The Threat Geek Podcast: Recent Episodes
Fidelis Cybersecurity
The Threat Geek Podcast is a podcast produced by Fidelis Cybersecurity. Subscribe for detailed discussions about the latest news and trends happening in the cybersecurity industry, from the latest cyber attack techniques tactics and procedures, to best practices for defending your cyber terrain.
Despite the best efforts of cyber defenders, no organization is immune from cyber-attacks. Threat research tells us that adversaries constantly innovate, making themselves harder to detect and doing more damage, more quickly, especially in complex hybrid and multi-cloud environments. In this month’s podcast, Craig and guest Doron Kolton, Product Manager and CTO for Deception at Fidelis Cybersecurity, distill cloud attacks down to the basics and discuss how deception technology is not only practical, but imperative, in winning the ongoing fight against increasingly sophisticated cyber adversaries.
For most organizations, the next cyber incident is a matter of when, not if. Too many times, responders don’t know that their networks have been breached until data is stolen or ransomware shuts down business operations. Listen to this episode of the Threat Geek podcast for actionable tips you can use to rethink and retool your defense strategy so you can actively hunt and eradicate threats before damage is done to your organization.
The concept of Zero Trust has also been around for a long time. Why has it take so long to gain traction? Is it reality or a cascading set of miracles? Listen to this podcast to understand what is Zero Trust and the key drivers behind this architectural model. We’ll also cover key steps to adopt Zero Trust architecture if you believe it’s right for your organization.
Are you confident in your ability to identify, investigate and respond to today’s advanced threats? Listen to this latest ThreatGeek podcast on Mastering Forensics and Incident Response and understand how to better examine system data, user activity and other digital evidence. Learn the key steps you need to take to detect, contain and recover from a breach.
To change the outcome, we must shift the approach. Join Fidelis Cybersecurity CTO, Craig Harper, as he discusses the five key tenants for winning the battle in cyberspace. By using a vendor-agnostic approach, this podcast offers actionable guidance that you can follow today, regardless of your environment, to change the game and give yourself a fighting chance against even the most sophisticated cyber adversaries.
Cyber threat intelligence plays a critical role in driving our defensive cyber capabilities. This podcast will provide real-world context in a discussion of the role threat intelligence plays in building out (and improving) defensive cyber capabilities. Using weather forecasting as an analogy, this podcast will cover:
- Part I – The broad range of threat sources need to enrich our understanding (Sensing)
- Part II – The analysis (analytics) required to draw conclusions from the broad data available to the analyst (Sense-Making)
- Part III – How we increase the work factor to the attacker and possibly operate inside the attacker’s decision cycle
Ransomware is an ever-increasing form of cyber crime. Ransomware causes downtime, data loss and IP theft, business disruption and harms a business' reputation.
In these ransomware videos, our Sr. Threat Intelligence Analyst, Aamil Karimi (AK), and our Sr. Product Manager for Endpoint, David Ries, discuss the evolution and growth, stages, and current state of ransomware. In this podcast, they go into more detail about how to counter and disrupt a ransomware attack. Listen to learn:
- Defensive measures for enterprises to use against ransomware
- How to block ransomware attacks
- And more.
Listen now!
After a year that no one could have predicted, what are IT security leaders capable of anticipating as the world moves toward 2021? 2020 forced dramatic shifts and quick changes - those that were able to adapt accordingly set up their enterprises and security teams for better protection. Those that lagged found themselves in a state of vulnerability, uncertainty, and overwhelming concerns. However, if equipped with the right security forecast and insights, IT security leaders can get ahead of preparations and gain a more positive outlook in the new year.
Join Chris Kubic, Fidelis Cybersecurity CISO (former CISO of NSA), as he shares his predictions for 2021, backed by experience-based insights and real-world examples. Chris will discuss this, what will really impact the IT security industry in 2021, and what he sees as:
- The biggest impacts to the IT security industry in 2021
- The greatest cyber threats in the coming year and which will cause the greatest harm
- The security solutions that will be most critical to combating these cyber threats
Listen in and walk away from the podcast with a better understanding of how you can prepare your enterprise and security teams for 2021.
With the exponential growth of Ransomware, public posting of sensitive and personal data, and the large sums of money being demanded by Ransomware gangs, Ransomware remains high (if not the highest) on the list of security concerns for enterprises, CISOs, and CIOs. Organizations hit with a Ransomware attack must weigh the risks of losing access to critical data and systems or paying large sums of ransom to the attackers – with no guarantee the data would be reliably reproduced.
