In this episode of Game Changers for Government Contractors, host Michael LeJeune and cybersecurity expert Gary Daemer discuss FedRAMP, an essential certification for cloud service providers looking to sell to the federal government. With over 40 years of experience in cybersecurity, Gary provides a comprehensive overview of what FedRAMP entails, who needs it, and the challenges involved. Learn about the rigorous process, timelines, costs, and ongoing maintenance requirements for certification. Gary also shares strategic advice on whether pursuing FedRAMP is right for your business and tips for leveraging resources like SBIRs to offset costs. This episode is a must-listen for contractors aiming to enter or expand in the government market.
-----
Frustrated with your government contracting journey? Join our group coaching community here: https://federal-access.com/gamechangers 
Grab my #1 bestselling book, "I'm New to Government Contract. Where Should I Start?"
Here: https://amzn.to/4c5Vb0d

Ep 346: FedRAMP 101 Insights To Prepare For Certification

Talking Cyber is a Cybercrime Magazine podcast series that covers the latest news and breaking stories on the cybereconomy, hackers, intrusions, privacy, security and much more. In this episode, host Amanda Glassner is joined by Heather Engel, Managing Partner at Strategic Cyber Partners, to discuss four current and former public companies charged by the SEC for making "materially misleading disclosures" related to the large-scale cyber attack that stemmed from the hack of SolarWinds in 2020. To learn more about today's stories, visit https://cybercrimewire.com • For more on cybersecurity, visit us at https://cybersecurityventures.com

Talking Cyber. Companies Charged For SolarWinds Deception. Heather Engel, Strategic Cyber Partners.

Episode 2 of the National Cryptologic Foundation's #CyberChats Podcast features Steve Morgan, Founder of Cybersecurity Ventures, Editor-in-Chief at Cybercrime Magazine, and Executive Producer at Cybercrime Radio. During the episode, NCF Host Kennedy Taylor and Steve discussed the evolving landscape of cybercrime and journalism. In this episode, host Paul John Spaulding is joined by Steve Morgan, Founder of Cybersecurity Ventures and Editor-in-Chief at Cybercrime Magazine, to discuss. The Cybercrime Magazine Update airs weekly and covers the latest news, interviews, podcasts, reports, videos, and special productions from Cybercrime Magazine, published by Cybersecurity Ventures. For more on cybersecurity, visit us at https://cybersecurityventures.com

Cybercrime Magazine Update: NCF #CyberChats Podcast Highlights Importance Of Journalism In Cyber.

The Cybercrime Magazine Podcast brings you daily cybercrime news on WCYB Digital Radio, the first and only 7x24x365 internet radio station devoted to cybersecurity. Stay updated on the latest cyberattacks, hacks, data breaches, and more with our host. Don't miss an episode, airing every half-hour on WCYB Digital Radio and daily on our podcast. Listen to today's news at https://soundcloud.com/cybercrimemagazine/sets/cybercrime-daily-news. Brought to you by our Partner, Evolution Equity Partners, an international venture capital investor partnering with exceptional entrepreneurs to develop market leading cyber-security and enterprise software companies. Learn more at https://evolutionequity.com

Cybercrime News For Nov. 22, 2024. Finastra Hit By Data Breach. WCYB Digital Radio.

According to the BBC, the director of 'Call of Duty: Black Ops 6' believes returning players might have contributed to what's been called the series' biggest-ever launch. The latest installment in the huge shooter franchise set new records for day-one players and its Game Pass subscription. In this episode, host Paul John Spaulding is joined by Kyle Haglund, VP, Audio Engineering at Cybercrime Magazine, and Sam White, Video Producer at Cybercrime Magazine, to discuss. • For more on cybersecurity, visit us at https://cybersecurityventures.com

CTRL, ALT, HACKED. 'Call of Duty: Black Ops 6.' Biggest Launch In Series History.

For every citizen and business in the United States, cybercrime is a growing – and perhaps inescapable – threat. So, what do you do if you or someone you know falls victim to a cyberattack, data breach, or hack? The researchers at Cybercrime Magazine encourage you to file a complaint with the FBI’s Internet Crime Complaint Center and the appropriate local authorities in your state. Today's spotlight is on Louisiana. Learn more about reporting a cybercrime across the United States at https://reportacybercrime.com • For more on cybersecurity, visit us at https://cybersecurityventures.com

How To Report A Cybercrime In Oregon or Anywhere in the U.S.


