In this episode, join hosts Rob Aragao and Stan Wisseman as they delve into the world of cybersecurity and data privacy with their esteemed guest, Shawn Tuma. Shawn, a seasoned cybersecurity and data privacy attorney, and partner at Spencer Fane, brings over two decades of experience to the table. As the co-chair of the firm's Cybersecurity and Data Privacy Practice Group, Shawn discusses his journey in the field, from the Y2K era to the present day.

The conversation covers key elements of cybersecurity, emphasizing the importance of a continuous, strategic approach to evaluating and managing risks. Shawn shares insights into prevalent issues such as RDP access, backup strategies, and the critical role of multifactor authentication, especially for users of Microsoft Office 365 and Google web-based email.

Reflecting on the evolution of cybersecurity, Shawn  highlights the pivotal moment in 2013 with major data breaches at Target, Home Depot, and Neiman Marcus. He emphasizes the need for a proactive risk management framework and the significance of cybersecurity insurance in today's landscape.

The hosts and Shawn  discuss the changing role of Chief Information Security Officers (CISOs) and the growing recognition of their strategic importance within organizations. Sean stresses the value of building relationships with law enforcement, particularly federal agencies like the FBI and Secret Service, to enhance incident response capabilities.

Throughout the episode, Shawn Tuma's passion for cybersecurity and practical, actionable advice shines through, making this conversation a must-listen for anyone navigating the complexities of cybersecurity in the modern business landscape.

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

So You've Been Hacked, Now What? (Christmas Replay Edition) - Ep 77

The extent to which a victim/survivor-centered approach (VSCA) should be incorporated into data protection remains an emerging issue for accountability actors. What does a VSCA look like when collecting data through open-source channels, for example? On a technical level, it means having processes in place to secure and govern data. On a human level, it means recognizing the rights of victims/survivors, building trust among historically marginalized and undervalued communities, and mitigating risks to individuals whose data is entrusted to our care.

In this post, part of a new series on Cybersecurity and data protection in humanitarian action, IIIM-Syria Associate Legal Officer Rayyan Ghuma and Information and Evidence Officer Birhane Wossen Reta delve into areas of concern at the intersection of victim/survivor-centeredness, data protection, and open-source collection. They ultimately draw upon the IIIM experience to continue an ongoing conversation about data protection and the VSCA in inclusive accountability.

Victim/survivor-centeredness, data protection and open-source collection: lessons from IIIM-Syria

Today's 'Daily Briefing' on NewsPlanetAI focuses on California's severe storms leading to a state of emergency, highlighting the escalating impact of climate change. We cover a range of global events: the UK's controversy over transgender rights and NHS dental incentives, Argentina's stance on Hamas, Thai-Muslim separatist negotiations, EU-Hungary legal tensions, Taiwan's travel halt to China, AI's role in historical research, and Lufthansa's staff strike in Germany. We analyze the implications of these events on geopolitics, healthcare, and international relations. Regional updates include Argentina's economic struggles, Miss Japan 2024 controversy, Ukraine's cyberattack, and Israel's actions in Gaza. Our 'Social Soundbar' invites discussion on the groundbreaking stone tool study and its impact on our understanding of human evolution.

Daily Briefing - February 7, 2024 - 08:37 AM

Join us as we delve into the latest iPhone update, iOS 17, and explore its innovative feature, NameDrop. This cutting-edge tool simplifies contact sharing but has ignited concerns among parents and law enforcement alike. In this podcast, we unravel how NameDrop works, its potential risks, and why safeguarding your child's privacy is crucial in today's digital landscape. Learn practical steps to manage NameDrop effectively and empower yourself as a tech-savvy parent. Tune in for insightful discussions on digital parenting, cybersecurity, and ensuring your child's safety in the age of smartphone connectivity.

