Nick Espinosa, Chief Security Fanatic, at Security Fanatics joins the podcast this week to share perspective from his many interviews with Ukraine government members and others on-the-ground in Ukraine. He also shares insights on cyber attacks against Ukraine since 2014 and how the landscape continues to shift during the current conflict, including potential cyberattack leakage outside the region. And he dives into the critical communications elements at play including Internet access that is en...
Mar 15, 2022•58 min•Ep. 172
Joe Uchill, senior reporter at SC Magazine, joins us on the podcast this week to share perspective from his ongoing reporting on the cyber implications from the Ukraine conflict. We cover a bevy of themes including the level of cyber versus kinetic attacks, the "IT Army" of Ukraine and impact of decentralized hacking volunteers, Conti ransomware group woes and the globalism of the criminal economy, CISA Shields Up guidance and navigating through opportunistic criminals that invariably take advan...
Mar 08, 2022•49 min•Ep. 171
Petko Stoyanov, Chief Technology Officer for Global Governments at Forcepoint Petko Stoyanov serves as Forcepoint's Chief Technology Officer for Global Governments. He focuses on strategy, technology and go-to-market for enterprise-focused solutions across the government verticals in Australia, Canada, New Zealand, United Kingdom, and the United States. Petko is an experienced cyber security leader who specializes in establishing information security programs and driving security maturity in tec...
Mar 01, 2022•35 min•Ep. 170
Dr. Samantha Ravich, Chairman for the Center on Cyber and Technology Innovation at Foundation for Defense of Democracies joins the podcast this week. She shares insights from her many years on the geopolitical and economic front lines of cyber, and work with many renowned government leaders, on developing a plan of action to address today's cyber threat landscape and looming threat against critical infrastructure and essential services. She also provides perspective on building resiliency, what ...
Feb 15, 2022•39 min•Ep. 169
This week we dive into the hot topic of cyber insurance with Dr. Josephine Wolff, Associate Professor of Cybersecurity Policy at Tufts University The Fletcher School and author of the book "You'll See This Message When it is Too Late: The Legal and Economic Aftermath of Cybersecurity Breaches" (MIT Press 2018). We explore the dynamic industry of cyber insurance and key policy areas such as defining cyber war, the impact of the increase of ransomware the last two years (some stats put it at 150% ...
Feb 01, 2022•52 min•Ep. 168
Forcepoint CEO Manny Rivelo joins the podcast this week to share perspective on what's security in 2022 and beyond. Did you know hacking is really big business – money from attacks is equivalent to the world's third largest economy, behind the U.S. and China. As hackers are innovating faster businesses are struggling to keep up. He shares insights on how the industry can help organizations can get past the conga line of security tools and moving at digital speed. And he shares perspective on the...
Jan 25, 2022•57 min•Ep. 167
This week Noam Maital, CEO and Co-founder of Waycare Technologies, a subsidiary of Rekor, joins us to share insights on a topic we haven't yet covered on the podcast – shaping the future of city mobility. Imagine the significant amount of data aggregation and synthesis through AI critical in the management of our roadways, traffic flow and emergency response – that also helps power and draw data from many of the mobile and in-car maps we utilize today. Noam paints a picture of the data explosion...
Jan 18, 2022•45 min•Ep. 166
Welcome to the end of 2021 episode where Eric and Rachael recap highlights from guests throughout the year hitting on the key topics that dominated the headlines including Log4Shell, Sunburst, Colonial Pipeline, ransomware growth trends, the Biden Executive Order of May 12th, Zero Trust, and the many award-winning books published such as by NY Times' Nicole Perlroth, Sheera Frenkel and Cecilia Kang. They also share a preview of 2022 topics to come including the cryptomining, the metaverse, Web3 ...
Jan 04, 2022•31 min•Ep. 165
Back from the archives! This week we're spotlighting one of our favorite episodes in Summer 2021 with The New York Times journalist Nicole Perlroth where she shares insights from her decade long research for her book "This is How They Tell Me the World Ends". (FORMERLY EPISODE 138) This week Nicole Perlroth, award-winning journalist for The New York Times and best-selling author of "This Is How They Tell Me The World Ends" joins the podcast to discuss her decade long journey covering cybersecuri...
Jan 03, 2022•50 min•Ep. 214
Dr. Richard Ford, Chief Technology Officer at Praetorian joins us on the podcast this week to share perspective on Log4Shell that's been making the headlines in recent weeks. He explains why this is the worst zero-day vulnerability the industry has seen in the last ten years, what makes it special and how Log4j's ubiquity in the java world will keep it around for a long time to come. He shares insights from the trenches on how to mitigate and warns why scanners are not proving reliable for catch...
