Episodes
-
This month we welcome guest Tom Tovar, CEO and Co-Creator of our sponsor Appdome to chat about this month’s biggest cyber headlines with our panelists Marco Estrela, Patrick Naoum, Bill Strub and Jason Williams.
To learn more about Appdome's consumer survey on mobile security mentioned in this episode visit: https://www.appdome.com/mobile-consumer-cyber-security-survey-2024/
Hot Topics:
Topic 1: Jason
Article title: 5 BCDR Oversights That Leave You Exposed to Ransomware
Source: https://thehackernews.com/2024/11/5-bcdr-oversights-that-leave-you-exposed-to-ransomware.html
Topic 2: Tom
Article title: FTC Announces Crackdown on Deceptive AI Claims and Schemes
Source: https://www.ftc.gov/news-events/news/press-releases/2024/09/ftc-announces-crackdown-deceptive-ai-claims-schemes
Topic 3: Patrick
Article title: November 2024 Patch Tuesday: Four Critical and Three Zero-Days Among 158 Vulnerabilities Patched
Source: https://www.crowdstrike.com/en-us/blog/patch-tuesday-analysis-november-2024/?srsltid=AfmBOoq9S5iR8ldC-N4ax9j6Unz_18KPZZAuzULZHlnG8iqQt6YiuZAU
Topic 4: Bill
Article title: Rethinking Cybersecurity From Cost Center To Value Driver
Source: https://www.forbes.com/councils/forbesfinancecouncil/2024/11/18/rethinking-cybersecurity-from-cost-center-to-value-driver/
Topic 5: Jason
Article title: New Google Pixel AI feature analyzes phone conversations for scams
Source: https://www.bleepingcomputer.com/news/google/new-google-pixel-ai-feature-analyzes-phone-conversations-for-scams/
Topic 6: Patrick
Article title: Autonomous Discovery of Critical Zero-Days
Source: https://zeropath.com/blog/0day-discoveries
-
This month we're joined by Mike Melo, CISO of Ontario’s Life Labs, for a Q&A about his CISO role, what keeps him up at night and the pitfalls of trying to achieve cyber-resilience. If you’re interested in having a sneak peek into the daily life of a CISO, you won’t want to miss this interview.
Hot Topics segment includes: Utilities getting attacked (again!), is quantum computing threatening Bitcoin, vulnerable API headaches and we will see if collaboration is achievable in the face of rising cyberthreats.
Sources:
Topic 1: Jason #1
Article title: Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually
Source: https://thehackernews.com/2024/10/vulnerable-apis-and-bot-attacks-costing.html
Topic 2: Bill #1
Article title: America's largest water utility hit by cyberattack at time of rising threats against U.S. infrastructure
Source: https://www.cnbc.com/amp/2024/10/08/american-water-largest-us-water-utility-cyberattack.html
Topic 3: Jason #2
Article title: Chinese researchers crack military-grade encryption: is bitcoin safe?
Source: https://cybernews.com/crypto/quantum-crack-military-grade-encryption-bitcoin-danger/
Topic 4: Bill #2
Article title: Escalating Cyber Threats Demand Stronger Global Defense and Cooperation
Source: https://blogs.microsoft.com/on-the-issues/2024/10/15/escalating-cyber-threats-demand-stronger-global-defense-and-cooperation/
-
Episodes manquant?
-
This month we welcome guest and sponsor Lisa Jones-Huff of Elastic to chat about this month’s biggest cyber headlines with our panelists Marco Estrela, Patrick Naoum, Bill Strub and Jason Williams.
Hot Topics:
Topic 1: Jason
Article title: Microsoft summit plots end of kernel access for EDR security clients
Source: https://www.csoonline.com/article/3523753/microsoft-summit-plots-end-of-kernel-access-for-edr-security-clients.html
Topic 2: Patrick
Article title: Mastercard acquires Recorded Future: How will threat intelligence transform the payments industry?
Source: https://www.csoonline.com/article/3518765/mastercard-acquires-recorded-future-how-will-threat-intelligence-transform-the-payments-industry.html
Topic 3: Bill
Article title: TfL directs 30,000 employees to verify identities and reset passwords after data breach
Source: https://www.techmonitor.ai/news/:~:text=Transport%20for%20London%20(TfL)%20has%20directed%20all%20employees,measures%20to%20secure%20the%20organisation%E2%80%99s%20systems%20and%20data.
