Episode 23: Best & Worst Security Functions to Outsource & All Things Linux with Special Guest Tom Lawrence

Security Jabber, Episode 23

We were joined in studio by Tom Lawrence. He's the owner of Lawrence Systems, a Podcast Master, and knows everything about Linux. Tom was recently at Microsoft Ignite, and you're going to want to listen to some of his stories. The team and Tom also spent a segment discussing what the best and worst security functions to outsource are.

We're back to our weekly schedule starting October 16th, so catch us live in Studio 1 on the PodcastDetroit.com website or on-demand on iTunes, Google Play in addition to SoundCloud.

Special Guest:
Tom Lawrence, Owner, Lawrence Systems
Tech Enthusiast, IT Business Owner, Entrepreneur, Open Source Advocate, Public Speaker, Podcaster & YouTube Creator.

Where you can find Tom
Lawrence Systems Website 
Facebook 
LinkedIn
YouTube
Sunday Morning Linux Review Podcast

Links From the Show

Buzzfeed - Three American Scientists Who Figured Out How Our Body "Clocks" Work Have Won The Nobel Prize In Medicine 

PC Mag - iPhone 8s splitting in half during charging

CNBC - Shake Shack Going Cashless

Reuters - Russian firm provides new internet connection to North Korea 

Free Code Camp - How I hacked hundreds of companies through their helpdesk

Dark Reading - Best and Worst Security Functions to Outsource

Episode 22

Security Jabber, Episode 22

We're available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• Factor – Tech - NOW EVEN COWS HAVE WEARABLE TECHNOLOGY
• The Guardian - Deloitte hit by cyber-attack revealing clients’ secret emails
• NY Times - Someone Made a Fake Equifax Site. Then Equifax Linked to It.
•  Nextgov.com - MEET THE 17-YEAR-OLD WHO HACKED THE U.S. AIR FORCE
• Krebs - Canadian Man Gets 9 Months Detention for Serial Swatting’s, Bomb Threats
•  Dark Reading - 10 Security Product Flaw Scares

Episode 21: Just Patch with Special Guest Mark Phinick

Security Jabber, Episode 21

We got back into the studio this week after a short break. The team spent the first segment talking about malware hid in CC Cleaner and the fallout from the recent credit reporting agency data breach. We were then joined by special guest Mark Phinick for segments two and three. Mark gave us a couple of great stories, his insight on data security, and some really good advice. 

Special Guest: Mark Phinick, Global Sales Leader, Endpoint Security at IBM Security
Mark Phinick is a successful cybersecurity software sales leader with a consistent track record of building global, client-centric teams who exceed expectations. Throughout his career, he's partnered with CIOs and CISOs on optimizing their people, processes, and technology to protect critical assets and brand equity against cyber threats. 

Links from the Show

1. Hackers hid malware in CCleaner software

2. North Korean hackers are trying to steal bitcoin and other cryptocurrencies

3. Credit Agency Breach

We're available on iTunes, Google Play in addition to SoundCloud.

Episode 20: Tacos, Privacy, and WASTING Time

Security Jabber, Episode 20

In this week's episode, we open with Taco Bell opening a special location in the metro Detroit area and probably spend too much time thinking about tacos after. The team also covers a "story" about Microsoft's big win over the DNC hackers, spoiler alert they did but really didn't. 

We spent a good amount of time on the FBI's mega database which is more than likely housing some of your info. Finally, we closed out our show with a great discussion on the 10 time-consuming tasks security people hate.

1. Detroit News - Boozy, fast-casual Taco Bell coming to Royal Oak
2. The Hill - Microsoft wins major court victory against DNC hackers
3. ZDNet - FBI can keep secret who's in its biometrics 'mega database,' says Justice Dept.
4. Reuters - India and Pakistan hit by spy malware
5. Dark Reading – 10 Time-Consuming Tasks Security People Hate

We're available on iTunes, Google Play in addition to SoundCloud.

