Advertise on podcast: Ping - A Firewalls.com Podcast

Multifactor authentication (MFA) is fast becoming a requirement for a secure business network. Not only that, it's becoming a requirement for a business to qualify for the added protection of cyber insurance. WatchGuard Technologies Director of Authentication Alexandre Cagnoni takes us through why multi-factor authentication is so important in the current cyber threat landscape for businesses of all sizes. He also explains why cyber insurers consider it vital. And then, he shares how WatchGuard AuthPoint makes implementing MFA simple for the organization and its employees. Hint: There's an app for that. Read a recent article on the subject by Alexandre here: https://www.securityinfowatch.com/cybersecurity/information-security/breach-detection/article/21229613/how-hackers-bypass-mfa-and-ways-to-stop-them. And find WatchGuard AuthPoint here: https://www.firewalls.com/brands/watchguard/cloud-security/watchguard-authpoint.html. In headlines, we discuss a Robinhood data theft, a discovery of breaches across key sectors, and an international ransomware bust. See the stories: Robinhood security breach compromised data of 7 million users https://www.engadget.com/robinhood-users-compromised-security-breach-063802932.html  Hackers have breached organizations in defense and other sensitive sectors, security firm says https://www.cnn.com/2021/11/07/politics/hackers-defense-contractors-energy-health-care-nsa/index.html Ransomware crackdown spreads in U.S., Europe and Asia https://www.nbcnews.com/tech/security/ransomware-crackdown-spreads-us-europe-asia-rcna4829 Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!

Cybersecurity Awareness Month turns 18 this October 2021. And just like other 18-year olds, it's graduated from dealing with fairly straight-forward problems to facing complex issues. But National Cyber Security Alliance (NCSA) Interim Executive Director Lisa Plaggemier tells us, that there are a few simple steps individuals and businesses can take to Be Cyber Smart (that's also #becybersmart). Her top two: strong passwords and MFA (multifactor authentication). Lisa also discusses the origins of Cybersecurity Awareness Month, the evolution of the threat landscape, how awareness has improved, challenges in cyber careers, and much more. Find resources about the month, and general cyber awareness tips at www.staysafeonline.org. In the news, we cover a cyber awareness survey of EU businesses, and two ransomware attacks, one on TV and another on candy. Is nothing sacred? See the headlines: Deloitte surveys: businesses have a false sense of cybersecurity caused by positive self-evaluation of their capabilities and the lack of basic defense efforts https://business-review.eu/tech/online/deloitte-surveys-businesses-have-a-false-sense-of-cybersecurity-caused-by-positive-self-evaluation-of-their-capabilities-and-the-lack-of-basic-defense-efforts-224450  Hacking tool linked with Russian crime ring used in Sinclair ransomware attack, analysts say https://www.cnn.com/2021/10/20/media/sinclair-broadcast-evil-corp-ransomware/index.html Sticky business: Ransomware hits U.S. candymaker ahead of Halloween https://www.nbcnews.com/tech/security/ransomware-hits-us-candymaker-ahead-halloween-rcna3391 Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!

Ransomware infections have been rampant in recent months. But typically, we hear more about the aftermath then what leads to a successful attack. In this episode we get the other angle. Sophos VP of Managed Threat Operations Mat Gangwer shares the multi-week story of an attack, from unpatched vulnerability to execution. The responsible ransomware cell? A new name on the scene called Atom Silo. Hear how they got in, what they did when they were there, and what steps to take to avoid a similar fate. Here's the full story of this attack: https://news.sophos.com/en-us/2021/10/04/atom-silo-ransomware-actors-use-confluence-exploit-dll-side-load-for-stealthy-attack/ In the news, we cover a couple of very high profile cyber incidents - the Facebook/Instagram/Whats App outage and the Twitch breach. Plus we discuss burnout among cybersecurity pros. See the headlines: Facebook apologizes for second outage in a week, services back up https://www.reuters.com/technology/instagram-feeds-not-loading-some-users-2021-10-08/ 10 Biggest Revelations from the Unprecedented Twitch Leak https://www.inverse.com/gaming/twitch-leak-hack-data-breach-streamer-payout-earnings Your cybersecurity team will face burnout, and you need to help https://venturebeat.com/2021/10/09/your-cybersecurity-team-will-face-burnout-and-you-need-to-help/ Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!