Topic 4: Lisa
Article title: N/A – Lisa wants to talk about “all the acquisitions and mergers in the SIEM|Analytics space, will the Platform Story drive more organizations to consider consolidating their spending and move away from purchasing best of breed solutions?”
Source: N/A
Extras: 3000 pagers kill several and injuring thousands in Lebanon; Spotlight from Lisa Jones-Huff on how AI is impacting the way cybersecurity analysts do their jobs
-
Back from our summer hiatus, we have a brand new episode of Behind the Shield! This month we’ve brought back one of our favorite special guests, Chris Vincent, to chat about this month’s biggest cyber headlines with our panelists Marco Estrela, Patrick Naoum, Bill Strub and Jason Williams.
Hot Topics: CrowdStrike’s global blue screen of death debacle, splitting the CISO role, Oracle’s NetSuite woes and, the largest password leak of all time?!?
-
The Behind the Shield team is back with the latest in cybersecurity! This month is a Hot Topics only show with panelists Patrick Naoum, Bill Strub, Jason Williams and your host Marco Estrela.
Hot Topics: Fortigates get breached, Do you recall when Recall was recalled?, medical-related ransomware breaking all kinds of records (Recorded Future study), arrests in the Desjardins hack, update on the Snowflake debacle, and another Microsoft flaw causing headaches via WIFI.
Sources:
Topic 1: Jason #1
Article title: Medical-Targeted Ransomware Is Breaking Records After Change Healthcare’s $22M Payout
Source: https://www.wired.com/story/change-healthcare-22-million-payment-ransomware-spike/?utm_brand=wired&utm_medium=social&utm_source=twitter&utm_social-type=owned&mbid=social_twitter
Topic 2: Patrick #1
Article title: The Snowflake Attack May Be Turning Into One of the Largest Data Breaches Ever
Source: https://www.wired.com/story/snowflake-breach-advanced-auto-parts-lendingtree/
Topic 3: Bill #1
Article title: Recall Recalled: Is AI On Windows 11 Already Doomed?
Source: https://www.forbes.com/sites/barrycollins/2024/06/14/recall-recalled-is-ai-on-windows-11-already-doomed/
Topic 4: Jason #2
Article title: Chinese hackers breached 20,000 FortiGate systems worldwide
Source: https://www.bleepingcomputer.com/news/security/chinese-hackers-breached-20-000-fortigate-systems-worldwide/
Topic 5: Bill #2
Article title: Urgent Windows security flaw lets hackers infect your PC over Wi-Fi — update right now
Source: https://www.tomsguide.com/computing/malware-adware/urgent-windows-security-flaw-lets-hackers-infect-your-pc-over-wi-fi-update-right-now
Topic 6: Marco #1
Article title: 5 arrested and 3 on the run in Desjardins hack case
Source: https://ici.radio-canada.ca/nouvelle/2080454/principal-suspect-vol-desjardins-arrete
-
Expert panelists and host Marco Estrela bring you behind our shield to discuss current cybersecurity topics ripped from the headlines.
This episode's Hot Topics include: Do bounties for ransomware work? Black Basta, wreaking havoc again! Google accidentally wiping out a huge account and APT28 cybercrime group updates. Stay tuned to the end of this episode for some bonus insights from some of the biggest cyber conferences including RSA 2024, IBM think and, ITSec.
Sources:
Topic 1: Patrick #1
Article title: 10M$ Bounty
Source: https://www.clubic.com/actualite-525003-les-etats-unis-mettent-la-tete-de-4-hackers-iraniens-a-prix-avec-a-la-cle-10-millions-de-dollars-de-recompense.html
Topic 2: Jason #1
Article title: Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia
Source: https://thehackernews.com/2024/05/black-basta-ransomware-strikes-500.html
Topic 3: Patrick #2
Article title: Google Cloud accidentally deletes UniSuper’s online account due to ‘unprecedented misconfiguration’
Source: https://amp-theguardian-com.cdn.ampproject.org/c/s/amp.theguardian.com/australia-news/article/2024/may/09/unisuper-google-cloud-issue-account-access
Topic 4: Jason #2
Article title: Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities
Source: https://thehackernews.com/2024/05/microsoft-outlook-flaw-exploited-by.html
-
Behind the Shield host Marco Estrela and panelists Patrick Naoum and Jason Williams are joined by Bruno Germain of this episode's sponsor: Zscaler.
