Yuck! Now Everyone Has Touched My Data

Yuck! Now Everyone Has Touched My Data

July 26, 2022

CISO Series

  • On this week's episode of CISO Series Podcast we ask what issues should we be discussing more of when it comes to protecting data in the supply chain?

  • Cyber Security Headlines you need to know include DOJ approving Google's Mandiant acquisition, T-Mobile to pay $500 million for data breach, and Quantum security bill hits the senate floor.

  • And please join us for this week's Super Cyber Friday "Hacking Current Events."

CISO Series Podcast

Yuck! Now Everyone Has Touched My Data

Yuck! Now Everyone Has Touched My Data

Andy Ellis, operating partner, YL Ventures and I welcome sponsored guest  is Elliot Lewis, CEO, Keyavi to discuss:

  • Can the US government, through regulation, shift the tide of never-ending cybersecurity failures?

  • Your network was just hit with ransomware. What do you do in your environment?

  • What should we be discussing more of when it comes to protecting data in the supply chain?

  • What's the biggest security flaw you've seen in every environment you've ever worked?

Thanks to our podcast sponsor, Keyavi

Keyavi

Best advice for a CISO

"When you’re going into the board of directors meetings and reporting on the situation to the company, you need to answer three basic questions. First, are we secure, and how do you know. Two, are you going to be secure based on the business plans that have people in this room, and how do you know. And three, do you have enough time, money, and resource to accomplish those goals, and how do you know." --Elliot Lewis, CEO, Keyavi

Listen to full episode of

Can't listen at the moment?

We have full transcripts of all our podcast episodes. Plus, on your podcast player, we have chapter markers for all the segments. Read the transcripts or skip to your favorite segment.

Check out:

 on

CISO Series Podcast

 on

Defense in Depth

Overheard on Defense in Depth 

"If an organization is aware of an attack, it’ll act quickly and it’ll act with urgency. But most of the time, a security program is dealing with a steady accumulation of vulnerabilities, loose access permissions, misconfigurations, missing controls, and all of that stuff which we’re familiar with, all of which are increasing the temperature of the water. And the problem in security is right now we’re not very good at measuring the water temperature, and we’re not very good at agreeing with the business on what temperature is kind of the range where with a little bit of attack of heat, we’re going to get frog death." --Simon Goldsmith, director of information security, OVO Energy

Listen to full episode of

Cyber Security Headlines 

Top headlines for Tuesday, July 25, 2022:

  • DOJ approves Google's Mandiant acquisition

  • T-Mobile to pay $500 million for data breach

  • Quantum security bill hits the senate

to this episode.

or subscribe to the daily newsletter.

Join the LIVE "Week In Review" for

Cyber Security Headlines

this and every Friday at 3:30 PM ET/12:30 PM PT for a short 20-minute discussion of the week's cyber news. You can participate live in the conversation by registering

.

or subscribe to the daily newsletter.

Thanks to our Cyber Security Headlines sponsor, Synk

Snyk

Super Cyber Fridays!

Why Current Events Can and Will Affect Your Security Posture

Hacking Current Events

Even though it may not be important to you right now, what’s happening in the news is important to someone or some nation. Therefore, you can be caught up in issues that are currently relevant. In this video, Casey Ellis, founder and CTO, Bugcrowd and I talk about the different ways that current events can affect your security. Situations such as:

  • The current news is referenced in a phishing attempt

  • Your computer is compromised for a botnet attack

  • Your business is some part of critical infrastructure that is of interest to a nation state

  • Or, an organization needs to raise money so they deploy ransomware

This video is just a tease for a longer discussion we’re going to have on this very subject for our Super Cyber Friday event on Friday, July 29th, 2022. Our topic of discussion will be “Hacking Current Events: An hour of critical thinking about how what’s happening in the world can and will affect your security program.”Joining me and Case for this discussion will be Katie Paxton-Fear, lecturer in cybersecurity, Manchester Metropolitan University.

Thanks to our Super Cyber Friday sponsor, Bugcrowd

Bugcrowd