🎙️ RadioCSIRT #102 : Vos news quotidiennes Cybersécurité - Samedi 23 novembre 2024
Au programme aujourd'hui :
💻 TAG-110 et leurs outils HATVIBE et CHERRYSPY
Des hackers russes exploitent des vulnérabilités pour déployer des malwares sophistiqués ciblant des organisations en Asie et en Europe.
Plus d'infos : https://thehackernews.com/2024/11/russian-hackers-deploy-hatvibe-and.html (https://thehackernews.com/2024/11/russian-hackers-deploy-hatvibe-and.html)
💻 Attaques Wi-Fi "Nearest Neighbor" par Fancy Bear
Des espions russes utilisent des réseaux Wi-Fi adjacents pour pénétrer les infrastructures des cibles.
Plus d'infos : https://arstechnica.com/security/2024/11/spies-hack-wi-fi-networks-in-far-off-land-to-launch-attack-on-target-next-door/ (https://arstechnica.com/security/2024/11/spies-hack-wi-fi-networks-in-far-off-land-to-launch-attack-on-target-next-door/)
💻 Microsoft appelle à des actions fermes contre les cyberattaques russes
Brad Smith, président de Microsoft, exhorte à une coopération internationale pour lutter contre les cybermenaces étatiques.
Plus d'infos : https://arstechnica.com/security/2024/11/microsoft-president-asks-trump-to-push-harder-against-russian-hacks/ (https://arstechnica.com/security/2024/11/microsoft-president-asks-trump-to-push-harder-against-russian-hacks/)
💻 Les gestionnaires de mots de passe intégrés, pratiques mais risqués
Les navigateurs comme Chrome ou Edge présentent des vulnérabilités dans leur stockage de mots de passe.
Plus d'infos : https://www.clubic.com/actualite-544694-les-gestionnaires-de-mots-de-passe-des-navigateurs-pratiques-mais-pas-fiables.html (https://www.clubic.com/actualite-544694-les-gestionnaires-de-mots-de-passe-des-navigateurs-pratiques-mais-pas-fiables.html)
💻 Top 25 des vulnérabilités logicielles les plus critiques pour 2024
La CISA dévoile une liste des failles logicielles les plus exploitées pour sensibiliser les développeurs et entreprises.
Plus d'infos : https://www.cisa.gov/news-events/alerts/2024/11/20/2024-cwe-top-25-most-dangerous-software-weaknesses (https://www.cisa.gov/news-events/alerts/2024/11/20/2024-cwe-top-25-most-dangerous-software-weaknesses)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #102 - Vos News quotidiennes Cybersécurité du 23 novembre 2024


🎙️ RadioCSIRT #103 : Vos news quotidiennes Cybersécurité - Dimanche 24 novembre 2024
Au programme aujourd'hui :
💻 Bilan de la CISA sur les infrastructures critiques
Retour sur une évaluation "red team" de la CISA simulant des cyberattaques ciblant une organisation du secteur des infrastructures critiques aux États-Unis.
Plus d'infos : https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-releases-insights-red-team-assessment-us-critical-infrastructure-sector-organization (https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-releases-insights-red-team-assessment-us-critical-infrastructure-sector-organization)
💻 Webinaire NIST sur la confidentialité et les compétences en cybersécurité
Le NIST explore l'évolution des compétences en matière de confidentialité au sein des équipes de sécurité et des politiques de gouvernance.
Plus d'infos : https://www.nist.gov/news-events/events/2025/01/nice-webinar-privacy-workforce-evolves-and-matures (https://www.nist.gov/news-events/events/2025/01/nice-webinar-privacy-workforce-evolves-and-matures)
💻 Failles des pare-feu Palo Alto Networks exploitées
Des vulnérabilités critiques exploitables permettent le contrôle des systèmes de sécurité des réseaux NGFW.
Plus d'infos : https://therecord.media/palo-alto-networks-firewall-vulnerabilities-exploited-patched (https://therecord.media/palo-alto-networks-firewall-vulnerabilities-exploited-patched)
💻 NIST : Une task force IA pour la sécurité nationale
Lancement d’une équipe dédiée à l’impact de l’IA sur les normes et la sécurité des systèmes nationaux.
Plus d'infos : https://www.defenseone.com/policy/2024/11/nist-sets-new-task-force-ai-and-national-security/401266/ (https://www.defenseone.com/policy/2024/11/nist-sets-new-task-force-ai-and-national-security/401266/)
💻 Abus du pilote Avast pour contourner les défenses
Des hackers utilisent un pilote anti-rootkit d’Avast pour désactiver des outils de sécurité.
Plus d'infos : https://www.bleepingcomputer.com/news/security/hackers-abuse-avast-anti-rootkit-driver-to-disable-defenses/ (https://www.bleepingcomputer.com/news/security/hackers-abuse-avast-anti-rootkit-driver-to-disable-defenses/)
💻 Recommandations de l'ANSSI sur les services DNS
L'ANSSI propose des solutions pour sécuriser les infrastructures DNS et limiter les risques associés.
Plus d'infos : https://cyber.gouv.fr/publications/recommandations-relatives-aux-architectures-des-services-dns (https://cyber.gouv.fr/publications/recommandations-relatives-aux-architectures-des-services-dns)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #103 - Vos News quotidiennes Cybersécurité du 24Novembre 2024


