In our age of digital transformation, everything is moving to the cloud, including the management of devices, users and applications. The Infoblox ThreatTalk podcast brings you the latest thinking on how to tap the full potential of the cloud while making the most of your existing network security solutions. In each episode, leading cybersecurity experts share insights and practical advice on how to raise network security and automation to the next level across diverse on-premises, virtual a ...
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Good, the Bad, and the Cybersecurity AI to Sort It All Out
30:30
30:30
Play later
Play later
Lists
Like
Liked
30:30
From $400 toasters to robotics, AI seems to be showing up everywhere. But between doomsday predictions and the promises of a utopian future, what is a more realistic assessment of how AI can fit into the world of cybersecurity? Join us for a down-to-earth discussion with guests Karthik Haridoss and David Seeman, who are at the forefront of efforts …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Meet the Authors: Abusing DNS as Transport
28:53
28:53
Play later
Play later
Lists
Like
Liked
28:53
From deploying dropper files and other malware, to stealing data, or for all the communications that modern attacks use in between, threat actors are increasingly using DNS as a transport that bypasses most defenses. Join us as we examine the good, the bad, and the grey areas of DNS as a transport in this final episode of our 3-part series with Jos…
…
continue reading
Join us as we look at the powerful, proactive security value of takedown services. In addition to adding a highly proactive security layer, they may be your only option for addressing threats targeting your customers by impersonating your brand and destroying customer trust. Takedown veterans Gary Brewer and Chris Sills join us to clear the air on …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Meet the Authors: Countering Redirection and Misdirection with DNS
30:33
30:33
Play later
Play later
Lists
Like
Liked
30:33
Magicians are masters of redirection and misdirection, but these are also powerful elements in modern cyberattacks. Join us as we dive into these cyberthreat TTPs in this second of three episodes with authors Josh Kuo and Ross Gibson, who discuss this as one of the five areas of DNS abuse in their new security book, “The Hidden Potential of DNS in …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Outsourcing Teaming, Testing, and Trust with Third Parties
22:49
22:49
Play later
Play later
Lists
Like
Liked
22:49
A few months back, ThreatTalk guest Amit Singh helped us consider some of the reasons a recent SANS 2022 SOC Survey showed so many organizations turning to ‘outsourcing’ to bolster their SOC capabilities. His Australian/New Zealand cybersecurity company, 3columns, has loaned him to us again to help us drill down into the pros and cons of outsourced…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Meet the Authors: DNS Insecurity, or DNS in Security?
29:01
29:01
Play later
Play later
Lists
Like
Liked
29:01
Is your DNS a security risk, or are you taking advantage of its strengths as a security tool? In this episode of ThreatTalk, we talk with Josh Kuo and Ross Gibson about their new security book titled “The Hidden Potential of DNS in Security.” The first of a 3-part series, we will discuss highlights from the book and the use cases that drove them to…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Overkill or ‘Just Right’? The Cybersecurity Role of Service Providers
29:20
29:20
Play later
Play later
Lists
Like
Liked
29:20
Service Providers are pitching a growing range of options, to businesses of all sizes, in a world where cybersecurity has become so complex and resource intensive that no one can do it all on their own. Guest David Ayers, a veteran of the service provider space, will help us kick off a new series on service providers beginning with a review of wher…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Care and Feeding of an Effective Threat Intelligence System
30:48
30:48
Play later
Play later
Lists
Like
Liked
30:48
From world cup soccer to horse racing, the slightest mistake can turn a winning ‘favorite’ into a loser. The same can be true for the various sources of threat intelligence that can make, or break, the effectiveness of our security tools. Join host Bob Hansmann and his guests, threat intelligence and analytics experts Druce MacFarlane and Karthik H…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Security Outsourcing: Why, When and How to Make it Work