Should parents worry about iPhone's 'NameDrop' feature

Join Richard Simmons in the 'HEAL Security Dispatch Daily Digest,' the premier destination for the latest cybersecurity updates. In this episode, we dive deep into the world of online crime, from explaining the code behind a strangely long-lived Ukrainian malware, to Microsoft's unexpected server mishap, to a French hospital's struggle with a cyberattack. We also explore the latest advancements in online threats like 'SoumniBot', a deceptive Google Ads campaign, and the recent busting of a notorious phishing provider. Lastly, we look at the digital black market for stolen personal health information, emphasizing the importance of stronger digital safeguards. Tune in for all this, and more, in today's digest. 
https://healsecurity.com/

Advanced Malware and Cyber Tricks: Uncovering OfflRouter, and the Microsoft Copilot Mishap

Welcome to "Tech Sentry: Monitoring Privacy Innovations & Cybersecurity Challenges", your go-to podcast for staying informed about the latest developments in tech privacy, cybersecurity, and AI advancements. In each episode, we delve into the headlines shaping the digital landscape, covering a wide range of topics from the initiatives of tech giants like Apple and Google to safeguard user privacy, to the unveiling of vulnerabilities in critical healthcare systems by cybersecurity firms like Nozomi Networks Labs. We provide insights into how these advancements impact individuals, businesses, and society as a whole. From the rapid evolution of AI in healthcare by companies such as RapidAI, Clew Medical, and Dandelion Health to the rising concerns over deepfake technology and its implications for authenticity in digital content, we analyze the trends shaping the future of technology. Join us as we navigate the complex intersection of technology, privacy, and security, offering expert commentary and actionable insights to help you stay ahead in the ever-changing digital landscape.

Privacy & Security Roundup: Tech Giants' Moves, Cyber Vulnerabilities, and AI Advances

17  minutes ago

READ HERE : https://saroendenggosong.blogspot.com/?real=1506347258 

[PDF READ] Cyberspace, Cybersecurity, and Cybercrime 
Presented from a criminal justice perspective, Cyberspace, Cybersecurity, and Cybercrime introduces students to the interdisciplinary field of cybercrime by exploring the theoretical, practical, and legal framework it operates under, along with strategies to combat it. Authors Janine Kremling and Amanda M. Sharp Par

✔pdf⚡  Cyberspace, Cybersecurity, and Cybercrime

The "HEAL Security Dispatch Daily Digest" is a cutting-edge podcast presented by "HEAL Security," hosted by Richard Simmons from London, focusing on the intersection of healthcare and cybersecurity. In the latest episode, the podcast delves into a range of cybersecurity incidents and developments that have significant implications for both the healthcare sector and broader cybersecurity landscape. Highlights include an inventive workaround for glitches in CrowdStrike's security software using barcode scanners, a detailed account of how KnowBe4 was tricked by a North Korean threat actor using AI to bypass security checks, and an update on Microsoft's latest patch for Windows 11 addressing backup issues.

The episode also covers an indictment against a North Korean hacker for attacks on the U.S. healthcare industry, legal action by the National Community Pharmacists Association following a data breach, and advisories about increasing cyber espionage from North Korean actors. Innovations in healthcare technology are also discussed, including FDA-approved imaging software by Microstructure Imaging, AI in healthcare hiring by Vivian Health, and a population health management platform by Innovaccer. Additionally, it tackles the urgent issue of a national blood shortage in the UK due to a cyber attack on the National Health Service. The diverse range of stories covered in this episode underscores the critical nature of cybersecurity across various sectors, emphasizing the importance of innovative solutions and international cooperation in combating cyber threats. 
https://healsecurity.com/

Cybersecurity Frontlines: From Innovative Fixes to Global Threats in Healthcare and Beyond

Okta Public Sector CTO and former FBI executive Christine Halvorsen joins Okta Principal Solutions Engineer Pam Vanmeter in a new podcast discussion on how modern Customer Identity and Access Management (CIAM) platforms help state and local agencies lower costs and improve customer experience and security. The podcast is hosted by Scoop News Group's Wyatt Kash and sponsored by Okta.

Centralized identity management: Okta's Christine Halvorsen and Pam Van Meter

In this episode of Reimagining Cyber, hosts Rob Aragao dives into the intersection of sports and cybersecurity, inspired by a cyber attack at the recent Paris Olympics.

The conversation takes a deep dive into the cyber threats that have historically plagued the Olympics, from the 2016 Rio Games to the 2018 Winter Olympics in Pyeongchang. They discuss the frequent denial of service attacks, ransomware, and phishing campaigns that target such high-profile events. The Tokyo 2020 Olympics saw an astounding 450 million cyber events, setting the stage for heightened vigilance at the Paris Games, where over 3 billion cyber threats were anticipated.

Rob and Ben explore the potential motivations behind these attacks, ranging from geopolitical tensions to the desire for disruption or financial gain. They emphasize the importance of rigorous preparation, including ethical hacking and advanced security measures, to protect such significant global events.

