How safe is your digital footprint? This week on SecureTalk, we sit down with Scott Augenbaum, a retired FBI agent turned cybercrime prevention guru, to dissect the LastPass breach and extract lessons that resonate with every cyber enthusiast. 

Through the lens of "The Three Truths," Scott demystifies common misconceptions about cybercrime and unveils strategies to navigate the minefield of digital threats. Tune in to this thought-provoking episode and empower yourself with the knowledge that could be the difference between being a victim and a victor in the cyber realm

As cybersecurity experts and enthusiasts, how do you evaluate your practices in light of these insights?

Navigating Cyber Threats: FBI Perspectives on Protecting Business and Family

A big shoutout to TCM Security for sponsoring this video. Register now to receive a 50% discount on your first month at the TCM Security Academy, potentially making your most significant step toward a career in ethical hacking.  Go here: https://davidbombal.wiki/3vQsqWm

Farah works at Meta and shares her amazing story of going from studying mass media, to hacking and now working at Meta. Did you know that Facebook and Meta have a bug bounty program that allows you to legally hack them and get paid? Go here:  

 / whitehat  

// Farah Hawa’s SOCIAL//
YouTube:    

 / @farahhawa  
LinkedIn:   

 / farah-hawa-a012b8162  
X:  https://x.com/farah_hawaa
Instagram:   

 / farah_hawaa  

// Resources REFERENCE //
YouTube videos:  
2023 Path to Hacking Success:    

 • 2023 Path to Hacking Success: Top 3 B...  
Bug Bounty:  Get paid to hack PayPal and TikTok // Featuring Nahamsec:    

 • Bug Bounty: Get paid to hack PayPal a...  
My updated bug bounty resources:    

 • my updated bug bounty resources  

YouTube channels:  thenewboston:    

 / @thenewboston  

Websites:
hackerone:  https://www.hackerone.com/
hacker101:  https://www.hacker101.com/
Burp Suite on PortSwigger:  https://portswigger.net/support/burp-...
PortSwigger Web Security Academy:  https://portswigger.net/web-security
Firefox Source Docs: https://developer.mozilla.org/en-US/
Pentester Land:  https://pentester.land/
Infosec:  https://infosec-conferences.com/
Vickie Li Blog:  https://vickieli.dev/
Subfinder:  https://github.com/projectdiscovery/s...
Sublist3r: https://github.com/aboul3la/Sublist3r
Frida:  https://frida.re/
Meta Bug Bounty Program:   

 / whitehat  

Books:
Real World Bug Hunting by Peter Yaworski
USA:  https://amzn.to/3JmRven
UK:  https://amzn.to/4d3S5M0

Bug Bounty Bootcamp by Vickie Li
USA:  https://amzn.to/3xGa4rz
UK:  https://amzn.to/49PwPa0

// David's SOCIAL //

Discord: discord.com/invite/usKSyzb
Twitter: www.twitter.com/davidbombal
Instagram: www.instagram.com/davidbombal
LinkedIn: www.linkedin.com/in/davidbombal
Facebook: www.facebook.com/davidbombal.co
TikTok: tiktok.com/@davidbombal

// MY STUFF //
 https://www.amazon.com/shop/davidbombal 

// SPONSORS // 
Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com


Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! 

Disclaimer: This video is for educational purposes only.

#facebook #hack #hacking

#465: Next Gen Hackers protecting our world

Randall Frietzsche, CISO at Denver Health is our feature interview this week. News from the Brown Palace, Ibotta, Pax8, Red Canary, Optiv, zvelo and a lot more. 

Support us on Patreon! Fun swag available - all proceeds will directly support the Colorado = Security infrastructure. Come join us on the new Colorado = Security Slack channel to meet old and new friends.

Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com

This week’s news:

Join the Colorado = Security Slack channel

Two new pizza shops opening in Denver, the “No. 1 city for pizza”

The Brown Palace closing its marquee restaurant, Palace Arms, “until further notice”

Colorado’s startup community rallies behind Ibotta as Denver’s popular consumer app has IPO

Downtown Vitality Index: How Downtown Denver’s comeback compares

Has Boulder lost its luster? For those in the local tech community, the answer is not so simple.

