The Security Ledger

Episode 164: Who owns the Data Smart Cars collect? Also: making Passwords work.

In this episode of Security Ledger Podcast (#164): your car is spying on you. But who owns the data it collects? Also: LastPass’s Dan DeMichele joins us to talk about why password security is still so hard. Related StoriesEpisode 163: Cyber Risk has a Dunning-Kruger Problem Also: Bad Password Habits start at HomeExplained: Two-Factor vs. Multi-Factor AuthenticationPodcast Episode 150: Microsoft’s Tanya Janca on securing Azure and Armor Scientific’s CTO on Life after Passwords …

Episode 163: Cyber Risk has a Dunning-Kruger Problem also: Bad Password Habits start at Home

Michael York Reading, PA

In this episode of Security Ledger Podcast (#163) sponsored by LastPass: companies are spending more than ever on cyber security, but feel less secure. Why? Kevin Richards of the insurer Marsh joins us to talk about that company’s Cyber Risk Perceptions Survey. Also Yaser Masoudnia of LastPass* joins us to talk about the blurry line between…Read the whole entry… » Related StoriesExplained: Two-Factor vs. Multi-Factor AuthenticationRSA warns Digital Transformation is supercharging Digital RiskEpisode 149: How Real is the Huawei Risk? …

Explained: Two-Factor vs. Multi-Factor Authentication

Michael York Reading, PA

It may seem like two-factor authentication and multi-factor authentication are the same. They’re not, explains Yaser Masoudnia, the Senior Director of Product Management at LastPass.* Related StoriesEpisode 162: Have We missed Electric Grid Cyber Attacks for Years? Also: Breaking Bad Security HabitsPodcast Episode 150: Microsoft’s Tanya Janca on securing Azure and Armor Scientific’s CTO on Life after PasswordsRSA warns Digital Transformation is supercharging Digital Risk …

Spotlight Podcast: Breaking Bad Password Habits to Fight Advanced Threats

Michael York Reading, PA

In this Spotlight edition of the Security Ledger podcast, Rachel Stockton of LastPass * joins us to discuss the myriad of challenges facing companies trying to secure users’ online activities, and simple solutions for busting insecure user behaviors to address threats like phishing, account takeover and more. Related StoriesEpisode 162: Have We missed Electric Grid Cyber Attacks for Years? Also: Breaking Bad Security HabitsSpotlight Podcast: Security Automation is (and isn’t) the Future of InfosecSpotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy …

Episode 162: Have We missed Electric Grid Cyber Attacks for Years? Also: Breaking Bad Security Habits

Michael York Reading, PA

In this episode of the podcast #162: according to the non profit that oversees it, the first disruptive hack of the U.S. grid happened in March of this year. Our guest, Joe Weiss, said it really happened more than a decade ago and that hundreds more like it have been overlooked or mis-classified. Also: Rachel Stockton of the firm LastPass* joins…Read the whole entry… » Related StoriesSpotlight Podcast: Security Automation is (and isn’t) the Future of InfosecEpisode 159: Deep Fakes and Election (in)Security with ZeroFOXSpotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy …

RSA warns Digital Transformation is supercharging Digital Risk

Michael York Reading, PA

“Digital transformation” is the buzz word du jour in industry. But executives at RSA Security warn that it is also magnifying digital risk in ways that are easy to miss.Related StoriesThird Party Cyber Risk is growing. Most Companies aren’t prepared.Spotlight Podcast: Rethinking Your Third Party Cyber Risk StrategyHuge Survey of Firmware Finds No Security Gains in 15 Years …

Spotlight Podcast: Security Automation is (and isn’t) the Future of Infosec

Michael York Reading, PA

In this Spotlight Podcast, we speak with David Brumley, the Chief Executive Officer at the security firm ForAllSecure and an expert on the use of machine learning and automation to cyber security problems. We talk about the growing demand for security automation tools and how the chronic cyber security talent shortage in North America and…Read the whole entry… » Related StoriesSpotlight Podcast: Rethinking Your Third Party Cyber Risk StrategyEpisode 159: Deep Fakes and Election (in)Security with ZeroFOXEpisode 160 Right to Repair’s Summer of Love – Sort of. …

Digital Right to Repair Movement seeks Allies at DEF CON

Michael York Reading, PA

A grass roots movement to win a legal right to repair digital devices arrived at DEF CON in Las Vegas on Saturday with a message for an estimated 30,000 attendees: ‘fight for repair.’Related StoriesEpisode 160 Right to Repair’s Summer of Love – Sort of.Episode 159: Deep Fakes and Election (in)Security with ZeroFOXSpotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy …

