The Hash-Time Show: Recent Episodes
The Hash-Time Show
DATASHIELD is an industry recognized Managed Security Provider focusing on MDR, Outsourced SOC and SIEM Management. The Hash-Time Show is part of our knowledge share initiative which covers cybersecurity news and updates along with other relevant topics.
The Hash-Time show welcomes (CTI) Team Manager Alex Achs for a Cyber Threat Intelligence Themed episode. News headlines from this week include the following.
1) The Rise of Security Intelligence: Recorded Future Crosses $100M ARR Threshold 2) Making the Case for Process Documentation in Cyber Threat Intel 3)Google warns of government-backed cyber groups targeting health care organizations 4) Nintendo accounts are getting hacked and used to buy Fortnite currency
Breach of the Week - Nearly 25,000 email addresses and passwords allegedly from NIH, WHO, Gates Foundation and others are dumped online
Plus - What to look for in a Cyber Threat Intelligence Provider
The Hash-Time is back at full strength and the hosts discuss what they are doing to not go "stir-crazy" during quarantine along with a recap on the Remote Workforce Roundtable discussion.
News of the Week: Headline 1: EA Sports down – Gaming giant hit by massive DDoS attacks Headline 2: Bad Actors Infiltrated New York’s State Government Computer Network Headline 3: Apple was the most imitated brand in phishing attempts in Q1 2020
Plus Coronavirus Related Phishing and Scams discussion.
Chris sits down with Datashield CISO Jeff Marshall to discuss common misconceptions of what a CISO does along with personal branding. They also talk about remote work burn out and cyber security news of the week including:
1 - Marriott says new data breach affects 5.2 million guests 2 - Hack Attack Takes Down Dark Web Host: 7,595 Websites Confirmed Deleted 3 - Beware of Bill Gates-Themed Crypto Ponzi Scam on YouTube
Plus - Op-ed discussion around how to deal with ransomware the same way police deal with hostage situations.
The first all remote Hash-Time show due to the Coronavirus COVID-19. On top of discussing the new remote work challenges the hosts also cover news of the week including: 1 - Vulnerability Exposed Tesla Central Touchscreen to DoS Attacks 2 - Dozens of Android Apps for Kids on Google Play Store Caught in Ad Fraud Scheme 3 - Cincinnati Firm Faces $5m Data Breach Lawsuit
Plus Breach of the Week - University of Utah Health Discloses Data Breach
The Hash-Time Show Hosts (Chris, Dave & Jeff) take a look back at InfoSec in 2019 and make predictions for Cybersecurity in 2020. Topics included in the conversation include career growth, personal and professional reflection, election tampering, hacking, ransomware and many more.
This Hash-Time Breakdown focuses on cyber security solution scoping, specifically, when deciding if you need a Security Information and Event Management (SIEM) device or not. Also which SIEM should you choose for your environment. Common questions covered include the following:
- What are you trying to accomplish?
- What do you have now?
- Cloud vs on prem vs hybrid
- EPS, bandwidth utilized
- Data source scoping – what’s important? a. what do you have b. is it compatible
- What is an egress point from an architectural standpoint and why does it matter?
- Compliance and storage
- Decryption
- Cloud packet capture plugins
Measuring ROI in Cybersecurity, human augmentation and stories about insurance. All this and more including taking a phone call from a listener, designed to illustrate a real-life phishing / social engineering situation. Dave and Jeff prepare for their talk on emerging trends for RSA TechFest and Chris ponders replacing his hands.
On this show The Hash-Time hosts discuss data privacy issues including news about Google paying $170 million for violating children’s privacy on YouTube and Twitter CEO Jack Dorsey hacked via SMS Tweeting. Also discussion around cyber security acquisitions including Palo Alto Networks acquiring Zingbox for IoT security. Breach of the week surrounding an Android Trojan called Joker and a preview of Dave & Jeff (DATASHIELD) at RSA TechFest
Ransomware themed show along with an in-depth conversation about the problems with sales in cyber security. Feature dumping, vendor bias, sales person technical expertise and more. Dave, Chris and Jeff welcome guest DJ Jones Director of Sales for DATASHIELD to discuss ransomware stories, cyber security news of the week and sales.
Article Headlines: 1 - US officials fear ransomware attack against 2020 election 2 - First half of 2019 belonged to WannaCry and other five other ransomware variants 3 - Hard-coded credentials on ProGrade/Lierda Grill Temperature Monitor
Breach of the Week: Ransomware Attack Locks Out School District for 3 Months
Physical Pentesting, Spotsylvania Phishing Attack, Second Life, DEF CON and New Wardialing Variations. Dave, Chris, Jeff and guest Ben Johnson talk about these topics and more hot cybersecurity news.
Article Headlines: 1 - Police Recovered $300K Stolen in Spotslyvania Schools Phishing Attack 2 - SECOND LIFE IS PLAGUED BY SECURITY FLAWS, EX-EMPLOYEE SAYS 3 - A DEF CON Hacker Talks Security, Consent, and Why He Hacked a [Personal Intimate Device]
Beach of the week: Forbes.com report on exposed fingerprints and facial recognition data.
This week the Hash-Time hosts welcome Chase Hall to discuss Gerrymandering, Election Fraud, Voter Hacking, Cybersecurity Movies and News of the Week.