Dec 28, 2021•44 min•Ep. 164
Joining us from the fantastic vista of Monaco is Mark Arena, CEO at Intel 471 – and he has a great story to tell about the origins of the company name! He also breaks down the ransomware threat over the last couple decades and how they have evolved with the availability of new, faster, better technology as well as a business acumen in creating affiliate programs and Ransomware-as-a-Service. And he shares insights on cryptomixing as yet another path ransomware gangs can utilize to anonymize their...
Dec 21, 2021•46 min•Ep. 163
This week Chris Krebs, founding partner of Krebs Stamos Group and the first Director of the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) joins the podcast this week. He shares insights on ransomware trend lines, policy discussions, and streamlining the government engagement process for the private sector. He also shares perspective on risk (HINT: you can manage it but not eliminate it), how we can't attack our way out of the cyber problem, the Informa...
Dec 14, 2021•45 min•Ep. 162
This week Dragos CEO and co-founder Rob Lee joins the podcast and breaks down the OT challenge that many businesses are facing today including a lack of clarity on who within the business owns OT and defining what acceptable OT risk means within the business. He also shares perspective on multi-factor authentication as one of the universal controls, the industry + geopolitical aspect of managing risk, and shifting the lens to think about the IP threat from the operator POV. And he shares insight...
Dec 07, 2021•53 min•Ep. 161
This week we catch up with Dmitri Alperovitch, co-founder of the think tank Silverado Policy Accelerator (SPA) and co-founder of Crowdstrike. He shares details on the newly launched Alperovitch Institute at the Johns Hopkins School of Advanced International Studies offering MA-PhD programs that intertwine cybersecurity and statecraft giving students the opportunity to study adversaries' unique motivations, capabilities and histories. We also discuss the key policy areas that SPA is focusing on i...
Nov 30, 2021•48 min•Ep. 160
Curt Dukes, Executive Vice President and General Manager for Security Best Practices at the Center for Internet Security (CIS) joins the podcast this week. He shares insights from his more than 30 years with the NSA and how that journey led to the CIS and the synergies between the two organizations in providing cyber resources and fostering threat intelligence information sharing. And for those not familiar with the CIS he provides a great primer on this vital organization started 20 years ago b...
Nov 17, 2021•44 min•Ep. 159
Dr. Andrew Hammond, Historian and Curator of the International Spy Museum joins us this week - and let's be honest he has just about the coolest job out there today! Hammond takes us through the classic period of espionage and the reliance on physical data and spycraft techniques to transport through to the modern day battlefield of cyber intelligence and espionage. And he provides insights on the historical throughlines of attacks that haven't really changed over the centuries, by and large wha...
Nov 09, 2021•57 min•Ep. 158
Mike Watson, CISO for the Commonwealth of Virginia, joins the podcast this week and shares perspective on the challenges and opportunities for security teams at the state and local level. He recounts a 2009 ransomware incident and details just how sophisticated ransomware attackers have become in the ensuing years since. And he provides perspective on shared responsibility, security standards and compliance baselines of "good", walking the fine line of multi-factor authentication, security ubiqu...
Nov 02, 2021•46 min•Ep. 157
This week we catch up with Matthew Ferraro an attorney at the international law firm Wilmer Cutler Pickering Hale and Dorr and former intelligence officer. He has written extensively on national security and legal issues and most recently authored the CNN opinion piece "Ransomware attacks are about to get worse. But there are ways to stop them". He shares with us perspective on the role of governance in the continued pursuit to thwart ransomware groups which can feel like a "whack a mole" battle...
Oct 26, 2021•51 min•Ep. 156
This week our special guest is Sudhakar Ramakrishna, President and Chief Executive Officer of SolarWinds. He shares insights from his first year at the company, joining at a very dynamic time as news of the Sunburst attack first started making headlines. He provides perspective on what we consider a master class in leading through crisis – putting employees and customers first, the importance of transparency, continuous and two-way communications (even when you don't have all the answers) and bu...
Oct 19, 2021•48 min•Ep. 155
This week we welcome guest Combiz Abdolrahimi, a national security lawyer and Emerging Technology and Innovation Leader at Deloitte. We deep dive into today's critical infrastructure vulnerabilities and navigating the path forward to address the threat with systems that weren't originally designed with cybersecurity in mind. (Hint: don't approach 21st century cyber challenges with 20th century thinking) And he shares perspective from his time in government at the U.S. Departments of State, Treas...