Tune in to hear how the world’s largest sporting event has become a prime target for cybercriminals and what it takes to defend against these sophisticated threats.

Olympics vs Cyber Attacks, and Did Paris Win Gold? - Ep 100

In this episode of "Reimagining Cyber," Rob Aragao hosts a conversation with Tammy Klotz, a best-selling author and current CISO at Trinseo. Tammy discusses her career trajectory, which includes leadership roles at Covanta Energy and Versum Materials, and shares insights from her recent book, Leading with Empathy and Grace: Secrets to Developing High-Performing Teams. 

 Additionally, she addresses the challenges women face in cybersecurity, offering advice on building confidence, taking risks, and overcoming barriers in a male-dominated field. The episode provides valuable takeaways for aspiring leaders and women looking to enter or advance in the cybersecurity industry.

Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Leadership, Empathy, and Women in Cybersecurity - Ep 111

In this episode, Roland Clouthier, former CSO of TikTok and cybersecurity expert,  explores the role of AI in cybersecurity, the evolving landscape of cloud security, and the critical importance of identity management. Roland shares insights on how to effectively allocate security budgets, the importance of understanding risk tolerance, and the need for transparency in AI governance. Tune in to gain valuable tips on future-proofing your organization’s cybersecurity strategy in the face of emerging challenges.


Follow or subscribe to the show on your preferred podcast platform.
Share the show with others in the cybersecurity world.
Get in touch via reimaginingcyber@gmail.com

Insights from a Former TikTok CSO - Ep 112

In the latest episode of Reimagining Cyber, Rob interviews Bindu Sundaresan, Director of Cybersecurity Solutions at Level Blue, about the evolution and significance of cyber resilience. Bindu, with over 20 years in cybersecurity, discusses how the field has shifted from a focus solely on prevention to a broader approach that includes resilience and recovery.

Key points from the conversation:

1.    Historical Focus: Traditionally, cybersecurity strategies concentrated on preventing attacks. However, the current threat landscape necessitates a shift towards resilience, acknowledging that breaches are inevitable.

2.    Modern Approach: Organizations are now integrating business continuity planning and disaster recovery with cybersecurity efforts. This holistic approach ensures that operations can continue and recover swiftly after an attack.

3.    Business Alignment: Bindu emphasizes that cybersecurity should be seen not just as a technical issue but as a business problem affecting overall operations. This shift in perspective helps align cybersecurity efforts with business outcomes and improves the strategic value of cybersecurity roles.

4.    CISO's Role: For Chief Information Security Officers (CISOs), successfully integrating resilience into their programs involves understanding and prioritizing risks based on business impact. This requires effective communication with other business units and aligning cybersecurity investments with broader business goals.

5.    Evolution of Cybersecurity: The conversation highlights the shift from compliance-driven approaches to risk-driven and resilience-focused strategies. This evolution is crucial for achieving digital resilience and 

6.    Identifying Sensitive Data: Organizations must first identify what constitutes sensitive data for their specific context, considering regulatory requirements, business use, and industry standards. Without this understanding, investments in data protection might be misallocated.

7.    Data Classification and Flow: It is crucial to classify sensitive data and map how it flows within and outside the organization. This helps in applying appropriate security controls and prevents unnecessary complexity and expense.

8.    Continuous Review: Data classification and protection are not one-time tasks. Organizations need to regularly update their data inventory and classification as their data environment evolves

9.    Incident Response and Resilience: Organizations should develop tiered recovery plans that prioritize critical business functions during incidents. Regularly updated tabletop exercises should simulate realistic and current scenarios to test response plans effectively.

10.Cross-Functional Involvement: Effective incident response involves cross-functional teams, including IT, legal, PR, and executive leadership. Establishing what constitutes minimum viable operations helps prioritize recovery efforts and resource allocation during an incident.

11.Evolving Practices: The goal is to continuously refine incident response and recovery practices to improve resilience over time. Embracing a lifecycle approach to security and resilience can turn digital resilience into a competitive advantage.

Cyber Resilience: Are Your Strategies Fit For Purpose? Ep 115

Are you ready to take control of your personal data in today’s digital world? In this episode, we dive deep into the groundbreaking Data Sovereignty Act, a transformative legislative proposal that redefines how individuals and governments manage data privacy and protection.

From securing your digital identity to empowering states with stronger data governance, this Act aims to give you full ownership over your data. We'll explore the key provisions of the Act, including enhanced privacy controls, encryption standards, and the rights you deserve. Plus, we'll unpack the legal and technological challenges ahead and how a future Department of Technology can overcome them.