Episode 19: The One Where the Gang Covers lots of Random News

Security Jabber, Episode 19

In this episode, the team covers a wide variety of stories including

• Motherboard Vice - 'Facebook for Horses' Is Mongolia's Hot New Social App
• Washington Post - ‘20 seconds of burning’: Friends partly blinded after watching solar eclipse warn of dangers
• Time - 4 Surprising Eclipse Facts
• CyberScoop - FBI pushes private sector to cut ties with Kaspersky
• Dark Reading - Trump Makes US Cyber Command an Official Combat Arm
• Wired - A DEEP FLAW IN YOUR CAR LETS HACKERS SHUT DOWN SAFETY FEATURES
• AP - How Your Cell Phone Can Detect ATM, Gas Pump Skimmers

Episode 18: The Rise & Fall of a Hacker

Security Jabber, Episode 18

In this week's episode, we had really great discussions on topics ranging from hermit's to hackers. We opened the show with a story about the Northpond Hermit and how he alluded society for 26 years in the woods of Maine. Next up was drones as per the usual. The team then weighed in on the HBO hack and the dangers of unsecured printers. Finally, we ended the first segment with new regulations being proposed in the U.K. around smart car cyber protection.

Our main topic is about Marcus Hutchins, the British hacker that stopped WannaCry and rose to fame very quickly in the aftermath is now being charged in the U.S. for his role in a banking Trojan. The team had no shortage of opinions on this one.

We are on break until August 21st. What a great chance to catch up on any shows you missed.

We're available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• Hazlitt - There Have Always Existed People Who’ve Simply Wanted to be Alone’: An Interview with Michael Finkel
• Verge - US Army reportedly asks units to stop using DJI drones, citing cyber security concerns
• Hollywood Reporter - HBO Hack: No New Material Surfaces Despite Threat of Sunday Leak
• Press Enterprise - Copiers pose bigger threats than paper jams, cyber security experts say
• Computer Weekly - UK calls for smart car cyber protection
• Verge - Black hat or white hat? Questions swirl around hero researcher's sudden arrest
• Daily Mail - a British computer geek, hailed a hero for stopping Wannacry global hack 'admitted to police he created program which steals bank customers' details'

Episode 16: Black Hat Preview

Security Jabber, Episode 16

The team covered a lot of ground this week. We opened the podcast with a debate whether or not implanting a RFID chip in our hand is a good idea, spoiler alert, some of the guys think it's a conspiracy. A story from Forbes got us talking about Israel's position in the cyber security market as a country and in private industry. The first segment ended with a look at how Sweden potential leaked the private info of nearly all its citizens including vital military information.

Segment two was a preview of Black Hat and the results the attendee survey. Next week we'll have several guests on that attended Black Hat 2017 and hear all about what they saw. We closed out the show with a discussion on connected toys and the security risks they pose to families.

We're also now available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• Washington Post - A U.S. company offers to implant chips in its employees
• Forbes - 6 Reasons Israel Became A Cybersecurity Powerhouse Leading The $82 Billion Industry
• Hacker News  - Sweden Accidentally Leaks Personal Details of Nearly All Citizens
• Naked Security  - Black Hat USA 2017: what’s on the agenda in Las Vegas
• Dark Reading -  Black Hat Survey: Security Pros Expect Major Breaches in Next Two Years
• Dark Reading -  FBI Issues Warning on IoT Toy

Episode 15: Threat Hunting Returns

Security Jabber, Episode 15

Guest: Jeff Warson, Regional Sales Manager at CrowdStrike
Jeff has been involved in the Information Security Field for over 25 years, with roles ranging from IT Manager, White Hat Hacker, Systems Engineer, Account Executive and Regional Sales Manager.

