In this episode of Brass Tacks - Talking Cybersecurity, Daniele Mancini, Field CISO at #Fortinet explains the three main drivers of change for #cybersecurity and the challenges these present for the #CISO:

➡️ The explosion in data volumes
➡️ The increasing speed of innovation
➡️ The growing interconnection of the digital ecosystem

Tune in for a discussion on the importance of balancing technological innovation and business strategy and creating resilience to a broad range of cybersecurity incidents through a joined-up strategy supported by the three essential pillars of people, processes, and technology. 

Learn more: https://www.fortinet.com/blog/ciso-collective/building-cyber-resilience?utm_source=Social&utm_medium=YouTube&utm_campaign=BrassTacks-GLOBAL-Global&utm_content=BG-YouTubeGlobal-U&utm_term=Org-Social&lsci=7012H0000021nOIQAY&UID=ftnt-5649-736091

More about Fortinet: https://ftnt.net/6056oiHQE

Read our blog: https://ftnt.net/60529liW2

Follow us on LinkedIn: https://ftnt.net/60549liW4

Brass Tacks #6 - Building Cyber Resilience: Aligning People, Processes, Tech, & Compliance

Welcome to the HEAL Security Dispatch Daily Digest, your essential podcast for staying informed on the latest developments at the intersection of healthcare and cybersecurity. Hosted by Richard Simmons from London, this podcast explores the evolving landscape of digital security threats and solutions. On today's episode, dated October 1, 2024, we delve into various incidents shaping the cybersecurity realm. Highlights include increased IT and cybersecurity budgets in U.S. hospitals following the Change Healthcare hack, a Rackspace data breach due to a zero-day vulnerability, and Meta's €91 million fine for storing millions of plaintext passwords. We also discuss the growing prevalence of cyber incidents causing IT downtime in UK businesses, as well as the repercussions of a ransomware attack on UMC Health System that led to patient diversions. Additionally, we cover the arrest of four individuals linked to the LockBit ransomware and the emergence of Rhadamanthys Stealer, an AI-powered malware targeting cryptocurrency wallets. Finally, we note the surge in ransomware attacks in the healthcare sector and Microsoft's recent fix for an Outlook issue affecting users with extensive folder structures. Join us as we navigate the complexities of cybersecurity in today's digital age. 
https://healsecurity.com/

HEAL Security Dispatch: Meta's €91M Fine, and U.S. Hospitals Boost Cybersecurity Budgets

HEAL Security Dispatch Daily Digest is a leading podcast providing the latest insights into the dynamic world of cybersecurity, specifically focusing on the intersection with healthcare. Hosted by Richard Simmons from London, this podcast delves into contemporary cybersecurity issues, offering expert analysis and comprehensive discussions on emerging threats and vulnerabilities. In this episode, the podcast addresses several pressing cybersecurity concerns, including the emergence of the Gorilla botnet that has launched over 300,000 DDoS attacks across 100 countries. It also covers Qualcomm's recent patch for a critical zero-day vulnerability, a cyberattack on American Water Works affecting millions, and the infiltration of major U.S. telecommunications providers by Chinese cyberspies. Additionally, the episode highlights a data breach impacting Comcast customers, a scam involving counterfeit iPhones at Apple, and an inquiry into Ryanair's ID verification process potentially breaching GDPR regulations. HEAL Security Dispatch Daily Digest stands out as a critical resource for staying informed on cybersecurity developments, with a focus on how these issues impact critical sectors like healthcare and beyond. 
https://healsecurity.com/

Cybersecurity Chronicles: Gorilla Botnet, Qualcomm Vulnerabilities, and Telecom Infiltrations

HEAL Security Dispatch Daily Digest is your trusted daily update on the intersection of healthcare and cybersecurity, hosted by Richard Simmons from London. On Friday, October 11th, 2024, the podcast delved into pressing issues in the cybersecurity landscape, highlighting critical updates and vulnerabilities. GitLab released crucial patches for its software editions to address major flaws, including a severe vulnerability with a high CVSS score, while warning about unauthorized access risks. Additionally, a sophisticated phishing campaign exploiting QR codes and Telegram bots was uncovered, posing new challenges in credential theft. The Octo2 malware, targeting Android users by masquerading as legitimate apps, raises alarms about global cybersecurity threats, emphasizing the need for vigilant downloading practices. Furthermore, a Chinese government-backed hacking campaign has urged U.S. lawmakers to demand greater transparency from federal agencies and telecom companies regarding breaches in sensitive communication networks. The Cybersecurity and Infrastructure Security Agency (CISA) flagged vulnerabilities in F5 BIG-IP cookies as a significant concern, urging protective measures. Recent data has shown a notable rise in substantial cyber insurance claims, driven by privacy breaches, with litigation risks increasing across the U.S. and Europe. Lastly, Casio faced a ransomware attack resulting in customer data theft, underscoring ongoing cybersecurity challenges in the tech industry, as the company collaborates with law enforcement to strengthen defenses. 
https://healsecurity.com/

