The Virtual CISO Moment

The Virtual CISO Moment

By Greg SchafferTechnology
Download on the App Store

The Virtual CISO Moment episodes

  • Cyber Quick Strike - January 2, 2023
    Twitter GDPR investigation, ransomware group clones victim's site, LockBit apologizes to children's hospital, ransomware ecosystem diversifying, IT Pros' cybersecurity fears, FinTech cybersecurity issues, and cybersecurity tools to keep you safe as a remote worker...sort of.
    https://gdprbuzz.com/news/twitter-faces-investigation-in-ireland-over-data-breach/
    https://www.bleepingcomputer.com/news/security/ransomware-gang-cloned-victim-s-website-to-leak-stolen-data/
    https://www.bleepingcomputer.com/news/security/ransomware-gang-apologizes-gives-sickkids-hospital-free-decryptor/
    https://www.csoonline.com/article/3684248/ransomware-ecosystem-becoming-more-diverse-for-2023.html
    https://securityboulevard.com/2023/01/an-overview-of-cybersecurity-issues-faced-by-the-fintech-industry/
    https://www.digitalinformationworld.com/2023/01/85-of-it-pros-fear-cybersecurity-issues.html
    https://www.makeuseof.com/best-free-cybersecurity-tools-to-keep-you-safe-as-a-remote-worker/
    20 min
  • The Virtual CISO Moment Wrap Up for Friday, December 30, 2022

    Ransomware not covered by cyber insurance, cyberattacks may be impossible to insure without some changes, whatever happened to UEBA, 100,000 students have their data exposed, six tips for hiring cybersecurity talent, and my predictions for 2023.


    • https://www.jurist.org/news/2022/12/ohio-supreme-court-says-insurance-policy-does-not-cover-ransomware-attack-on-software/
    • https://www.techspot.com/news/97118-cyberattacks-could-soon-become-impossible-insure.html
    • https://www.darkreading.com/dr-tech/how-to-get-the-most-out-of-ueba?
    • https://www.bitdefender.com/blog/hotforsecurity/renowned-education-platform-leaks-personal-data-of-100-000-students-online/
    • https://www.forbes.com/sites/forbestechcouncil/2022/12/22/six-ways-to-pivot-hiring-strategies-to-attract-cybersecurity-talent/?sh=2b3a54af742e
    • 24 min
    • Throwback Thursday for December 29, 2022 - A Conversation with Donna Gallaher

      From September 6, 2022 - Donna Gallaher, President and CEO of New Oceans Enterprises, LLC, is a seasoned IT and information security pro providing virtual CISO and risk management services. She is a FAIR (Factor Analysis of Information Risk) evangelist and is passionate about growing the virtual CISO community, including serving on the Board of Directors for vCISO Catalyst, a Public Benefit Corporation supporting the improvement of cybersecurity programs of small and medium businesses. If you have never heard of FAIR or are interested in the virtual CISO field (or both), check out this episode!

      New Oceans Enterprises, LLC - https://www.newoceansenterprises.com/

      29 min
    • The Virtual CISO Moment S4E64 - A Conversation with Michelle Drolet

      Michelle Drolet is a highly experienced information security expert who is well respected by clients, information security peers and analysts. Ms. Drolet is a sought-out speaker, panelist, and is a regular contributor to leading online publications such as Forbes Technology Council, Wired.com and IDG CSO Online. We discuss SMB security needs and challenges and how services such as a virtual CISO can be an effective solution.

      26 min
    • VCM Quick Strike for Monday, December 26. 2022

      BetMGM breach, search engine ad attacks, ransomware with new encryption algorithm, new ransomware served by PrivateLoader, and an update on the LastPass breach, with some thoughts.

      • https://www.bleepingcomputer.com/news/security/leading-sports-betting-firm-betmgm-discloses-data-breach/
      • https://www.infosecurity-magazine.com/news/fbi-cyber-search-engine-ads-attacks/
      • https://cybersecuritynews.com/vice-ransomware-group-uses-custom-ransomware-with-new-encryption-algorithms/
      • https://thehackernews.com/2022/12/privateloader-ppi-service-found.html
      • https://www.msn.com/en-us/money/technology/if-youve-ever-used-lastpass-you-should-change-all-your-passwords-now/ar-AA15FqPc
      • https://blog.lastpass.com/2022/12/notice-of-recent-security-incident/
      • 15 min
      • The Virtual CISO Moment Wrap Up for Friday, December 23, 2022

        Okta breach, Gmail client side encryption, avoid clicking bad links not enough, and more predictions!