Huge Survey of Firmware Finds No Security Gains in 15 Years

Michael York Reading, PA

A survey of more than 6,000 firmware images spanning more than a decade finds no improvement in firmware security and lax security standards for the software running connected devices by Linksys, NETGEAR and other major vendors.Related StoriesCritical Flaws in VxWorks affect 200 Million Connected ThingsOpinion: We need a way to talk about Cyber Physical RiskEpisode 157: Do we need an FDA for Software? Also: operationalizing Threat Intelligence …

Episode 157: Do we need an FDA for Software? Also: operationalizing Threat Intelligence

Michael York Reading, PA

Sarah Zatko of the Cyber Independent Testing Lab joins us to talk about CITL’s big new study of firmware security. In our second segment, we’re joined by Allan Thomson who is the Chief Technology Officer at LookingGlass Cyber Solutions to talk about the growing use of cyber threat intelligence and the need to evolve cybersecurity practices to…Read the whole entry… » Related StoriesSpotlight Podcast: Unpacking Black Hat Hacks with Digicert CTO Dan TimpsonEpisode 156: Looming over Black Hat: doing Security at Massive ScaleHuge Survey of Firmware Finds No Security Gains in 15 Years …

Episode 158: How NotPetya has Insurers grappling with Systemic Cyber Risk

Michael York Reading, PA

We talk to Bruce McDonnell of the East West Institute about how insurers are responding. Related StoriesSpotlight Podcast: Rethinking Your Third Party Cyber Risk StrategyThird Party Cyber Risk is growing. Most Companies aren’t prepared.Episode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile Malware …

Episode 159: Deep Fakes and Election (in)Security with ZeroFOX

Michael York Reading, PA

In this weeks podcast, we delve into the myriad challenges to election security with Sam Small, the Chief Security Officer at the firm ZeroFOX Related StoriesEpisode 160 Right to Repair’s Summer of Love – Sort of.Spotlight Podcast: Rethinking Your Third Party Cyber Risk StrategyEpisode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile Malware …

Episode 160 Right to Repair’s Summer of Love – Sort of.

Michael York Reading, PA

call it Right to Repair’s “Summer of Love.” Summer 2019 saw developments on a number of fronts in the nation-wide battle to win a digital right to repair. In this podcast, we talk with Nathan Proctor of US PIRG’s Right to Repair campaign and Kyle Wiens of iFixit about the developments. Related StoriesDigital Right to Repair Movement seeks Allies at DEF CONEpisode 159: Deep Fakes and Election (in)Security with ZeroFOXSpotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy …

Spotlight Podcast: Rethinking Your Third Party Cyber Risk Strategy

Michael York Reading, PA

Third party cyber risk is growing. Despite that, most companies are unprepared to address it in a systematic way. In this Spotlight Podcast, a companion to our new eBook, Rethinking Third Party Cyber Risk Management, we go deep on the topic of building a mature third party cyber risk program with Dave Stapleton the Director of Assessment…Read the whole entry… » Related StoriesThird Party Cyber Risk is growing. Most Companies aren’t prepared.Episode 158: How NotPetya has Insurers grappling with Systemic Cyber RiskEpisode 159: Deep Fakes and Election (in)Security with ZeroFOX …

Third Party Cyber Risk is growing. Most Companies aren’t prepared.

Michael York Reading, PA

Third party cyber risk is a growing concern for organizations, as breaches and hacks tied to third party providers and applications multiply. How do you know if your third party cyber risk management program is up to the task? Our new e-book, sponsored by CyberGRX, will help you figure it out! Related StoriesPodcast Episode 141: Massive Data Breaches Just Keep Happening. We Talk about Why.Cognitive Bias is the Threat Actor you may never detectHuge Survey of Firmware Finds No Security Gains in 15 Years …

Episode 161: 3 Years after Mirai, IoT DDoS Problem may get Worse

Michael York Reading, PA

Three years after the Mirai botnet launched some of the biggest denial of service attacks ever seen, DDoS is a bigger problem and ever. Even worse: we stand on the made up of webcams and other Internet of things as technologies like 5G bring greater bandwidth to connected endpoints. In this podcast, we speak with Hardik Modi, the senior director…Read the whole entry… » Related StoriesKaspersky: Attacks on Smart Devices Rise Threefold in 2018Episode 155: Disinformation is a Cyber Weapon and APTs warm to Mobile MalwareSpotlight Podcast: Unpacking Black Hat Hacks with Digicert CTO Dan Timpson …

1 2 3 4 5 >»