Month: June 2017

Episode 7 – UEBA Patent, Cloud Blindness, and Entirely Too Much Cyber

~ Steve Higdon ~ Leave a comment
This week’s episode is about a new insider threat technology patent, obscure ISO compliance, Raytheon, and more!

Check out the community at http://reddit.com/r/insiderthreat to join in on the discussion!

Don’t forget to subscribe on your favorite podcast app to make sure you get them as soon as they are released (Sundays at 10PM Eastern)


Show Notes:
Welcome back! This is episode 7 of The Insider Threat podcast, for the week of June 26th, 2017. This just in, I now have the capability to have remote guests on the show and I already have some potential interviews lined up. If any of you would like to come on, contact me through one of the methods I’ll provide at the end of this episode.
ISO 3103:1980 compliance!
Infosec Question of the Week
The question last week was “Robert T. Morris, who was a computer science student at Cornell University and later became a tenured professor at MIT, is said to have launched the Cybersecurity industry when he developed and released this.”
The answer was “the Morris Worm”.
Congratulations to: Elliott from Boise, Alejandro from Chandler, Kirsten from Rochester, and Robin from Winnipeg for getting the correct answer.
Question for this week: “In the late 1980’s, the Computer Emergency Response Team (or CERT) was formed by U.S. Defense Agencies. Where was it initially based?”
Send your response to InfosecAnswer@gmail.com. Be sure to include your first name, location, and the hashtag “Scotty”.
Articles covered in this episode:
The first article this week comes from PR Web and it’s titled: New Fortscale Patent Advances User and Entity Behavior Analytics Market
Federal News Radio came out with an Executive Briefing Series, and this one , written by Tom Temin, is focused on Insider Threat
The next article is by John Maddison, writing for CSO Online, and it is titled “Preventing Cloud Blindness”
Our final article for this week is by Adam Bannister at IFSEC Global, called “The Cyber Intelligence and Security Centre: Businesses are “only seeing 50% of the problem””
Vendor covered in this episode:
Today’s vendor segment is about Raytheon and their new Cyber Protection System
Thought of the Week Segment
Thought of the week:  Pope John the 22nd said, “Consult not your fears but your hopes and your dreams. Think not about your frustrations, but about your unfulfilled potential. Concern yourself not with what you tried and failed in, but with what it is still possible for you to do.”
Thank you for listening to episode 7 of The Insider Threat podcast. Please remember to subscribe and review in your favorite podcast app, and also share with everyone you know! Those reviews are key to building this out and improving for later episodes, so please feel free to leave suggestions.
You can contact me on twitter @stevehigdon or email me at steve@theinsiderthreatpodcast.com. Join our community and discussions on Reddit on the subreddit named insiderthreat (http://reddit.com/r/insiderthreat). If you have a hard time finding it, shoot me an email. We have had some people join the group this week and I hope that will continue to grow along with the show. That is where you will also find the show notes for this and any other episode, as well as links to the topics we’ve covered. Thanks again and I’ll see you folks next time!

The Insider Threat Podcast Episode 6 – Threat Intelligence, IoT, and Friendly Fire

~ Steve Higdon ~ Leave a comment
This week’s episode is about IoT as an insider threat, the potentially high costs of the human factor in our organizations, Recorded Future Threat Intelligence, and more!

Check out the community at http://reddit.com/r/insiderthreat to join in on the discussion!

Don’t forget to subscribe on your favorite podcast app to make sure you get them as soon as they are released (Sundays at 10PM Eastern)

