There is no question that companies are in the sights of would-be criminals looking to exploit them. While companies look at solutions and trainings to help keep the perimeter secure, the biggest fail point is often the employees, AKA the human element. In this Threatpost podcast, sponsored by Egress, we sit down with Jack Chapman to discuss the steps and tactics that companies can take to stay one step ahead of their adversaries. During our conversation, we discuss: <ul> <li>Weaknesses that attackers look to exploit</li> <li>Evolution of toolkits</li> <li>Securing MFA and more</li> </ul>

<description>&lt;p&gt;There is no question that companies are in the sights of would-be criminals looking to exploit them. While companies look at solutions and trainings to help keep the perimeter secure, the biggest fail point is often the employees, AKA the human element.&lt;/p&gt; &lt;p&gt;In this Threatpost podcast, sponsored by Egress, we sit down with Jack Chapman to discuss the steps and tactics that companies can take to stay one step ahead of their adversaries.&lt;/p&gt; &lt;p&gt;During our conversation, we discuss:&lt;/p&gt; &lt;ul&gt; &lt;li&gt;Weaknesses that attackers look to exploit&lt;/li&gt; &lt;li&gt;Evolution of toolkits&lt;/li&gt; &lt;li&gt;Securing MFA and more&lt;/li&gt; &lt;/ul&gt;</description>

There is no question that companies are in the sights of would-be criminals looking to exploit them. While companies look at solutions and trainings to help keep the perimeter secure, the biggest fail point is often the employees, AKA the human...

There is no question that companies are in the sights of would-be criminals looking to exploit them. While companies look at solutions and trainings to help keep the perimeter secure, the biggest fail point is often the employees, AKA the human element. In this Threatpost podcast, sponsored by Egress, we sit down with Jack Chapman to discuss the steps and tactics that companies can take to stay one step ahead of their adversaries. During our conversation, we discuss: Weaknesses that attackers look to exploit Evolution of toolkits Securing MFA and more

Inside the Hackers’ Toolkit

There is no question that the level of threats facing today’s businesses continues to change on a daily basis. So what are the trends that CISOs need to be on the lookout for? For this episode of the Threatpost podcast, I am joined by Derek Manky, , Chief Security Strategist & VP Global Threat Intelligence, <a href="https://twitter.com/Fortinet">Fortinet’s FortiGuard Labs</a> to discuss the threats facing CISOs along with more. During the course of our discussion, we dive into: <ul> <li>What an attack on all fronts looks like</li> <li>The current state of the threat landscape</li> <li>New techniques being leveraged be adversaries</li> <li>The automation of threats</li> </ul> We also lay out what CISOs need to consider when laying out and producing their threat action plan.

<description>&lt;p&gt;There is no question that the level of threats facing today’s businesses continues to change on a daily basis. So what are the trends that CISOs need to be on the lookout for?&lt;/p&gt; &lt;p&gt;For this episode of the Threatpost podcast, I am joined by Derek Manky, , Chief Security Strategist &amp; VP Global Threat Intelligence, &lt;a href="https://twitter.com/Fortinet"&gt;Fortinet’s FortiGuard Labs&lt;/a&gt; to discuss the threats facing CISOs along with more.&lt;/p&gt; &lt;p&gt;During the course of our discussion, we dive into:&lt;/p&gt; &lt;ul&gt; &lt;li&gt;What an attack on all fronts looks like&lt;/li&gt; &lt;li&gt;The current state of the threat landscape&lt;/li&gt; &lt;li&gt;New techniques being leveraged be adversaries&lt;/li&gt; &lt;li&gt;The automation of threats&lt;/li&gt; &lt;/ul&gt; &lt;p&gt;We also lay out what CISOs need to consider when laying out and producing their threat action plan.&lt;/p&gt;</description>

There is no question that the level of threats facing today’s businesses continues to change on a daily basis. So what are the trends that CISOs need to be on the lookout for? For this episode of the Threatpost podcast, I am joined by Derek Manky, ,...

