Modern Cyber with Jeremy Snyder

Modern Cyber with Jeremy Snyder

di Jeremy Snyder

Lavoro Tecnologia

Stagione 1

Zack Glick of Zatik Security

In this episode of Modern Cyber, Jeremy Snyder speaks with Zack Glick, founder of Zatik Security, live from fwd:cloudsec 2024. Zack shares insights from his extensive experience in cloud incident response, including his time at AWS, where he handled major incidents like Heartbleed and Log4j. He discusses the importance of maintaining calm during high-pressure situations and the unique challenges of managing cloud-based incidents, emphasizing the role of the incident commander over the technical responder. The conversation also touches on Zack's transition to founding Zatik Security, a company offering fractional application security services tailored for small businesses, and the broader challenges and innovations in cloud security today. About Zack Glick Zack Glick is a co-founder and CTO at Zatik Security, a company providing fractional application security services for small and medium-sized businesses. Before starting Zatik, Zack spent eight years at AWS, where he played a key role in cloud incident response, handling some of the most significant security events in the industry. Zack's experience also includes time at New Relic, where he further honed his expertise in cybersecurity. He now focuses on helping small businesses build robust security strategies and navigate complex vendor management requirements. Zatik Security Website - https://www.zatik.io/ Zack Glick LinkedIn - https://www.linkedin.com/in/zglick/

Dirk Schrader of Netwrix

In this episode of Modern Cyber, host Jeremy Snyder talks with Dirk Schrader, VP of Security Research at Netwrix, and a seasoned expert with over 25 years in IT security. The conversation starts with the intriguing parallels between anti-submarine warfare and identity threat detection, exploring how tactics used to track submarines can inform cybersecurity strategies. Dirk also shares his insights on the importance of collaboration in cybersecurity, the challenges of detecting sophisticated threats, and the evolving landscape of cyber resilience. This episode is a must-listen for anyone interested in understanding how historical military strategies can provide valuable lessons for modern cybersecurity challenges. About Dirk Schrader: Dirk Schrader is the Vice President of Security Research at Netwrix, where he focuses on advancing cyber resilience as a modern approach to tackling cyber threats. He also holds the title of Resident CISO for EMEA. With over 25 years of experience in IT security, Dirk specializes in research for critical industries such as healthcare, energy, and finance—sectors that are frequently targeted by cyberattacks. He holds prestigious certifications including CISSP from ISC2 and CISM from ISACA. Dirk is known for his deep understanding of cybersecurity strategies, particularly in how traditional military tactics can be applied to modern cyber defense. https://blog.netwrix.com/ https://en.wikipedia.org/wiki/Anti-submarine_warfare https://en.wikipedia.org/wiki/List_of_submarine_operators

Javvad Malik of KnowBe4

In this episode of Modern Cyber, Jeremy chats with Javvad Malik, the Lead Security Awareness Advocate at KnowBe4, to discuss the intricacies of security awareness in today's cybersecurity landscape. Javvad, a seasoned IT security professional with over 20 years of experience, shares his unique insights on how security awareness goes beyond just training and compliance. He argues for a more behavioral and culturally-oriented approach, emphasizing the importance of storytelling and human-centered design in fostering a security-conscious environment. Touching on the shortcomings of traditional security training, the role of compliance, and the power of simplicity in security awareness, Javvad also describes the significance of building positive relationships between security teams and the broader organization to prevent issues like shadow IT and security fatigue. About Javvad Javvad Malik is the Lead Security Awareness Advocate at KnowBe4, based in London, with over two decades of experience in IT security. His career spans roles as a security administrator, consultant, industry analyst, and advocate. Javvad is not only a multi-award-winning professional but also holds a Guinness World Record for the most views of a cybersecurity lesson on YouTube in 24 hours. He is passionate about helping organizations understand the value of security awareness and how it can be integrated into every facet of an organization. Through his engaging blog posts, videos, podcasts, and public speaking events, Javvad continues to influence the cybersecurity landscape. He holds key certifications, including SSCP and CISSP, and is known for his practical and human-centric approach to cybersecurity. Guinness World Record - https://www.youtube.com/watch?v=fI6s-NqbqPs Javvad's YouTube Channel - https://www.youtube.com/InfosecCynic Deceptive Design - https://www.deceptive.design/ KnowBe4 - https://www.knowbe4.com/