Imagine having complete transparency over how your data is used, with the power to control, access, and protect it. Discover how this legislation could pave the way for a more secure and accountable digital environment, safeguarding your rights while promoting innovation across the states.

Tune in to learn more about how the Data Sovereignty Act can revolutionize data privacy and what it means for your digital future. Don’t miss out—empower yourself with the knowledge to protect your data today!

Data Sovereignty Act

In this episode, Dr. Chase Cunningham discusses with John and Jaye the evolving landscape of Zero Trust cybersecurity. They explore the global adoption of Zero Trust principles, the importance of maturity models, and the need for accountability at all levels of an organization. 

The conversation highlights the challenges of user awareness, the future of Zero Trust, and the resources available for education. They also touch on the cultural shift needed within organizations to prioritize cybersecurity as a shared responsibility.

Takeaways
•	Zero Trust is increasingly recognized as a strategic initiative globally.
•	Progress in cybersecurity should be measured incrementally.
•	Maturity models are essential for assessing Zero Trust implementation.
•	Leadership engagement is crucial for effective cybersecurity strategies.
•	User awareness programs often fail if they complicate workflows.
•	Cybersecurity should be seen as a fundamental human right.
•	Organizations must take personal accountability for their cybersecurity choices.
•	The future of Zero Trust will involve continuous evolution and adaptation.
•	Sharing experiences and lessons learned in cybersecurity is vital.
•	Education and resources for Zero Trust need to be more accessible.

Follow & Subscribe on all Podcast platforms.

link.chtbl.com/XIW5zsAn

What is the Zero Trust Forum about?  It’s about empowering zero trust security professionals with strategies, architecture, and real world journeys to secure the digital future, the right way!

Follow the Zero Trust Forum on LinkedIn www.linkedin.com/company/zero-trust-forum/.

Follow Jaye Tillson on LinkedIn - www.linkedin.com/in/jaye-tillson/

Follow John Spiegel on LinkedIn - www.linkedin.com/in/john-spiegel-2011543/

Navigating the Zero Trust Landscape

Zeron Symphony takes you on a lyrical journey through the matrix of cybersecurity, blending sharp rhymes with insights into managing cyber risks. From quantifying exposure to fortifying defenses with Zeron's CRPM and Vendor Pulse, this rap is your anthem for staying ahead of the curve in an ever-evolving digital battlefield. 

Turn up the volume and let the beat drop on resilience and innovation!
Stay cyber-smart because #securitymatters.


Lyrics:

(Verse 1) Yo, step into the matrix, let me set the scene, Where data's the currency and hackers are mean. Zero-day exploits, phishing in disguise, Your weakest link's the doorway, don't act surprised.
Asset inventory, know your stack, From endpoints to servers, keep it all intact. Firewalls and proxies, layered defense, But without real insight, it’s just pretense.
Threat modeling's key, map the attack chain, Enumerate risks, don’t play this in vain. With CIA triad—confidentiality tight, Integrity checks, and availability right.

Cyber risk management let’s keep it tight. Quantify exposure, keep your metrics in sight. From frameworks to scans, play the long game, Stay ahead of the curve, or it’s you they’ll blame.

(Verse 2) NIST CSF is the foundation we build, Identify, protect, detect threats in the field. Respond and recover, it's all in the game, Without a solid plan, you're just chasing the flame.
Run your CRPM, correlate events, Link it to the business, make dollars make sense. FAIR or QBER, let the models define, How to value your risks in dollars, not time.
Supply chain’s a beast, watch the vendors you trust, One weak link, and your systems combust. Vendor Pulse kicks in, scoring the threat, Mitigate the gaps before they reset.

Phishing phantoms flood firewalls, finding flaws, Malware mutates, masquerading with malicious laws. Scripts slither silently, subverting secure systems, swiftly stopping sabotages Data deserts defenses, driving devastating attacks.
Backups bolster business, blocking breach brawls, Patching protocols, prevent pitfalls. Secure systems swiftly, scrutinize schemes, Stop cyber sabotage, shattering sinister dreams.
Risk registers roar, resilient and robust, Frameworks fortify faith, fostering firm trust. Threats tamed through tactics, technical tools thrive, A cyber fortress forged, keeping data alive.

