The Defender’s Advantage Podcast explores the world of cyber security and Mandiant through three distinct tracks. Threat Trends: Listen twice a month as host Luke McNamara interviews guests on the latest in cyber security research, the cyber landscape, and the latest news from Mandiant. Frontline Stories: Listen to Kerry Matre monthly as she is joined by notable guests on the frontlines of cyber security, including Mandiant customers, security professionals, and executives. Skills Gap: List ...
…
continue reading
![Artwork](/static/images/128pixel.png)
1
What Iranian Threat Actors Have Been Up To This Year
36:13
36:13
Play later
Play later
Lists
Like
Liked
36:13
Mandiant APT Researcher Ofir Rozmann joins host Luke McNamara to discuss some notable Iranian cyber espionage actors and what they have been up to in 2024. Ofir covers campaigns from suspected IRGC-nexus actors such as APT42 and APT35-related clusters, as well as activity from TEMP.Zagros. For more on this topic, please see: https://blog.google/tec…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Mandiant's Approach to Securely Using AI Solutions
32:00
32:00
Play later
Play later
Lists
Like
Liked
32:00
Mandiant Consultants Trisha Alexander, Muhammed Muneer, and Pat McCoy join host Luke McNamara to discuss Mandiant's recently launched services for securing AI. They discuss how organizations can proactively approach securing the implementation of AI workloads, red-team and test these security controls protecting generative AI models in production, …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Lessons Learned from Responding to Cloud Compromises
30:16
30:16
Play later
Play later
Lists
Like
Liked
30:16
Mandiant consultants Will Silverstone (Senior Consultant) and Omar ElAhdan (Principal Consultant) discuss their research into cloud compromise trends over 2023. They discuss living off the land techniques in the cloud, the concept of the extended cloud attack surface, how organizations can better secure their identities, third party cloud compromis…
…
continue reading
Michael Raggi (Principal Analyst, Mandiant Intelligence) joins host Luke McNamara to discuss Mandiant's research into China-nexus threat actors using proxy networks known as “ORBs” (operational relay box networks). Michael discusses the anatomy and framework Mandiant developed to map out these proxy networks, how ORB networks like SPACEHOP are leve…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Investigations Into Zero-Day Exploitation of the Ivanti Connect Secure Appliances
27:47
27:47
Play later
Play later
Lists
Like
Liked
27:47
Mandiant Principal Analysts John Wolfram and Tyler McLellan join host Luke McNamara to discuss their research in the "Cutting Edge" blog series, a series of investigations into zero-day exploitation of Ivanti appliances. John and Tyler discuss the process of analyzing the initial exploitation, and the attribution challenges that emerged following t…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
M-Trends 2024 with Mandiant Consulting Vice President Jurgen Kutscher
25:53
25:53
Play later
Play later
Lists
Like
Liked
25:53
Jurgen Kutscher, Mandiant Vice President for Consulting, joins host Luke McNamara to discuss the findings of the M-Trends 2024 report. Jurgen shares his perspective on the "By the Numbers" data, the theme of evasion of detection in this year's report, and how Mandiant consultants have been leveraging AI in purple and red teaming operations. For mor…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Assessing the State of Multifaceted Extortion Operations
40:54
40:54
Play later
Play later
Lists
Like
Liked
40:54
Kimberly Goody, Head of Mandiant's Cyber Crime Analysis team and Jeremy Kennelly, Lead Analyst of the same team join host Luke McNamara to breakdown the current state of ransomware and data theft extortion. Kimberly and Jeremy describe how 2023 differed from the activity they witnessed the year prior, and how changes in the makeup of various groups…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Hunting for "Living off the Land" Activity
42:32
42:32
Play later
Play later
Lists
Like
Liked
42:32
Host Luke McNamara is joined by Mandiant consultants Shanmukhanand Naikwade and Dan Nutting to discuss hunting for threat actors utilizing "living off the land" (LotL) techniques. They discuss how LotL techniques differ from traditional malware based attacks, ways to differentiate between normal and malicious use of utilities, Volt Typhoon, and mor…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Director of NSA's Cybersecurity Collaboration Center on Trends in 2024
25:48
25:48
Play later
Play later
Lists
Like
Liked
25:48
Morgan Adamski, Director of the NSA's Cybersecurity Collaboration Center (CCC) joins host Luke McNamara to discuss the threat posed by Volt Typhoon and other threat actors utilizing living off the land (LotL) techniques, zero-day exploitation trends, how the CCC works with private sector organizations, and more.…
…
continue reading
Principal Analyst Michael Barnhart joins host Luke McNamara to discuss Mandiant's research into the threat posed by the Democratic People's Republic of Korea's (DPRK) usage of IT workers to gain access to enterprises. For more on Mandiant's analysis of North Korea's cyber capabilities, please see: https://www.mandiant.com/resources/blog/north-korea…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Prescriptions for a Healthy Cybersecurity Future with Google Cloud's OCISO
