Cybersecurity Growth: Recent Episodes

Cybersecurity Growth

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. Each week, we will dive deep into a topic that will benefit you in your cybersecurity career.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Insights, Trends & Straight Talk from the Expo Floor & Events around town.

00:00 ...coming up

00:22 introduction & agenda

03:03 who are you wearing?

06:28 sponsorship - Cybersecurity Growth Membership E-Learning & Community

08:08 hot topic - RSA Conference 2025 Recap

08:50 The history, what it is, etc

10:45 Innovator Sandbox

14:00 Hot Themes & Industry Buzz

14:20 AI Everywhere

19:13 Sessions & Keynotes

21:50 Parties & Events

22:43 Booth Culture & Vendor Standouts

27:37 sponsorship - Cybersecurity Growth Merch Store

28:41 Recap

32:25 Upcoming Shows

33:29 That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts
  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webca...

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Highlight reel of the 2025 Verizon DBIR. Organized into 10 clear areas of focus, to help you quickly identify data points that you can use to quickly build business cases and focus on risk areas.

Dive into our recap of Black Hat, DEF CON and BSides Las Vegas from the summer of 2025.

00:00 ...coming up

00:12 introduction & agenda

02:53 who are you wearing?

04:36 sponsorship - Cybersecurity Growth Membership E-Learning & Community

06:01 hot topic - Hacker Summer Camp 2025 Recap

07:28 BSidesLV

08:38 Pros Vs Joes CTF

09:34 Great for noobs but industry heavies still there

11:29 Compliance ≠ Security: Passing audits (PCI, GDPR) does not guarantee real protection against attackers.

13:58 Black Hat USA

17:40 AI! AI! AI! AI! AI! AI! AI!

21:24 Biz hall much smaller than usual

24:24 RunZero booth/CTF

27:22 Party Crashing

29:07 VulnCheck - this is how you do parties at BlackHat

34:37 DEF CON

37:55 DARPA AIxCC

43:26 DEF CON Soundtrack

45:41 Villages

52:05 Very large vendor area this year - good/bad?

56:11 Recap

57:34 sponsorship - Cybersecurity Growth Merch Store

58:15 upcoming shows

59:09 That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Highlight reel of the 2025 Verizon DBIR. Organized into 10 clear areas of focus, to help you quickly identify data points that you can use to quickly build business cases and focus on risk areas.

00:00 ...coming up

00:13 introduction & agenda

05:21 who are you wearing?

07:51 this week in cyber - Prepping for Hacker Summer Camp?

09:05 sponsorship - Cybersecurity Growth Membership E-Learning & Community

10:29 hot topic - 2025 Verizon DBIR Highlights

10:48 1. Largest dataset to date

13:12 2. System Intrusions explode

17:05 3. Third‑party risk doubles

21:57 4. Edge/VPN vulnerabilities skyrocket

24:48 5. Credential chaos reigns

30:43 6. Ransomware relentless—but payments drop

32:19 7. Human factor still deadly

36:32 8. Espionage rising

37:46 9. Secrets & GenAI pose new threats

42:06 10. Eye-popping BEC losses

43:50 Why This Matters

10:29 Final takeaway

50:32 sponsorship - Cybersecurity Growth Merch Store

51:00 upcoming shows

52:01 That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Our first roadmap walkthrough of what has been developed on the Cybersecurity Growth platform and what is planned.

00:00 introduction

00:16 our development approach

03:08 sponsorship - Cybersecurity Growth Membership E-Learning & Community

03:54 what's been released so far

14:49 coming very soon

15:59 updated courses coming soon

17:20 new courses anticipated in 2025

19:30 courses on the horizon

22:27 resources & templates coming up

23:29 stay connected

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Let's chat about real-world cyber attacks. Let's share some stories together. Let's learn and grow together.

00:00 introduction & agenda

00:54 who are you wearing?

06:55 sponsorship - Cybersecurity Growth Membership E-Learning & Community

07:44 Scattered Spider, and other things

41:04 Steps to protect against threat actors

47:57 sponsorship - Cybersecurity Growth Merch Store

48:30 That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

New course, Practical Uses of Secure Controls Framework. A 1 hour course covering how to leverage frameworks to build robust security, compliance and privacy programs. This includes implementing capability maturity models, integrating the NIST Cybersecurity Framework, and how to get buy-in from your business executives. This course has video, written text, and several visuals, which you can use for your education, and can reuse when you bring it to your governance and business stakeholders. This course is available to our CISO Pro and Leader Launchpad members.

Other courses have minor updates, with updated descriptions and running length times. These courses include, First 100 Days of a CISO, Cybersecurity for Creatives and Musicians, and What is Secure Controls Framework.

In our Livestream section, there are two new on-demand video podcasts for all members. The walkthrough of the 2025 Verizon Data Breach Investigation Report, and our Cybersecurity Growth Roadmap for July 2025.