SOC teams on the clock, SIEM dashboards pop, AI-driven insights, let the false flags drop. From MITRE ATT&CK to red-team drill, Every gap you close is a gap you kill.

Cyber risk management let’s keep it tight. Quantify exposure, keep your metrics in sight. From frameworks to scans, play the long game, Stay ahead of the curve, or it’s you they’ll blame.

(Verse 3) Continuous assessment, posture must adapt, Threat landscape shifts don't fall in the trap. With Zeron's platform, keep your risk in sight, CRPM reigns supreme, winning the fight.

Compliance is king, PCI, GDPR, But ticking the box won’t take you far. ISO, SOC 2, your audits are real, But align them with risks to truly seal the deal.

Cyber threats evolve, so we stay ahead, A proactive mindset is how we're bred. So, bring your A-game, leave no gaps to chance, Cyber risk managed, let's advance.

Drop the mic on cyber threats!

Zeron Symphony

Building and maintaining a robust cybersecurity framework is a multifaceted process that requires a comprehensive approach, including governance, compliance, endpoint protection, secure access, and continuous improvement. By aligning cybersecurity strategies with organizational objectives, adhering to regulatory requirements, and leveraging advanced tools and frameworks, organizations can effectively safeguard their digital assets.

Cybersecurity Blueprint for CTOs and CISOs

Listen to experts discuss the latest in Zero Trust security on our podcast! Explore topics like adaptive access control, data protection, and insider threat mitigation. Stay informed about Zero Trust architecture, best practices, and real-world case studies to enhance your cybersecurity strategy. Tune in for insights and advice on building a resilient, secure infrastructure.

"NewsPlanetAI", uses cutting-edge Artificial Intelligence technology to analyze, categorize, summarize, and present news from a wide array of global sources. Here’s how it works in four easy-to-understand steps:

News Collection: NewsPlanetAI starts by "scraping" news from a variety of trusted and diverse news sources from around the world. "Scraping" means that it automatically collects and gathers news articles from these outlets.
Categorization: Once the articles are collected, NewsPlanetAI classifies each one into understandable and relevant categories like "World News", "US Politics", "Economy & Finance", and others. This gives a better structure to the broad range of news that it collects.
Summarization: This is where the real magic happens. NewsPlanetAI uses top-tier AI technology to read through each article and generate a condensed and objective summary of what the article is about. The technology identifies key information and presents it in a straightforward and easily digestible format.
Super Summary: At the end of each day, NewsPlanetAI produces a 'Super Summary'. It takes all the summarized news and synthesizes it into one brief professional news broadcast-style summary. This feature is perfect for busy individuals who want an overview of the day's most important global happenings.
So, in essence, NewsPlanetAI is your personal news assistant that keeps you informed about the world without asking you to sift through hundreds of articles every day. It takes on the task of perusing multiple news sources and provides you with objective, concise summaries, saving you time while keeping you informed. By leveraging AI, NewsPlanetAI ensures you always get a balanced view of what’s happening across the globe.

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Mobicip is the most popular parental control software designed to help parents manage and monitor their children's online activities on smartphones, tablets and laptops. Mobicip offers features such as content filtering, screen time management, app blocking, location tracking and internet usage reporting.

StateScoop features the latest leaders and innovators, news and events in state and local government technology. StateScoop gathers top leaders from across government, academia and the tech industry to discuss ways technology can improve government, and to exchange best practices and identify ways to achieve common goals.

Explore the critical intersection of cybersecurity and business impact while gaining insights into CISO priorities with "Reimagining Cyber." Stay informed on the latest cybersecurity news, trends, and solutions tailored for today's CISOs and CIOs. Episodes cover a range of topics, including the role of AI in cybersecurity, preventive measures to stop cyber attacks, response strategies for cyber attack victims, cybersecurity challenges in healthcare, the future landscape of cyber security, computer security essentials, managing cybersecurity budgets, and the implications of SEC rulings.

Engage with industry experts and CISOs who share their perspectives on what matters most in the cybersecurity landscape. Hosted by Rob Aragao and Stan Wisseman, seasoned Security Strategists with CyberRes, this podcast is your go-to resource for staying updated on cybersecurity developments and addressing common challenges in the rapidly evolving digital landscape.

The International Committee of the Red Cross (ICRC) Humanitarian Law & Policy blog is a unique space for timely analysis and debate on international humanitarian law (IHL) issues and the policies that shape humanitarian action.

New tracks tagged #Cybersecurity,