051| Looking at Phishing Through the Intrusion Kill Chain

Cyber Security Sauna

Ebook - Combating Phishing: Building the Path of Most Resistance

1:54

Jerry Seinfeld jokes about the phrase "it is what it is' in his Netflix special, "23 Hours To Kill".

4 years ago 35:50

MP3•Episode home

Phishing is the number one vector leading to data breaches. It's an easy, effective way for attackers to trick users into giving up credentials or running malicious code. While organizations cannot stop motivated attackers from trying to phish their employees, they can make it harder to succeed. F-Secure's director of consulting, Riaan Naudé, calls this building the path of most resistance. Riaan joins the show to talk about how companies can do just that by addressing the earlier stages of the intrusion kill chain. Also in this episode: The most important metric of phishing simulation, why feedback is important, and the phishing emails users fall for.

Links:

Episode 51 transcript

95 episodes

#Security #Software Development #Cybersecurity #Informationsecurity #Tech #Business #WithSecure #InfoSec

051| Looking at Phishing Through the Intrusion Kill Chain

Cyber Security Sauna

242 subscribers

published 4 years ago

MP3•Episode home

Links:

Episode 51 transcript

Ebook - Combating Phishing: Building the Path of Most Resistance

95 episodes

#Security #Software Development #Cybersecurity #Informationsecurity #Tech #Business #WithSecure #InfoSec

All episodes

Cyber Security Sauna

1
086| Why showing value is more important for CISOs than ever 38:29

1 year ago38:29

38:29

CISOs find themselves at the forefront of safeguarding sensitive information, ensuring regulatory compliance, and protecting their organizations from constantly evolving cyber risks. Today, we are joined by Cybersecurity Strategist and Eclipz.io Inc. CISO Matthew Rosenquist and WithSecure CISO Christine Bejerasco to discuss why making senior leadership and the board clear on the value that CISOs bring to the table.…

Cyber Security Sauna

1
085| NIST Cyber Security Framework V.2 – Help or Hindrance? 44:04

2 years ago44:04

44:04

The NIST Cyber Security Framework has helped secure organizations for nearly a decade and while it’s proven to be an invaluable tool, it’s gotten a bit long in the tooth for a cyber security landscape that never stays static. Enter V.2 which goes a long way in identifying the increasing cyber risk in organizations and implementing more governance, oversight and senior leadership accountability. For this episode we were joined by very special guest Cybersecurity Strategist and Eclipz.io Inc. CISO, Matthew Rosenquist, and WithSecure CISO Christine Bejerasco to discuss if the new framework will be enough and whether it will help or hinder CISOs. Read more: https://www.withsecure.com/en/expertise/resources/navigating-nist-csf-2 Check out the recent webinar with Matthew Rosenquist and Christine Bejerasco for further discussions on the NIST Cyber Security Framework V.2.…

Cyber Security Sauna

1
084| Let's Talk About Threats Baby 31:05

2 years ago31:05

31:05

A successful cyber defense should protect an organization's critical assets from today's threats, not yesterday's. For this episode, we sat down with threat intelligence analysts Stephen Robinson and Ziggy Davies, two such people responsible for keeping tabs on threats and recent developments, to discuss updates on the threats currently affecting organizations. Check out the latest insights from the WithSecure Countercept Threat Intelligence team. Read the report on the professionialization of cybercrime…

Cyber Security Sauna

1
083| Security by design for CISOs 9:44

2 years ago9:44

9:44

The term Shifting Left has not been traditionally associated with cyber security. In this episode, WithSecure CISO Christine Bejerasco lays out the case for how shifting left can evolve beyond its origins in software development to be a powerful tool for successful security and business outcomes. Recorded on-site at #SPHERE23.…

Cyber Security Sauna

1
082| Hyped and Hacked - AI in Cyber Security 13:38

2 years ago13:38

13:38

As Mikko Hyppönen said recently, we are indeed in the midst of the hottest AI summer ever, and the hype level is off the charts. Yes, AI presents amazing opportunities, but unfortunately, also threats. Nowadays, practically anyone with a passing interest in using it has a lot of power at their fingertips - no PhD is necessary. Naturally, we must view all of this through the lens of the cyber security industry. We sat down with Ian Beacraft, Founder and Chief Futurist of Signal and Cipher, and Tom Van de Wiele, Principal Technology and Threat Researcher at WithSecure, to discuss if we are getting too worked up about AI and what it means for cyber defenders either way. Recorded on-site at #SPHERE23.…

Cyber Security Sauna

1
081| Mudge - the man, the myth, the mythbusting 12:54

2 years ago12:54

12:54

We have the pleasure of being joined by the one and only Peiter "Mudge" Zatko, network security expert, open-source programmer, writer, and hacker, with a rapid-fire discussion on some myths in the cyber security industry that could do with busting, sprinkled with some truths that could do with trusting. This episode was recorded on-site at #SPHERE23.…

