Fearless Paranoia: Recent Episodes
Fearless Paranoia
A Cybersecurity Lawyer and an IT Specialist helping to demystify the world of cybersecurity. The language and terminology of cybersecurity is oftentimes intentionally confusing and hard to keep up with even for experienced professionals. Each week, we will break down different topics in the cybersecurity, data security, and privacy fields to help you be able to keep up. Understanding cybersecurity has never been more important to everyday life, but also never more difficult to do.
What if I told you that for a few dollars a month, you could become the proud owner of a new cybercrime franchise? Well, that's where the current world of extortion-for-hire has gone: ransomware-as-a-service.
Mult-Factor Authentication has too often been talked about as though it is a cure to all cybersecurity failures. It's not. But make sure that you're using phishing-resistant MFA to get the best protection available.
For our 50th episode, we discuss how ransomware gangs have adapted their tactics in response to improved cybersecurity defenses, and some tips on the best ways to fight against this increasingly dangerous threat.
It was the best of times, it was... late 2023. Two major tech companies, two nation-state attackers. One company set the standard for how to respond, the other, well, didn't.
Discover why effective cybersecurity training is crucial, but why most employers fail to do it right. Here are 4 critical steps for your company to make it engaging, relevant, and inclusive.
Explore the shift from traditional passwords to passwordless systems, the risks of password reuse, and strategies for robust digital security.
We return to the 23andMe breach, analyzing DNA data security, user-corporate responsibility balance, and the implications of genetic information hacking.
Delve into Operation Triangulation: a sophisticated cyberattack on Kaspersky, showcasing emerging cybersecurity challenges.
From major companies hit with multiple cyberattacks to the operational chaos at OpenAI, there have been some big events with major cybersecurity ramifications in 2023. Here are the biggest cybersecurity stories from a busy year.
We explore the 10 most notable cyberattacks of 2023, from Twitter's data leak to the MongoDB breach, in this review of the past year.
Our 2024 cybersecurity predictions, from AI-driven threats to election interference, and how they'll reshape our digital world.
fIT burnout is an epidemic that's sweeping through tech departments worldwide. We dissect the causes, from the cybersecurity skills gap to the overwhelming workload, and offer practical strategies for mitigation.
Unraveling the 23andMe data leak: Join us as we discuss the profound privacy risks when millions of DNA profiles become a dark web commodity.
Explore AI's role in enhancing spear phishing attacks & the need for advanced cybersecurity. Tune in & stay vigilant!
Dive into the MGM Data Breach: Discover root causes, the impact of credential stuffing, and 10 vital cybersecurity lessons for businesses.
Deep dive into quantum computing: its potential, mechanics, challenges, and implications for our digital future.
One of the most effective tools cybercriminals have is their ability to stay anonymous. How do they do it in a world where everything and everyone is tracked almost all the time?
Some of the greatest cybersecurity threats don't need to get past your security perimeter - they're already inside. Here are the five most significant insider threats you need to know about.
Uncover the reality of the Dark Web in our latest episode. Beyond the myth, we explore its structure, uses, and inherent risks.
Discover unseen cybersecurity risks in your office space as we explore the importance of physical security in digital defense.
The pandemic has led to the rise of what's called "Shadow IT." We discuss what that means, and what you can do about it.
Discover the rising threat of supply chain attacks and ways to protect yourself in today's digital landscape.
We explore cybersecurity testing methods for businesses: vulnerability assessments, penetration testing, & red team tests. Stay secure out there!
Explore the perils of Generative AI, from plagiarism to misinformation, and from cyber threats to the end of objective reality.
In this episode, we explore the benefits of AI: revolutionizing industries, improving lives, and enhancing human capabilities.
Discover the power and potential of Generative AI and Large Language Models. Check out this episode to learn about these amazing/terrifying technologies.
Zero-day exploits are the silent killers of the cybersecurity world, and these two are no different. Can you possibly protect yourself?