Our left navigation has been cleaned up a little. You now have a section titled Meet Members, where you can…well, see and meet members of our community. Check out this AI-managed area, which is designed to help you connect with others of similar interests. We also now have a Latest Updates section. This used to be called “Feed”. You should check Latest Updates daily, as it gives you a quick glance into new content or conversations since the last time you were at Cybersecurity Growth.

This week, we have a question for you in Latest Updates. I want to know “Which area of cybersecurity management interests you most?”

If you have a topic to share, or a question for the community, remember Community Chat is your place to bring whatever you want to discuss.

We are working on resolving an account password reset bug. Some of our members have reported that when attempting to reset a password, they are not receiving an email, and can’t reset passwords. We hope to have this resolved quickly.

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

Us hiring cybersecurity managers, review and critique the resumes of our audience, live on air.

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

00:00 ...coming up

00:26 introduction

01:16 new CISO training course

02:00 agenda

03:00 who are you wearing?

08:17 sponsorship - Cybersecurity Growth Consulting and Services

09:19 this week in cyber

09:42 Fake Cloudflare Verification Results in LummaStealer Trojan Infections

18:15 That breach cost HOW MUCH? How CISOs can talk effectively about a cyber incident’s toll | CSO Online

34:10 Oracle Cloud data breach - Six Million Records Stolen, 140,000 Clients Potentially Impacted

43:50 sponsorship - Cybersecurity Growth Training

45:00 hot topic - Resume Workshop #2

01:10:35 sponsorship - Cybersecurity Growth Merch Store

01:13:30 Upcoming Shows

01:14:15 That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on members.cybersecuritygrowth.com bi-weekly, Fridays at 2:30 PM ET, 11:30 AM PT, 6:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👥 Become a Member of our Self-paced Cybersecurity Training & Community: https://members.cybersecuritygrowth.com/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

00:00 intro

01:10 sponsorship - Cybersecurity Growth Training

02:35 hot topic - White House Cybersecurity Executive Order

04:39 2021 White House Executive Order 14028

05:27 Trump administration revoked 78 EO’s

07:29 Sources of show content

09:32 Requiring third party risk assessments

10:57 Secure SDLC

11:53 Open source software security

12:45 sponsorship - Cybersecurity Growth Consulting

17:35 SBOM: Software Bill Of Materials

19:45 Web Authentication

23:05 Post Quantum Cryptography

28:30 AI

33:55 sponsorship - Cybersecurity Growth Merch Store

36:15 Upcoming Shows

39:10 That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/webcasts

  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

🎓 Take our self-paced cybersecurity training: https://cybersecuritygrowth.com/product-category/training/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@UCtSunTJ6P4SmOp7xVZcwPhg

https://www.youtube.com/@UCZJ97aWQYeNXymaJ47wfNCg

https://www.youtube.com/@UCkZM2hGPY25KdDV15kSGSgg

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. * 00:00 ....coming up * 00:22 intro * 02:30 agenda * 03:01 who are you wearing? * 11:17 sponsorship - Cybersecurity Growth Consulting * 12:20 nerd zone - This Week In Cyber * 12:40 Disney hack * 26:08 DISA Global Solutions * 29:45 Orange's second breach * 32:00 sponsorship - Cybersecurity Growth Training * 35:00 That’s a Wrap * 37:03 bloopers

Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

👕 Get your Cybersecurity Growth Merch: https://cybersecuritygrowth.com/store/

🎓 Take our self-paced cybersecurity training: https://cybersecuritygrowth.com/product-category/training/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. * intro * new followers * who are you wearing? * sponsorship - Cybersecurity Growth Consulting

nerd zone * PowerSchool Breach

hot topic - RTO* Key Perspectives * Hybrid vs. Office-Only Trends * Executive Perspective * Business and Operational Considerations * Risk and Liability * Employer Perspectives on Productivity & Security * CISO’s Perspective * Security Architecture Adjustments * Policy & Compliance * Incident Response & Threat Detection * Employee Perspective * Cybersecurity and Remote Work Preferences * Work-Life Balance & Productivity * Personal Security Hygiene * Upskilling & Career Growth * What If COVID Never Happened? * Alternate Timeline * Industry Trends * Final Thoughts * that’s a wrap * bloopers

Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. * intro * new followers * who are you wearing? * sponsorship - Cybersecurity Growth Consulting

nerd zone - * Gravy Analytics * Telefonica breach

that’s a wrap * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. * intro * new followers * who are you wearing? * sponsorship - Cybersecurity Growth Consulting

nerd zone - 2024 Breach Roundup* 23andMe blamed users for its massive data breach * Change Healthcare took 7 months to confirm hackers * Snowflake customer hacks snowballed * Columbus, Ohio sued a security researcher * Salt Typhoon hacked phone and internet providers * Hot Topic stays mum after 57 million customer records spill online

hot topic - 2024 Wrap Up* Cybersecurity Growth the company * history of Cybersecurity Growth webcast * brought on Garrett to the webcast * webcast format change * nerd zone, hot topic, war stories, let's be humans * 30 minute show became 1+ hour show * dialed back the agenda topics * planned for 1 show every 2 weeks, ended up with 15 full-length shows * introduced YouTube and TikTok short videos * Twitch followers and YouTube subscribers doubled in 2024 * audio podcast downloads nearly doubled in 2024 * 7,000 to 8,000 monthly views & downloads in recent months * 2025 plans * continue what worked in 2024 * more resume workshops * new training courses to be launched * upcoming show topic: return to office * That’s a Wrap * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

