In today's podcast, we talk about the Cyber Safety Review Board and their report on Log4j. 
Also, make sure to check out some of the articles and resources mentioned during this episode:
<ul><li><a href='https://www.dhs.gov/news/2022/02/03/dhs-launches-first-ever-cyber-safety-review-board'>DHS Launches First-Ever Cyber Safety Review Board</a> via Homeland Security</li>
<li><a href='https://hurricanelabs.com/podcast/pentest-stories-responsible-vulnerability-disclosure/'>Pentest Stories: Responsible vulnerability disclosure</a> via Heather Terry & Dennis Goodlett</li>
<li><a href='https://hurricanelabs.com/blog/how-to-write-a-vulnerability-management-policy/'>How to Write a Vulnerability Management Policy</a> by Roxy, Hurricane Labs Director of Compliance</li>
</ul>
Keep an eye out for our upcoming blog posts about vulnerability management too! 






<a href='https://mcdn.podbean.com/mf/web/j9tb6c/log4j-and-csrb-transcript.pdf'>Click here for our podcast episode transcript.</a>

<description>&lt;p&gt;In today's podcast, we talk about the Cyber Safety Review Board and their report on Log4j. &lt;/p&gt;
&lt;p&gt;Also, make sure to check out some of the articles and resources mentioned during this episode:&lt;/p&gt;
&lt;ul&gt;&lt;li&gt;&lt;a href='https://www.dhs.gov/news/2022/02/03/dhs-launches-first-ever-cyber-safety-review-board'&gt;DHS Launches First-Ever Cyber Safety Review Board&lt;/a&gt; via Homeland Security&lt;/li&gt;
&lt;li&gt;&lt;a href='https://hurricanelabs.com/podcast/pentest-stories-responsible-vulnerability-disclosure/'&gt;Pentest Stories: Responsible vulnerability disclosure&lt;/a&gt; via Heather Terry &amp; Dennis Goodlett&lt;/li&gt;
&lt;li&gt;&lt;a href='https://hurricanelabs.com/blog/how-to-write-a-vulnerability-management-policy/'&gt;How to Write a Vulnerability Management Policy&lt;/a&gt; by Roxy, Hurricane Labs Director of Compliance&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;Keep an eye out for our upcoming blog posts about vulnerability management too! &lt;/p&gt;






&lt;p&gt;&lt;a href='https://mcdn.podbean.com/mf/web/j9tb6c/log4j-and-csrb-transcript.pdf'&gt;Click here for our podcast episode transcript.&lt;/a&gt;&lt;/p&gt;





</description>

In today's podcast, we talk about the Cyber Safety Review Board and their report on Log4j. 
Also, make sure to check out some of the articles and resources mentioned during this episode:
DHS Launches First-Ever Cyber Safety Review Board via Homeland ...

In today's podcast, we talk about the Cyber Safety Review Board and their report on Log4j. 
Also, make sure to check out some of the articles and resources mentioned during this episode:
DHS Launches First-Ever Cyber Safety Review Board via Homeland Security
Pentest Stories: Responsible vulnerability disclosure via Heather Terry & Dennis Goodlett
How to Write a Vulnerability Management Policy by Roxy, Hurricane Labs Director of Compliance
Keep an eye out for our upcoming blog posts about vulnerability management too! 






Click here for our podcast episode transcript.







SOC Talk: Cyber Safety Review Board and the Log4j Report

Heather meets with Tom Kopchak to discuss strategies for organizations should utilize when creating cybersecurity training programs.
In case you missed it, check out the first part of our <a href='https://hurricanelabs.com/podcast/teaching-and-learning-cybersecurity-closing-the-skills-gap-part-1/'>Teaching and Learning Cybersecurity</a> podcast series. Also, tune in to our related podcast: <a href='https://hurricanelabs.com/podcast/addressing-the-security-skills-gap/'>Addressing the Cybersecurity Skills Gap</a> featuring Heather Terry, Tom Kopchak, Roxy, and Dusty Miller!
<a href='https://mcdn.podbean.com/mf/web/i3rgiv/teaching-and-learning-part-2-transcript.pdf'>Click here for our podcast episode transcript. </a>

<description>&lt;p&gt;Heather meets with Tom Kopchak to discuss strategies for organizations should utilize when creating cybersecurity training programs.&lt;/p&gt;
&lt;p&gt;In case you missed it, check out the first part of our &lt;a href='https://hurricanelabs.com/podcast/teaching-and-learning-cybersecurity-closing-the-skills-gap-part-1/'&gt;Teaching and Learning Cybersecurity&lt;/a&gt; podcast series. Also, tune in to our related podcast: &lt;a href='https://hurricanelabs.com/podcast/addressing-the-security-skills-gap/'&gt;Addressing the Cybersecurity Skills Gap&lt;/a&gt; featuring Heather Terry, Tom Kopchak, Roxy, and Dusty Miller!&lt;/p&gt;
&lt;p&gt;&lt;a href='https://mcdn.podbean.com/mf/web/i3rgiv/teaching-and-learning-part-2-transcript.pdf'&gt;Click here for our podcast episode transcript. &lt;/a&gt;&lt;/p&gt;
</description>

Heather meets with Tom Kopchak to discuss strategies for organizations should utilize when creating cybersecurity training programs.
In case you missed it, check out the first part of our Teaching and Learning Cybersecurity podcast series. Also, tune...