23:34
23:34
Play later
Play later
Lists
Like
Liked
23:34
In the recent SANS 2022 SOC Survey, a lot of organizations reported that they used ‘outsourcing’ to bolster a wide variety of their SOC functions. To understand the value of outsourcing, and tips on how to ensure a successful outsourced engagement better, ThreatTalk has invited back guest Amit Sing, the Technical Director for Australian/New Zealand…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The community has spoken: Top Topics of Q2’ 23
29:41
29:41
Play later
Play later
Lists
Like
Liked
29:41
What were the hottest security topics discussed in the Infoblox security community during Q2 of 2023? Host Bob Hansmann is joined by Infoblox community manager Sunil Amanna, and VP of Product Management Craig Sanderson, to review the topics behind some of the quarter’s more active discussions among your peers about cybersecurity. Tune in to the liv…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Center Stage: Persistent Infrastructure Threat Actors
29:47
29:47
Play later
Play later
Lists
Like
Liked
29:47
While it is easy to get distracted by the ‘threat of the day’, there are those of us actively hunting instead for the infrastructures that drive and support those kinds of attacks before they are launched, so you can be prepared for the ‘threat of tomorrow’. Renée Burton, Head of Threat Intelligence for Infoblox, presented on this at the recent RSA…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Meet the Author: Bill Brenner on the 2023 Global State of Cybersecurity Study
30:09
30:09
Play later
Play later
Lists
Like
Liked
30:09
While business line execs can get distracted by the latest media cyberthreat hype, effective security professionals stay on top of data-based security research and studies to constantly evolve their security programs. Tune into our latest podcast where we have invited Bill Brenner from the CyberRisk Alliance to discuss their 2023 Global State of Cy…
…
continue reading
Infoblox is excited to present season 4 of the ThreatTalk podcast series. This season, we are looking forward to featuring external guests as well as the industry experts within Infoblox. Join us every 1st and 3rd Tuesday of the month at 11:00 am (PST) for engaging conversations with cybersecurity experts.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Get FREE 3rd Party Help to Combat Your Cybersecurity Skill Shortage
28:09
28:09
Play later
Play later
Lists
Like
Liked
28:09
From how to get the most out of a specific tool, to general best practices, there is always a lot to learn and a lot to stay on top of for a security professional, and there are limits to how much any single team will know. In this episode, the community manager for Infoblox, Sunil Amanna, joins us on ThreatTalk to talk about the value of online co…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Show Me the Value: Understanding the Security Channel Landscape
21:37
21:37
Play later
Play later
Lists
Like
Liked
21:37
From storefronts and online box pushers to consultants and outsourcers, the channel partner landscape for cybersecurity continues to evolve. In this episode of ThreatTalk, guest Amit Sing, the Technical Director for Australian/New Zealand cybersecurity company 3columns, helps us break down the partner landscape, understand how to identify relations…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Are There Smarter Ways to Gather and Apply Threat Intelligence?
33:25
33:25
Play later
Play later
Lists
Like
Liked
33:25
Everyone talks about threat intelligence as if it was a ‘thing’ you need. But detection, investigation, response, and other security functions will require unique blends of threat intelligence from multiple sources to be effective. And the ‘best’ blend can vary greatly from one organization to another. So how do you identify the right blend of feed…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
A SANS Author Interview: A DNS Security Architecture as a SecOps Force Multiplier
32:24
32:24
Play later
Play later
Lists
Like
Liked
32:24
Leveraging your DNS architecture can be a much more effective and efficient approach to securing critical business services than relying on DNS security features in a firewall or web gateway. This episode of ThreatTalk will review a new SANS paper on this topic with author John Pescatore, SANS Director of Emerging Security Trends and guest Cricket …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Part 2 | Eliminating Blind Spots: A Forrester Report on 20-20 Visibility