        • https://www.bleepingcomputer.com/news/security/oktas-source-code-stolen-after-github-repositories-hacked/amp/
        • https://www.zdnet.com/article/google-brings-client-side-encryption-to-gmail-for-workspace/
        • https://www.ncsc.gov.uk/pdfs/blog-post/telling-users-to-avoid-clicking-bad-links-still-isnt-working.pdf
        • https://www.trendmicro.com/en_us/ciso/22/l/cyber-security-posture-2023-predictions.html
        • https://venturebeat.com/security/microsoft-cybersecurity-predictions/
        • https://venturebeat.com/security/2023-cybersecurity-forecasts-zero-trust-cloud-security-will-top-spending/
        • 18 min
        • Throwback Thursday for December 22, 2022 - A Conversation with Scott Augenbaum

          From August 31, 2022 - Scott Augenbaum was a special agent with the FBI and now continues his mission to help prevent businesses from becoming a victim of cybercrime as an author, speaker, and trainer. His story and mission is educational and inspirational! Check out https://www.cybersecuremindset.com/ and connect with Scott at https://www.linkedin.com/in/saugenbaum/.


          30 min
        • The Virtual CISO Moment S4E63 - Consulting Revisited

          I'm producing a limited YouTube series on lessons I've learned from being a successful consulting business owner. It's not all sunshine and roses, and I've made a lot of mistakes, but I've learned from them. Here are the latest two episodes - Consulting: Cyber Concerns and Consulting: Business Concerns. If you find these interesting and useful, please subscribe to the vCISO Services, LLC YouTube channel (link below) to be notified when future episodes drop.

          https://youtube.com/@vciso


          38 min
        • VCM Quick Strike for Monday, December 19, 2022

          NY hospitals cyber attack, AI to take phishing to new level, last two months busiest for ransomware, how to lower cyber insurance costs, joint advisory on BEC for stealing food, and Uber data breach caused by third-party vendor.

          • https://www.cbsnews.com/newyork/news/one-brooklyn-health-battling-cyber-attack-that-forced-some-critical-services-offline/
          • https://www.bankinfosecurity.com/new-ai-bot-could-take-phishing-malware-to-whole-new-level-a-20709
          • https://blog.knowbe4.com/october-and-november-have-been-the-two-busiest-months-for-ransomware
          • https://www.scmagazine.com/perspective/strategy/what-companies-can-do-to-lower-cyber-insurance-costs
          • https://us-cert.cisa.gov/ncas/current-activity/2022/12/16/fbi-fda-oci-and-usda-release-joint-cybersecurity-advisory
          • https://www.cpomagazine.com/cyber-security/uber-data-breach-of-employee-information-caused-by-third-party-vendor/

          • 11 min
          • The Virtual CISO Moment Wrap Up for Friday, December 16, 2022

            Infragard hacked, Google OSV Scanner tool, Atlassian issue, CSAF may help vuln management, reviewing the AUP, cybersecurity risks for banks and credit unions, and more predictions! Plus a word of advice regarding the job interview process based on a recent real-world example.

            • https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/
            • https://thehackernews.com/2022/12/google-launches-largest-distributed.html
            • https://cloudsek.com/security-flaw-in-atlassian-products-jira-confluencetrello-bitbucket-affecting-multiple-companies/
            • https://www.darkreading.com/threat-intelligence/csaf-is-the-future-of-vulnerability-management
            • https://www.csoonline.com/article/3682760/how-acceptable-is-your-acceptable-use-policy.html
            • https://thefinancialbrand.com/news/banking-technology/rising-cybersecurity-risks-will-plague-banking-brands-in-2023-156888/
            • https://venturebeat.com/security/sans-cybersecurity-predictions/
            • 20 min

            About The Virtual CISO Moment

            From the publisher's feed

            The Virtual CISO Moment dives into the stories of information security, information technology, and risk management pros; what drives them and what makes them successful while helping small and midsized business (SMB) security needs. No frills, no glamour, no transparent whiteboard text, no complex graphics, and no script - just honest discussion of SMB information security risk issues.