Returning Guest Host: Steve Barone, CEO at CBI

Links to Stories

• Gizmodo - Man Stuck Inside ATM Rescued, After Slipping Customers Terrifying Notes
• Fortune - Microsoft Is Bringing Skype to Somewhere It’s Never Been Before
• Gizmodo - 'The Biggest Marketplace on the Dark Web' Gets Busted by Authorities
• Pivot Point - CEO Fraud Up 270% in One Year—And 33% of Top Execs Are Vulnerable
• IT World- Canadian Firm Pays $425,000 to Recover from Ransomware Attack
• ARN – Cloud Based Security Industry Predicted to Hit US$5.9 billion this Year and US$9 billion by 2020
• IBS Intelligence - When Threat Intelligence is the Answer to Drowning in Security Solutions
• Dark Reading - Threat Intelligence Sharing: The New Normal

Episode 14: Energy Sector Threats

Security Jabber, Episode 14

On this week’s episode, we discussed the legality and ethics regarding drone software. The main topic covered was recent “revelations” that over a hundred energy plants have been comprised, including several nuclear facilities. We wrapped the show talking about Todd’s sweet retro gaming setup.

We're also now available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• Teiss.co.uk – UK’s NHS Doctors Using SnapChat to Share Patient Scans and Other Records
• Motherboard Vice - DJI Is Locking Down Its Drones Against a Growing Army of DIY Hackers
• Medium.com “the grugq” - Pnyetya: Yet Another Ransomware Outbreak
• Microsoft - Windows 10 Platform Resilience Against the Petya Ransomware Attack
• CyberScoop - Spearphishing attacks on energy firms tied to years-long global hacking operation
• KCUR.Org - Cyber attack Targeting Kansas Nuclear Facility Highlights Bigger Cybersecurity Threats
• Bloomberg (Jan 2017)- U.S. Grid in ‘Imminent Danger’ From Cyber-Attack, Study Says
• Reuters - U.S. Energy Department Helping Power Firms Defend Against Cyber Attack
• Extreme Home Arcades

Episode 12: Cyber Insurance

Security Jabber, Episode 12

Guest: David Derigiotis, Corporate Vice President at Burns & Wilcox
Corporate Vice President and Director of Professional Liability leading a team of highly specialized brokers and underwriters. Focus on professional, cyber, and executive liability risks and coverage solutions for clients nationally. Burns & Wilcox, the Kaufman Financial Group’s flagship organization, is North America’s leading independent wholesale insurance broker and underwriting manager. Burns & Wilcox offers wide-ranging and comprehensive solutions to serve retail insurance brokers and agents of all sizes, from the large houses to the more than 30,000 independent brokers and agents worldwide.
David’s Social: LinkedIn | Twitter

---

LINKS FROM THIS WEEK'S EPISODE

Dark Reading - Cosmetic Surgery Clinic's Photos Released in Cyber Blackmail Attack
Deep Dot Web - Another Spy Program Leaked onto the Dark Web, Second Web Attack Imminent
We Live Security - Zomato working with ‘ethical hacker’ to improve security
The Daily Beast - This Bill Would Make Revenge Hacking Legal
Fortune - Chinese ‘Fireball’ Malware Infects 250 Million Computers
Krebs - Credit Card Breach at Kmart Stores. Again
ZDNet- Security News This Week: OneLogin Had One Very Bad Breach
CIO - What is cyber insurance and why you need it
Healthcare IT News - Include lawyers in Cybersecurity Incident Response Planning, Forrester says
Dark Reading - 5 Security Lessons WannaCry Taught Us the Hard Way

---

Episode 11: Incident Response, What Can You Do?

Security Jabber, Episode 11

Guest: Ray Davidson, Program Manager for Michigan Cyber Civilian Corps
The Michigan Cyber Civilian Corps (MiC3) is a group of trained cyber security experts who volunteer to provide expert assistance to enhance the State’s ability to rapidly resolve cyber incidents when activated under a Governor declared State of Emergency. The group includes volunteers from government, education, and business sectors.

The MISSION of MiC3 is to work with government, education, private sector organizations, and volunteers to create and implement a rapid response team to be activated under a Governor declared cyber State of Emergency and to provide mutual aid to the government, education, and business organizations in the State of Michigan.