  • 00:00 intro
  • 05:40 new followers
  • 07:16 Who are you wearing?
  • 10:55 sponsorship - Cybersecurity Growth Consulting
  • 12:30 nerd zone
  • 12:41 LastPass breach
  • 14:14 PIH health
  • 15:14 Hot Topic - Resume Workshop
  • 35:52 That’s a Wrap
  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog
  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Hot Topic - Real CISO problems - Why it’s often a little c and not a big C

24% of CISOs actively looking to leave their jobs

Is the CISO part of the executive team?

CSO vs CISO

CISO and CIO

CISO paradox: With great responsibility comes little or no power

RACI Matrix

Learn reality when interviewing

What support do you have?

CIA Triad

Are you a Trusted Advidor or an Enforcer?

Resume Workshop

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog

  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

  • The CISO paradox: With great responsibility comes little or no power | CSO Online

  • 24% of CISOs actively looking to leave their jobs | CSO Online

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Hot Topic - Industry Communities

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog
  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Hot Topic - Level Up Your Career with Training & Certifications

  • job market
  • resume workshop
  • Want to earn more money?
  • CSO Online: 12 hottest security certs
  • Cisco Certified Network Professional (CCNP)
  • Certified Cloud Security Professional (ISC2-CCSP)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Forensic Computer Examiner (CFCE)
  • GIAC Reverse Engineering Malware Certification (GREM)
  • Certified Information Privacy Manager (CIPM)
  • Certified Information Security Manager (CISM)
  • Certified Information Systems Security Professional (CISSP) [more detail]

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog

  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

  • CIPM

  • CCNP Security - Cisco
  • 12 hottest IT security certs for higher pay today | CSO Online

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Hot Topic

  • Security Awareness Training
  • Phishing
  • Social engineering
  • OPSEC

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog
  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Hot Topic

  • hacker summer camp overview
  • Black Hat trainings
  • BSidesLV
  • Black Hat briefings
  • Black Hat business hall
  • Black Hat & DEF CON parties & social events
  • DEF CON
  • Black Hat arsenal
  • all the other cons

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog

  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

  • BSidesLV

  • DEF CON® Hacking Conference
  • Black Hat
  • DEF CON 31: The Official Soundtrack | DEF CON Communications - Garrett has an original song included in this years DEF CON soundtrack

🔐 Hire a cybersecurity consultant or vCISO: https://cybersecuritygrowth.com/services

🟢 Free Blogs, Videos and Podcasts: https://cybersecuritygrowth.com/webcasts/

CYBERSECURITY GROWTH SOCIALS

Website: https://cybersecuritygrowth.com

Tik Tok: https://www.tiktok.com/@cybersecgrowth

Facebook: https://www.facebook.com/100066411043800/

Linkedin: https://www.linkedin.com/company/cybersecurity-growth

SHAWN'S MUSIC SOCIALS

Website: https://musicbysv.com/

Spartan Valley (Shawn's artist site): https://spartanvalley.band/

Octavate (Shawn's other music project): https://www.octavate.band/

Spotify: https://open.spotify.com/playlist/6SN1n1xhWt0ztYaJbGSwgu

Instagram: https://www.instagram.com/musicbysv_

https://www.instagram.com/spartanvalleysv/

https://www.instagram.com/octavate.band/

Tik Tok: https://www.tiktok.com/@musicbysv_

https://www.tiktok.com/@octavate

Facebook: https://www.facebook.com/ShawnValleMusic

https://www.facebook.com/SpartanValley

Linkedin: https://www.linkedin.com/in/musicbysv/

Twitter: https://x.com/SpartanValleySV

https://x.com/MusicBySV

YouTube: https://www.youtube.com/@SpartanValley

https://www.youtube.com/@musicbysv_

https://www.youtube.com/@octavateband

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Nerd Zone

  • AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach
  • Microsoft informs customers that Russian hackers spied on emails
  • Polyfill supply chain attack hits 100K+ sites
  • Prudential Data Breach Victim Count Soars to 2.5M
  • 10 billion stolen passwords shared online in record-breaking leak
  • CDK update

Hot Topic

  • General awareness of security
  • Vital when rolling out security for the first time
  • Sets expectations for what is required
  • Security is ineffective without buy in from leadership
  • Password management
  • MFA
  • SSO
  • Password vaults
  • Extending into personal lives/family
  • Incident response
  • Reporting an incident
  • IR training

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog

  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

  • CDK auto dealer software unlikely to be restored before June end, memo says | Reuters

  • 10 billion stolen passwords shared online in record-breaking leak
  • Prudential Data Breach Victim Count Soars to 2.5M
  • Polyfill supply chain attack hits 100K+ sites
  • Microsoft informs customers that Russian hackers spied on emails
  • AT&T says criminals stole phone records of ‘nearly all’ customers in new data breach

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Nerd Zone

  • Evolve Bank data breach
  • U.S. Treasury Sanctions 12 Kaspersky Executives Amid Software Ban
  • IRS issues apology?
  • CDK auto dealer software unlikely to be restored before June end
  • TeamViewer corporate network breached
  • Association of Texas Professional Educators

Hot Topic

  • What is Snowflake?
  • What is a Data Lake?
  • Snowflakes flurry of breaches

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog
  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Intro

Agenda

Who are you wearing?