44:27
44:27
Play later
Play later
Lists
Like
Liked
44:27
Taylor Lehmann (Director, Google Cloud Office of the CISO) and Bill Reid (Security Architect, Google Cloud Office of the CISO) join host Luke McNamara to discuss their takeaways from the last year of threat activity witnessed by enterprises within healthcare and life sciences. They discuss applying threat intelligence to third-party risk management…
…
continue reading
Mandiant Intelligence Advisor Renze Jongman joins host Luke McNamara to discuss his blog on the CTI Process Hyperloop and applying threat intelligence to the needs of the security organization and larger enterprise. For more on this topic, please see: https://www.mandiant.com/resources/blog/cti-process-hyperloop…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Hacktivists' Continued Use of DDoS
44:50
44:50
Play later
Play later
Lists
Like
Liked
44:50
For our first episode of 2024, host Luke McNamara is joined by Mandiant Senior Technical Director Jose Nazario and Principal Analysts Alden Wahlstrom and Josh Palatucci, to discuss the hacktivist DDoS activity they tracked over the last year.By Mandiant
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Tales from the 2023 Trenches
37:47
37:47
Play later
Play later
Lists
Like
Liked
37:47
Doug Bienstock and Josh Madelay, Regional Leads for Mandiant Consulting, join host Luke McNamara to walk through some of the trends they have witnessed responding to breaches in 2023. Josh and Doug cover what is happening with business email compromise (BEC), common initial infection vectors, social engineering tactics, and more.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: DHS Secretary Alejandro Mayorkas in Conversation with Kevin Mandia
20:44
20:44
Play later
Play later
Lists
Like
Liked
20:44
Host Luke McNamara is joined for this special episode highlighting October as Cybersecurity Awareness Month by Kevin Mandia and DHS Secretary Alejandro Mayorkas. Secretary Mayorkas and Kevin discuss the threat landscape, collaboration between the private sector and government, improving the talent gap in cyber, and ongoing DHS initiatives to foster…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Addressing Risk in the Cloud with Wiz
37:05
37:05
Play later
Play later
Lists
Like
Liked
37:05
Host Luke McNamara is joined by Amitai Cohen, Attack Vector Intel Lead at Wiz to discuss trends in cloud security, managing risk, and more. For more on Wiz's research, please see: https://www.wiz.io/blog and https://www.wiz.io/crying-out-cloudBy Mandiant
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Unraveling WyrmSpy and DragonEgg Mobile Malware with Lookout
32:42
32:42
Play later
Play later
Lists
Like
Liked
32:42
Host Luke McNamara is joined by Kristina Balaam, Staff Threat Researcher at Lookout, to discuss her work attributing two new mobile malware families to APT41. For more on Lookout's report on WyrmSpy and DragonEgg: https://www.lookout.com/threat-intelligence/article/wyrmspy-dragonegg-surveillanceware-apt41 Follow Kristina on X @chmodxx_…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: The Implications of the MOVEit Compromise
27:51
27:51
Play later
Play later
Lists
Like
Liked
27:51
Charles Carmakal, CTO for Mandiant Consulting, joins host Luke McNamara to discuss the long tail impact of FIN11's compromise of the MOVEit file transfer solution. Charles breaks down some of the differences with this compromise in comparison to FIN11's previous operations, why the impact from this operation may impact organizations for some time, …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: A Requirements-Driven Approach to Cyber Threat Intelligence
27:39
27:39
Play later
Play later
Lists
Like
Liked
27:39
Dr. Jamie Collier (Senior Threat Intelligence Advisor, Mandiant) joins host Luke McNamara to discuss the recent white paper from Mandiant about developing a requirements-driven approach to intelligence, challenges organizations face in this area, and the importance of recurring stakeholder feedback to a well-functioing CTI team. Follow Jamie at @Th…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: Crisis Communications During a Breach
31:26
31:26
Play later
Play later
Lists
Like
Liked
31:26
Dan Wire from Mandiant joins host Kerry Matre to discuss the ins and outs of crisis communications during a breach as well as what you can do to prepare for a crisis.By Mandiant
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: UNC961 and How Managed Defense Approaches Threat Hunting
30:20
30:20
Play later
Play later
Lists
Like
Liked
30:20
Ryan Tomcik, Dan Fenwick, and Tim Martin join host Luke McNamara to discuss how Managed Defense conducts proactive hunting, illustrated by several UNC961 intrusions. For more, please see: https://www.mandiant.com/resources/blog/unc961-multiverse-financially-motivated Follow Ryan @heferyzan and Tim @Sa1jak on Twitter.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: The Executive's Role in Cybersecurity
33:17
33:17
Play later
Play later
Lists
Like
Liked
33:17
What role do executives and the board play in cybersecurity and breach management. Hear from Jesse Jordan and Howard Israel of Mandiant discuss their experiences helping executives get the right information from their security leaders and understanding their role during a breach.By Mandiant
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Bonus Episode - How Will AI Impact Threat Intelligence?