HEAL Security Dispatch: GitLab's Urgent Fixes, and Casio's Ransomware Breach

The HEAL Security Dispatch Daily Digest, hosted by Richard Simmons, is a premier podcast providing the latest cybersecurity trends and expert insights with a particular focus on the healthcare sector. Broadcasting from London, the show delves into pivotal topics each weekday, unveiling complex cybersecurity developments affecting diverse industries. Recent discussions include WhatsApp's enhanced encryption for contact databases, CISA's updated Known Exploited Vulnerabilities Catalog, and the Lazarus Group's exploitation of a Google Chrome zero-day via a DeFi game. The podcast also highlights the surge in politically driven content on social media ahead of the 2024 U.S. elections, as reported by Resecurity, as well as the emergence of new Grandoreiro banking malware variants and Google's initiatives in advanced digital security and AI regulation. Additionally, the discovery of exposed cloud credentials in widely-used mobile apps underscores the ongoing challenges in cybersecurity practices. By keeping listeners informed of these critical updates, the show ensures that professionals and enthusiasts alike are well-equipped to navigate the ever-evolving digital landscape. 
https://healsecurity.com/

Today's Spotlight: WhatsApp Privacy Enhancements, CISA Alerts, and Google's AI Innovations

The buck stops here—or does it? How much should former US President, Harry S Truman's famous slogan apply to the role of CISO?

In this episode of Brass Tacks - Talking Cybersecurity, host Joe Robertson is joined by Raffaele Maresca, Global CISO at AkzoNobel, for an illuminating discussion of the evolving role of the CISO. Rather than pinning ultimate responsibility for all cyber risk on the CISO, Raffaele argues that once risks have been identified, quantified, and a plan of action agreed for their reduction, it should then be up to asset owners to ensure adherence to the agreed plan.

He then shares approaches that have proved effective in managing the expectations of non-technical board members who often have a more binary, "is my business at risk or not?", attitude to cybersecurity.

Whatever your role in today's digital world, don't miss this broad and fascinating discussion."

Learn more: https://www.fortinet.com/blog/ciso-collective/distributing-ownership-of-an-organization-cybersecurity-risks

More about Fortinet: https://ftnt.net/60595CcyH

Read our blog: https://ftnt.net/60505Ccyj

Follow us on LinkedIn: https://ftnt.net/60515Ccyd

Brass Tacks #8 - Board Communication Essentials for CISOs:  Meeting Exec Expectations

The HEAL Security Dispatch Daily Digest is your trusted source for up-to-date cybersecurity news, focusing on healthcare and technology. Hosted by Richard Simmons from London, the show provides expert insights into critical security topics. In this episode for Tuesday, November 12th, 2024, we cover VMware’s decision to make its Workstation and Fusion products freely available, aiming to expand user access. Ahold Delhaize reports a cybersecurity breach in its U.S. supermarket chains due to unauthorized activity in a vendor’s system, sparking data privacy concerns.

We also discuss the new 'GoIssue' cybercrime tool, which targets GitHub developers by exploiting repository vulnerabilities, highlighting the urgent need for enhanced cybersecurity measures. Additionally, Adobe's latest Patch Tuesday release addresses critical flaws in popular software, while Citrix patches zero-day vulnerabilities in its Recording Manager. Lastly, Signal introduces a "call links" feature to streamline encrypted group communication. Stay informed on these stories and more at healsecurity.com.

HEAL Security Dispatch: VMware's New Access Policy, and GitHub Cybercrime Risks

In the latest episode of Brass Tacks - Talking Cybersecurity, #Fortinet's Filippo Cassini delves into the anatomy of effective cybersecurity posture and discuss how increasing network and security complexity is driving a shift from the selection of security components on a best-of-breed basis to an integrated platform approach.

Today's SecOps teams not only have to make sense of ever-increasing volumes of IoC (indicators of compromise) and other event data, but they need to respond faster and more efficiently to escape the heavy non-compliance penalties of new regulations.

These challenges are explored with fascinating insights into the inner-workings of modern cybercrime and the potential role of new technologies such as AI, LLMs, and the opportunities for automation they enable.

Learn more: https://www.fortinet.com/blog/ciso-collective/talking-to-the-c-suite-about-cybersecurity?utm_source=Social&utm_medium=Other&utm_campaign=BrassTacks-GLOBAL-Global&utm_content=BG-AmplifyGlobal-U&utm_term=Org-Social&lsci=7012H0000021nOIQAY&UID=ftnt-9768-338496

More about Fortinet: https://ftnt.net/60595CcyH

Read our blog: https://ftnt.net/60505Ccyj

Follow us on LinkedIn: https://ftnt.net/60515Ccyd

Brass Tacks #9: The Anatomy of Effective Cybersecurity Posture: AI, LLMs, and Beyond

Quantum cryptography is a cutting-edge field that leverages the principles of quantum mechanics to secure communication and protect data. Unlike classical cryptography, which relies on mathematical algorithms, quantum cryptography uses the fundamental properties of quantum physics to achieve security that is theoretically unbreakable.