Nerd Zone

  • Microsoft Patch Tuesday for June
  • Rockstar Games
  • Veeam vulnerability
  • Microsoft researcher alerted the business of the SolarWinds hack, but was ignored

Hot topic

  • 2024 Verizon DBIR
  • Introduction
  • Key Findings
  • Top Threat Actors
  • Attack Vectors
  • Industry-Specific Insights
  • Trends and Emerging Threats
  • Mitigation Strategies
  • Notable Statistics
  • Conclusion
  • Call to Action

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog
  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

00:00 Intro

03:02 Agenda

04:13 Who are you wearing?

09:16 Nerd Zone

  • Santander/Ticketmaster

  • Dell

  • AT&T

24:17 Hot topic(s)

  • SaaS sprawl

** What is SaaS sprawl?

** Scary stats

** How SaaS sprawl introduces risk

** Common approaches to managing SaaS sprawl

** Some mitigation & risk reduction strategies for SaaS sprawl that I believe do not work

** So what do we do?

** Summary

58:38 War stories

1:02:29 Lets be humans

Music stuff

Non-security tech

1:06:09 That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog

  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

hot topic

  • SPECIAL EDITION: United HealthGroup and the Backlash of MFA not-Everywhere

That’s a Wrap

  • Cybersecuritygrowth.com and cybersecuritygrowth.com/blog

  • Live on Twitch bi-weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

nerd zone * How can we still trust Microsoft (redux)?

hot topic * Building a SOC, Where Do I Start?

lets be humans * Music stuff * Non-security tech

job market * Resume workshop

that’s a wrap * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * Live on Twitch weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Nerd Zone * Breaches are still happening every day * AT&T breach * How can we still trust Microsoft?

Hot topic * FBI Internet Crime Report 2023

War stories * 2 BlackBerry’s…..one Adversary * Remote access policy

Lets be humans * Music stuff * Non-security tech

Job market * Resume workshop

That’s a Wrap * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * Live on Twitch weekly, Fridays at 10:30 AM EDT, 7:30 AM PDT, 3:30 PM GMT in your pod feeds a few days later.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Hot topic * NIST CSF 2.0

Nerd Zone * Pôle Emploi - France’s unemployment office

War stories * Microsoft Secure Score * SaaS sprawl

Lets be humans * Music stuff * Non-security tech

Job market * Resume workshop

That’s a Wrap * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * Live on Twitch weekly, Fridays at 10:30 AM EST, 7:30 AM PST, 3:30 PM GMT in your pod feeds a few days later.

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Topics:

Death By Slides - CNAPP - Cloud Native Application Protection Platform

  • What Is CNAPP?
  • Key Components
  • Top CNAPP Providers

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Topics:

Death By Slides - CWPP - Cloud Workload Protection Platform

  • What Is CWPP?
  • Why Is CWPP Important?
  • How Does CWPP Work?
  • Key Benefits
  • Top CWPP Providers

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Topics:

Death By Slides - SSPM - SaaS Security Posture Management

  • What is SSPM?
  • Why is SSPM Important?
  • Key Considerations
  • Key Functionality
  • Top SSPM Providers

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Topics:

Death By Slides - CSPM - Cloud Security Posture Management

  • What is CSPM?
  • Key Benefits & Capabilities
  • Why Do You Need CSPM?
  • Top 10 CSPM Providers

View Details

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders.

Topics:

Death By Slides - CASB - Cloud Access Security Broker

  • What is CASB?
  • Key Benefits
  • 4 Key Components
  • Top 10 CASB Providers

View Details

Episode #7 - Cloud Security 101

Death By Slides- Cloud Security 101

What’chu Listening To or Creating- Talk about music (15 minutes)

That’s a Wrap Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * @shawnvalle or @cybersecuritygrowth * This week we covered * Overview of the explosive Cloud Security solution space * CASB (Cloud Access Security Broker) * CSPM (Cloud Security Posture Management) * SSPM (SaaS Security Posture Management) * CWPP (Cloud Workload Protection Platforms) * Container & Kubernetes Security * CNAPP (Cloud Native Application Protection Platforms) * Live on Twitch weekly, Fridays at 10:30 AM EST, 7:30 AM PST, 3:30 PM GMT in your pod feeds a few days later.*

View Details

Episode #6 - White House National Cybersecurity Strategy

Top News StoriesDeath By Slides- White House National Cybersecurity Strategy

What’chu Listening To- Talk about music

That’s a Wrap Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * @shawnvalle or @cybersecuritygrowth * This week we covered * White House National Cybersecurity Strategy * What Is It * Strategy Overview * Vision * Approach * Defend Critical Infrastructure * Disrupt and Dismantle Threat Actors * Shape Market Forces to Drive Security and Resilience * Invest in a Resilient Future * Forge International Partnerships to Pursue Shared Goals * But What About Private Sector? * What To ACTUALLY Do With This Information*

  • Live on Twitch weekly, Fridays at 10:30 AM EST, 7:30 AM PST, 3:30 PM GMT in your pod feeds a few days later.