There is no question that the level of threats facing today’s businesses continues to change on a daily basis. So what are the trends that CISOs need to be on the lookout for? For this episode of the Threatpost podcast, I am joined by Derek Manky, , Chief Security Strategist & VP Global Threat Intelligence, Fortinet’s FortiGuard Labs to discuss the threats facing CISOs along with more. During the course of our discussion, we dive into: What an attack on all fronts looks like The current state of the threat landscape New techniques being leveraged be adversaries The automation of threats We also lay out what CISOs need to consider when laying out and producing their threat action plan.

Being prepared for adversarial attacks

Can I tell you a secret? Will you keep it between us? You’ve probably said this or heard this when it comes to friends and family. However, do you also know that secret keeping, or lack thereof is one of the biggest issues that businesses face? According to the recent The State of the Secret Sprawl from GitGuardian further defines the breadth of business secrets. “A secret can be any sensitive data that we want to keep private. When discussing secrets in the context of software development, secrets generally refer to digital authentication credentials that grant access to services, systems and data. These are most commonly API keys, usernames and passwords, or security certificates. Secrets are what tie together different building blocks of a single application by creating a secure connection between each component. Secrets grant access to the most sensitive systems.” In this podcast with Mackenzie Jackson, developer advocate at GitGuardian, we dive into the report and also the issues that corporations face with public leaks from groups like Lapsus and more, along with as ways that developers can keep their code safe. For the full report, <a href= "https://res.cloudinary.com/da8kiytlc/image/upload/v1615208698/StateofSecretSprawlReport-2021.pdf"> click here</a>.

<description>&lt;p&gt;Can I tell you a secret? Will you keep it between us?&lt;/p&gt; &lt;p&gt;You’ve probably said this or heard this when it comes to friends and family. However, do you also know that secret keeping, or lack thereof is one of the biggest issues that businesses face?&lt;/p&gt; &lt;p&gt;According to the recent &lt;em&gt;The State of the Secret Sprawl&lt;/em&gt; from GitGuardian further defines the breadth of business secrets.&lt;/p&gt; &lt;p&gt;“A secret can be any sensitive data that we want to keep private. When discussing secrets in the context of software development, secrets generally refer to digital authentication credentials that grant access to services, systems and data. These are most commonly API keys, usernames and passwords, or security certificates. Secrets are what tie together different building blocks of a single application by creating a secure connection between each component. Secrets grant access to the most sensitive systems.”&lt;/p&gt; &lt;p&gt;In this podcast with Mackenzie Jackson, developer advocate at GitGuardian, we dive into the report and also the issues that corporations face with public leaks from groups like Lapsus and more, along with as ways that developers can keep their code safe.&lt;/p&gt; &lt;p&gt;For the full report, &lt;a href= "https://res.cloudinary.com/da8kiytlc/image/upload/v1615208698/StateofSecretSprawlReport-2021.pdf"&gt; click here&lt;/a&gt;.&lt;/p&gt;</description>

The State of Secrets Sprawl

Can I tell you a secret? Will you keep it between us? You’ve probably said this or heard this when it comes to friends and family. However, do you also know that secret keeping, or lack thereof is one of the biggest issues that businesses face? According to the recent The State of the Secret Sprawl from GitGuardian further defines the breadth of business secrets. “A secret can be any sensitive data that we want to keep private. When discussing secrets in the context of software development, secrets generally refer to digital authentication credentials that grant access to services, systems and data. These are most commonly API keys, usernames and passwords, or security certificates. Secrets are what tie together different building blocks of a single application by creating a secure connection between each component. Secrets grant access to the most sensitive systems.” In this podcast with Mackenzie Jackson, developer advocate at GitGuardian, we dive into the report and also the issues that corporations face with public leaks from groups like Lapsus and more, along with as ways that developers can keep their code safe. For the full report, click here.

Huntress Labs R&D Director Jamie Levy busts the old “Macs don’t get viruses” myth and offers tips on how MacOS malware differs and how to protect against it. 

The Truth Behind ‘Mythical’ MacOS Malware – Podcast

Still mystified by it all? Listen to KnowBe4’s Dr. Lydia Kostopoulos explain what blockchain is: Now’s the time to learn about associated cybersecurity risks. 

A Blockchain Primer and a Bored Ape Headscratcher – Podcast

Threatpost writers Mike Mimoso and Chris Brook discuss security threats, attacks, vulnerability research and trends with a variety of industry executives, researchers and experts.

The Threatpost Podcast

Details

Recent Episodes