9:22
9:22
Play later
Play later
Lists
Like
Liked
9:22
The endless battle of threat actors versus cybersecurity professionals may come down to who deploys AI better. In this interview from RSA, John Hultquist, Senior Manager, Mandiant Intelligence, surmises how the bad guys may use AI in the near future to scale attacks, while Vijay Ganti, Head of Product Management, Threat Intelligence, Detection & An…
…
continue reading
Mandiant's Kirstie Failey and Jake Nicastro join host Luke McNamara to break down the findings from the 2023 M-Trends report. Kirstie and Jake cover some of the notable trends gleaned from Mandiant breach investigations over the past year around dwell time, ransomware, top initial intrusion vectors, and more. For more on Mandiant's 14th iteration o…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: Exposure Management Beyond Vulnerabilities
25:48
25:48
Play later
Play later
Lists
Like
Liked
25:48
Jonathan Cran, Lead for Mandiant Attack Surface Management at Google Cloud, joins host Kerry Matre to discuss the evolution of vulnerability and exposure management and how important comprehensive approaches are to mitigating cyber risk. Jonathan shares his experiences from BugBounty, penetration testing and working with customers to solve the grow…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: How APT43 Targets Security Policy Experts Focused on North Korea
39:17
39:17
Play later
Play later
Lists
Like
Liked
39:17
With the public release of Mandiant's latest named threat actor--APT43--guests Michael Barnhart and Jenny Town join host Luke McNamara to uncover how this espionage actor targets policy experts to support North Korea's nuclear ambitions. Follow Jenny on Twitter @j3nnyt0wn and 38 North at https://www.38north.org/ Find Mandiant's full report on APT43…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: A Retrospective on Zero-Days in 2022 with Project Zero and Mandiant
48:46
48:46
Play later
Play later
Lists
Like
Liked
48:46
Jared Semrau (Mandiant) and Maddie Stone (Project Zero) join host Luke McNamara for a look back at the zero-day exploit trends of 2022. Maddie and Jared break down the differences in focus between their teams, and some of the interesting things they each observed last year. Jared covers some of the threat actors that drove last year's trends in obs…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Head of TAG on Commercial Spyware, Cyber Activity in Eastern Europe and More
25:19
25:19
Play later
Play later
Lists
Like
Liked
25:19
Shane Huntley, Senior Director of Google's Threat Analysis Group (TAG) joins host Luke McNamara to discuss his team's work keeping Google users secure. Shane breaks down the research his team has done on the problem of commercial spyware vendors, and how that is impacting the threat landscape today. While this threat has evolved over the years as v…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: A CISO's Perspective on Managing a Breach
32:41
32:41
Play later
Play later
Lists
Like
Liked
32:41
Have you ever wondered what a breach is really like from a CISO's perspective? Fred Thiele, CISO at Interactive, joins host Kerry Matre to discuss managing data breaches from his personal experiences. Fred dives into examples from his past, pointing out the depth and long tail of a breach. He explains all of the bits of a breach that go beyond inci…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: An Episode (Mostly) About Non-Ransomware Cyber Crime
48:26
48:26
Play later
Play later
Lists
Like
Liked
48:26
Kimberly Goody and Jeremy Kennelly from Mandiant’s Financial Crime Analysis team join host Luke McNamara to discuss trends in the cyber crime landscape. Kimberly and Jeremy dive into the ongoing nature of banking malware repurposed for other types of financially-motivated crime, SIM swapping, experimentation with file types and post-compromise expl…
…
continue reading
In this week’s episode of The Defender’s Advantage Podcast, Threat Trends host Luke McNamara is joined by Mandiant analysts Tyler McLellan and John Wolfram for a discussion on the usage of USB as an infection vector as described in two recent Mandiant blog posts. Tyler details the activity outlined in the most recent blog on a new cyber espionage o…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Skills Gap: Addressing the Cyber Mobilization Crisis
23:35
23:35
Play later
Play later
Lists
Like
Liked
23:35