Fundamentals

Quantum Mechanics Principles:

Superposition: Allows quantum systems to exist in multiple states simultaneously, enabling complex computational and cryptographic processes.
Entanglement: Particles that are entangled share correlations, regardless of distance, ensuring the integrity of communication.
No-Cloning Theorem: Prohibits copying an unknown quantum state, providing inherent security against eavesdropping.

Quantum Key Distribution (QKD):

The most prominent application of quantum cryptography.
Uses quantum states of particles (e.g., photons) to distribute cryptographic keys securely.
Example Protocol: BB84 Protocol, which ensures that any interception of the quantum channel will alter the quantum states, making eavesdropping detectable.
Applications

Secure Communication:

Governments and financial institutions use QKD to safeguard sensitive communications.
Example: The quantum network linking Beijing and Shanghai.

Blockchain Security:

Enhances blockchain technology by securing transactions and preventing tampering using quantum-safe methods.

Internet of Things (IoT):

Secures IoT devices against cyberattacks by integrating quantum-based cryptographic systems.

Military and Space:

Military organizations and space agencies utilize quantum cryptography for secure satellite communications and data transmissions.

Future Prospects

Advancements in Hardware:

Ongoing development of quantum repeaters to extend the range of QKD systems.
Miniaturization of quantum devices for broader accessibility.

Integration with Quantum Computing:

Future systems aim to be quantum-safe, protecting data against the potential threats posed by quantum computers.

Global Quantum Networks:

Efforts are underway to establish a worldwide quantum internet for ultra-secure communication.

Quantum-Resistant Algorithms:

Hybrid systems combining quantum and classical cryptography to transition smoothly into a quantum-secure future.
Quantum cryptography is at the forefront of securing our digital world, promising to reshape data protection standards in the face of evolving technological challenges. As quantum technologies mature, the field will likely become integral to cybersecurity, ensuring a safer and more private digital future.

Kind regards Jörg-Owe Schneppat

Quantum Cryptography

Quantum Cryptography: Fundamentals, Applications and Future

Quantum communication is rapidly emerging as one of the most exciting frontiers in the world of technology. Unlike classical communication systems, which rely on classical bits and signals, quantum communication takes advantage of the unique properties of quantum mechanics to provide a level of security and efficiency that has never been possible before. At the heart of quantum communication lies the concept of quantum entanglement, where two or more particles become linked in such a way that the state of one particle instantly influences the state of the other, no matter the distance between them. This phenomenon opens the door to secure communication channels that are practically immune to eavesdropping.

One of the most prominent technologies in quantum communication is quantum key distribution (QKD), which allows two parties to securely share encryption keys over long distances. Using the principles of quantum mechanics, QKD ensures that any attempt to intercept or measure the key will alter its state, thus revealing the presence of any eavesdropper. This makes quantum communication systems fundamentally more secure than their classical counterparts, offering a new level of protection against cyber threats and data breaches.

In addition to QKD, quantum communication also includes the development of quantum repeaters, which are necessary to extend the range of quantum communication networks. These repeaters allow quantum information to be transmitted over longer distances by overcoming the limitations of current technology. Furthermore, the combination of quantum communication with existing infrastructure is paving the way for the creation of a global quantum internet, where data is transmitted securely and efficiently across the world using quantum principles.

In this episode, we will explore the fundamental concepts behind quantum communication, the cutting-edge technologies that are making it a reality, and the diverse applications that promise to revolutionize industries ranging from cybersecurity to global communication networks. We will also examine the challenges that still lie ahead and what the future holds for this transformative technology.

Join us as we dive into the world of quantum communication, where the possibilities are as vast and secure as the quantum world itself!

#QuantumCommunication #QuantumSecurity #QuantumKeyDistribution #QuantumEntanglement #QKD #QuantumNetworking #QuantumInternet #CyberSecurity #QuantumTechnology #QuantumEncryption #QuantumRepeaters #SecureCommunication #QuantumAdvancements #FutureOfTechnology #QuantumRevolution

Quantum Communication

Quantum Communication: Concepts, Technologies, and Applications

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

The AI VIPs page is a tribute to those pioneers—from the early architects like Alan Turing and John McCarthy, who laid the groundwork for AI, to the modern-day innovators who continue to push the boundaries of what’s possible.

Fortinet’s cybersecurity podcast provides highlights and commentary about securing the largest enterprise, service provider, and government organizations around the world.
Join Fortinet’s top experts as they discuss today’s most important cybersecurity topics.
 
The Fortinet Security Fabric platform addresses the most critical security challenges and protect data across the entire digital infrastructure, whether in networked, application, multi-cloud or edge environments. Both a technology company and a learning company, the Fortinet Network Security Institute has one of the largest and broadest cybersecurity training programs in the industry. Learn more on the Fortinet Blog.

New tracks tagged #InformationSecurity