This episode's hot topics include:
Sources:
Topic 1: Jason
Article title: Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack
Source: https://thehackernews.com/2024/04/hackers-deploy-python-backdoor-in-palo.html
Topic 2: Patrick
Article title: Email scam drained $814,000 from Just for Laughs' coffers: report
Source: https://montrealgazette.com/news/local-news/email-scam-drained-814000-from-just-for-laughs-coffers-report#:~:text=The%20Montreal%20company%20that%20operates,it%20seeks%20to%20avoid%20bankruptcy
Topic 3: Jason
Article title: Roku cyberattack impacts 576,000 accounts
Source: https://cybernews.com/news/roku-cyberattack-impacts-576000-accounts/
Zscaler spotlight: Bruno (and panelists) discuss the topic: “SDXCentral reports: “SASE is future, ZT is past, but SSE is right now”; The many ways this is wrong!”
-
Expert panelists (including our new panelist Jason Williams) and host Marco Estrela bring you behind our shield to discuss current cybersecurity topics ripped from the headlines.
This episode's all Hot Topics format includes: The Volt Typhoon announcement, Cyberattack on US healthcare payment system, SEC Cybersecurity Disclosure coming into effect, Lessons from the Microsoft's Password Spray Hack, and Why Companies Are Bringing Data In-House.
Sources:
Topic 1: Patrick #1
Article title: CISA and GOV Volt Typhoon announcement
Source: https://www.cisa.gov/sites/default/files/2024-03/Fact-Sheet-PRC-State-Sponsored-Cyber-Activity-Actions-for-Critical-Infrastructure-Leaders-508c.pdf
Topic 2: Bill #1
Article title: Cyberattack paralyzes largest US healthcare payment system
Source: https://www.nytimes.com/2024/03/05/health/cyberattack-healthcare-cash.html
Topic 3: Jason #1
Article title: Cybersecurity Disclosure by the SEC coming into effect
Source: https://www.sec.gov/news/statement/gerding-cybersecurity-disclosure-20231214
Topic 4: Bill #2
Article title: Key Lesson from Microsoft's Password Spray Hack: Secure Every Account
Source: https://thehackernews.com/2024/03/key-lesson-from-microsofts-password.html
Topic 5: Jason #2
Article title: The Rise Of Cloud Repatriation: Why Companies Are Bringing Data In-House
Source: https://www.forbes.com/sites/forbestechcouncil/2023/04/18/the-rise-of-cloud-repatriation-why-companies-are-bringing-data-in-house/?sh=3af3d57358f7
-
Expert panelists, including our guest Matt Konwiser from this month's sponsor IBM Security, and host Marco Estrela discuss current cybersecurity topics ripped from the headlines.
This episode's Hot Topics include: Open AI’s concerns about #GenAI, the data security of AI boy/girlfriends, Matt’s take on the #AppleProVision, and LockBit’s recent bust by the UK government.
If you want to talk to us about our 24/7 SOC, powered by IBM Security’s QRadar, you can reach us at 1-800-401-TECH or virtualguardian.com.
Sources:
Topic 1: Bill
Article title: Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyber Attacks
Source: https://thehackernews.com/2024/02/microsoft-openai-warn-of-nation-state.html
Topic 2: Patrick
Article title: “AI girlfriends” are a privacy nightmare
Source: https://www.wired.com/story/ai-girlfriends-privacy-nightmare/
Topic 3: Bill
Article title: Lockbit cybercrime gang faces global takedown with indictments and arrests
Source: https://www.reuters.com/technology/cybersecurity/us-indicts-two-russian-nationals-lockbit-cybercrime-gang-bust-2024-02-20/
-
Virtual Guardian's BTS panelists and guest Jane Arnett of Check Point cover hot topics, revisit the highs and lows of cybersecurity in 2023, and make their predictions and wishes for 2024.