Zero-trust is the hot term in network security in 2021.  But one reason it's so highly sought out is that many don't know exactly what it means. We called on Fortinet Senior Director of Product Marketing Peter Newton to shed some light on the subject. Peter discusses what makes a zero-trust network philosophy, what steps a company should take to plan for the shift, and what tools can make it easier. Plus, we talk about how the right zero-trust setup makes remote work both easier and more secure simultaneously. Read Peter's blog article on the subject: https://www.fortinet.com/blog/industry-trends/how-to-implement-a-zero-trust-security-strategy  In the news, we cover some REvil drama, a new finger pointing at Russia, and states' troubles filling cybersecurity jobs. See the headlines: REvil Affiliates Confirm : Leadership Were Cheating Dirtbags https://threatpost.com/revil-affiliates-leadership-cheated-ransom-payments/174972/  EU 'denounces' Russian malicious cyber activity aimed at member states  https://thehill.com/policy/cybersecurity/573867-eu-denounces-russian-malicious-cyber-activity-aimed-at-member-states  States at disadvantage in race to recruit cybersecurity pros https://apnews.com/article/business-technology-internships-0d7fc0ee18295585292b2e13b62e88f3 Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!

Many if not most workers began working from home in March of 2020, and while the numbers have shifted since, a significant portion are still doing at least some remote work. But according to a survey, neither the remote workers or their company IT staff are too happy about the cybersecurity of it all. For our featured topic this episode, we dive into the HP Wolf Rebellions & Rejections Report, which outlines security frustrations and outright rebellious behavior from work from homers, some misses on the cyber training front from employers, and some perceived scapegoating of IT staff. In the cyber news world, we discuss identity theft of condo collapse victims, a major DDoS attack in Russia, the new National Cyber Director, and an Apple IOS patch to counteract zero-click spyware.   Here are the stories: Florida 'cyber grave robbers' charged with condo collapse ID theft https://www.reuters.com/world/us/three-charged-with-stealing-identities-florida-condo-collapse-victims-2021-09-08/ Yandex Pummeled by Potent Meris DDoS Botnet https://threatpost.com/yandex-meris-botnet/169368/ Chris Inglis scopes out cyber turf https://fcw.com/articles/2021/09/09/inglis-cyber-director-turf.aspx Cyber arms dealer exploits new iPhone software vulnerability, affecting most versions, say researchers https://www.reuters.com/technology/cyber-arms-dealer-exploits-new-apple-iphone-software-vulnerability-affects-most-2021-09-13/ Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!

We previewed cyber security policy under President Biden at the beginning of 2021. But a lot of big things have happened in cybersecurity since then, making now seem a pretty good time to check in on where things stand. So we brought in an expert to help: NextGov's Mariam Baksh. Mariam tells us about the latest developments from the White House relating to cyber policy, including what may really make a difference versus what actions could just be for show. She also discusses why the NIST framework is getting a revisit, the involvement of private industry in the latest policy directions, and more.  Read more from Mariam: https://www.nextgov.com/voices/mariam-baksh/15380/. And find her on the Critical Update podcast: https://www.nextgov.com/podcasts/.  In headlines, we follow up with more from the T-Mobile data breach, talk about Apple and its privacy compromise, and discuss another ransomware cell calling it quits.    Here are the stories:   Updating the T-Mobile Data Breach Story https://www.zdnet.com/article/t-mobile-ceo-apologizes-for-massive-hack-announces-cybersecurity-deal-with-mandiant/ Apple Just Traded Your Privacy for $15 Billion https://www.inc.com/jason-aten/apple-just-traded-your-privacy-for-15-billion.html Diabolical Ransomware Gang Calls It Quits https://www.thedailybeast.com/ragnarok-diabolical-ransomware-gang-calls-it-quits Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!