🎙️ RadioCSIRT #104 : Vos news quotidiennes Cybersécurité - Lundi 25 novembre 2024
Au programme aujourd'hui :
💻 Les pires mots de passe de 2024 révélés
Un bêtisier dévoile les combinaisons les plus vulnérables utilisées cette année, telles que "123456" et "password".
Plus d'infos : https://www.zdnet.fr/actualites/betisier-des-experts-en-cybersecurite-devoilent-les-pires-mots-de-passe-401818.htm (https://www.zdnet.fr/actualites/betisier-des-experts-en-cybersecurite-devoilent-les-pires-mots-de-passe-401818.htm)
💻 DEFCON : Une démonstration sur les systèmes IoT des stations d’eau
Un chercheur expose les vulnérabilités des systèmes SCADA, montrant comment altérer la qualité de l'eau potable.
Plus d'infos : https://www.theregister.com/2024/11/24/water_defcon_hacker/ (https://www.theregister.com/2024/11/24/water_defcon_hacker/)
💻 Vulnérabilités critiques dans needrestart
Des failles dans cet utilitaire Linux permettent une élévation des privilèges jusqu'à root, affectant des distributions populaires.
Plus d'infos : https://www.theregister.com/2024/11/21/qualys_needrestart_linux_vulnerabilities/ (https://www.theregister.com/2024/11/21/qualys_needrestart_linux_vulnerabilities/)
💻 Campagne d'influence GLASSBRIDGE exposée par Google
Une opération pro-chinoise exploite un réseau de faux médias relayant des contenus d'État.
Plus d'infos : https://thehackernews.com/2024/11/google-exposes-glassbridge-pro-china.html (https://thehackernews.com/2024/11/google-exposes-glassbridge-pro-china.html)
💻 Hackers nord-coréens et escroqueries LinkedIn pilotées par IA
Le groupe Sapphire Sleet vole 10 millions de dollars via des campagnes sophistiquées de social engineering.
Plus d'infos : https://thehackernews.com/2024/11/north-korean-hackers-steal-10m-with-ai.html (https://thehackernews.com/2024/11/north-korean-hackers-steal-10m-with-ai.html)
💻 Vulnérabilités dans les produits IBM
Des failles critiques touchent AIX, QRadar, WebSphere et d'autres solutions IBM, permettant exécution de code et attaques XSS.
Plus d'infos : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1015/ (https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1015/)
💻 Vulnérabilité XSS dans Centreon Web
Une injection de code indirect permet à des attaquants d'exploiter des versions non corrigées du logiciel.
Plus d'infos : https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1011/ (https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-1011/)
📞 Pour toute question ou suggestion, contactez-nous au : 07 68 72 20 09.
🎧 Écoutez RadioCSIRT sur :
Apple Podcasts, Deezer, Spotify, Soundcloud, YouTube, Amazon Music et sur notre site officiel https://www.radiocsirt.org (https://www.radiocsirt.org).


Hébergé par Ausha. Visitez ausha.co/fr/politique-de-confidentialite pour plus d'informations.

RadioCSIRT #104 - Vos News quotidiennes Cybersécurité du 25 novembre 2024

Cybercrime News For Nov. 25, 2024. Hackers Breach Andrew Tate Online University. WCYB Digital Radio.

Game Changers was designed BY government contractors FOR government contractors.  The focus of every episode is to give listeners a new tip, trick, or strategy that will help them find and win more contracts.  Each episode features Subject Matter Experts (SME), companies that are successfully winning contracts, or nationally recognized professional speakers and authors.  The show is hosted by government experts Michael LeJeune from Federal Access and Joshua Frank from RSM Federal.  Their award-winning program Federal Access has helped their clients win over $2 Billion in government contracts.  Game Changers releases a new episode every other week.

Keywords: Government Contractor, Government Sales, Government Contracting, Government Contracts, Government Subcontracting, How to Win Government Contracts, Where to Find Government Contracts, Government Contract Support, FPDS Training, The Government Sales Manual, How to Respond to RFPs, How to Write a Proposal, Capability Statement, Government Trainer, Government Coach, Government Consultant.

The Cybercrime Magazine Podcast is your destination for cybersecurity facts, figures, predictions and statistics. Listen to interviews with top industry experts, Fortune 500 CISOs, and cybersecurity CEOs – plus rundowns of the latest news involving hacks and breaches, coverage of topics such as women in cyber, programs at high schools and colleges, and more. Subscribe wherever you get your podcasts.

New tracks tagged #Cybersecurity