View Details

Episode #5 - Security Risk Management

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. I’m your host Shawn Valle, Exec Director and CISO of Cybersecurity Growth

IntroTop News StoriesDeath By Slides- the Business of Risk

That’s a Wrap Concluding topics (5 minutes) * Thank you for listening * Web address, socials * I’m Shawn Valle, creator of this show and the music here on Cybersecurity Growth * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * @shawnvalle or @cybersecuritygrowth * If you like the show, please tell your friends. If you hate it, tell your adversaries. Like/subscribe and leave 5-stars and a review like “great show, I learned something new to help me in my cybersecurity career.” * This week we covered * What is Risk * How Risk fits into GRC * Importance of Risk Management * Key Components * Best Practices * Risk assessments * Challenges*

  • Plans for next week

View Details

Title: Cybersecurity Growth #4 - Zerø Trust

Opening* When You Arrived instrumental as theme song

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. I’m your host Shawn Valle, Exec Director and CISO of Cybersecurity Growth

Former Chief Security Officer of Rapid7 and former CISO of Tricentis

Musician here on Twitch and elsewhere, MusicBySV (more on that later)

Top News Storieshttps://www.networkworld.com/article/3687168/ntt-palo-alto-partner-for-managed-sase-with-aiops.html

By Maria Korolov, Network World

NTT, Palo Alto partner for managed SASE with AIOpsUsing a managed services provider to deliver SASE can streamline deployment and free up enterprise resources.“A new offering from IT services provider NTT combines Palo Alto Networks' Prisma SASE offering with NTT's managed network services and AIOps infrastructure.

SASE – secure access service edge – has been gaining interest for its potential to reduce networking complexity while improving security. It combines SD-WAN with security services, including secure web access gateway (SWG), cloud access security broker (CASB), zero-trust network access (ZTNA), and firewall-as-a-service (FWaaS), in a single, cloud-delivered service model.”

“The benefits of using an MSP for SASE include having a single source for setup and management, gaining access to skills that an enterprise might not have in house, and flexible financing models.”

https://www.csoonline.com/article/3686610/hackers-abuse-legitimate-remote-monitoring-and-management-tools-in-attacks.html

By Lucian Constantin, CSO Online

Hackers abuse legitimate remote monitoring and management tools in attacksResearchers and government agencies warn that threat actors are increasing their use of commercial RMM tools to enable financial scams.“Security researchers warn that an increasing number of attackers are using legitimate remote monitoring and management (RMM) tools in their attacks to achieve remote access and control over systems. These tools are commonly used by managed service providers (MSPs) and IT help desks so their presence on an organization's network and systems might not raise suspicion.

Researchers from Cisco Talos reported this week that one particular commercial RMM tool called Syncro was observed in a third of the incident response cases the company was engaged in during the fourth quarter of 2022. However, this wasn't the only such tool used.

Separately in a joint advisory this week, the US Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA) the and Multi-State Information Sharing and Analysis Center (MS-ISAC) warned about the use of RMM tools in a refund scam that targeted the employees of multiple federal agencies.”

My takeaway, if you aren’t currently being very diligent in removing remote access tools from your environment, and only explicitly allowing in certain tools, by certain users, on certain machines, …you should start making that a priority in your strategy.

Death By Slides- Zerø Trust, a brief overview

What’chu Listening To or Creating* Saw G. Love & Donavan Frankenreiter in concert last night. Two different artists that are similar to and friends with Jack Johnson; both with a spin on blues. G. Love more Blues meets hip-hop, and Donovan more laid-back blues meets rock. * G. Love & Special Sauce. I Like Cold Beverages. Baby’s Got Sauce. * Donavon Frankenriter. Free * New Octavate song Hold My Drink

That’s a Wrap* Concluding topics * Thank you for listening * I’m Shawn Valle, creator of this show and the music here on Cybersecurity Growth * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * @shawnvalle or @cybersecuritygrowth * If you like the show, please tell your friends. If you hate it, tell your adversaries. Like/subscribe and leave 5-stars and a review like “great show, I learned something new to help me in my cybersecurity career.” * This week we covered... * Plans for next week * Live on Twitch weekly, Fridays at 10:30 AM EST, 7:30 AM PST, 3:30 PM GMT in your pod feeds a few days later.