Heather meets with Tom Kopchak to discuss strategies for organizations should utilize when creating cybersecurity training programs.
In case you missed it, check out the first part of our Teaching and Learning Cybersecurity podcast series. Also, tune in to our related podcast: Addressing the Cybersecurity Skills Gap featuring Heather Terry, Tom Kopchak, Roxy, and Dusty Miller!
Click here for our podcast episode transcript. 

Teaching and Learning Cybersecurity: Closing the Skills Gap, Part 2

Heather meets with Tom Kopchak to reflect on his recent experiences teaching cybersecurity and on what skills are needed to help bridge the cybersecurity skills gap. 
Also, make sure to check out some of our related posts and podcasts:
<ul><li><a href='https://hurricanelabs.com/podcast/addressing-the-security-skills-gap/'>Addressing the Cybersecurity Skills Gap</a> podcast featuring Heather Terry, Tom Kopchak, Roxy, and Dusty Miller</li>
<li><a href='https://hurricanelabs.com/blog/toms-tips-for-infosec-professionals/'>Tom's Tips for Infosec Professionals</a> blog post via Tom Kopchak</li>
<li><a href='https://hurricanelabs.com/blog/a-guide-to-success-9-career-tips-for-infosec-newbies/'>A Guide to Success: 9 Career Tips for Infosec Newbies</a> blog post via Kelsey Clark</li>
<li><a href='https://hurricanelabs.com/blog/5-student-networking-strategies-for-security-conferences/'>5 Student Networking Strategies for Security Conferences</a> blog post via Kelsey Clark</li>
</ul>
<a href='https://mcdn.podbean.com/mf/web/uayrme/Teaching_Learning_pt_1beunf.pdf'>Click here for our podcast episode transcript.</a>

<description>&lt;p&gt;Heather meets with Tom Kopchak to reflect on his recent experiences teaching cybersecurity and on what skills are needed to help bridge the cybersecurity skills gap. &lt;/p&gt;
&lt;p&gt;Also, make sure to check out some of our related posts and podcasts:&lt;/p&gt;
&lt;ul&gt;&lt;li&gt;&lt;a href='https://hurricanelabs.com/podcast/addressing-the-security-skills-gap/'&gt;Addressing the Cybersecurity Skills Gap&lt;/a&gt; podcast featuring Heather Terry, Tom Kopchak, Roxy, and Dusty Miller&lt;/li&gt;
&lt;li&gt;&lt;a href='https://hurricanelabs.com/blog/toms-tips-for-infosec-professionals/'&gt;Tom's Tips for Infosec Professionals&lt;/a&gt; blog post via Tom Kopchak&lt;/li&gt;
&lt;li&gt;&lt;a href='https://hurricanelabs.com/blog/a-guide-to-success-9-career-tips-for-infosec-newbies/'&gt;A Guide to Success: 9 Career Tips for Infosec Newbies&lt;/a&gt; blog post via Kelsey Clark&lt;/li&gt;
&lt;li&gt;&lt;a href='https://hurricanelabs.com/blog/5-student-networking-strategies-for-security-conferences/'&gt;5 Student Networking Strategies for Security Conferences&lt;/a&gt; blog post via Kelsey Clark&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;a href='https://mcdn.podbean.com/mf/web/uayrme/Teaching_Learning_pt_1beunf.pdf'&gt;Click here for our podcast episode transcript.&lt;/a&gt; &lt;/p&gt;
</description>

Heather meets with Tom Kopchak to reflect on his recent experiences teaching cybersecurity and on what skills are needed to help bridge the cybersecurity skills gap. 
Also, make sure to check out some of our related posts and podcasts:
Addressing the...

Heather meets with Tom Kopchak to reflect on his recent experiences teaching cybersecurity and on what skills are needed to help bridge the cybersecurity skills gap. 
Also, make sure to check out some of our related posts and podcasts:
Addressing the Cybersecurity Skills Gap podcast featuring Heather Terry, Tom Kopchak, Roxy, and Dusty Miller
Tom's Tips for Infosec Professionals blog post via Tom Kopchak
A Guide to Success: 9 Career Tips for Infosec Newbies blog post via Kelsey Clark
5 Student Networking Strategies for Security Conferences blog post via Kelsey Clark
Click here for our podcast episode transcript. 