Ray’s Social: LinkedIn | Twitter

Links from This Week's Episode

• The Verge - Almost all WannaCry victims were running Windows 7
• Bleeping Computer - New SMB Worm Uses Seven NSA Hacking Tools.
• Cyware - Why Revealing Cybersecurity Experts Is So Dangerous
• Security Week - New Bill Forces Cybersecurity Responsibility into the Boardroom
• SANS - Incident Response Capabilities in 2016
• Healthcare IT News - Include lawyers in Cybersecurity Incident Response Planning, Forrester
• State of Michigan - Michigan Cyber Civilian Corps
• Business Insider - Google's Mysterious New OS Looks Completely Different from Android

Episode 10: Let’s Talk About Cyber Security, What’s in the News This Week

Security Jabber, Episode 10

Security Jabber - Episode 10
LET’S TALK ABOUT CYBER SECURITY, WHAT’S IN THE NEWS THIS WEEK

Guest Host: Jason Brown, Lab Manager / Guru of All Mystical InfoSec Things, CBI

The Jabber Team was down as few hosts, but we still had a great show. We discussed new ways companies are using connected devices to reach you and why late people might be onto something. Finally, we really dove into cyber security policy, the IT security talent shortage and ways to address it.

Links from the Show

• Tab.com - People Who are Always Late are More Successful and Live Longer

• Guardian - Google Home Devices Stop Responding to Burger King's TV Ad Prompt

• NY Times - Hacker Leaks Episodes from Netflix Show and Threatens Other Networks

• Business Insider - Warren Buffett Sees Cyber Attacks as a Bigger Threat to Humanity than Nuclear Weapons

• Reuter’s - France Fights to Keep Macron Email Hack from Distorting Election

• CNN - Big Changes in Trump's Cyber Security Executive Order

• Harvard Business Review - Cybersecurity Has a Serious Talent Shortage. Here’s How to Fix It

• Forbes - Improving Cybersecurity: The Diversity Imperative

• Converge Conference - https://www.convergeconference.org/

Episode 9: Part 3: Data Protection – Breach Response. The True Measure of Your Protection

Security Jabber, Episode 9

Security Jabber - Episode 9
Part 3: Data Protection – Breach Response. The True Measure of Your Protection.

Special Guest: Russ Gordon, Global IT Risk Management and Security, BorgWarner
Guest Host: Jason Brown, Lab Manager / Guru of All Mystical InfoSec Things, CBI

On this week’s podcast, we wrapped our data protection series with special guest, Russ Gordon, Global IT Risk Management and Security, BorgWarner. We started the show with a discussion around the record jail sentence given to an extradited Russian hacker. The team also covered new developments in the InterContinental Hotels Group (IHG) hack, where over 1,175 properties in the U.S. and Puerto Rico are affected.

In the second segment, we covered what to do when there’s a breach. The team weighed in on a recent study about how CISO’s are failing to keep pace with data breaches and how they prepare for data breaches. We also covered some of the ways to quantify risk and limit damages post-breach through a few different strategies.

The show  ends with an interview with special guest Russ Gordon.

We're also now available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• American Security Today - When COWs Fly: AT&T Sending LTE Signals from Drones
• Dark Reading - Russian Citizen Gets Record 27-Year Sentence for Hacking, Fraud Scheme
• Krebs on Security - InterContinental Hotel Chain Breach Expands
• Computer Business Review -  CISO’s Fail to Keep Pace with Data Breaches 
• BitSight – 28 Data Breach Stats
• GCN - After an attack: How to keep a bad situation from getting worse

Episode 8: Part 2b: Data Protection - Layer 8, The Insider Threat

Security Jabber, Episode 8

Security Jabber - Episode 8
Part 2b of the Data Identification Series: Layer 8, The Insider Threat

Special Guest: Michael Lipinski, CISO and Chief Security Strategist, Securonix
Guest Host: Jason Brown, Lab Manager / Guru of All Mystical InfoSec Things, CBI

The Security Jabber team took a little detour on our three-part series in Data Protection this week. We dove deeper into insider threats and how they just might be the biggest risk in securing data. The studio was full with again with multiple guests. Michael Lipinski, CISO and Chief Security Strategist, Securonix was our special interview host while Jason Brown, Lab Manager / Mystical Guru of All InfoSec Things, CBI also joined the team to give his perspective.