Hot Topic Sources:
Article title: Hackers Extort Victim with SEC Whistleblower Complaint
Source: https://www.jdsupra.com/legalnews/hackers-extort-victim-with-sec-2694993/#:~:text=In%20an%20unintended%20consequence%20of,isn%27t%20even%20required%20yet.
Article title: We tried to quantify how harmful hospital ransomware attacks are for patients. Here’s what we found
Source: https://www.statnews.com/2023/11/17/hospital-ransomware-attack-patient-deaths-study/
-
We didn't have time to get to all of our Hot Topics in the Nov 2nd Behind the Shield! Ready for a little more cyber news from Marco, Bill and Patrick?
Bonus Hot Topics:
AI Kidnapping Hoaxes: https://www.darkreading.com/black-hat/virtual-kidnapping-ai-tools-enabling-irl-extortion-scamsJohnson Controls Breach - An Update from Patrick from last week's discussion. https://www.msspalert.com/news/johnson-controls-struck-by-king-size-ransomware-attack-demanding-51-million-payoffFraudsters target Booking.com customers claiming hotel stay could be cancelled . https://grahamcluley.com/fraudsters-target-booking-com-customers-claiming-hotel-stay-could-be-cancelled/Okta breach à One Password: https://www.darkreading.com/black-hat/virtual-kidnapping-ai-tools-enabling-irl-extortion-scams -
November 2023 Episode (Recorded on 11.02.2023) – Special #AIWeek Episode
Expert panelists, including our guest Chris ‘Tito’ Sestino of HiddenLayer, and host Marco Estrela discuss current cybersecurity topics ripped from the headlines.
Hot Topics: Credit card fraud while traveling; AI generated phishing attacks, Johnson Controls Breach, Emerging AI Regulations & Effects
Spotlight: “Securing AI Innovation: Safeguarding AI Amid Emerging Threats” - Chris Sestito, Co-founder & CEO of HiddenLayer, a cybersecurity start-up dedicated to preventing adversarial artificial intelligence attacks.
Sources:
Topic 1: Credit card fraud and tips for guarding credit cards while traveling.
Source: N/A
Topic 2: Bill
Article title: AI generates convincing phising attacks
Source: https://www.csoonline.com/article/656698/generative-ai-phishing-fears-realized-as-model-develops-highly-convincing-emails-in-5-minutes.html
Topic 3: Patrick
Article title: Jonhson Controls breach
Source: https://www.msspalert.com/news/johnson-controls-struck-by-king-size-ransomware-attack-demanding-51-million-payoff
Topic 4: Tito
Article title: Emerging AI Regulations & Its Effect on Innovation
Source: N/A
-
September 2023 Episode (Recorded on 9.21.2023)
Expert panelists and host Marco Estrela discuss current cybersecurity topics ripped from the headlines.
Hot Topics: MGM and Caesar’s Cyberattack, TransUnion Data stolen, Microsoft AI Employee Accidental Leak, Canadian Airports DOS, Clorox Breach
Extras: CISCO’s $28B purchase of SPLUNK, NaviLogic’s name change to Virtual Guardian
Sources:
Topic 1: Bill #1
Article title: MGM and Caesar’s cyberattack
Source: https://www.reviewjournal.com/business/casinos-gaming/mgm-hackers-could-have-tried-to-get-slots-to-spit-out-money-2907417/
https://www.bloomberg.com/news/articles/2023-09-13/caesars-entertainment-paid-millions-in-ransom-in-recent-attack?embedded-checkout=true
Topic 2: Patrick #1
Article title: Law 25 Event in Montreal
Source: N/A
Topic 3: Marco #1
Article title: TransUnion data stolen, but they say their weren’t hacked!