Articles covered include: 1 - Vulnerabilities in WhatsApp can allow attackers to intercept and manipulate user messages 2 - North Korean Cyber Ops Reportedly Stole $2B to Fund Weapons Programs 3 - Leaked Code Exposed Several Vulnerabilities in Boeing 787 Internal Systems
Breach of the week: Baseball Hall of Fame Hit By Payment Card Stealing Attack
Plus 7 Stats That Show What It Takes to Run a Modern SOC 1) Staffing Levels (Typical SOC has 2-5 Analysts) 2) Budget (Invest in technology, staffing, automation) 3) Outsourcing (threat analysis, threat intel, malware) 4) Top Tech Used ISIEM & SOAR) 5) SCO Pain Points (Docs & Reporting, False Positives, Alert Fatigue) 6) SOC – NOC Relationship 7) Proving SOC Value with Metrics
On this week's show the Hash-Time hosts welcome Joel Menk to discuss the last 10 years of cybersecurity, the origins of Managed Detection and Response (MDR) along with news of the week and play the IT Search Term Game.
New Topics Covered: 1 - Firefox to Warn When Saved Logins are Found in Data Breaches 2 - Security flaw in Bluetooth communication protocol puts iOS and Windows 10 devices at risk 3 - Microsoft engineer allegedly used Bitcoin mixers to hide $10M gift card fraud, gets fired
PSA of the Week: Patch BlueKeep - More than 805,000 systems are still vulnerable to BlueKeep vulnerability
On today's show the Hash-Time hosts discuss the one thing you would change about the internet and whether or not the perimeter is dead. Also cybersecurity news and breaches for the week including:
1 - Fake CS: GO, PUBG, Rust Cheats Push Password-Stealing Trojan 2 - New ransomware strain dubbed ‘eCh0raix’ targets QNAP NAS devices 3 - Pirate Bay Found Running Browser-Based Cryptocurrency Miner To Generate Revenue
Breach of the Week: Agent Smith malware infects nearly 25 million Android devices
This week the Hash-Time hosts discuss an incident where the Security Operations Center (SOC) had a gun threat.
News of the week:
1 - Canadian Intelligence Agencies Warn of Election Tampering 2 - 50% of Cyber Attacks now Use Island Hopping 3 - Many VMware Products Affected by SACK Linux Vulnerabilities
Breach of the Week - US Virgin Islands Police Department Ransomware and Water & Power Authority Phishing
All this plus Cybersecurity Slogans and Buzzwords including: 1. Best-in-Breed 2. SOC & ASOC 3. SOC as Service or SOCaaS 4. Cybersecurity Resilience Platform 5. Cyber-hygiene 6. Cyber-fitness 7. Cyber Posture 8. Risk Profile 9. Risk Index 10. Alert Overload 11. Alert Fatigue 12. Three Letter Agencies 13. Defense in Depth 14. Machine Learning 15. AI 16. Automation 17. Orchestration 18. Cybercast 19. Market Guide 20. Red Team, Blue Team, Purple Team 21. Counter Threat Unit
On today's show the Hash-Time hosts cover cybersecurity tool development, what every InfoSec employee needs to know and dive into the anatomy of a ransomware attack.
Headlines from this episode: 1.) Microsoft Excel's Power Query featured can be exploited to deploy malware 2.) EU to run war games to prepare for Russian and Chinese cyber-attacks 3.) DoD contractor cybersecurity certification and 33 new enhanced controls to combat the advanced persistent threat
On today's show your Hash-Time hosts cover topics including Artificial Intelligence, Automation, Machine Learning as well as try to figure out if Google is Skynet.
Plus hot cybersecurity news for the week which includes: 1 - DHS Tests Remote Exploit for BlueKeep RDP Vulnerability 2 - Facebook Plans Globals Financial System Based on Cryptocurrency 3 - Samsung's Security Reminder Makes the Case for Not Owning a Samsung Smart TV.
The Insight Partners acquisition of Recorded Future for $780 Million plus Digital Shadows research uncovers over 2.3 billion files exposed across misconfigured online file storage technologies. The Hash-Time Hosts cover DATASHIELD’s participation at the 2019 Rocky Mountain Information Security Conference (RMISC). All this and, Chris Vincent (Marketing) reads real cyber security targeted sales emails to Jeff Marshall (CISO) & Dave Norlin (SOC Director), both trained and tenured security professionals.
What is your key marker for business success? How do you develop employee's growth? How do you track personal growth? These questions plus news of the week including Baltimore Bitcoin Ransomware, Spoofing DuckDuckGo and the Cyber No-Fly list. The Hash-Time hosts also cover the history of Security Information and Event Management (SIEM).
BlueKeep Remote Desktop Exploits, Equifax outlook downgraded because of cyber attack and WannaCry-Infested Laptop starts at $1.13M in art auction. These news stories plus The Hash-Time Show hosts cover their biggest professional challenges and theorize about cloning a top security analyst.
The Trend Micro Hack & Symantec Denies Claims of “Fxmsp” Breach plus ranking the best and worst hacking movies of all time. Including discussion of the following films.
The Matrix (1999) Hackers (1995) WarGames (1983) Swordfish (2001) Ghost in the Shell (1996) Live Free or Die Hard (2007) Blackhat (2015) AntiTrust (2001) Johnny Mneomic (1995) The Net (1995)
The White House cyber-workforce initiative, one-ring phone scams and Mirrorthief cybercrime group target online campus stores with card skimming malware. These cyber security news stories plus a deep dive into the Packet Advantage.
Cyber Security News discussing cybersecurity programs on college campuses, FBI director Wray phishing campaign, Docker breach and how Blue Team cyber detectives take a bite out of crime.
Inaugural episode for The Hash-Time Show - Cyber Security Podcast. Discussion around new packet compression techniques from the US Army and why passwords must die!