While ransomware has taken center stage for several months now, bad actors aren’t resting on their laurels with existing tools. Threatpost Senior Editor Tara Seals joins us to discuss a newly discovered malware, dubbed Chaos. We talk about what it resembles, what it may do, and why you should be worried. Plus, Tara tells us why the Friends reunion special led to a spike in online fraud. Read more about Chaos: https://threatpost.com/chaos-malware-ransomware-wiper/168520/.  In headlines, we discuss a guilty plea for SIM swapping, a data breach affecting T-Mobile, and some troubling password numbers.    Here are the stories:   Hacker Pleads Guilty to SIM Swapping Attacks, Cryptocurrency Theft https://www.securityweek.com/hacker-pleads-guilty-sim-swapping-attacks-cryptocurrency-theft T-Mobile investigating claims of customer data breach https://www.reuters.com/business/media-telecom/t-mobile-investigating-claims-customer-data-breach-vice-2021-08-15/ Most employees reusing personal passwords to protect corporate data https://www.helpnetsecurity.com/2021/08/16/employees-reusing-personal-passwords/?web_view=true Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!  

Ransomware takes center stage in SonicWall's Mid-Year Update to its 2021 Cyber Threat Report. Out in late July, the report outlines just how bad the ransomware situation currently is, and Brook Chelmo joins us to take a closer look. We also discuss other highlights including positive news about malware in general and non-standard ports, as well as never before seen threat detection. Get your hands on the report here: https://www.sonicwall.com/2021-cyber-threat-report/. In headlines, we go over a controversial newish online tool, the rebirth(?) of some popular ransomware cells, and harassment in cyber careers. Here are the stories: A Controversial Tool Calls Out Thousands of Hackable Websites https://www.wired.com/story/punkspider-web-site-vulnerabilities/ BlackMatter & Haron: Evil Ransomware Newborns or Rebirths https://threatpost.com/ransomware-gangs-haron-blackmatter/168212/  One third of cybersecurity workers have faced harassment at work or online - this initiative aims to stamp it out https://www.zdnet.com/article/one-third-of-cybersecurity-workers-have-faced-harassment-at-work-or-online-this-initiative-aims-to-stamp-it-out/  Get info on all things network security through our blog, https://firewalls.com/blog. And please do reach out, as we want to hear from you. Suggest an episode topic, ask a question, or just say hi in a review, or by emailing [email protected]. New episodes are normally released every other Wednesday, so subscribe/follow to ensure you get the latest first - and again, please rate and review. Thanks for listening!

We've turned 50, as in 50 episodes old, yet cybersecurity hasn't aged a day since we started. Ok, maybe that's not true. We take a look back over our half a hundred's worth of podcasts, spotlighting some top clips, and seeing where things stand with them now. Highlights include a pre-pandemic prediction of work from home security issues, our first covid-19 Pod from Home, an update on diversity issues in cybersecurity careers, an update on ransomware relating to hospitals and beyond, and a check-in on cyber policy under President Biden. Plus we throw in a little Christmas in July clip to warm your hearts. In headlines, we discuss a scam targeting ecommerce stores involving fraudulent returns, a trove of spyware data connected to an Israeli firm, and China called out for the recent Microsoft Exchange hack. See the stories: Return Scams Jump as Fraudsters Exploit E-commerce Boom https://www.wsj.com/articles/return-scams-jump-as-fraudsters-exploit-e-commerce-boom-11626168601?mod=e2tw  Leaked NSO Group Data Hints at Widespread Pegasus Spyware Infections https://threatpost.com/nso-group-data-pegasus/167897/ U.S. and global allies blame China for widespread cybercrime, including massive Microsoft Exchange hack https://www.cbsnews.com/news/u-s-global-allies-blame-china-microsoft-exchange-hack-cybercrime/?ftag=CNM-00-10aab7e&linkId=124666975 Find the latest from us on our blog https://firewalls.com/blog.  Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns. And before we close the episode, we drop in a little thank you to all our guests on the first 50 Ping Podcast episodes. We appreciate them and you for listening!

