IE Zero-Day, Flashpoint, Malware Sandboxes – ESW #169
In the Enterprise News, Paul and Matt cover new InfoSec products of the week, CyberArk's new JIT access capabilities, a Micro patch that simulates a workaround for the recent zero-day IE flaw, easier and faster AD rollback and recovery with STEALTHbits StealthRECOVER, automating protection from advanced threats with the new Kaspersky Sandbox, compromised credentials monitoring with FlashPoint, and some funding and acquisition updates from Security Compass, Sysdig, Waterfall Security, ServiceNow, and FireEye!
SAP Vulnerabilities – Alex Horan, Juan Pablo Perez Etchegoyen – ESW #169
Alex Horan is the Director of Product Management at Onapsis and JP Perez is the CTO at Onapsis. Today they discuss the current state as it relates to SAP Vulnerabilities and security.
From my first job doing data entry (where I discovered I could fix the computers better than anyone else in the company) until now, I have not lost my passion for new technology and helping understand how technology can best help individuals and enterprises achieve results, without getting in their way. I am a security-focused product manager who has strong experience leading teams and directing the growth and development of products. My background in start-up based Project Management means I am very comfortable meeting with customers, prospects, and analysts in order to determine the best investment we can make in our product development. I also enjoy communicating the needs of those disparate communities to the engineering teams, be it in agile or waterful development.
As CTO, JP leads the innovation team that keeps Onapsis on the cutting edge of the Business-Critical Application Security market, addressing some of the most complex problems that organizations are currently facing while managing and securing their ERP landscapes. JP helps manage the development of new products as well as support the ERP cybersecurity research efforts that have garnered critical acclaim for the Onapsis Research Labs.
Compelling People to Care About Security – Robert Siciliano – ESW #169
Security goes against our core beliefs, therefore security awareness training often falls flat because employees don't care about security. By showing employees the "why" and how it benefits them as individuals, they are much more open to the "how" and begin to appreciate the value security provides.
Certified Speaking Professional Robert Siciliano CSP, in the ’90s appeared on the Montel Williams Show posing as a water company worker, conning his way into unsuspecting homeowners’ residences. Recently he appeared on Dr. Oz discussing Child Identity Theft, then brought a hacked ATM on the Anderson Cooper show exposing over 1000 credit and debit cards and on CNN he stabbed a melon in the eye to demonstrate rideshare safety. He’s written 5 books including a best seller. He’s the architect of the CSI Protection certification; a Cyber Social and Identity Protection security awareness training program.