Teaching and Learning Cybersecurity: Closing the Skills Gap, Part 1

The Hurricane Labs team shares a few stories about their experiences with social engineering–and ways we can become more resilient to this type of attack.
Also, make sure to check out some of the articles and resources mentioned during this episode:
<ul><li><a href='https://www.verizon.com/business/resources/reports/dbir/'>Verizon 2021 Data Breach Investigations Report</a></li>
<li><a href='https://www.amazon.com/Influence-Psychology-Persuasion-Robert-Cialdini/dp/006124189X'>Influence: The Psychology of Persuasion</a> </li>
<li><a href='https://www.cs.tau.ac.il/~tromer/acoustic/'>RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis</a> </li>
<li>(Coming May 2!) Blog: How to reduce your organization’s vulnerability to social engineering</li>
</ul>
<a href='https://mcdn.podbean.com/mf/web/84i6tu/Social_Engineering_Transcript9l88j.pdf'>Click here for our podcast episode transcript.</a>

<description>&lt;p&gt;The Hurricane Labs team shares a few stories about their experiences with social engineering–and ways we can become more resilient to this type of attack.&lt;/p&gt;
&lt;p&gt;Also, make sure to check out some of the articles and resources mentioned during this episode:&lt;/p&gt;
&lt;ul&gt;&lt;li&gt;&lt;a href='https://www.verizon.com/business/resources/reports/dbir/'&gt;Verizon 2021 Data Breach Investigations Report&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href='https://www.amazon.com/Influence-Psychology-Persuasion-Robert-Cialdini/dp/006124189X'&gt;Influence: The Psychology of Persuasion&lt;/a&gt; &lt;/li&gt;
&lt;li&gt;&lt;a href='https://www.cs.tau.ac.il/~tromer/acoustic/'&gt;RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis&lt;/a&gt; &lt;/li&gt;
&lt;li&gt;(Coming May 2!) Blog: How to reduce your organization’s vulnerability to social engineering&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;a href='https://mcdn.podbean.com/mf/web/84i6tu/Social_Engineering_Transcript9l88j.pdf'&gt;Click here for our podcast episode transcript.&lt;/a&gt;&lt;/p&gt;
</description>

The Hurricane Labs team shares a few stories about their experiences with social engineering–and ways we can become more resilient to this type of attack.
Also, make sure to check out some of the articles and resources mentioned during this episode:
...

The Hurricane Labs team shares a few stories about their experiences with social engineering–and ways we can become more resilient to this type of attack.
Also, make sure to check out some of the articles and resources mentioned during this episode:
Verizon 2021 Data Breach Investigations Report
Influence: The Psychology of Persuasion 
RSA Key Extraction via Low-Bandwidth Acoustic Cryptanalysis 
(Coming May 2!) Blog: How to reduce your organization’s vulnerability to social engineering
Click here for our podcast episode transcript.

Pentest Perspective: Taking a Look at Social Engineering

Two of Hurricane Labs' team members red teamed for the NECCDC in March. They share insight to some of the strategies they used in their role as attackers.
Also, make sure to check out some of the articles and resources mentioned during this episode:
<ul><li><a href='https://neccdl.org/neccdc/'>Northeast Regional of the Collegiate Cyber Defense Competition (NECCDC)</a></li>
<li><a href='https://www.youtube.com/watch?v=PPJqTG3gJs0'>NECCDC Red Team Review</a></li>
<li><a href='https://twitter.com/neccdl'>NECCDL / NECCDC Twitter</a></li>
</ul>
<a href='https://mcdn.podbean.com/mf/web/ykv75y/NECCDC_podcast_transcript.pdf'>Click here for our podcast episode transcript.</a>

<description>&lt;p&gt;Two of Hurricane Labs' team members red teamed for the NECCDC in March. They share insight to some of the strategies they used in their role as attackers.&lt;/p&gt;
&lt;p&gt;Also, make sure to check out some of the articles and resources mentioned during this episode:&lt;/p&gt;
&lt;ul&gt;&lt;li&gt;&lt;a href='https://neccdl.org/neccdc/'&gt;Northeast Regional of the Collegiate Cyber Defense Competition (NECCDC)&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href='https://www.youtube.com/watch?v=PPJqTG3gJs0'&gt;NECCDC Red Team Review&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a href='https://twitter.com/neccdl'&gt;NECCDL / NECCDC Twitter&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;a href='https://mcdn.podbean.com/mf/web/ykv75y/NECCDC_podcast_transcript.pdf'&gt;Click here for our podcast episode transcript.&lt;/a&gt;&lt;/p&gt;
</description>

Two of Hurricane Labs' team members red teamed for the NECCDC in March. They share insight to some of the strategies they used in their role as attackers.
Also, make sure to check out some of the articles and resources mentioned during this episode:
...

Two of Hurricane Labs' team members red teamed for the NECCDC in March. They share insight to some of the strategies they used in their role as attackers.
Also, make sure to check out some of the articles and resources mentioned during this episode:
Northeast Regional of the Collegiate Cyber Defense Competition (NECCDC)
NECCDC Red Team Review
NECCDL / NECCDC Twitter
Click here for our podcast episode transcript.

Hurricane Labs InfoSec Podcast

Details

Recent Episodes