Fast-growing Denver tech company hires new CEO to replace founder

Coloradans scammed out of $187.6M in 2023, new FBI report says

Manage your SOC like a product

The Rising Role of the BISO

Escalating Deepfake Threats and Countermeasures

Job Openings:

Pax8 - Senior Cybersecurity Operations Engineer

Pax8 - IAM Engineer

Bank of America - Senior Information Security Officer

Klaviyo - Senior Manager, Security Risk & Reviews

Trimble - IT Risk & Control Manager

Amazon Games - Senior Security Risk Specialist, GME (Games, Media, & Entertainment) Security

Gogo Business Aviation - Senior Cybersecurity Analyst

Juniper Square - GRC Security Specialist

US Bank - IS Governance, Risk & Controls Specialist

NREL - Chief Cybersecurity Engineer

Synopsys - Sr. Staff Cyber Security Engineer

Upcoming Events:

This Week and Next:

 ISC2 Denver - Navigating the Cyber Landscape in Operational Technology (OT): Challenges, Threats, and Solutions - 5/8

ISSA Denver - The Real World : Hunting Cloud Security Threats - 5/8 (DTC and Downtown)

Let's Talk Software Security - Security Champions: What Can Keep Them From Being Successful? - 5/14

Let's Talk Software Security - Security Champions: What Can Go Wrong? - 5/15

CSA Colorado - AWS hands-on Identity and Access Management Immersion workshop - 5/21

ISSA Denver - AI/ML Special Interest Group Inaugural Roundtable - 5/21

ISSA Denver - ISSA Denver Chapter and Gigamon Superfly Golf Event - 5/22

ISC2 Pikes Peak - May Meeting - 5/22

RMISC - 6/11-13

View our events page for a full list of upcoming events

* Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here.

* Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

262 - 5/6 - Randall Frietzsche, CISO at Denver Health

In today's episode, we dive into the turbulent waters of cybersecurity, exploring recent developments that are reshaping the digital landscape. From Microsoft's groundbreaking decision to hold its executives directly accountable for cybersecurity measures to the unsettling revelation of vulnerabilities exploited by threat actors, no stone is left unturned. Join us as we dissect the latest in cybersecurity news, from data breaches rocking healthcare providers to the sophisticated techniques employed by cybercriminals targeting institutions worldwide. Stay informed, stay vigilant, as we navigate the ever-evolving realm of cybersecurity threats together.

Cybersecurity Chronicles: From Microsoft's Accountability Shift to Emerging Threats

Introducing "Cyber Health Insight" with your host, Richard Simmons. Join us daily for a comprehensive roundup of the latest cybersecurity breakthroughs and expert analysis. Simmons takes you on a journey through the intricate digital landscape, exploring vulnerabilities in critical systems and dissecting massive cyber incidents, particularly in the healthcare sector. Our show also highlights advancements in biotech, covering groundbreaking research and funding updates in areas like Parkinson's disease. Stay informed and empowered with essential briefings on cybersecurity and healthcare, all conveniently delivered in one podcast. Tune in for your crucial briefings on cybersecurity and healthcare, all in one place.
healsecurity.com/

Data Defense Digest: Unveiling Cyber Threats in Today's News

Is ‘Security Theater’ plaguing your efforts for cyber resilience? Chris Hodson author of “Cyber Risk Management” gives us a reality check on SecureTalk. Discover why risk is the cornerstone of every security program and how his book guides CISO’s and security leaders through effective security posture scoping.

Delve into aligning security with business goals, evolving CISO roles, compliance challenges, and the impact of AI. Understand the importance of risk acceptance in corporate decision-making, the role of AI in security, multi-factor authentication, and the real-world implications of security breaches. Explore cybersecurity risk management with expert Chris Hodson and Strike Graph CEO Justin Beals.

A Perfect Fit: Using risk to get the right sized security with Christopher Hodson.

We're halfway through our RSAC mini series! We're speaking with Joe Slowik of MITRE in the first half of the episode and in the second, Kali is joined by Daniel Schwalbe to speak with David Goldschlag of Aembit.

[Mini Series] The Art of the Possible: Joe Slowik and David Goldschlag

It's the penultimate episode of our RSAC mini series! We're speaking with Zack Schuler of NINJIO in the first half of the episode and in the second, we speak with Lawrence Gentilello of Optery.

[Mini Series] The Art of the Possible: Zack Schuler and Lawrence Gentilello

Guy Sereff, Partner at Michael Best is our feature interview this week. News from Arapahoe Community College, Guild, Katilyst, LogRhythm, Ping Identity, Red Canary  and a lot more. 