Marina Segal of Tamnoon

In this episode of Modern Cyber, Jeremy catches up with Marina Segal of Tamnoon at fwd:cloudsec 2024. Across the course of the conversation, the pair discuss Marina's long career in cloud security, the evolution of the threat landscape and the increasingly complex alphabet soup of security solutions in the market. Covering the challenges of managing misconfigurations, the importance of prioritizing risks, and the debate around automated remediation, Marina also offers valuable insights into striking the right balance between technology and human intervention in cloud security operations. This episode is packed with practical advice for security professionals aiming to navigate the complexities of cloud environments. About Marina Segal Marina Segal is the Founder and CEO of Tamnoon, a company dedicated to advancing cloud security. With a career spanning roles from a consultant at Deloitte to a key player in the development of cloud security technologies, Marina has been at the forefront of the industry. Her expertise includes working on CNAPP and CSPM tools, and she played a significant role in shaping cloud security best practices. Prior to founding Tamnoon, Marina contributed to the success of several cloud security initiatives, including Dom9 and Checkpoint, where she honed her skills in product management and cybersecurity strategy. Her passion for cloud security continues to drive her work at Tamnoon, where she focuses on solving the industry's most pressing challenges. Tamnoon Website - https://tamnoon.io/

Johannes Wiklund of Jotform

In this episode of Modern Cyber, host Jeremy sits down with Johannes Wiklund, the Head of Information Security at JotForm. Johannes shares his extensive expertise in the field of information security, detailing how he balances a wide range of responsibilities from application security to compliance functions, including HIPAA, SOC2, and FedRAMP. Learn about JotForm's approach to product security, the integration of bug bounty programs, and the implementation of static code analysis tools like Semgrep. Johannes also discusses the challenges of maintaining a secure SaaS platform used by millions, including major corporations, and shares his thoughts about Black Hat, B-Sides and DEF CON happening in Vegas this week. This episode is a must-listen for anyone interested in the intersection of cybersecurity and product management in the SaaS industry. About Johannes Wiklund Johannes Wiklund is the Head of Information Security at JotForm, a leading SaaS application for creating online forms. With close to three years at JotForm, Johannes has been instrumental in shaping the company's information security strategy and implementation. He oversees multiple teams, including AppSec, cloud infrastructure, incident response, and governance and compliance. Johannes brings a wealth of experience in leveling up security programs for late-stage startups and has a comprehensive background in managing compliance functions such as HIPAA, SOC2, and FedRAMP/StateRAMP. His approach to security includes integrating tools like Semgrep for static code analysis and running an invitation-only bug bounty program through HackerOne. Johannes is also known for his proactive stance on data security and his ability to guide product security decisions, making him a pivotal figure in the cybersecurity landscape.

Shauli Rozen of ARMO

In this episode of Modern Cyber, Jeremy speaks with Shauli Rozen, co-founder and CEO of ARMO, the company behind Kubescape. They explore the evolving landscape of cloud security, delving into the complexities of Kubernetes security and the challenges of integrating various cloud security solutions. Shauli shares his expertise on the convergence of security products, the importance of contextual awareness in identifying attack patterns, and the reality versus the concept of platformization in cloud security. They also discuss the emerging buzzword CNAP, the potential pitfalls of bundling security solutions, and the need for greater awareness and concern regarding cloud security threats. Join us for a compelling conversation that sheds light on the current state and future of cloud security. About Shauli Rozen Shauli is the co-founder and CEO of ARMO, a pioneering company in cloud-native security solutions, and the driving force behind Kubescape, an open-source Kubernetes security platform. With a wealth of experience in the cloud security space, Shauli has a deep understanding of the challenges and intricacies of protecting modern cloud environments. His career is marked by a passion for product creation and innovation in security, focusing on developing solutions that integrate runtime and configuration security to enhance overall cloud security posture. Shauli is known for his practical approach to cybersecurity, emphasizing the importance of synergy between different security products and the need for continuous hardening and contextual awareness. He actively engages with the security community, sharing insights and fostering discussions on emerging trends and best practices in cloud security. https://www.armosec.io/ https://github.com/kubescape/kubescape

Noah McDonald of Google Cloud

In this episode of Modern Cyber, Jeremy meets with Noah McDonald from Google Cloud to talk about the intricacies and best practices of incident response in cloud environments. Noah shares valuable insights into identifying and mitigating cyber threats, the importance of understanding your environment's architecture, and the critical role of logging and threat modeling. The discussion covers the challenges of responding to breaches, the process of forensic analysis, and the importance of timely and transparent communication with clients. Filmed live at fwd:cloudsec 2024 in Arlington, Virginia, this is an episode you don't want to miss. About Noah McDonald Noah is an experienced security engineer at Google Clou where he helps clients optimize and secure their cloud environments. He is also an Advisory Board Member at Fulton-Montgomery Community College, contributing to cybersecurity education. Previously, he held key roles at Palo Alto Networks Unit 42 and EY, where he provided advanced digital forensics and cybersecurity consulting services. With a strong background in both technical and advisory capacities, Noah is a respected professional in the cybersecurity industry.