32:18
32:18
Play later
Play later
Lists
Like
Liked
32:18
In a world where most security tools are ‘user-centric’, devices like switches, printers, BYOD, ICS, IoT and more represent a blind spot that is being actively exploited by attackers. In this episode of ThreatTalk, we’ve invited back network guru Bob Rose to discuss a recent report from Forrester Research to understand how big this problem is and h…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Eliminating Blind Spots: A Forrester Report on 20-20 Visibility
30:38
30:38
Play later
Play later
Lists
Like
Liked
30:38
In a world where most security tools are ‘user-centric’, devices like switches, printers, BYOD, ICS, IoT and more represent a blind spot that is being actively exploited by attackers. In this episode of ThreatTalk, we’ve invited back network guru Bob Rose to discuss a recent report from Forrester Research to understand how big this problem is and h…
…
continue reading
Shadow IT once conjured strong draconian responses from IT and security teams alike to prevent potential security and management nightmares. But in a world dominated by agility, hybrid work, and fast-moving technology, this approach has become unsustainable. Our guest, David Seeman, product manager at Infoblox, helps us understand how organizations…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Re:Bots in Disguise-Detecting Cyberthreat Camouflage
31:04
31:04
Play later
Play later
Lists
Like
Liked
31:04
Threat Actors are also incredible makeup artists. To penetrate defenses, both human and technological, they have a suitcase full of tools to make any threat look innocent and even desirable. Guest Druce MacFarlane, Sr. Product Manager for Threat Intelligence at Infoblox joins us to talk about the current state of threat camouflage, and some of the …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Losing Sleep over Security: A Halloween Review
31:54
31:54
Play later
Play later
Lists
Like
Liked
31:54
There is no shortage of “Scary Stories” for Halloween or Cybersecurity Awareness month this year. But a lot of them, despite the media hype, won’t cause most security professionals to lose any sleep. But others might. So we’ve invited back Ed Hunter, the CISO for Infoblox, to talk about the last year and what threats, trends or technologies landed …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Managing Risk While Getting Closer to the Network Edge
27:45
27:45
Play later
Play later
Lists
Like
Liked
27:45
The shift to the network edge is transforming the work environment but there is so much information about it, including some confusing marketing messaging, that many are unclear about why it matters, what it costs, and how they should go about assessing and altering their own operations. The Sr. PMM for cloud-managed core networking solutions at In…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Paying for Protection: What is the Performance Cost of Security?
30:21
30:21
Play later
Play later
Lists
Like
Liked
30:21
It is easy to find headline stories of a breach that can be traced to poor security investments and practices. But such stories will continue to appear as many in management persist in restricting security investments. They often cite worker productivity, or even employee satisfaction, as factors. How can SecOps balance the needs for both productiv…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
A Researchers Story: Uncovering the Omnatour Malvertising Network
31:48
31:48
Play later
Play later
Lists
Like
Liked
31:48
To deliver malware, threat actors depend on techniques like phishing and malvertising, but malvertising doesn’t get as much visibility. To address this imbalance, we’ve invited Chance Tudor, an official “Threat Hunter” in the Infoblox threat research group, to talk about his recent work uncovering the Omnatour Malvertising network, an unusually lar…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Putting Threat Intelligence Labs Under the Microscope
29:56
29:56
Play later
Play later
Lists
Like
Liked
29:56
In previous episodes, we’ve discussed the broad array of threat intelligence (TI) available and how important it is to get the right blend of TI. But where does it all come from? Renee Burton is the Sr. Director of Threat Intelligence for Infoblox and her teams, produce or curate dozens of threat feeds of different types, so we’ve asked her to help…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Decisions, Decisions: Vulnerable, Exploitable, Patchable or Possibly Ignorable?