Support us on Patreon! Fun swag available - all proceeds will directly support the Colorado = Security infrastructure. Come join us on the new Colorado = Security Slack channel to meet old and new friends.

Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com

This week’s news:

Join the Colorado = Security Slack channel

Denver Named Number One on List of Best U.S. Cities for Foodies

Colorado Legislature Passes First-in-Nation Artificial Intelligence Bill

Denver-area community college first to join Space Force effort to teach aerospace workers

How Colorado organizations are preparing to fill quantum positions

Denver tech firm Guild grew rapidly, now it is shrinking rapidly

Katilyst - Out of Stealth and Ready to be Your Security Champion

LogRhythm and Exabeam Announce Intent to Merge, Harnessing Collective Innovation Strengths to Lead the Future of AI-Driven Security Operations

What Is Liveness Detection? How It Helps Fraud Prevention

What to consider when evaluating EDR 

Job Openings:

Pax8 - IAM Architect

Bank of America - Azure - Senior Cloud Security Engineer

State of CO - Senior Security Administrator (Audit)

CoBank - Director, Internal Controls and Operational Risk, IT

Maxar - Senior Information Security Specialist

Gates Corp - Cybersecurity & DLP Specialist

Quizlet - Staff Cloud Security Engineer

Flexential - Manager, Security Architecture

Western Union - Information Security Engineer

Upcoming Events:

This Week and Next:

RMISC - 6/11-13

BSides Boulder - 6/14

Let's Talk Software Security - Quality Tests, Security Outcomes: Are We There Yet? - 6/20

CSA Colorado - June Meeting, "Modern AI Threats and Challenges" - 6/25

ISC2 Pikes Peak - June Meeting - 6/26

View our events page for a full list of upcoming events

* Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here.

* Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

263 - 6/10 - Guy Sereff, Partner at Michael Best

Jake Bernardes, Field CISO of Anecdotes, joins the Breaking Badness Cybersecurity Podcast in this week’s episode! We’re sharing Jake’s background and path within infosec along with what’s intriguing him about the industry currently, how conferences and in-person events can still play a role in community involvement, and we’ll touch briefly on American history.

Voices from Infosec: Jake Bernardes

The "HEAL Security Dispatch Daily Digest," hosted by Richard Simmons from London, is a prominent source of news and analysis in the cybersecurity landscape, with a special focus on the intersection between healthcare and cybersecurity. On this episode dated 5th of July, 2024, the podcast delves into several pressing cyber incidents and developments. Among the highlights are the significant data breaches faced by Ticketmaster and Twilio, illustrating the vulnerabilities in entertainment ticketing and telecommunications. The episode also covers a BGP hijacking incident impacting Cloudflare's services, underscoring the fragility of global internet infrastructure. Furthermore, it discusses the innovative digital platform launched by CareFirst BlueCross BlueShield and MRO to enhance healthcare data sharing, and the alarming data leaks from a Florida health department and OpenAI due to cyberattacks. Additionally, OVHcloud’s experience with a record DDoS attack and the cyber threats looming over the upcoming Euro 2024 emphasize the continuous evolution and sophistication of cybersecurity threats against both corporate and public digital infrastructures. Through its comprehensive coverage, the podcast offers crucial insights into the challenges and advancements at the forefront of cybersecurity efforts. 
https://healsecurity.com/

Cybersecurity Frontlines: From Ticketmaster's Breach to Euro 2024's Cyber Siege

Mary Writz, SVP of Product Management at Red Canary is our feature interview this week. News from Tattered Cover, Arrow Electronics, PhotoPacks.ai, Ping Identity, Lares, LogRhythm and a lot more. 

Support us on Patreon! Fun swag available - all proceeds will directly support the Colorado = Security infrastructure. Come join us on the new Colorado = Security Slack channel to meet old and new friends.