With ransomware attacks seemingly at a fever pitch of late, the cyber insurance industry has come into stark focus as well, as some companies turn to their insurers to cover a ransom when attacked. But Cyber Research Analyst Jamie MacColl with the UK’s Royal United Services Institute (RUSI) tells us cyber insurance is more than just paying ransoms. He discusses his latest research paper, titled "Cyber Insurance and the Cyber Security Challenge," which examines the industry - including the positives and negatives of the current setup. He also tells us what could be done to improve it, from better collaboration, incentives for cyber secure clients, and better government guidance. In headlines, we discuss another major ransomware attack, this one particularly widespread, as well as some Google Play apps that stole Facebook credentials, and why #infosecbikini was trending recently. See the stories: Up to 1,500 businesses affected by ransomware attack, U.S. firm's CEO says https://www.reuters.com/technology/hackers-demand-70-million-liberate-data-held-by-companies-hit-mass-cyberattack-2021-07-05/ Google removes popular Android apps that stole Facebook passwords https://finance.yahoo.com/news/google-removes-android-apps-stealing-facebook-passwords-192721252.html?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAAGd4Ur2DMwqZlNX5MgSuYbyFBvK7IsagBsxZ5n11U53x8Gwx1-OzxxLiRRe5OkbLOI3BsmbWSbmVIDBzK2EbJVXRWpreJCUtdpoD4eh07OnCuKzjtoZ948npUAPG7OjzgfigwOsrZX1WSyoeAxmXlWEJhoX29UfPVyZ6HrzJ1YnF Cybersecurity Workers Flood Twitter With Bikini Pics to Protest Harassment https://www.vice.com/amp/en/article/7kvwgb/cybersecurity-workers-flood-twitter-with-bikini-pics-to-protest-harassment Find the latest from us on our blog https://firewalls.com/blog.  Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns. Thanks very much for listening!

The network perimeter basically no longer exists, and the latest security solutions need to account for the new normal. Aaron Chen and Shane Davis with Sophos join us to talk about how the network security landscape has changed just in the last couple of years, new business cybersecurity and connectivity priorities, and the latest Sophos products that address them, including XDR (extended detection and response) and the XGS firewall series - along with the Xstream protection included within. Learn more about Sophos https://www.firewalls.com/brands/sophos.html. In headlines, we talk US government action on cybersecurity, businesses willing to pay the ransom if attacked, and a nuclear North Korean cyber attack. See the stories: Biden Sets Red Line for Putin Over Ransomware Attacks https://www.securityweek.com/biden-sets-red-line-putin-over-ransomware-attacks Senators draft bill that would require many entities to report cyber breaches within 24 hours https://www.cnn.com/2021/06/16/politics/bill-report-cyber-breach-24-hours/index.html  60% of Businesses Would Consider Paying a Ransomware Demand https://www.infosecurity-magazine.com/news/businesses-consider-paying-ransom  North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute https://thehackernews.com/2021/06/north-korea-exploited-vpn-flaw-to-hack.html Find the latest from us on our blog https://firewalls.com/blog.  Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns. Thanks very much for listening!

Cybersecurity jobs are there for the taking, whether for prospective students or career changers willing to train, as employers desperately search for qualified staff. Dr. Marc Rogers of Purdue University joins us to talk about the shortage of cybersecurity pros in our home state of Indiana and beyond, and how a new website serves as a cyber career matchmaking tool. Dr. Rogers also discusses Purdue's Cyber Apprenticeship Program, the need for companies of all stripes to recognize their cyber exposure, and the state of cybersecurity and cyber threats today.  In cyber headlines, it's a ransomware-a-palooza... Feds recover millions from pipeline ransom hackers, hint at U.S. internet tactic https://www.nbcnews.com/tech/security/u-s-recovers-millions-pipeline-ransom-because-hackers-mistake-n1269889 REvil, A Notorious Ransomware Gang, Was Behind JBS Cyberattack, The FBI Says https://www.npr.org/2021/06/03/1002819883/revil-a-notorious-ransomware-gang-was-behind-jbs-cyberattack-the-fbi-says New Triple Extortion Tactic https://www.foxbusiness.com/technology/hackers-jbs-ransomware-new-triple-extortion-tactic  Fujifilm confirms ransomware attack https://www.securitymagazine.com/articles/95369-fujifilm-confirms-ransomware-attack Capitol Hill vendor hit by ransomware attack: report https://thehill.com/policy/cybersecurity/557272-capitol-hill-vendor-hit-by-ransomware-attack-report  The rise of cybersecurity debt https://techcrunch.com/2021/06/04/the-rise-of-cybersecurity-debt/?guccounter=1 Find the latest from us on our blog https://firewalls.com/blog.  Please drop us a rating and review wherever you listen, and feel free to email us at [email protected] with any questions/suggestions/concerns. Thanks very much for listening!