30:04
30:04
Play later
Play later
Lists
Like
Liked
30:04
Vulnerabilities. The breadth of products impacted is growing, while our options for dealing with them are shrinking. For example, the luxury of having months to test patches in labs before deployment has, in many cases, completely disappeared. So, we have asked the SecOps Manager for Infoblox, Anthony Ciarochi, to be our guest for this episode of T…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Summer Revival: Sharing Responsibility Between IT and End Users
31:45
31:45
Play later
Play later
Lists
Like
Liked
31:45
Since we are in the dog days of summer, we have decided to celebrate the hot weather by reviving our hottest episode from Season 2! In this episode of ThreatTalk, Infoblox CIO Brad Bell and Infoblox CISO Ed Hunter join host Bob Hansmann in an exciting and relevant discussion. We will explore the threats, defenses, and pros & cons of user awareness …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Solving Hidden SecOps Vulnerabilities with Network Discovery
31:14
31:14
Play later
Play later
Lists
Like
Liked
31:14
The SecOps benefits from device visibility is limited if that data is incomplete. Depending on DHCP alone can leave gaps in missed devices and partial data. Rogue DHCP, rogue devices, and more present risks that SecOps cannot ignore. This episode of threat talk will focus on how to fill in these gaps with the help of Bob Rose, our resident expert o…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
On Top of Everything Else - Why DNS for Security
30:00
30:00
Play later
Play later
Lists
Like
Liked
30:00
In the beginning… there was a desktop AV and a firewall. Today, security teams manage scores of security tools from dozens of vendors. With interest in DNS security growing significantly over the last few years, we need to ask why you would want to invest in it, what would DNS security do to the rest of the security stack, and how would it impact S…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
An Author Interview: 2022 Global State of Security Report
31:28
31:28
Play later
Play later
Lists
Like
Liked
31:28
ThreatTalk guest Bill Brenner of the CyberRisk Alliance (CRA) joins us to discuss a recent global security survey they conducted on behalf of Infoblox. We’ll go over and beyond survey results to better understand how they plan to address current security concerns, investment issues, preferred methodologies, and more. Tune in to the live broadcast o…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Gaining Enlightenment Through Dark Reading
29:58
29:58
Play later
Play later
Lists
Like
Liked
29:58
Dark Reading magazine recently published a series of articles on DNS, shining a light on one of the most overlooked areas of cybersecurity despite the role of DNS at the foundation of modern communications. We’ve invited Krupa Srivatsan, a Director in the Infoblox security products team, to share her favorite highlights from this 17 page, in depth …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
A Security Ecosystem Diet for Healthier Risk Levels
31:01
31:01
Play later
Play later
Lists
Like
Liked
31:01
Have you figured out a recipe for blending your security solutions into a satisfying ecosystem that optimizes your SecOps while lowering overall risk levels? If not, join us and our guest Pallavi Singh, an Infoblox lead on security integrations for everything from endpoints to cloud services, as we go beyond the hype and drill into ecosystem pros a…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Is Network Metadata the New Meta for Security?
29:29
29:29
Play later
Play later
Lists
Like
Liked
29:29
Security teams have always depended on network and login data to help connect events to users and devices. But is there more to be found in that raw data? What about the metadata being made available on modern hybrid and distributed networks? We’ve invited veteran networking guru Bob Rose to join us to take a deeper look at ‘metadata’, and the hidd…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Did You Fall For April Fools 2.0 | Trends In Phishing
30:44
30:44
Play later
Play later
Lists
Like
Liked
30:44
April first is a day full of mostly harmless pranks and hijinks; but what about cyber threats that are fooling your users year-round? Join Bob Hansmann and guest Druce MacFarlane, Sr. Product Manager for Threat Intelligence at Infoblox for our annual discussion on the current state of phishing, lookalikes, social engineering, BECs and other evasion…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Examining the State of Nation-state Cyberattacks
34:42
34:42
Play later
Play later
Lists
Like
Liked
34:42
Nation-state threats are nothing new but, considering cyberactivity linked to the current crisis in Ukraine, we need to update our understanding of nation-state cyber threat potential, and the security strategies necessary to address them. Join host Bob Hansmann and his guests Ed Hunter, CISO for Infoblox, and Anthony Ciarochi, SecOps Manager for I…
…
continue reading
How long would it take your defenses to detect an intruder? Average breach dwell-time estimates range from 24 days to almost a year. So, unless your organization’s acceptable dwell-time falls in that range, we’ve invited Gary Cox to talk about dwell-time and how to reduce it based on his extensive IT and security work throughout Europe. Tune in to …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Emails That Say “ILOVEYOU”: Lessons Learned from the Love Bug Virus
30:49
30:49
Play later
Play later
Lists
Like
Liked
30:49
The “I Love You” virus was the first major, global cyberattack of the millennium, setting records for damage and speed of dissemination. So we’ve invited Infoblox Security Operations Manager Anthony Ciarochi to discuss the evolution of email into the #1 attack vector, and how defenders have adapted to deal with it. Tune in to the live broadcast on …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Is Cloud just a networking dream and Hybrid the reality?