Source: https://www.techradar.com/pro/security/transunions-data-stolen-in-major-data-breach
Topic 4: Bill #2
Article title: Microsoft AI Employee Accidentally Leaks 38TB of Data
Source: https://www.pcmag.com/news/microsoft-ai-employee-accidentally-leaks-38tb-of-data?utm_medium=browser_notifications&utm_source=pushly&utm_campaign=3558823&utm_country_code=CA
Topic 5: Patrick #2
Article title: Source: Canadian Airports DOS
Source: https://www.lapresse.ca/actualites/national/2023-09-19/agence-des-services-frontaliers/la-panne-dans-les-aeroports-provenait-bien-d-une-attaque-informatique.php?utm_campaign=internal+share&utm_content=ulink&utm_medium=referral&utm_source=lpp&redirectedFrom=https%253A%252F%252Fplus.lapresse.ca%252Fscreens%252Fbd53d576-4f02-4d19-853b-a9f64e7d1a31__7C___0.html%253Futm_campaign%253Dinternal%252520share%2526utm_content%253Dulink%2526utm_medium%253Dreferral%2526utm_source%253Dlpp
Topic 6: Marco #2
Article title: Clorox Breach
Source: https://www.cnn.com/2023/09/18/business/clorox-cyberattack-production-disruption/index.html
-
August 2023 Episode (Recorded on 8.3.2023)
Hot Topics: Cybersecurity labeling for smart devices, New 4-Day disclosure requirement by SEC, Chinese Malware’s Potential Impacts to US, WormGPT, JumpCloud hack linked to North Korea, US’s Data Breach Record
Extras: Rapid Fire Q&A for the panel; Remembering Kevin Mitnick, 1990s “Most Wanted Computer Outlaw”
Sources:
Topic 1: Patrick #1
Article title: Cybersecurity labeling for smart devices aims to help people choose those less vulnerable to hacking
Source: https://apnews.com/article/cybersecurity-smart-devices-fcc-cyber-trust-mark-74af5829296ba65cddd2b2287b47422a
Topic 2: Bob #1
Article title: SEC now requires companies to disclose cyberattacks in 4 days
Source: https://www.bleepingcomputer.com/news/security/sec-now-requires-companies-to-disclose-cyberattacks-in-4-days/
Topic 3: Bill #1
Article title: Chinese Malware Could Cut Power To U.S. Military Bases, Businesses And Homes, Report Claims
Source: https://www.forbes.com/sites/tylerroush/2023/07/29/chinese-malware-could-cut-power-to-us-military-bases-businesses-and-homes-report-claims/?sh=397fec1224ae
Topic 4: Patrick #2
Article title: WormGPT: New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks
Source: https://thehackernews.com/2023/07/wormgpt-new-ai-tool-allows.html?m=1
Topic 5: Bob #2
Article title: JumpCloud hack linked to North Korea after OPSEC mistake
Source: https://www.bleepingcomputer.com/news/security/jumpcloud-hack-linked-to-north-korea-after-opsec-mistake/
Topic 6: Bill #2
Article title: US on Track For Record Number of Data Breaches
Source: https://www.infosecurity-magazine.com/news/us-track-record-number-data/
-
June 2023 Episode (Originally Aired Live on 6.15.2023)
Hot Topics: US-based white hat researcher, Eaton Zveare, discovers serious flaws in well-known carmaker; Phishing controversy using pay raise as bait; Making progress in the war against cybercrime.
Special Guest Panelist: Graham Cluley of the award-winning “Smashing Security” podcast.
Spotlight: Rudolph Araujo, Arista Networks: IoT, Ransomware, Insider Threats and Your Data: Threat Hunting to the Rescue
Sources:
Topic 1
Source: https://www.securityweek.com/vulnerabilities-in-honda-ecommerce-platform-exposed-customer-dealer-data/
https://eaton-works.com/2023/06/06/honda-ecommerce-hack/
Topic 2:
Source: https://www.economist.com/by-invitation/2023/05/26/ciaran-martin-argues-that-cyberspace-is-finally-if-unevenly-getting-safer
Topic 3:
Source: https://grahamcluley.com/staff-salary-phishing-test-backfire/
https://www.rollonfriday.com/news-content/exclusive-incredulity-firm-sends-lawyers-fake-pay-rise-emails
-
May 2023 Episode (Originally Aired Live on 5.18.2023)
Hot Topics: Cisco IOS vulnerabilities and UQAM’s 2023 Report on geopolitical cyber incidents.
Spotlight: Amber Borgersen, Product Manager for IBM Security's Threat Management functionalities - the QRadar Suite, discusses “SIEM is dead! Or is it…?”