Sounil Yu on FCC Consent Decrees and API Security

In this special episode of Modern Cyber, Jeremy chats with Sounil Yu about a recent consent decree from the FCC that specifically calls for improved API security. They discuss what consent decrees are, their seriousness, and the potential consequences for companies that fail to comply. Sounil also provides insights into best practices for API security and the role of standards like NIST and OWASP in guiding organizations. About Sounil Yu: Sounil Yu is a cybersecurity luminary with a rich background as a former CISO and chief security scientist at Bank of America. He is renowned for his groundbreaking work in reshaping cybersecurity approaches, notably creating the Cyber Defense Matrix and the DIE triad. As the Co-founder of Knostic, Sounil continues to push boundaries in the industry, offering innovative solutions to cybersecurity challenges. His expertise and thought leadership have earned him recognition as a leading figure in the cybersecurity community. In the News 1 - https://therecord.media/tracfone-16-million-to-settle-fcc-investigation In the News 2 - https://cyberscoop.com/fcc-tracfone-wireless-reach-16m-cyber-and-privacy-settlement/ The Full Consent Decree : https://docs.fcc.gov/public/attachments/DA-24-481A1.pdf FCC Statement: https://docs.fcc.gov/public/attachments/DOC-404156A1.pdf OWASPI API Top 10: https://owasp.org/API-Security/editions/2023/en/0x11-t10/

Steve Stratton of Pratton Media

In this episode of Modern Cyber, Jeremy Snyder talks to Steve Stratton, a seasoned cybersecurity expert with a diverse background spanning military service, US Secret Service, and software development for classified data transfer. They discuss the evolution of technology from analog to digital, the emergence of early cyber threats, and the complexities of modern cybersecurity. Steve emphasizes the importance of adaptability, the role of social engineering in early cyber attacks, and the need for cybersecurity vendors to integrate seamlessly into the customer's environment. The conversation also delves into the nuances of cross-domain solutions, high assurance systems, and the cost challenges faced by private sector organizations in implementing these technologies. About Steve Stratton Steve Stratton has had an illustrious career in cybersecurity, beginning with his service in the military, where he worked in White House Communications and as a Special Forces Senior Weapons and Communications Sergeant. He later joined the US Secret Service before transitioning to develop software solutions for the warfighter and intelligence community. Steve holds a BA in Management and numerous technical certifications from Sun Microsystems, Novell, Cisco, and others. With extensive experience in cybersecurity, Steve is a respected advisor and author, contributing significant insights to the field, particularly in cross-domain solutions and high assurance systems. Citibank Vax Hack: https://www.cybereason.com/blog/malicious-life-podcast-the-real-story-of-citibanks-10m-hack Shadow Tier: https://www.amazon.com/Shadow-Tier-SHADOW-TIER-Book-ebook/dp/B0CTXNC734/ref=sr_1_2?c[…]igital-text&sprefix=steve+stratton%2Cdigital-text%2C70&sr=1-2 Warrior’s Path: https://www.amazon.com/Warriors-Path-Lance-Origin-SHADOW-ebook/dp/B0D482MDHG/ref=sr_[…]igital-text&sprefix=steve+stratton%2Cdigital-text%2C70&sr=1-1

Breach Alert at Authy

In this episode of Modern Cyber, Jeremy talks to Viktor Markopoulos, a security researcher, about a recent breach of the MFA service Authy. They discuss how the breach exposed over 33 million phone numbers and account details due to broken authentication and lack of rate limiting. They highlight the ongoing challenges in API security, especially concerning multi-factor authentication systems and the vulnerabilities they present. About Viktor Markopoulos Viktor Markopoulos is a security researcher with extensive experience in analyzing and mitigating cybersecurity threats. He specializes in API security and has contributed to numerous security incident reports, helping organizations understand and address their vulnerabilities. Viktor is known for his expertise in authentication issues and his ability to break down complex security breaches for broader audiences.

12 di 14