Our latest episode in The Defender’s Advantage Podcast Skills Gap series features Mandiant EVP and Chief of Business Operations Barbara Massa and Director of HR for Google Cloud Margaret Clarke who joined host Kevin Bordlemay to discuss the initiatives from Mandiant and Google Cloud to address the cyber mobilization crisis we are facing. Recent dat…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: Get the Facts on Fraud
23:43
23:43
Play later
Play later
Lists
Like
Liked
23:43
We are kicking off a new year of The Defender’s Advantage Podcast with a new episode of the Frontline Stories series. This week, host Kerry Matre is joined by Mary Writz, SVP of Product for fraud prevention platform Sift for a discussion on fraud. Mary discusses the ins and outs of fraud, including the types of fraud, the industries typically impac…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: A Year in Review with Sandra Joyce
30:48
30:48
Play later
Play later
Lists
Like
Liked
30:48
This week’s episode of the Threat Trends series is the final episode of 2022 for The Defender’s Advantage Podcast. To wrap up our year and provide a glimpse into what we can expect from 2023, Sandra Joyce, VP of Mandiant Intelligence, joins host Luke McNamara for a discussion on some of the highlights from the past year. Sandra chats through aspect…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: A Conversation on Third-Party Risk Management
24:10
24:10
Play later
Play later
Lists
Like
Liked
24:10
This week’s episode of The Defender’s Advantage Podcast features British American Tobacco CISO, Dawn-Marie Hutchinson joins Frontline Stories host Kerry Matre for a discussion on third-party risk management. Over the course of the conversation, Dawn-Marie discusses the approach that she takes in third-party risk management and the process of conduc…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Skills Gap: Transitioning from Military Service to a Role in Cyber
27:11
27:11
Play later
Play later
Lists
Like
Liked
27:11
This week’s episode of The Defender’s Advantage Podcast features four members of Team Mandiant who previously served in the United States military and transitioned into careers in the cyber security industry. Skills Gap host Kevin Bordlemay was joined by Paul Shaver, Thomas Worthington, Lauren Krukar, and Brian Timberlake for a discussion on what t…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Reflections on Russian Cyber Threat Activity During the War in Ukraine
43:54
43:54
Play later
Play later
Lists
Like
Liked
43:54
This week’s episode of The Defender’s Advantage Podcast features Mandiant analysts Gabby Roncone, John Wolfram and Tyler McLellan who joined Threat Trends host Luke McNamara for a discussion on Russian cyber operations over the last year. The group discusses the Russia linked threat groups and activity Mandiant has been tracking related to the conf…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: Cyber Insurance to Make Companies Safer
30:09
30:09
Play later
Play later
Lists
Like
Liked
30:09
This week’s episode of The Defender’s Advantage Podcast features Davis Hake, co-founder of cyber insurance company Resilience, who joined Frontline Stories host Kerry Matre for a discussion on the role of cyber insurance. During the conversation, Davis explains the model for how cyber insurance is sold, the application process and how insurance com…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Tracking DPRK Use of Cryptocurrencies
36:58
36:58
Play later
Play later
Lists
Like
Liked
36:58
This week’s episode of The Defender’s Advantage Podcast features Mandiant’s Michael Barnhart and Joe Dobson who joined Threat Trends host Luke McNamara for a discussion on recent cyber activity out of North Korea, including the targeting of cryptocurrency. Michael and Joe discuss some of the North Korean threat groups Mandiant is following and a vi…
…
continue reading
On this week’s episode of The Defender’s Advantage Podcast, Mandiant’s Nader Zaveri and Simran Sakraney join Skills Gap host Chris Campbell for a discussion on how the cyber security industry and the companies within it can attract candidates from underrepresented groups and foster diversity. Nader and Simran share their individual journeys into th…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Inside Google Cloud's Threat Horizons Report
31:34
31:34
Play later
Play later
Lists
Like
Liked
31:34
This week’s episode of The Defender’s Advantage Podcast features Stan Trepetin, Technical Product Manager at Google Cloud, who joined Threat Trends host Luke McNamara to discuss the Threat Horizon’s Report produced by the Google Cybersecurity Action Team. Stan highlights several articles from the latest report in the quarterly series, including a p…