View Details

Title: Cybersecurity Growth #3 - So You Wanna Be A CISO

Opening* When You Arrived instrumental as theme song

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. I’m your host Shawn Valle, Exec Director and CISO of Cybersecurity Growth

Former Chief Security Officer of Rapid7 and former CISO of Tricentis

Musician here on Twitch and elsewhere, MusicBySV (more on that later)

Top News Storieshttps://www.techtarget.com/searchsecurity/news/252529487/Experts-applaud-expansion-of-Apples-E2E-encryption

ByArielle Waldman Published: 23 Jan

“Experts applaud expansion of Apple's E2E encryption”

Amidst growing privacy concerns and data breach threats, Apple launched Advanced Data Protection for U.S. customers last month to secure almost all data stored in iCloud.

In December, Apple launched three new data security and authentication tools including iMessage Contact Key Verification, Security Keys for Apple ID and -- most notably -- Advanced Data Protection. The new offering expands Apple's end-to-end encryption (E2EE) protection to the cloud, including device and messages backup, the iCloud drive, notes, photos, voice memos, wallet items and more.

With Apple's encryption expansion, access to most cloud data will now be limited to users. Data recovery can only be achieved through passwords and recovery methods, and not even Apple can decrypt it. More significantly, the data will remain secure even if the cloud is breached, according to Apple.

(Think about LastPass recently. They were breached, all user data was lost. The encrypted stuff SHOULD stay safe even though it was stolen due to good encryption techniques. But LP admitted that fields like the URL was not encrypted and was not considered a secure field. I – and may others – disagree. The URL likely contains session cookie info that can allow an attacker to bypass passwords and MFA to get into a site.

Back to apple..)

...being rolling out to worldwide users in early 2023, the number of E2EE categories rises from 14 to 23

https://www.csoonline.com/article/3686116/recent-legal-developments-bode-well-for-security-researchers-but-challenges-remain.html

By Cynthia Brumfield CSO | JAN 26,

“Recent legal developments bode well for security researchers, but challenges remain”

Security researchers gained greater federal legal protections over the past two years, but US state laws and China’s recently adopted vulnerability disclosure law pose threats.

…Harley Geiger, an attorney with Venable LLP, who serves as counsel in the Privacy and Data Security group. Speaking at Shmoocon 2023, Geiger pointed to three changes in hacker law in 2021 and 2022 that minimize security researchers' risks.

"Over the past couple of years, these developments have changed the sources of greatest legal risk for good faith security research," he said. Specifically in the US, the Computer Fraud and Abuse Act (CFAA), the most controversial law affecting hackers, the Department of Justice's (DOJ’s) charging policy under the CFAA, and the Digital Millennium Copyright Act have evolved in favor of hackers. However, laws at the US state level affecting hackers and China's recently adopted vulnerability disclosure law pose threats to security researchers and counterbalance some of these positive changes.

The CFAA was enacted in 1986… …and was the first US federal law to address hacking.

"The CFAA has been the boogeyman for the community for quite a long time," Geiger said. "It's maybe the most famous anti-hacking law. This is a criminal law and a civil law, and that's important to remember. You can be prosecuted under the CFAA criminally, and you can also be threatened with private lawsuits."

…CFAA prohibits several things, including accessing a computer without authorization and exceeding authorized access to a computer.

In June 2021, the US Supreme Court altered its previous stance on the CFAA. In the Van Buren vs. the US decision, the Court said that if "you are authorized to use a computer for one purpose, and you use it for another, even though it's an unauthorized purpose, that may be a violation of your contract, but it is not a federal hacking crime," Geiger told the attendees. "But you still have to have some authorization to use the computer in the first place," and terms of service can still possibly dictate whether you have authorization.

…in 2022, CFAA rules got better for researchers/hackers… "It is explicit protection for good-faith security research under the nation's chief foremost prosecutor," Geiger said.

Death By Slides- So You Wanna Be a CISO; Shawn’s CISO/CSO strategy walk-through.

Not a pretty deck. It’s my working slides based on 6 or 7 years of learning.

When the e-Comm company I was working for as SecOps Dir got acquired by a large CRM company :-) , I was assigned a new Sec Systems Director role. I took it upon myself to play mini-CISO (learning from my 3 previous bosses in those roles), and I built a “first 100 days of a CISO playbook”. Then I implemented the playbook to see how it would work.

After a while, I got assigned a new role, responsible for Security of Cloud Identities across two very well-known cloud providers. I made some minor changes to my playbook, and implemented it again.

At that point, I realized that I wanted to take on a CISO/CSO role…so I found a job doing just that, and well, I iterated on my playbook and implemented it again. And again.

And likely will again. So, this is my personal playbook, I do share pieces of it with people/teams who are curious, and now you get to see it.

So, if you are a Manager, Director, VP or CISO, or even in IT or another department getting into manager/leader roles, quite a bit of this isn’t specific to “security”.

Let’s get into it.

What’chu Listening To or Creating* Getting my music livestream up-and-running, after a 6 months hiatus. Listening to my 800 song playlist, to remember how to play the songs on drums, guitar and singing. …I definitely forgot how to play the drums. You can follow that channel on Twitch at MusicBySV, and YouTube and every social network you can imagine. * G. Love & Special Sauce. The Things That I Used To Do. Baby’s Got Sauce. Sugar Sweet Mama.