Sign up for our mailing list on the main site to receive weekly updates - https://www.colorado-security.com/. If you have any questions or comments, or any organizations or events we should highlight, contact Alex and Robb at info@colorado-security.com

This week’s news:

Join the Colorado = Security Slack channel

Morrison's new cameras flag 9,000 speeders in less than two weeks - Canyon Courier

Barnes & Noble CEO explains Tattered Cover bookstores deal

New AI summit in Denver to focus on how to address affordability

Colorado public companies notch big profits and big losses in DBJ rankings

Denver startup uses AI to generate professional headshots

How Colorado's tech leaders want the state's new AI law changed

Denver lacks comprehensive approach to cybersecurity risks, city auditor says

How Session Management Works and Why It’s Important

The Power of Modern-Day Purple Teaming: A Consultant's Perspective

How to Ensure Your Data is Ready for an AI-Driven SOC  | LogRhythm

Job Openings:

Pax8 - IAM Architect

Gates - Sr Cybersecurity Analyst

Brownstein Hyatt Farber Schreck - CISO

Affirm - Director of Product, Trust & Safety

Bank of America - Senior Information Security Officer

Meta - Security Partner - Mergers & Acquisitions

HealthEdge - Director, Governance, Risk, and Compliance

Presidio - Vice President, Cyber Security Practice

DAT - Security Analyst 1

Ryder System - Application Security Engineer

Upcoming Events:

This Week and Next:

ISSA COS - Cybersecurity First Friday - 7/12

ISSA COS - July meeting - Conversations that count - 7/16

CSA Colorado - Responding to the Quantum Computing Threat - 7/16

Denver ISSA - BBQ - 7/17

Denver OWASP - AI in the Age of Application Security - 7/17

ISSA COS - July Mini Seminar "Blackout Brainstorm" Tabletop around EMPs - 7/20

Let's Talk Software Security - What do the Developers Think of your Security Program? - 7/23

ISC2 Pikes Peak - July Meeting - 7/24

View our events page for a full list of upcoming events

* Thanks to CJ Adams for our intro and exit! If you need any voiceover work, you can contact him here at carrrladams@gmail.com. Check out his other voice work here.

* Intro and exit song: "The Language of Blame" by The Agrarians is licensed under CC BY 2.0

264 - 7/8 - Mary Writz, SVP Product Management at Red Canary

We're thrilled Tanya Janca (aka SheHacksPurple) joined us this week on the podcast! She and Kali Fencl discuss secure guardrails, Semgrep Academy, the process of writing two books, gardening, and so much more.

Voices from Infosec: Tanya Janca

This week we compromised domains targeting DeFi protocols along with the JFrog research team's findings regarding a leaked access token with admin access to Python repositories

190. The Weak Security Default in Our Stars

The Daily HEAL Security Dispatch Podcast is a leading source for up-to-the-minute news and deep insights in the realm of healthcare cybersecurity and threat intelligence. 

At the heart of HEAL Security's vision is the commitment to equipping organizations and individuals with rapid, contextually rich cybersecurity updates, establishing itself as a pivotal force in unifying practice and data against the ingenious tactics of criminal and malicious entities. HEAL Security is fervently devoted to constructing a robust resource and community that champions the defense of the healthcare sector against the growing cyber threats from organized crime groups and antagonistic nation-states. Our core focus encompasses the protection of vital IT infrastructures, the security of sensitive patient and clinical information, the safeguarding of critical healthcare systems, and the assurance of continuous, undisturbed patient care services.

Where timely and relevant security meets puns and witty banter. Our goal is to keep defenders apprised of pertinent news and trends in under forty-five minutes.

Secure Talk reviews the latest threats, tips, and trends on security, innovation, and compliance. 

Host Justin Beals interviews leading privacy, security and technology executives to discuss best practices related to IT security, data protection and compliance. Based in Seattle, he previously served as the CTO of NextStep and Koru, which won the 2018 Most Impactful Startup award from Wharton People Analytics. He is the creator of the patented Training, Tracking & Placement System and the author of “Aligning curriculum and evidencing learning effectiveness using semantic mapping of learning assets,” published in the International Journal of Emerging Technologies in Learning (iJet). Justin earned a BA from Fort Lewis College.

Want to learn about IT? Want to get ahead in your career?  Well, this is the right place! 

On this channel, I discuss Python, Ethical Hacking, Networking, Network Automation, CCNA, Virtualization and other IT related topics.
   
This YouTube channel has new videos every week! Subscribe for technical, detailed, no fluff content.

David’s details:
Discord: https://discord.com/invite/usKSyzb
Twitter: https://www.twitter.com/davidbombal 
Instagram: https://www.instagram.com/davidbombal 
LinkedIn: https://www.linkedin.com/in/davidbombal 
Facebook: https://www.facebook.com/davidbombal.co 
Website: http://www.davidbombal.com  
YouTube: https://www.youtube.com/davidbombal 

All the best!
David

New tracks tagged #infosec