chuvakinthumb

How EDR was supposed to help with alert overload

doncoxthumbnail

Patch management in the age of work-from-home

Distributed Workforce

<body>In the Security News, Verizon has suggestions on how to make DNS more secure, Microsoft is trying to fix another Kerberos vulnerability, Bumble made some security blunders, why trying to write an article about rebooting your router was a terrible idea, popping shells on Linux via the file manager, Trump fired Krebs, backdoors on your TV and why PHP is still a really bad idea!</body>

<body>In the Security News, Verizon has suggestions on how to make DNS more secure, Microsoft is trying to fix another Kerberos vulnerability, Bumble made some security blunders, why trying to write an article about rebooting your router was a terrible idea, popping shells on Linux via the file manager, Trump fired Krebs, backdoors on your TV and why PHP is still a really bad idea!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”8923″} podcast from PPWorks

Vulnerability Management

Data Security

Security Staff Acquisition & Development

IoT Cybersecurity Improvement Act, TCL Smart TV Flaw, & Popping Reverse Shells – PSW #675

<body>Jamie and Karsten join us for a discussion about recent attack trends, threat actors, and campaigns carried out by malicious threat actors. Everything from gift card scams to the latest techniques used by attacks for successful phishing campaigns!</body>

<body>Jamie and Karsten join us for a discussion about recent attack trends, threat actors, and campaigns carried out by malicious threat actors. Everything from gift card scams to the latest techniques used by attacks for successful phishing campaigns! </body>

<body>This segment is sponsored by Mimecast.</body>

<body>This segment is sponsored by Mimecast. </body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/mimecast">https://securityweekly.com/mimecast</a> to learn more about them!</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/mimecast">https://securityweekly.com/mimecast</a> to learn more about them!</body>

Featured image for Threat Actors & Recent Trends – Jamie Fernandes, Karsten Chearis – PSW #675 podcast from PPWorks

Email security

Threat Actors & Recent Trends – Jamie Fernandes, Karsten Chearis – PSW #675

<body>Email security is transitioning into being one of the top security pillars within the C-Suite’s risk mitigation strategy. Given that it’s the largest attack vector – not only based on the quantity of people who could be responsible for compromise, but also that it results in the greatest quantity of data breaches for organizations.</body>

<body>Email security is transitioning into being one of the top security pillars within the C-Suite’s risk mitigation strategy. Given that it’s the largest attack vector – not only based on the quantity of people who could be responsible for compromise, but also that it results in the greatest quantity of data breaches for organizations.</body>

<body>Kevin O'Brien, CEO and Co-Founder at GreatHorn joins Business Security Weekly for a discussion around what risk mitigation looks like in email, including:</body>

<body>Kevin O'Brien, CEO and Co-Founder at GreatHorn joins Business Security Weekly for a discussion around what risk mitigation looks like in email, including: </body>

<body><ul><li>No longer known bad/known good. And, it’s not “magical” AI or behind a black box</li><li>It’s about being able to identify all the factors that contribute to risk within email – individual users, departments, and the organization itself. How much of a risk tolerance do you have as you look at each and being able to balance controls accordingly.</li><li>Risk mitigation comes down to data. And in email security, it’s 2 data points - Mean Time to Detect (MTTD) and Mean Time to Respond (MTTR) </li></ul></body>

<body>This segment is sponsored by GreatHorn.</body>

<body>This segment is sponsored by GreatHorn.</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/greathorn">https://securityweekly.com/greathorn</a> to learn more about them!</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/greathorn">https://securityweekly.com/greathorn</a> to learn more about them!</body>

Featured image for The C-Suite’s Risk Mitigation Strategy – Kevin O’Brien – BSW #196 podcast from PPWorks

Leadership

Privacy

Zero trust

Compliance Management

Identity

The C-Suite’s Risk Mitigation Strategy – Kevin O’Brien – BSW #196

<body>This week, Doug talks Tianfu, Ghimob, Scalper bots, Animal Jam, Pay2Key, the Sad State Of 2FA, all this and Doug's Threat of the Week on the Security Weekly News Wrap Up!</body>

<body>This week, Doug talks Tianfu, Ghimob, Scalper bots, Animal Jam, Pay2Key, the Sad State Of 2FA, all this and Doug's Threat of the Week on the Security Weekly News Wrap Up!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”8909″} podcast from PPWorks

Cloud Security

Application security

Tianfu, Ghimob, Scalper Bots, Animal Jam, & Pay2Key – Wrap Up – SWN #82

<body>In the Security News, not all cyberattacks are created equal, Google patches two more Chrome zero days, What does threat intelligence really mean, Cobalt Strike leaked source code, DNS cache poisoning is back, and Zebras &amp; Dots!</body>

<body>In the Security News, not all cyberattacks are created equal, Google patches two more Chrome zero days, What does threat intelligence really mean, Cobalt Strike leaked source code, DNS cache poisoning is back, and Zebras &amp; Dots!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”8918″} podcast from PPWorks

Threat Management

Cobalt Strike Leak, DNS Cache Poisoning, & Decrypting Open SSH – PSW #674

<body>Dr. Doug reviews all of the latest cyber security news and then discusses incident response strategy and scenario exercising with Joshua Harr, Sr. Advisory Services Consultant at Rapid7.</body>

<body>Dr. Doug reviews all of the latest cyber security news and then discusses incident response strategy and scenario exercising with Joshua Harr, Sr. Advisory Services Consultant at Rapid7.</body>

<body>This segment is sponsored by Rapid7.</body>

<body>This segment is sponsored by Rapid7.</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/rapid7">https://securityweekly.com/rapid7</a> to learn more about them!</body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/rapid7">https://securityweekly.com/rapid7</a> to learn more about them!</body>

Featured image for Virgin Hyperloops, GhiMod, Torisma, & Joshua Harr, Rapid7 – SWN #81 podcast from PPWorks

Incident Response

Virgin Hyperloops, GhiMod, Torisma, & Joshua Harr, Rapid7 – SWN #81

<body>All our networks are hybrid now. Some old security challenges were solved by cloud migration, but we've just swapped them for some new ways to get things wrong. What's the best way forward?</body>

<body>All our networks are hybrid now. Some old security challenges were solved by cloud migration, but we've just swapped them for some new ways to get things wrong. What's the best way forward?</body>

<body>This segment is sponsored by RedSeal.</body>

<body>This segment is sponsored by RedSeal. </body>

<body>Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/redseal">https://securityweekly.com/redseal</a> to learn more about them!</body>