3D render AI artificial intelligence technology CPU central processor unit chipset on the printed circuit board for electronic and technology concept select focus shallow depth of field

3D render AI artificial intelligence technology CPU central proc

Fortinet

Fortinet FortiGuard Labs

Threat predictions for 2024: Chained AI and CaaS operations give attackers more ‘easy’ buttons than ever

Phishing

Shopping online. cardboard box with a shopping cart logo in a trolley on a laptop keyboard. Shopping service on The online web.

Shopping online concept – Parcel or Paper cartons with a shoppin

Identity

Brief

Retailers face rising cyber threats, with 87% experiencing incidents

Gavel and dollars banknotes on table

Vietnamese national charged in $16 million cryptocurrency pig butchering scam

QR_AdobeStock_359191803

QR code vulnerability allows attackers to hijack branded domains

warning_AdobeStock_483472769

Google ads deliver sophisticated tech support scam targeting Windows and Mac users

Interview with Christopher Crawley - The Value of SecOps

<h3>Interview with Christopher Crawley - The Value of SecOps</h3>

This week, we talk to Chris Crawley about his new book, <em>The Value of Cybersecurity Operations</em>. Chris has been training teams on security operations for years, but found that students often struggled to justify the importance of secops training and even the need for secops in general. This book was written to more broadly arm practitioners with the information they need to communicate why security operations are necessary to leadership.

<p>This week, we talk to Chris Crawley about his new book, <em>The Value of Cybersecurity Operations</em>. Chris has been training teams on security operations for years, but found that students often struggled to justify the importance of secops training and even the need for secops in general. This book was written to more broadly arm practitioners with the information they need to communicate why security operations are necessary to leadership.</p>

The book is available in several forms: eBook, hardcover, softcover, and an audiobook read by Chris himself!

<p>The book is available in several forms: eBook, hardcover, softcover, and an audiobook read by Chris himself!</p>

You can pick all versions up here: <a rel="noopener noreferrer" target="_blank" href="https://shop.montance.com/collections/all">https://shop.montance.com/collections/all</a> and Security Weekly listeners get 50% off with code  <strong>sw-50</strong>!

<p>You can pick all versions up here: <a rel="noopener noreferrer" target="_blank" href="https://shop.montance.com/collections/all">https://shop.montance.com/collections/all</a> and Security Weekly listeners get 50% off with code  <strong>sw-50</strong>!</p>

The Evolving Exploitation of Trust with Josh Davies, Security Strategist at Fortra

<h3>The Evolving Exploitation of Trust with Josh Davies, Security Strategist at Fortra</h3>

Fortra Intelligence and Research Experts (FIRE) is Fortra's emergent threat intelligence identity, created to unify research teams across multiple security disciplines and share intelligence with the wider threat intelligence community. FIRE co-ordinator and security strategist Josh Davies joins us to share insights from original FIRE research like Calphishing, Mirage2FA, RatPressto phishkit and heavily obfuscated campaigns that evade defences. While also digging into trends from big data analysis within phishing, fraud, social engineering and credential theft.

<p>Fortra Intelligence and Research Experts (FIRE) is Fortra's emergent threat intelligence identity, created to unify research teams across multiple security disciplines and share intelligence with the wider threat intelligence community. FIRE co-ordinator and security strategist Josh Davies joins us to share insights from original FIRE research like Calphishing, Mirage2FA, RatPressto phishkit and heavily obfuscated campaigns that evade defences. While also digging into trends from big data analysis within phishing, fraud, social engineering and credential theft.</p>


<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.youtube.com/watch?v=3NwwwJdRIzc&amp;list=PLTWUEP9e5aG6tR_j-czWdCeIneKeWCZhm">Art of Security Podcast</a></li>


<li><a rel="noopener" target="_blank" href="https://www.fortra.com/security/research">Fortra Research</a></li>
</ul>


<ul><li><a rel="noopener noreferrer" target="_blank" href="https://www.youtube.com/watch?v=3NwwwJdRIzc&amp;list=PLTWUEP9e5aG6tR_j-czWdCeIneKeWCZhm">Art of Security Podcast</a></li><li><a rel="noopener noreferrer" target="_blank" href="https://www.fortra.com/security/research">Fortra Research</a></li></ul>

This segment is sponsored by Fortra. Access FIRE Research here: <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a>

<p>This segment is sponsored by Fortra. Access FIRE Research here: <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/fortrabh">https://securityweekly.com/fortrabh</a></p>

Why Agentic AI Security Requires a Defense-In-Depth Strategy with Kaushik Shanadi, CTO and Co-Founder of Helmet Security

<h3>Why Agentic AI Security Requires a Defense-In-Depth Strategy with Kaushik Shanadi, CTO and Co-Founder of Helmet Security</h3>

Many organizations are approaching agentic AI security by stitching together individual controls, assuming that identity, network, endpoint, or application security alone is enough. Each address only one part of the problem. As AI agents become more autonomous, move across systems, and take actions on behalf of users, organizations need a true defense-in-depth strategy that combines every layer of the security stack. Kaushik can discuss how each security layer provides a different piece of the puzzle and how individually, none of the controls are sufficient. But together, they create the layered governance needed to securely deploy agentic AI.

