The Virtual CISO Moment

Lisa Plaggemier, the Executive Director at National Cyber Security Alliance, joins us for our special April Wednesday end of month episode. She is a creative and revenue-driven Marketing and Strategy Executive. She excels at creating attainable strategic vision that inspires employees and attracts customers, is respected by CSOs and CISOs, is a winner of the SC Magazine’s Reboot Thought Leadership Award, and is a frequent speaker at RSA and SANS. She joins us to explain how the National Cyber Security Alliance helps with both personal and small and midsized business security, including a new initiative for SMBs.

Tracy Maleeff, Principal, Sherpa Intelligence LLC, is an Information Security Professional with a Master of Library and Information Science degree. A frequent author and speaker on InfoSec and research topics, she has presented at several Information Security industry conferences like Security BSides, DerbyCon, and DEF CON's Recon Village, as well many library/information professional events. She holds the GIAC Security Essentials (GSEC) certification. She also maintains an OSINT blog and cybersecurity newsletter at https://infosecsherpa.medium.com/

Low bandwidth resulted in low video quality.

https://securityaffairs.com/145183/cyber-crime/point32health-ransomware-attack.html 

https://www.helpnetsecurity.com/2023/04/22/next-dlp-reveal-chatgpt/ 

https://www.welivesecurity.com/2023/04/18/discarded-not-destroyed-old-routers-reveal-corporate-secrets/ 

https://osintteam.blog/dark-web-how-to-get-started-658409184c06 

https://www.bleepingcomputer.com/news/security/evilextractor-malware-activity-spikes-in-europe-and-the-us/ 

So You Want To Be An Information Security Consultant 

From November 9, 2022 - Rob Bowker, Sales Director at EasyDMARC, explains the risks of email spoofing, the benefits of implementing DMARC in addition to DKIM and SPF, and how EasyDMARC helps to manage DMARC. Recorded at RETR3AT Cyber Conference Montreat College September 23, 2022.

Matthew Dechant is the founder of MD3 Consulting, providing virtual CISO services to small and medium sized businesses. He is a seasoned executive building, operating, and scaling comprehensive information security programs that address business risk and adapt to emerging threats without affecting the speed of business.

LockBit targets MacOS,China exploits Android bug, urgent Chrome update, LinkedIn ID verification, and Juice Jacking back in the news,but why. Plus today’s lists – we have two – top 5 cybersecurity risks every business should know and 4 things you should never do while chatting with ChatGPT, an extended version of the “So you want to be an infosec consultant” presentation at BSides Nashville and SE cyber summit dropping this afternoon, the 2023 recipient of the vCISO Services scholarship, and today’s shout out.

https://securityaffairs.com/144879/cyber-crime/lockbit-encryptor-targets-macos.html

https://www.bleepingcomputer.com/news/security/cisa-warns-of-android-bug-exploited-by-chinese-app-to-spy-on-users/

https://thehackernews.com/2023/04/google-releases-urgent-chrome-update-to.html

https://www.scmagazine.com/news/identity-and-access/linkedin-deploys-new-secure-identity-verification-for-all-members

https://krebsonsecurity.com/2023/04/why-is-juice-jacking-suddenly-back-in-the-news/

https://physicochemics.com/what-are-cybersecurity-risks-their-management/

https://bgr.com/tech/4-things-you-should-never-do-while-chatting-with-chatgpt/

https://www.linkedin.com/in/ereny-nagib-07a3a01b7/

https://youtube.com/@vciso

https://www.linkedin.com/in/markwdebry/

Iowa Medicaid breach, KFC-Pizza Hut breach, tax firms malware

https://www.infosecurity-magazine.com/news/20000-iowa-medicaid-members-data/

https://cybersecuritynews.com/kfc-pizza-hut-breach/

https://news.sophos.com/en-us/2023/04/13/tax-firms-targeted-by-precision-malware-attacks/

https://www.infosecurity-magazine.com/news/ethical-hackers-chatgpt/

https://www.helpnetsecurity.com/2023/04/12/hybrid-work-environments-stressing-cisos/

https://www.bleepingcomputer.com/news/security/five-arrested-after-33-000-victims-lose-98m-to-online-investment-fraud/

https://securityintelligence.com/posts/four-ways-to-harden-your-network-perimeter/

https://www.darkreading.com/attacks-breaches/7-things-ransomware-response-playbooks-missing

https://www.linkedin.com/in/kevincecil/

From November 8, 2022 - Jake Williams is a cybersecurity manager and aspiring CISO, currently pursuing his MBA. He is also well-versed in CMMC, and we dive into some elements of this somewhat confusing standard/requirement.

Davy Cox is the founder of Brainframe.com, an all in one ISMS/GRC/DMS/QMS that can help SMBs and vCISOs manage their information security programs.

Leaked NATO docs possibly altered, repeating to trick, new Apple zero days, five active exploits added to CISO KEV,  1 million WordPress sites infected, five cybersecurity myths, and today’s shout out featuring a cyber security pro looking for the next opportunity.

https://www.scmagazine.com/news/policy/us-nato-ukraine-docs-altered

https://www.helpnetsecurity.com/2023/04/10/simple-trick-disclose-personal-data/

https://www.bankinfosecurity.com/apple-issues-emergency-fix-for-spyware-style-zero-days-a-21652

https://heimdalsecurity.com/blog/five-new-actively-exploited-vulnerabilities-added-by-cisa-to-its-kev-catalog/

https://thehackernews.com/2023/04/over-1-million-wordpress-sites-infected.html

https://www.forbes.com/sites/forbesbusinesscouncil/2023/04/06/dispelling-the-myths-around-cybersecurity-for-small-businesses/?sh=358f76d81f63

https://www.linkedin.com/in/brianmartinliticode/