Cyber Security Sauna

1
080| The Power Of Putting Security Outcomes First 16:19

2 years ago16:19

16:19

As security is primarily about stopping bad things from happening, victories are often silent. At the same time, failures are often very public, so how can organizations tell when their security is paying off? In this episode, we are joined by guest speaker Laura Koetzle, Vice President and Group Director at Forrester and Robin Oldham, CEO of consulting firm Cydea, to discuss assessing the value of a result that produces nothing. Recorded on-site at #SPHERE23.…

Cyber Security Sauna

1
079|(Mind the) Detection and Response Gap 31:17

2 years ago31:17

31:17

The time that an attacker spends on a network before attempting to achieve their objective is decreasing rapidly, making many organizations’ typical detection and response solutions ineffective. Speed is the key, but unfortunately the gap between detection and response is growing. In this episode, we are joined by WithSecure’s Threat Hunter Jojo O'Gorman and Principle Incident Response Consultant Mehmet Surmeli to discuss what we can do to solve these challenges. Read more >> https://www.withsecure.com/en/expertise/resources/how-to-identify-your-response-gaps?utm_source=libsyn&utm_medium=podcast&utm_campaign=gl-pr-response-gap-tool Check out our Response Gap Assessment tool >> https://www.withsecure.com/en/solutions/incident-readiness-and-response/identify-your-response-gap?utm_source=libsyn&utm_medium=podcast&utm_campaign=gl-pr-response-gap-tool…

Cyber Security Sauna

1
078| John Grant on the relationship between sustainability and cyber security 13:29

2 years ago13:29

13:29

The development of new sustainable technologies undoubtedly benefits society, but it also opens the door to new cyber security challenges. For this episode, we were on-site at SPHERE23 with author John Grant to discuss the challenges for organizations to be sustainable and secure.

Cyber Security Sauna

1
077| Jessica Berlin and Stephen Robinson on the cyber front 16:59

2 years ago16:59

16:59

Russia's invasion of Ukraine changed the entire geopolitical landscape. For this episode, we were on-site at SPHERE23 with security and foreign policy analyst Jessica Berlin, and threat intelligence analyst Stephen Robinson, to discuss the use of cyber attacks and disinformation as policy instruments in the wake of the invasion.…

Cyber Security Sauna

1
076| What we get wrong (and right) about APTs 40:55

2 years ago40:55

40:55

Advanced persistent threats, or APTs, are generally seen as a sort of apex predator in the cyber threat landscape. And while they’re certainly noteworthy, their reputation can distort what makes them unique, and what they may have in common with other adversaries. In this episode, we’re joined by Senior Threat Intelligence Analyst Stephen Robinson, and Security Consultant Richard Suls, to shed some light on APTs and how we can protect ourselves against them. Read more: https://labs.withsecure.com/publications/no-pineapple-dprk-targeting-of-medical-research-and-technology-sector…

Cyber Security Sauna

1
075| Winning with outcome-based security 41:26

2 years ago41:26

41:26

Security protects organizations from cyber attacks. However, studies show that limiting your understanding of security to this basic premise can hinder protection efforts or even other business goals. Instead of spending more and more on security to simply keep things running, maybe it’s time for a different approach. In this episode, we are joined by WithSecure Chief Information Security Officer Christine Bejerasco, and guest speaker Laura Koetzle, Vice President and Group Director at Forrester to discuss a strategy called outcome-based security.…

Cyber Security Sauna

1
074| Do you even patch bro? 38:04

2 years ago38:04

38:04

Vulnerabilities and security gaps are increasingly being identified in software and applications daily. Attackers are often quick to act when any vulnerabilities are made known - even within minutes. You may have heard of the term patching in cyber security, but what is it exactly, and how does it figure into an organization's security posture? WithSecure security consultants Katie Inns and Antti Laatikainen join us to discuss all things patching.…

Cyber Security Sauna

1
073| 2023 - Looking Forward 22:51

2 years ago22:51

22:51

In our last episode, we were joined by cyber security advisor Paul Brucciani and WithSecure Intelligence Researcher Andy Patel to discuss some notable 2022 infosec developments. Now that 2022 is in the rear-view mirror, all eyes are turning to the year ahead. What should we expect? Is there some disaster on the horizon for which we need to prepare? Conversely, are there any positive devlopments that we can look forward to? We're once again joined by Paul and Andy to discuss some of the trends we should look out for in 2023.…

Cyber Security Sauna

1
072| 2022 Wrap-Up 22:19

2 years ago22:19