10-13-20 - A Phish So Insidious You Can't Help But Be Jealous

View this email in your browser

This week's episode of CISO/Security Vendor Relationship Podcast

A Phish So Insidious You Can't Help But Be Jealous

This week's episode

is hosted by me, David Spark, producer of CISO Series and Mike Johnson. Our guest this week is Matt Crouse, CISO, Taco Bell. All three of us discussed:

The most impressive phishes add legitimate-looking elements.

We discussed phishing attacks that were so good there's no way we wouldn't fall for them. When a phish can insert themselves within the natural communications or application environment it makes them almost impossible to detect. They can operate within the existing conversation or development flow. Many of the problems with an unstoppable phish can actually be stopped with well-deployed multi-factor authentication.

Security is also about limiting impact.

We debated the legitimacy of a study that claimed almost all organizations suffered an annual business impacting cyberattack. Whether it's true or not, fundamental security steps are key to minimizing the blast radius when a cyberattack eventually happens. 

Check out the "How Do I Get Into Cybersecurity" wiki.

We get the "How do I get started in cybersecurity?' question all the time. A great first stop is the 

wiki on the cybersecurity subreddit that answers that question

perfectly with a great list of free courses and sources of information. This very podcast is mentioned as one of those great resources.

Special thanks to this week's podcast sponsor, CloudKnox.

CloudKnox Security

is the market leader within Gartner’s newly defined Cloud Infrastructure Entitlement Management (CIEM) segment. CloudKnox transforms how organizations implement the principle of least privilege in the cloud and empowers security teams to proactively address accidental and malicious credential misuse by continuously detecting and mitigating insider risks.

Cyber Security Headlines

This week's sponsor of

Cyber Security Headlines

is Trusona.

THIS Friday [10-16-20] We're Hacking Privileged Identities Gone Bad

Please join us on Friday, October 16th, 2020 for CISO Series Video Chat “Hacking Privileged Identities Gone Bad: An hour of critical thinking about accidental and malicious behavior from humans and machines causing havoc in the cloud”.I'll be leading this discussion with Raj Mallempati, COO of CloudKnox and Dan Walsh, CISO, VillageMD.Watch the preview video.

REGISTER

Plus, immediately after the video chat (11:00 AM PT/2:00 PM ET) we'll rollover to our meetup where you get a chance to connect with fellow cybersecurity professionals.

Thanks to our sponsor CloudKnox

Subscribe to all our podcasts

Click any of the podcasts below to get access to the subscription feeds. If you're already a subscriber, thank you!