That’s a Wrap* Concluding topics * Thank you for listening * Web address, socials * I’m Shawn Valle, creator of this show and the music here on Cybersecurity Growth * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * @shawnvalle or @cybersecuritygrowth * If you like the show, please tell your friends. If you hate it, tell your adversaries. Like/subscribe and leave 5-stars and a review like “great show, I learned something new to help me in my cybersecurity career.” * This week we covered * Practical application of the Secure Controls Framework. Picking up from where we left off last week. My takeaway is, if you are dealing with 3 or more security/privacy frameworks, it’s worth investing time into SCF and possibly a tool that uses SCF as an overarching security framework, for all your compliance/security/privacy frameworks. It may save you time, and provides a wholistic framework for just about any control you could imagine. But, it could be overwhelming, if you are just getting started...so, if you are just getting started on your compliance/security/privacy journey, you may want to wait a year or two before you jump into SCF. * Plans for next week * [Not sure yet what next week will hold. I’m finishing up a presentation on Security Risk Management, as well as another one on Zero Trust. So, it’ll probably be on one of those topics.] * Live on Twitch weekly, Fridays at 10:30 AM EST, 7:30 AM PST, 3:30 PM GMT in your pod feeds a few days later.

View Details

Cybersecurity Growth

  • livestream and podcast

Duration: Weekly, 90 minutes

Title: Cybersecurity Growth #2 - Practical uses of the Secure Controls Framework

Opening* When You Arrived instrumental as theme song

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. I’m your host Shawn Valle, Exec Director and CISO of Cybersecurity Growth

Former Chief Security Officer of Rapid7 and former CISO of Tricentis

Musician here on Twitch and elsewhere, MusicBySV (more on that later)

Top News Storieshttps://www.rapid7.com/blog/post/2023/01/19/etr-cve-2022-47966-rapid7-observed-exploitation-of-critical-manageengine-vulnerability/?utm_campaign=sm-blog&utm_source=linkedin&utm_medium=organic-social

New emergent threat response: "CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability."

Glenn Thorpe of Rapid7 “This has kept us busy over the past 24+ hours. If you’re running ManageEngine software you should:

  1. Patch it always no questions asked just do it.

2a. Keep it as segmented as possible from the public internet regardless of its function.

2b. Migrate away from it.”

Dozens of products impacted.

Access Manager Plus*

Active Directory 360**

ADAudit Plus**

ADManager Plus**

ADSelfService Plus**

Analytics Plus*

Application Control Plus*

Asset Explorer**

Browser Security Plus*

Device Control Plus*

Endpoint Central*

Endpoint Central MSP*

Endpoint DLP*

Key Manager Plus*

OS Deployer*

PAM 360*

Password Manager Pro*

Patch Manager Plus*

Remote Access Plus*

Remote Monitoring and Management (RMM)*

ServiceDesk Plus**

ServiceDesk Plus MSP**

SupportCenter Plus**

Vulnerability Manager Plus*

https://www.csoonline.com/article/3684850/11-top-xdr-tools-and-how-to-evaluate-them.html

By Tim Ferrill CSO Online

11 top XDR tools and how to evaluate themExtended detection and response tools provide a deeper and more automated means to identify and respond to threats. These are some of the most popular options.XDR is a relatively new class of security tool that combines and builds on the strongest elements of security incident and event management (SIEM), endpoint detection and response (EDR), and even security orchestration and response (SOAR).

Trend Micro,

Microsoft XDR,

Palo Alto Networks Cortex XDR,

Crowdstrike Falcon Insight XDR,

Bitdefender GravityZone Business Security Enterprise,

SentinelOne Singularity XDR,

Cybereason XDR,

VMware Carbon Black XDR,

Elastic Security for XDR,

Trellix XDR Platform,

Cynet 360 AutoXDR

https://www.csoonline.com/article/3685670/attackers-deploy-sophisticated-linux-implant-on-fortinet-network-security-devices.html

By Lucian Constantin

Attackers deploy sophisticated Linux implant on Fortinet network security devicesThe exploit allows attackers to remotely execute arbitrary code and commands without authentication.Fortinet disclosed that a critical vulnerability in its FortiOS operating system was being exploited by attackers in the wild. This week, after additional analysis, the company released more details…

…the original zero-day attack was highly targeted to government-related entities…

… CVE-2022-42475, is in the SSL-VPN functionality of FortiOS and can be exploited by remote attackers without authentication. Successful exploitation can result in the execution of arbitrary code and commands.

Patch your Fortinet gear.