<p>Many organizations are approaching agentic AI security by stitching together individual controls, assuming that identity, network, endpoint, or application security alone is enough. Each address only one part of the problem. As AI agents become more autonomous, move across systems, and take actions on behalf of users, organizations need a true defense-in-depth strategy that combines every layer of the security stack. Kaushik can discuss how each security layer provides a different piece of the puzzle and how individually, none of the controls are sufficient. But together, they create the layered governance needed to securely deploy agentic AI.</p>

For more information about Helmet Security, please visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/helmetbh">https://securityweekly.com/helmetbh</a>

<p>For more information about Helmet Security, please visit <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/helmetbh">https://securityweekly.com/helmetbh</a></p>

Above Security on Why Legacy Tools Don’t Cut It for Modern Insider Risk with Tricia Howard, Head of Marketing at Above Security

<h3>Above Security on Why Legacy Tools Don’t Cut It for Modern Insider Risk with Tricia Howard, Head of Marketing at Above Security</h3>

As organizations rush to adopt agentic AI, agents are often given broad access to critical business systems and sensitive data. Legacy insider risk management tools weren't built for this, and organizations have spent years on insider risk posturing and investments that leave security teams inundated with false positives while the real risk slips through undetected. In this segment, Tricia Howard draws on her decade in cybersecurity, including years watching user and entity behavior analytics (UEBA) overpromise and underdeliver, to unpack why understanding human – and now AI – intent is the missing piece.

<p>As organizations rush to adopt agentic AI, agents are often given broad access to critical business systems and sensitive data. Legacy insider risk management tools weren't built for this, and organizations have spent years on insider risk posturing and investments that leave security teams inundated with false positives while the real risk slips through undetected. In this segment, Tricia Howard draws on her decade in cybersecurity, including years watching user and entity behavior analytics (UEBA) overpromise and underdeliver, to unpack why understanding human – and now AI – intent is the missing piece.</p>


<ul class="wp-block-list">
<li>Blog Post: <a rel="noopener" target="_blank" href="https://www.above.security/blog-posts/redefining-insider-threat">Redefining Insider Threat</a></li>


<li>Blog Post: <a rel="noopener" target="_blank" href="https://www.above.security/blog-posts/above-security-what-i-wanted-ueba-to-be-years-ago">What I wanted UEBA to be, Years Ago</a></li>
</ul>


<ul><li>Blog Post: <a rel="noopener noreferrer" target="_blank" href="https://www.above.security/blog-posts/redefining-insider-threat">Redefining Insider Threat</a></li><li>Blog Post: <a rel="noopener noreferrer" target="_blank" href="https://www.above.security/blog-posts/above-security-what-i-wanted-ueba-to-be-years-ago">What I wanted UEBA to be, Years Ago</a></li></ul>

To learn more about Above Security and insider risk management in the era of agentic AI, visit: <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/abovebh">https://securityweekly.com/abovebh</a>

<p>To learn more about Above Security and insider risk management in the era of agentic AI, visit: <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/abovebh">https://securityweekly.com/abovebh</a></p>

The Identity Crisis Your Security Team Didn't See Coming: Governing AI Agents with Darren Guccione, CEO and Co-Founder of Keeper Security

<h3>The Identity Crisis Your Security Team Didn't See Coming: Governing AI Agents with Darren Guccione, CEO and Co-Founder of Keeper Security</h3>

AI agents outnumber human identities in enterprise environments, and traditional security software was never built to govern them. 89% of cybersecurity decision-makers recently surveyed by Keeper Security said that AI adoption has made identity management harder.

<p>AI agents outnumber human identities in enterprise environments, and traditional security software was never built to govern them. 89% of cybersecurity decision-makers recently surveyed by Keeper Security said that AI adoption has made identity management harder. </p>

In this Black Hat USA conversation with Cyber Risk TV, Darren Guccione, CEO and Co-Founder of Keeper Security, shares a practical framework for extending identity governance to non-human identities and AI agents before the access gap becomes a breach.

<p>In this Black Hat USA conversation with Cyber Risk TV, Darren Guccione, CEO and Co-Founder of Keeper Security, shares a practical framework for extending identity governance to non-human identities and AI agents before the access gap becomes a breach.</p>


<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.keepersecurity.com/privileged-access-management/">Privileged Access Management</a></li>


<li><a rel="noopener" target="_blank" href="https://www.keepersecurity.com/resources/insight-report-identity-security-at-machine-speed/">Identity Security at Machine Speed</a></li>
</ul>


<ul><li><a rel="noopener noreferrer" target="_blank" href="https://www.keepersecurity.com/privileged-access-management/">Privileged Access Management</a></li><li><a rel="noopener noreferrer" target="_blank" href="https://www.keepersecurity.com/resources/insight-report-identity-security-at-machine-speed/">Identity Security at Machine Speed</a></li></ul>

To learn more about Keeper Security, visit: <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/keeperbh">https://securityweekly.com/keeperbh</a>

<p>To learn more about Keeper Security, visit: <a rel="noopener noreferrer" target="_blank" href="https://securityweekly.com/keeperbh">https://securityweekly.com/keeperbh</a></p>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”15204″} podcast from PPWorks

Security Operations

AI benefits/risks

Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478

phishing_AdobeStock_525427771

Researchers identify AliExpress-themed phishing campaign using disposable domains

Incoming call from Scammer. Online scam on phone

Phishing

Related Videos

Threat predictions for 2024: Chained AI and CaaS operations give attackers more ‘easy’ buttons than ever

Retailers face rising cyber threats, with 87% experiencing incidents

Vietnamese national charged in $16 million cryptocurrency pig butchering scam

QR code vulnerability allows attackers to hijack branded domains

Google ads deliver sophisticated tech support scam targeting Windows and Mac users

Measuring the Value of SecOps; BH Interviews with Fortra, Helmet, Above, & Keeper – Christopher Crowley, Josh Davies, Kaushik Shanadi, Tricia Howard, Darren Guccione – ESW #478

Researchers identify AliExpress-themed phishing campaign using disposable domains

Scammers impersonating police and government officials have stolen $1.6 billion

Lookout launches social engineering protection for mobile devices

Fast Five

Selected by the SC Media Editorial team every Tuesday.