To protect your enterprise, earlier detection and response is key to avoiding significant damage and cost for your organization. Join Chris Kubic, former NSA CISO and current CISO at Fidelis Cybersecurity, as he shares:
- How Ransomware differs from other kinds of cyber attacks
- The evolution of Ransomware attacks, especially throughout the global pandemic
- The value of early detection and blocking of attacks
- Best practices to reduce the risk of Ransomware
Deception technology turns the tables on attackers by altering their cyber terrain – so 1000 endpoints become 10,000 endpoints – slowing down attackers and increasing the cost of doing business. At Fidelis, we liken this to the art of deceiving enemies on the cyber battlefield. To defeat increasingly sophisticated and aggressive threat actors, we use Deception technology to enable our warfighters to take advantage of their adversaries.
In this podcast, our Army Account Manager, Dave Ayoub, and our VP of R&D for Deception, Rami Mizrahi, discuss:
- Why should we be arming ourselves with Deception technology?
- The unique capabilities of Fidelis Deception
- Fidelis Deception’s detection vs. containment strategies
Listen now!
As millions of people began to work from home earlier this year with the onset of the COVID-19 outbreak, malicious actors started targeting remote workers with phishing and scam emails and attacking the remote access applications, services, and endpoints deployed to support remote employees.
As enterprises extended their systems and IT environments to a larger volume of remote workers, the potential attack surfaces that adversaries could exploit increased exponentially. Now that it is apparent that the majority of the workforce will remain remote, what are the security needs that should be considered in this new normal?
Join Chris Kubic, (former NSA CISO) and current CISO at Fidelis Cybersecurity, as he answers this and other questions such as:
- What lessons have we learned during the last several months of shifting fully to remote work?
- What are the enemies focusing on now, especially as it seems certain that telework is here to stay for most of the workforce?
- For enterprises where employees will split their time between an office and home, how can enterprises plan to secure both worlds (WFH and office)?
- What types of organizational revamping and BYOD policies are needed in the new normal?
The government’s cloud initiatives provide a secure infrastructure for agencies to transition their application and services to the cloud. But is your security architecture up to the task?
Digital Transformation, and the associated shift to the cloud, requires government agencies to extend and evolve their security architecture. This addresses the unique challenges of distributed architectures and increased integration with commercial cloud services.
In partnership with CDM Media, Fidelis Cybersecurity’s CISO Chris Kubic (also former CISO of the National Security Agency), participated in the CDM Solution Spotlight podcast to discuss security strategies to accelerate the government’s digital transformation activities.
Highlighted in this podcast:
· What digital transformation is and how it would benefit the government
· The impact digital transformation has taken on security architecture
· Emerging security technologies critical to digital transformation
· How agencies should stay prepared for the future
Network Detection and Response is the latest trend in network-based cybersecurity. In case you missed it in our first podcast on NDR, we focused on how Network Detection and Response (NDR) solutions – powered by anomaly and behavioral machine learning models – improve the detection of suspicious or malicious network activity.
NDR provides holistic visibility of the cyber terrain, produces high confidence detections and automates response in a cyber relevant time. In the second part of this NDR series, our COO, Craig Harber, joins us to discuss the role of Response in NDR. Highlighted in this podcast:
- How automation is used within an NDR solution
- Types of responses that should be provided by NDR solutions, including predictive, proactive and retrospective capabilities
- Summary of NDR capabilities and why it is so important to an enterprise
Listen now!
Network Detection and Response is the latest trend in network-based cybersecurity. It culminates years of research and software advances to bring together the basic elements of security requirements: Detection & Response, something we’ve been doing for years. NDR is not only beneficial, but necessary for gaining the cyber advantage, but security teams need to know how it’s important in detecting, hunting and responding to their most advanced threats.
Our COO, Craig Harber, and Data Science Manager, Abhishek Sharma, join us in this podcast to discuss how NDR begins with Detections, and the role of Machine-Learning within NDR.
Highlighted in this podcast:
- How machine learning based on anomaly and behavioral detections improves NDR
- What ML does for North/South and East/West traffic
- The future of ML-based detections
Enjoyed this podcast? We’ll be re-joined by our COO, Craig Harber, who will go in-depth about the Response aspect of NDR.
How safe and secure are your company assets and remote workforce? As with many disadvantageous situations, cyber attackers are exploiting COVID-19 to undermine your security via phishing, ransomware, and disinformation campaigns. It is imperative to stay evermore urgent, aware and vigilant of cyber attacker’s activities.
The Fidelis Cybersecurity Threat Research Team (TRT) monitors and tracks emerging and evolving threats and Fidelis uses the threat intelligence they develop to generate new policies, detections, and rules for our Network, Endpoint, and Deception products. This ensures that our customers’ networks remain protected as cyber threats continue to evolve. Our Sr. Intelligence Analyst from the Threat Research Team joins us in this podcast to discuss malware during the time of COVID-19 and how cyber attackers are taking advantage of the pandemic’s turmoil. Listen now to learn about:
- Attacker objectives and activities
- Reported ransomware strains
- Examples of advanced threats and attack campaigns against certain industries and countries