The show opened with a story about a hacker setting of all 156 emergency sirens in Dallas, is it a conspiracy, you’ll have to listen to find out. A recent release of NSA tools by the Shadow Brokers Group and how they can be used for Whitehat or Blackhat purposes is also discussed. Our second segment focused on seven ways hackers targeted your employees, the panel dove in and gave their personal experiences in using these methods when they do their Whitehat hacking. In our final segment, we interviewed Michael Lipinski from Securonix to learn about how behavioral analytics and new technologies like machine learning are changing our security practices for the better.

We're also now available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• USA Today -  Hacker Sets Off all 156 Emergency Sirens in Dallas
• The Hacker News - Shadow Brokers Group Releases More Stolen NSA Hacking Tools & Exploits
• Dark Reading - 7 Ways Hackers Target Your Employees
• IBM -  Building a Cybersecurity Culture Around Layer 8
• Dark Reading - Insider Threat Fear Greater Than Ever, Survey Shows
• The Hacker News - Beware of an Unpatched Microsoft Word 0-Day Flaw being Exploited in the Wild
• The Economist - The Incentives for Software Firms to Take Security Seriously Are too Weak

Episode 7: Part 2 of the Data Protection Series - Locking it Down

Security Jabber, Episode 7

Security Jabber - Episode 7
Part 2 of the Data Identification Series: Locking It Down

Special Guest: Joe Sturonas, Chief Technology Officer at PKWARE, Inc.
Guest Host: Brian Vecci, Technical Evangelist, Varonis

In this week’s episode, we continue our three-part series focused on data protection with “Part 2: Data Protection, Locking it Down”. Our in-studio special guest and third segment interview this week is Joe Sturonas, Chief Technology Officer at PKWARE. Brian Vecci, last week’s guest, couldn’t get enough of the Jabber team and will be back for round two. 

We're also now available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• Krebs on Security - Four Men Charged with Hacking 500M Yahoo Accounts

• Infosecurity Magazine - Apple Ransom Threat: Legitimacy is Elusive

• Betanews - European InfoSec Execs Face Major Challenge from Insider Threats

• IBM -  Building a Cybersecurity Culture Around Layer 8

• Dark Reading - The True State of DevSecOps

• Sonatype: DevSecOps Community Survey

• Network World - Enterprise Encryption Adoption Up, but the Devil's in the Details

• TechNewsDB.Com - Phishing Scams Even Fool Tech Nerds—Here’s How to Avoid Them

Episode 6: Part 1 of the Data Protection Series - Where Are Your Crown Jewels?

Security Jabber, Episode 6

Security Jabber - Episode 6
Part 1 of the Data Identification Series: Where Are Your Crown Jewels

Guest: Brian Vecci, Technical Evangelist, Varonis

In this week’s episode, we kick off the first leg of our three-part series in Data Protection, “Part 1: Data Identification, where are your Crown Jewels?”. The special guest this week is Brian Vecci, Technical Evangelist, Varonis whose LinkedIn mission statement might be one of the best I’ve seen, “Protecting you from insider threats, cyber attacks, and terrible sales presentations.” The team will also be discussing encoding data on DNA, the WikiLeaks Vault7 release, and you guessed it, more cow stuff; that’s just in the first segment! In segment two we’ll get deep into data identification and close out the show with an interview with Brian.

We're also now available on iTunes, Google Play in addition to SoundCloud.

Links from the Show

• Forbes.com - Cows In The Cloud: How A Family Farm Transformed Rural India
   
• The Hacker News - Scientist Store an OS, Movie, and Computer Virus on DNA
   
• WikiLeaks - Vault 7: CIA Hacking Tools Revealed
   

• Wired UK - WikiLeaks says the 8,761 docs are the 1st of its Vault 7 release of documents

• Krebs on Security - WikiLeaks: We’ll Work with Software Makers on Zero-Days

• Varonis - 64% of organizations say they don’t know where their sensitive content is located or who can access it.