Death By Slides- Practical uses of the Secure Controls Framework

What’chu Listening To or Creating- Talk about music

That’s a Wrap* Concluding topics * Thank you for listening * Web address, socials * I’m Shawn Valle, creator of this show and the music here on Cybersecurity Growth * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * @shawnvalle or @cybersecuritygrowth * If you like the show, please tell your friends. If you hate it, tell your adversaries. Like/subscribe and leave 5-stars and a review like “great show, I learned something new to help me in my cybersecurity career.” * This week we covered * Practical application of the Secure Controls Framework. Picking up from where we left off last week. My takeaway is, if you are dealing with 3 or more security/privacy frameworks, it’s worth investing time into SCF and possibly a tool that uses SCF as an overarching security framework, for all your compliance/security/privacy frameworks. It may save you time, and provides a wholistic framework for just about any control you could imagine. But, it could be overwhelming, if you are just getting started...so, if you are just getting started on your compliance/security/privacy journey, you may want to wait a year or two before you jump into SCF. * Plans for next week * [My approach for the first 100 days as a security leader (this could be as a CISO, but also as a Director of team reporting to the CISO – like GRC Dir, SecOps Dir, ProdSec Dir, etc.)] * Live on Twitch weekly, Fridays at 10:30 AM EST, 7:30 AM PST, 3:30 PM GMT in your pod feeds a few days later.

View Details

Title: Cybersecurity Growth #1 — Secure Controls Framework (Part 1)

Opening* When You Arrived (by Spartan Valley) theme song

  • introductions & pleasantries (5 minutes)

Welcome to Cybersecurity Growth. A show for aspiring and existing cybersecurity leaders. I’m your host Shawn Valle, Exec Director and CISO of Cybersecurity Growth

Former Chief Security Officer of Rapid7 and former CISO of Tricentis

Musician here on Twitch and elsewhere, MusicBySV (more on that later)

Top News Storieshttps://www.csoonline.com/article/3685368/study-shows-attackers-can-use-chatgpt-to-significantly-enhance-phishing-and-bec-scams.html Lucian Constantin at CSO Online from Jan 11.

Study shows attackers can use ChatGPT to significantly enhance phishing and BEC scams

Researchers demonstrate how attackers can use the GPT-3 natural language model to launch more effective, harder-to-detect phishing and business email compromise campaigns.

https://www.csoonline.com/article/3684771/twitters-mushrooming-data-breach-crisis-could-prove-costly.html Cynthia Brumfield at CSO Online from Jan 6

Twitter's mushrooming data breach crisis could prove costly

An apparent data breach potentially impacting hundreds of millions of users could damage Twitter's finances and operations. EU regulators pose the biggest threat to the Elon Musk-owned company.

the picture surrounding Twitter's data breach is murky. This latest headache for the company began in July when an actor known as "devil" put up for sale on a breached data forum a database of phone numbers and email addresses belonging to 5.4 million Twitter accounts. Devil demanded payment of $30,000 for the data and claimed to have swiped it via a vulnerability disclosed to Twitter on January 1, 2022. Twitter fixed the flaw on January 13, 2022.

vulnerability affected Android users and allowed anyone without authentication to obtain a Twitter ID for any user by submitting a phone number or email handle, even if the user prohibited this action in the privacy setting. About a month after devil's posting, Twitter confirmed that a bad actor had taken advantage of the vulnerability and said it would send out notices to account owners affected by the breach.

The data containing the 5.4 million users' data was released for free on November 27, 2022. However, another database allegedly containing details on 17 million users was also circulating privately in November.

in late December, Alon Gal, the co-founder and CTO of Israeli cybercrime intelligence company Hudson Rock spotted on a criminal data breach forum a posting by a user called "Ryushi" offering to sell the emails and phone numbers of 400 million Twitter users.

Troy Hunt, who runs the data breach reporting site HaveIBeenPwned, says he found 211.5 million unique email addresses in the leaked database.

User account breaches have begun. Well-known users include Piers Morgan and Ed Sheeran.

Brian Krebs said in a tweet, "Hey @elonmusk , since you don't seem to have much of a media/comms team anymore, can you address the apparently legitimate claim that someone scraped and is now selling data on hundreds of millions of Twitter accounts? Maybe it didn't happen on your watch, but you owe Twitter a reply."

Gal tells CSO, "Twitter failed to acknowledge this breach, and it is a shame. They should acknowledge it as soon as possible, so users are alert to the risks they are now facing. I urge Twitter users to change passwords and be suspicious of phishing attempts and for Twitter to acknowledge this breach as soon as possible."

Death By PowerPoint- Walk through an introduction of Secure Controls Framework

What’chu Listening To- Talk about music

That’s a Wrap* Concluding topics (5 minutes) * Thank you for listening * I’m Shawn Valle, creator of this show and the music here on Cybersecurity Growth * Cybersecuritygrowth.com and cybersecuritygrowth.com/blog * @shawnvalle or @cybersecuritygrowth * Today I provided an overview of Secure Controls Framework (straight from the “SCF Start Here” document. Next week, we will cover Practical uses for SCF. Future streams/episodes I plan to go deep into CISO strategy, Risk Management, Incident Response, Ransomware Preparedness, Automating third party risk management, and more. * Live on Twitch weekly, Fridays at 10:30 AM EST, 7:30 AM PST, 3:30 PM GMT in your pod feeds a few days later