ITUNES // GOOGLE PLAY // STITCHER // POCKET CASTS // OVERCAST


Show Notes
Welcome back! This is episode 6 of The Insider Threat podcast, for the week of June 19th, 2017. Again, thank you for sending me your stories and please continue to do so
Happy Father’s Day! Take some time away from your worries about insider threat to spend with your children or father (or both).
Infosec Question of the Week
The question last week was “Guido van Rossum was born in the Netherlands, worked for several international tech organizations, and now works for Dropbox. While all these are great fetes, what is he most famous for?”
The answer was “the Python programming language”. The hashtag for last week’s question was a hint for the answer, as CherryPy is a minimalist Python web framework.
Congratulations to:
Sophia from Fresno
Kaden from Colorado Springs
Lorenzo from San Marino
And John from Aurora for getting the correct answer.
Question for this week: “Robert T. Morris, who was a computer science student at Cornell University and later became a tenured professor at MIT, is said to have launched the Cybersecurity industry when he developed and released this.”
Send your response to InfosecAnswer@gmail.com. Be sure to include your first name, location, and the hashtag “ARPANET”.
Articles covered in this episode:
Sean Coughlan from BBC – Top university under “ransomware” cyber-attack
Roland Moore-Colyer at Silicon.co.uk – Darktrace: IoT Is Another Insider Cyber Security Threat To Consider
Internet of Things Podcast by Stacey Higginbotham – http://iotpodcast.com
Karla Jo Helms at PRWeb – Insiders Often Responsible for $388B Annual Cost of Cyber Security Breaches
Christine Hall at WindowsITPro.com – Protecting Against ‘Friendly Fire’ Security Risks
Max Metzger from SC Magazine – InfoSec 2017: Dark web and economic downturns fueling insider threats
Threat Actor Profile: Eastern European Coders, Crackers, and Hackers
Vendors covered in this episode
Thought of the week
Desmond Tutu said, “Hope is being able to see that there is light despite all of the darkness.”
Closing and contact information
Thank you for listening to episode 6 of The Insider Threat podcast. Please remember to subscribe and review in your favorite podcast app, and also share with everyone you know! Those reviews are key to building this out and improving for later episodes, so please feel free to leave suggestions.
You can contact me on twitter @stevehigdon or email me at theinsiderthreatpodcast@gmail.com. Please also consider joining our community and discussions at http://reddit.com/r/insiderthreat. That is where you will also find the show notes for this and all other episodes going forward, as well as links to the topics we’ve covered.

Thanks again and I’ll see you folks next time!

The Insider Threat Podcast Episode 5 – Save the Data!

~ Steve Higdon ~ Leave a comment
Another week, another topic!

This episode is about insider threat month, data protection, CyberArk, and more! Don’t miss it!

Additionally, check out the community at http://reddit.com/r/insiderthreat to join in on the discussion!

Don’t forget to subscribe on your favorite podcast app to make sure you get them as soon as they are released (Sundays at 10PM Eastern)

ITUNES // GOOGLE PLAY // STITCHER // POCKET CASTS // OVERCAST

  • Show Notes
    • Welcome back! This is episode 5 of The Insider Threat podcast, for the week of June 12th, 2017. With all the feedback I’ve received, I realized that we need a way to chat about these topics and share ideas. For that, I have created a subreddit on Reddit.com. That is where I will be putting the show notes for each episode, and I think we could all benefit if you contribute there as well.
    • Please keep sending your stories! It lets me know of actual issues out there in your organizations and lets me use this as a medium to share the information to a large audience. As I said before, I’ll be sure to anonymize the stories to keep everyone out of deep water.
    • Infosec Question of the Week
      • It’s time for your Infosec Question of the Week, where Google is king and the prize is nonexistent!
      • The question last week was “In 1997, a hacker group was angry about hackers being falsely accused of electronically stalking a Canadian family. They broke into the Canadian Broadcasting Corporation’s web site and left a message saying: “The media are liars.” The family’s own 15-year-old son was eventually identified as the stalking culprit. What was the name of this group?”
      • The answer was “The Brotherhood of Warez”. I apologize to our Canadian listeners for the quick jab in last week’s hashtag.
      • Congratulations to:
        • Elliot from Calgary
        • Kelly from Houston
        • Bruce from St. Paul
        • Rubin from Glendale, Arizona
        • And our first two-time winner, Isaac from Washington State, for getting the correct answer.
      • Here’s your question for this week: Guido van Rossum was born in the Netherlands, worked for several international tech organizations, and now works for Dropbox. While all these are great fetes, what is he most famous for?
      • Send your response to InfosecAnswer@gmail.com. Be sure to include your first name, location, and the hashtag “cherry pie”.
    • Articles covered in this episode: