarded the 2020 Cybersecurity Educator of the Year by the Cybersecurity Excellence Awards. He has served on multiple advisory committees with distinguished organizations such as American Banker, Sentinel One, and FS-ISAC., and currently serves on the Department of Homeland Security AIS advisory committee.

Tom Kemp is a Silicon Valley-based entrepreneur, investor, author, and policy advisor. Tom is the author of the book Containing Big Tech: How to Protect Our Civil Rights, Economy, and Democracy (August 2023). Tom was the founder and CEO of Centrify (renamed Delinea in 2022), a leading cybersecurity cloud provider that amassed over two thousand enterprise customers, including over 60 percent of the Fortune 50. For his leadership, Tom was named by Ernst & Young as Finalist for Entrepreneur of the Year in Northern California. Tom is also an active Silicon Valley angel investor, with seed investments in over a dozen tech start-ups. In addition, Tom has served as a technology policy advisor for political campaigns and advocacy groups, including leading the campaign marketing efforts in 2020 to pass California Proposition 24—the California Privacy Rights Act (CPRA)—and co-authoring the California Delete Act of 2023.

TD Ameritrade MoveIT Breach https://www.investmentnews.com/charles-schwab-announces-td-ameritrade-data-breach-239887

Docker Hub Leak

Gamaredon APT https://securityaffairs.com/148488/apt/gamaredon-ttps.html

Teenage Hacker Criminals on Trial https://www.hackread.com/teenagers-trial-hacking-rockstar-revolut-uber/

USB Malware Delivery Increase https://www.scmagazine.com/brief/threat-intelligence/malware-delivery-via-usb-drives-significantly-increases

Cisco SD-WAN Vuln https://www.darkreading.com/remote-workforce/cisco-flags-critical-sd-wan-vulnerability

CISO Burnout https://www.techrepublic.com/article/top-cybersecurity-predictions/

Generative AI Board Questions https://www.mckinsey.com/capabilities/quantumblack/our-insights/four-essential-questions-for-boards-to-ask-about-generative-ai

https://www.bleepingcomputer.com/news/security/russian-state-hackers-lure-western-diplomats-with-bmw-car-ads/

vCISO Services, LLC - https://vcisoservices.com

Webinar - GRC Strategies - https://api.cyfluencer.com/s/top-security-and-grc-strategies-you-can-t-ignore-featuring-chris-roberts-ciso-boom-supersonic-9671

Ubuntu Citrix Flaw - https://securityaffairs.com/148405/security/citrix-critical-flaw-secure-access-client-for-ubuntu.html

National Cybersecurity Strategy - https://www.whitehouse.gov/briefing-room/statements-releases/2023/07/13/fact-sheet-biden-harrisadministration-publishes-thenational-cybersecurity-strategyimplementation-plan/

Honeywell Security Flaws - https://techcrunch.com/2023/07/13/security-flaws-in-honeywell-devices-could-be-used-to-disrupt-critical-industries/

LIST - 10 Summer Cybersecurity Tips - https://cybersec.xmcyber.com/s/https-www-xmcyber-com-blog-10-hot-cybersecurity-tips-during-your-summer-vacation-9641

Derek Morris is a virtual Chief Information Security Officer (vCISO) with almost 3 decades in IT, Information Security, Cybersecurity. He possesses numerous industry certifications including: CISSP, CISM, CISA, CDPSE, PCI-QSA, CCSFP, CCNA, and MCSA. Bachelor's Degree in Computer Information Systems from Bryant University with a minor in Applied Statistics. We discuss the virtual CISO space and what to look for in a virtual CISO, including "IT empathy".

Alec Sirois is the Co-founder and CEO at IGNITE Cyber Security. Join us for an interesting discussion on email security and what you can do to improve it. Also try a free email spoof test at emailspooftest.com!

Central Bankers Framework https://www.infosecurity-magazine.com/news/central-bankers-framework-securing/

French Surveillance https://securityaffairs.com/148305/laws-and-regulations/french-government-surveillance-power.html

Android Apps Put Data At Risk https://www.cybercaptcha.com/news/your-ddata-is-at-risk-delete-these-apps-from-your-android-now/

Infosec Nashville https://issa-midtn.org/infosec-nashville-cybersecurity-conference/

Revolut Extortion https://thehackernews.com/2023/07/hackers-steal-20-million-by-exploiting.html

Coinbase Scam https://domainmagazine.com/exposed-scammers-exploit-coinbases-domain-name-to-target-investors/

Russia and China Spying https://www.politico.eu/article/russia-china-spying-germany-cybersecurity-intelligence/

Five IoT and ICS Security Challenges https://cybersec.cyolo.io/s/5-unique-security-challenges-facing-ot-ics-environments-9623

SecurityWeek Cisco Switch Vulns - https://www.securityweek.com/vulnerability-in-cisco-enterprise-switches-allows-attackers-to-modify-encrypted-traffic/

Bleeping Computer Google Apps Send Data to China - https://www.bleepingcomputer.com/news/security/apps-with-15m-installs-on-google-play-send-your-data-to-china/

vCISO Services Virtual CISO and Information Security Risk Management – https://vcisoservices.com

Vulcan What the Death of CentOS Means - https://cybersec.vulcan.io/s/what-the-death-of-centos-means-for-security-9582

Human Error Leading Cause Cloud Data Breaches - https://www.infosecurity-magazine.com/news/human-error-cloud-data-breaches/

Pen Testing and Cost of Cyber Insurance - https://thehackernews.com/2023/07/how-pen-testing-can-soften-blow-on.html

Medtech Dive  Vulns in Cardiac Data Systems - https://www.medtechdive.com/news/MDT-Medtronic-cybersecurity-vulnerability-CISA/654480/

BetaNews Cybercrime Third Largest Economy - https://betanews.com/2023/07/06/value-of-cybercrime-equivalent-to-the-third-largest-global-economy

BJ Withrow, Manager, Major Accounts, East Coast at Tenable, is a self-proclaimed geek at heart and cybernerd by trade. When he is passionate about something, it comes out in everything he does, and he loves what he does. We cover a variety of topics, including cybersecurity for small and midsized businesses, exercising, and the importance of a servant's heart.

Doug Copley is an executive IT and cybersecurity leader and advisor, founder of Data Protection Partners, and former founder of the Michigan Healthcare Cybersecurity Council. He is skilled at building IT, Security and Data Privacy programs from scratch; performing risk assessments; frameworks such as HITRUST/ISO/NIST/CMMC; and at managing security or regulatory "emergencies." He has specific expertise in healthcare. with prior experience in financial services, automotive, security software industry and management consulting.