When T-Mobile was hacked, and the entire dataset of millions of customers were leaked, did you consider that the hackers would take that data right back to T-Mobile? You should have.
One of the most common and most dangerous types of cyberattacks is a Business Email Compromise. We discuss what a BEC is, what makes it so devastating, and how to protect yourself.
Proving that you are who you say you are is the primary goal of most cybersecurity systems. The best way to accomplish that task is through Multi-Factor Authentication. Here's how:
Failing to properly secure your data using API best practices is like having the best home security system on the market, but leaving the back door open. Here's how to avoid that mistake.
Failing to properly secure an API by using cybersecurity best practices is like having the best home security system on the market, but leaving the back door open. Here's how to avoid that mistake.
37 million customer records were recently stolen from T-Moblie by exploiting an API. So what are APIs, and why are they such a popular tool for hackers? We discuss.
Another one of those cybersecurity concepts that is talked about a lot but difficult to fully understand is Encryption. By understanding a few basic concepts, you can make sense of it all.
Keeping your private information secret just feels hard to accomplish these days. Fortunately, there are steps you can take - right now - that can protect your privacy and secure your online identity.
Technology moves pretty fast these days. It can be difficult to know what to do to best protect your personal data from theft or loss. Here are some tips, straight from the expert.
There are a lot of opinions floating around about the most recent LastPass breach. But before you read those, do these three things right now, and thank us later.
One of the hottest buzz-phrases in cybersecurity these days is “zero trust.” In this episode, we talk about the three elements of zero trust cybersecurity, and how to implement a zero trust model without breaking the bank.
Your cybersecurity systems may be top-notch, with an amazing firewall and great protections from cyberattacks. But the true measure of your cybersecurity effectiveness is your resilience - your ability to recover from an attack. In this episode, we discuss why.
One of the most common type of cyberattacks used today is the DDoS attack – a Distributed Denial of Service. So what is a DDoS attack, and what can you do to protect yourself from one?
The more access users have to company data, the more vulnerable that data is in the event of a breach. To limit your company's risks, users should have the least privilege they need to do their jobs.
Eufy made a name for itself as a video baby monitor company that provided peace of mind - in the form of top-of-the-line security to protect your privacy. It turns out their promises were more than a little bit hollow.
In September 2022, Uber suffered a massive, unique security breach. The hacker actually told the world how it was done. Here are 8 lessons businesses need to learn from this event.
Open SSL is the basis for a lot of secure communication on the internet, and it's got a major vulnerability. We talk about what Open SSL does, and how you can protect yourself from this and other similar problems.
One of the big shifts in cyber crime over the past 20 years has been from manual to automated processes. Automatically scanning for vulnerabilities now happens every minute. What will they find?
Disasters happen. Without a sufficient recovery plan in place - one that is written for your business, updated regularly, and tested and rehearsed - the only thing protecting your business, your employees, and your customers is luck.
They're required by insurance companies, governments, and other companies. So what is an Endpoint Detection System, and does your business need one?
Knowing who is responsible for a cyberattack can be crucial in determining whether the damages will be covered by insurance. So how do you ever really know?
The Wanna Cry and Not Petya malware attacks were nation state-sponsored attacks, with a lot of collateral damage and victims. Are you protected for when it happens again?
Ransomware and other forms of cyber extortion can put your business in a tough spot. Isn't negotiating with criminals wrong? Here are things to consider before you have to make that decision.
Cyber Insurance is becoming an absolute necessity for small businesses, but is also largely unregulated, inconsistent, and packed with special terms and clauses. Here's what you need to know.
By the time you see the ransom note on your computer screen, quite a lot has already happened. Understanding how Ransomware works is critical to defending against it, so in this episode we discuss how Ransomware typically gets into a computer system, how deep into your system it gets, and how much information the Ransomware operators usually learn before they ever make contact.
In our first episode of the Fearless Paranoia podcast, we discuss the basics of Ransomware - what is it and why is it so effective and pervasive in our modern world?