30:39
30:39
Play later
Play later
Lists
Like
Liked
30:39
Everyone talks about moving to the cloud and dreams of one day turning the data center into a VR gaming room. (For team-building exercises, certainly.) But, after several years of the ‘moving to cloud’, the world seems to be stuck in a Hybrid state. So this week’s ThreatTalk invites Vincent Berk, Author at Riverbed Blog, to help us look at the netw…
…
continue reading
The story around the Log4J vulnerability has been told and retold by countless security publications and vendors. Join us on January 18 as guests Renee Burton and Druce MacFarlane take us behindthe scenes to understand the threat posed by vulnerabilities, the threat actors exploiting them, andhow researchers work to counter those threats. Tune in t…
…
continue reading
Infoblox is excited to present season 3 of the ThreatTalk podcast series. This season, we are looking forward to featuring external guests as well as the industry experts within Infoblox. Join us every 1st and 3rd Tuesday of the month at 11:00 am (PST) for engaging conversations with cybersecurity experts.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Does Security Automation Need To SOAR, Or Just Fly?
30:28
30:28
Play later
Play later
Lists
Like
Liked
30:28
From writing a few scripts using APIs, to full-fledge SOAR solutions, automation is getting a serious look from those who are seeing little success from throwing bodies at security problems. But choosing the right automation approach is a tough decision that demands a solid understanding of each option, what it can deliver, and what it will cost in…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Discovering Visibility You Didn't Know You Had or Even Needed
31:03
31:03
Play later
Play later
Lists
Like
Liked
31:03
Zero Trust Networking is typically discussed in the context of users or devices connecting to the network. But what about the devices that are already there? Security monitoring needs to include all aspects of the network, as well as the devices and users connected to it. Check out this week’s ThreatTalk podcast with host Bob Hansmann and his guest…
…
continue reading
Smart City development is accelerating and even expanding in response to the new world realities of how citizens access services. But solutions to make municipal services easier to access and consume require greater attention to the inherent security of those solutions and the connective foundation they operate on. Over the last year, vulnerability…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Defending the Endpoint: Sharing Responsibility Between IT and End Users
31:45
31:45
Play later
Play later
Lists
Like
Liked
31:45
October is Cybersecurity Awareness month, which puts a spotlight on end-user knowledge and application of practices such as using strong passwords, MFA, and the ability to spot phishing scams. But what is the actual role of the end-user in the overall pursuit of cybersecurity? Where do IT tools and processes end, and where must the end-user take on…
…
continue reading
30 years ago, cyber security involved little more than firewalls and desktop AV. But today's security tools, expertise, and services are so numerous and complex that few if any, organizations can claim to have everything they need 'in-house'. Due to various needs and constraints, including budgets, it is a constant struggle to balance what capabili…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Do you know who or what is on your network? - Part 2!
30:04
30:04
Play later
Play later
Lists
Like
Liked
30:04
On the heels of our last podcast on the need for greater synergy between networking and security technologies, the recent T-Mobile cyberattack has been linked to an unsecured router as the original point of entry. So we are bringing back Bob Rose, a veteran network technologies expert and a former product manager for AT&T's Enterprise Mobility Mana…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Do you know who or what is on your network?
29:25
29:25
Play later
Play later
Lists
Like
Liked
29:25
Call it 'context,' 'metadata,' or just 'data,' but security teams need lots of it to defend, investigate, and respond more effectively. This episode goes beyond user names and IP addresses to understand the network data that is often overlooked and underutilized. We will talk about how this is sacrificing potential value to strengthen defenses, spe…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Q2 Threat Roundup: Rising Ransoms and Vanishing Villains
35:01
35:01
Play later
Play later
Lists
Like
Liked
35:01
A lot has changed on the ransomware landscape in just the last month, with three headline-grabbing breaches and a disappearing act by two of the largest black-market dealers of ransomware tools and services. Join us on ThreatTalk for the return of Michael Zuckerman, consulting senior product marketing manager and author/editor of the ‘Q2 2021 Cyber…
…
continue reading