• Information Age - With GDPR just over the horizon data classification will be an essential consideration for all organizations, and this article discusses its importance

• InsideBigData.Com - The Exponential Growth of Data

Episode 5: Build, Buy or Outsource - SOC Best Practices

Security Jabber, Episode 5

Security Jabber - Episode 5

Guest: Martin Bally, VP & CSO, Diebold Nixdorf

In this week’s episode, we tackle cows as big as elephants, not literally, but still fun. The team also will be talking about, “Build, Buy, or Outsource, Managed Services & Security Operations” with Mike Pearson, VP of Managed Services, CBI (formerly founder & CTO of SecureWorks) and special interview guest Martin Bally, VP & CSO, Diebold Nixdorf.

• Cows Once as Big as Elephants May Soon Roam Europe
• Massive Bug May Have Leaked User Data from Millions of Sites (Cloudflare)
• How Secure Is Our Smart Grid?
• How Used Cars Became a Security Nightmare
• Mitigating Arbitrary Native Code Execution in Microsoft Edge  
• Making the Move to an All-HTTPS Network
• For the Love of SIEM
• How Managed Security Can Close the Cybersecurity Skills Gap
• RSA Trends: Cloud, IoT, Cybersecurity Skills Gap Drive Security Services Demand

Episode 4: We interview Lance James, Chief Scientist for Flashpoint

Security Jabber, Episode 4

Security Jabber - Episode 4

Guest: Lance James, Chief Scientist at Flashpoint

A journey begins with a single step, our podcast begins with a single question and quickly finds a way to jump of the path to cover everything from patch Tuesday, to RSAC, and that time hackers “swatted” the wrong guy.

This week’s episode is jam packed with all things cyber security. We had Lance James, Chief Scientist at Flashpoint on from the get go and spoiler alert, he didn’t disappoint. The team dove into the stories of the week and among them was an update to Brian Krebs getting swatted in 2013, turns out Lance helped Brian track down the bad guys and help get justice served.

We also talked about the RSA Conference and what the future of cyber security looks like. There are plenty of links below so you can see the coolest booths, best bloggers, and how a few people left their WiFi vulnerable on the show room floor.

In segment three Lance reveals his connection with the hit show Mr. Robot, listen to find out what it is.

Links from this week’s stories

• Spy-Jacking the Booters talk at Black Hat 2013 with Lance James and Brian Krebs
• Microsoft cancels February patch Tuesday
• Brian Krebs - Men Who Sent Swat Team, Heroin to My Home Sentenced
• Hacked, Android phones unlock millions cars
• EvilAP attack observed at RSA Conference, Pwnie Express
• RSAC blogger awards
• Five best booths at RSAC
• RSAC 2017 in 4 words
• 78% of security pros say threat intelligence is essential to their organization’s security, but just 27% say their organizations effectively use threat data. Why the disconnect?

Teen hacks 150,000 printers

This Teen Hacked 150,000 Printers to Show How the Internet of Things Is Broken

originally posted on motherboardvice.com

On Saturday, February 4, 2017, a self-described "pissed off high school student" in the United Kingdom sat in front of his computer, listening to Bones and Yung Lean, coding a rootkit, a set of software tools that allows an unauthorized user to control a computer system. He got to thinking about recent news reports about printer hacking and shifted gears, instead building a short program in C. Within hours, roughly 150,000 internet-connected printers across the world began spitting out ASCII art and messages informing their owners that their machines were "part of a flaming botnet." The hacker signed his work as "Stackoverflowin."

Throughout the evening and into Sunday, people across the web reported finding the mysterious printouts. Many of the affected printers were connected to restaurant POS systems, leaving confused employees to find ASCII robots pouring out of their receipt printers.

Get the whole story here