Oct 12, 2021•47 min•Ep. 154
Joining us this week is Danny Jenkins, CEO and Co-founder of ThreatLocker, an Orlando-based cybersecurity firm providing zero-trust endpoint security. Danny shares insights on the challenges facing critical infrastructure, particularly water systems that continue to be targeted with today's latest headline grabbing financial + idealogical threat of ransomware. And he poses the question, "Will we get to a point where we have to stop drinking tap water?" He also provides perspective around the nua...
Oct 05, 2021•52 min•Ep. 153
Want to know what this week's episode title means? Listen to our two-part episode with Juan Andrés Guerrero Saade (aka JAGS), principal researcher at SentinelOne and Adjunct Professor of Strategic Studies at Johns Hopkins School of Advanced International Studies (SAIS). JAGS takes us on an exciting and educational ride through his research efforts on Moonlight Maze, one of the first widely known cyber espionage campaigns in world history, and how he came to be a featured hologram in the Internat...
Sep 28, 2021•38 min•Ep. 152
Want to know what this week's episode title means? Listen to our two-part episode with Juan Andrés Guerrero Saade (aka JAGS), principal researcher at SentinelOne and Adjunct Professor of Strategic Studies at Johns Hopkins School of Advanced International Studies (SAIS). JAGS takes us on an exciting and educational ride through his research efforts on Moonlight Maze, one of the first widely known cyber espionage campaigns in world history, and how he came to be a featured hologram in the Internat...
Sep 21, 2021•35 min•Ep. 151
Joe Marks, reporter for The Washington Post's daily newsletter Cybersecurity 202 covering the policy and politics of cybersecurity joins us this week. He takes us behind the scenes of his many years covering cybersecurity and policy sharing insights behind the stories, the reporting process and journalism in the age of dis/misinformation. He also shares perspective on key moves made by CISA in bringing election and security groups together and the ticking clock for government investment in cyber...
Sep 14, 2021•47 min•Ep. 150
Sheera Frenkel covers cybersecurity from San Francisco for the New York Times. Previously, she spent over a decade in the Middle East as a foreign correspondent.Sheera previously worked for the Times of London, McClatchy and NPR, where her fluency in Hebrew and her conversational Arabic helped land stories. She has said that her time as a foreign correspondent aids her coverage of cybersecurity: People are always speaking different languages and their motivations are often unclear.Frenkel and he...
Sep 07, 2021•48 min•Ep. 149
This week we catch up with Dustin Moody, a Mathematician in the NIST Computer Security Division who shares insights on how he found his way to NIST and cryptography through a love of elliptic curves and their beauty in numbers and patterns. Learn more about the impending quantum revolution and what that means for encryption and what (as well as how long) it takes to develop a post-quantum cryptography standard (hint: it takes several years!). And he gives us a peak into the future of crypto agil...
Aug 31, 2021•40 min•Ep. 148
Dive into the world of cryptocurrency with this week's guest Jeff Roberts, executive editor at Decrypt and author of the book "Kings of Crypto: One Start-Up's Quest to Take Cryptocurrency Out of Silicon Valley and On To Wall Street". For those that are wondering, Jeff shares that cryptocurrency today is definitely mainstream and while it is still a speculative investment - with big banks getting into the game it may not stay that way for long. (HINT: in the next 10 years, we just may have an FDI...
Aug 24, 2021•45 min•Ep. 147
This week we chat on the complexities and opportunities smart cities can deliver in the US and around the globe with guest Chris Teale, reporter at Smart Cities Dive. He's spent years meeting with government and community leaders on the growth of smart cities and shares thoughts on just how fluid defining what a smart city is today. Learn which cities around the world are leading in the smart city evolution and how a patchwork of state-by-state laws and regulatory frameworks help and/or hinder p...
Aug 17, 2021•47 min•Ep. 146
This week we are joined by World Econopmic Forum's Head of Governance and Trust Daniel Dobrygowski and Forcepoint Chief Legal Officer John Holmes for a discussion on the changing role of leadership when cyber is the cost of doing business. They share insights from the recently published World Economic Forum report "Principles for Board Governance of Cyber Risk" and historical points in time that today's leaders can learn from in navigating business through the rapid advancements and innovations ...
Aug 10, 2021•51 min•Ep. 145
Buckle up for this week's episode because it is quite a ride! Greg Crabb, founder of TenEight Cyber and former CISO for the United States Postal Service shares insights from his more than 25 years in law enforcement and bringing cyber criminals to justice. And hear perspective on CISO best practices for a 630k+ employee organization with 43k facilities and 160 million daily delivery points and how he took a 40 person cyber team to 600 in just a few years. Also learn how his team partnered with C...
Aug 03, 2021•48 min•Ep. 144