…
continue reading
On this week’s episode of The Defender’s Advantage Podcast, Skills Gap series host Chris Campbell is joined by Mandiant’s Fernando Tomlinson and Matt Boyle for a discussion on the value of hiring individuals from diverse professional backgrounds and ensuring accessibility to certifications and tools for those interested in transitioning to the cybe…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: The Threat Landscape in APJ
22:01
22:01
Play later
Play later
Lists
Like
Liked
22:01
This week’s episode of The Defender’s Advantage Podcast, Mandiant’s Yihao Lim joins the Threat Trends series to chat with host Luke McNamara about the threat landscape in the Asia-Pacific region. Yihao discusses recent IO campaigns in the region, particularly DragonBridge and HaiEnergy, and how these attacks influence how organizations view disinfo…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: The Evolution of the CISO
32:02
32:02
Play later
Play later
Lists
Like
Liked
32:02
The latest episode of The Defender’s Advantage Podcast Frontline Stories series features Uplight CISO Alex Wood joining host Kerry Matre to discuss how his role has evolved over the course of his career, for example, changes in the CISO reporting structure and the role’s shift to encompass a business focus as opposed to being exclusively technical.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: Metador, Mercenaries, and LABScon with SentinelOne
40:48
40:48
Play later
Play later
Lists
Like
Liked
40:48
The latest episode of The Defender’s Advantage Podcast features SentinelOne researchers Tom Hegel and Juan Andres Guerrero-Saade who joined host Luke McNamara to discuss some of the latest research they presented at LABScon, September 20-24. Juan shares details around his team’s findings on Metador, a threat actor that primarily targets telecommuni…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: The Security Landscape Facing Manufacturing
37:35
37:35
Play later
Play later
Lists
Like
Liked
37:35
The latest episode in The Defender’s Advantage Podcast Threat Trends series features Todd Boppell, COO of the National Association of Manufacturers (NAM), who joined host Luke McNamara to discuss cyber security in the manufacturing landscape. During the conversation Todd shares the top concerns for NAM’s member organizations, how the industry appro…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Skills Gap: Expanding Diversity in Cyber Security
37:40
37:40
Play later
Play later
Lists
Like
Liked
37:40
In this week’s episode of The Defender’s Advantage Podcast, Skills Gap series host Chris Campbell is joined by Dawn Hagen and Kevin Bordlemay for a discussion on diversity, inclusion, and belonging initiatives. The group discusses Mandiant’s internal focus on diversity, including employee resource groups, as well as efforts to build awareness of ca…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Threat Trends: APT42 - Crooked Charms, Cons, and Compromises
50:58
50:58
Play later
Play later
Lists
Like
Liked
50:58
This week’s episode of The Defender’s Advantage Podcast features Emiel Haeghebaert and Ashley Zaya who joined Threat Trends series host Luke McNamara to discuss Mandiant’s most recently graduated APT group, APT42. Mandiant has identified APT42 as an Iranian-sponsored cyber espionage group tasked with conducting information collection and surveillan…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Frontline Stories: Discussing the Impact of CISA KEV with Nucleus Security
27:39
27:39
Play later
Play later
Lists
Like
Liked
27:39
This latest installment of the Frontline Stories series, part of The Defender’s Advantage Podcast, features Nucleus Security Co-Founder and CEO Stephen Carter, who joined our host Kerry Matre for a conversation on CISA KEV. CISA’s Known Exploited Vulnerabilities list prioritizes vulnerabilities the agency has determined to be exploited in the wild …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Skills Gap: Building a Successful Security Operations Team
17:19
17:19
Play later
Play later
Lists
Like
Liked
17:19
The latest episode of the Skills Gap series, part of The Defender’s Advantage Podcast, features Mandiant Managed Defense team members Robert Parker and David Lindquist, who joined host Chris Campbell to discuss what they look for when hiring for their team. They detail the skills they look for most as they interview candidates and their tips for th…
…
continue reading