-
April 2023 Episode (Originally Aired Live on 04.19.2023 in front of a live audience at Esterel Resort, Quebec Canada)
Panelists: Pulitzer Prize Winning Journalist Byron Acohido (lastwatchdog.com), VG CEO Patrick Naoum, Co-Founders of NaviLogic Bill Strub and Bob Bennett, and VG’s Sr. Director Cybersecurity and host of the show, Marco Estrela.
Hot Topics:
Topic 1: Article title: Six arrested in Quebec as police dismantle international identity theft network
Source: https://montreal.ctvnews.ca/six-arrested-in-quebec-as-police-dismantle-international-identity-theft-network-1.6344156
Topic 2: Article title: Putin’s secret weapon: weaponized ransomware
Source: https://www.bleepingcomputer.com/news/security/new-ransomware-attacks-in-ukraine-linked-to-russian-sandworm-hackers/
https://www.bleepingcomputer.com/news/security/security-firms-find-thin-lines-connecting-notpetya-to-ukraine-power-grid-attacks/
Topic 3: Article title: SlashNext's 2023 Mobile BYOD Security Report Reveals 71% of Employees Have Sensitive Work Information on their Personal Devices; 43% Were the Target of Phishing Attacks
Source: https://www.prnewswire.com/news-releases/slashnexts-2023-mobile-byod-security-report-reveals-71-of-employees-have-sensitive-work-information-on-their-personal-devices-43-were-the-target-of-phishing-attacks-301785360.html
Sponsor/Spotlight: Byron Acohido “Network security reborn: Leveraging machine learning, automation to drive legacy defenses into obsolescence.”
Bonus Segment: Rapid Fire Topics with Byron Acohido
This is a recording of an event that took place live, virtual and in-person. To attend future virtual Behind the Shield events and ask the panelists questions, register at virtualguardian.com/event
-
March 2023 Episode (Originally Aired Live on 03.16.2023)
Hot Topics: Multi Factor Authentication Blind Spots, T-Mobile's Security Breach (API Attack vector), TikTok ban (US & Canada governments), Return of IceFire Ransomware.
Sponsor/Spotlight: Branden Williams, VP of IAM Strategy at Ping Identity: "Fostering Collaboration to Build Trust in an Untrustworthy World.
This is a recording of an event that took place live. To attend live Behind the Shield events and ask the panelists questions, register for future events at virtualguardian.com/event
-
Hot Topics: Mortgage Broker 8Twelve’s leak (where everything went wrong), Reddit cyberattack, AI in the wrong hands, and clickbait article of the month: “Cyber Apocalypse 2023: Is The World Heading For A ‘Catastrophic’ Event”.
Spotlight Speaker & Sponsor: Mike Britton, CISO for Abnormal Security (sponsor), brings guest customer Joel Godbout, Cybersecurity Manager at PCL Construction, to discuss “Securing Your Cloud Email Platform from Socially-Engineered Attacks”.
Sources:
Topic 1:
Article title: Customer database of Canadian mortgage broker left open on internet
Source: https://www.itworldcanada.com/article/customer-database-of-canadian-mortgage-broker-left-open-on-internet/525096
Topic 2:
Article title: Hackers breach Reddit to steal source code and internal data
Source: Hackers breach Reddit to steal source code and internal data (bleepingcomputer.com)
Topic 3:
Article title: Security risks of ChatGPT and other AI text generators
Source: Security risks of ChatGPT and other AI text generators | SC Media (scmagazine.com)
Topic 4 (Bonus):
Article title: Cyber Apocalypse 2023: Is The World Heading For A ‘Catastrophic’ Event?
Source: Cyber Apocalypse 2023: Is The World Heading For A ‘Catastrophic’ Event? (forbes.com)
Register free to attend the live virtual taping of the March 2023 episode at www.virtualguardian.com/event
-
Monthly cybersecurity podcast from Virtual Guardian experts and friends. This episode is a special "Year In Review" featuring 7 panelists talking the most memorable 2022 cybersecurity hacks and events, followed by their wishes and predictions for 2023. This event originally aired on 1/19/2023. To join future Behind the Shield events and ask your questions live, visit www.virtualguardian.com/event.
- Montre plus
