Behind the Shield - A Virtual Guardian Podcast

We didn't have time to get to all of our Hot Topics in the Nov 2nd Behind the Shield!  Ready for a little more  cyber news from Marco, Bill and Patrick?
Bonus Hot Topics:
AI Kidnapping Hoaxes: https://www.darkreading.com/black-hat/virtual-kidnapping-ai-tools-enabling-irl-extortion-scams
Johnson Controls Breach - An Update from Patrick from last week's discussion. https://www.msspalert.com/news/johnson-controls-struck-by-king-size-ransomware-attack-demanding-51-million-payoff
Fraudsters target Booking.com customers claiming hotel stay could be cancelled . https://grahamcluley.com/fraudsters-target-booking-com-customers-claiming-hotel-stay-could-be-cancelled/
Okta breach à One Password: https://www.darkreading.com/black-hat/virtual-kidnapping-ai-tools-enabling-irl-extortion-scams

November 2023 Episode (Recorded on 11.02.2023) – Special #AIWeek Episode
Expert panelists, including our guest Chris ‘Tito’ Sestino of HiddenLayer, and host Marco Estrela discuss current cybersecurity topics ripped from the headlines.
Hot Topics:  Credit card fraud while traveling; AI generated phishing attacks, Johnson Controls Breach, Emerging AI Regulations & Effects
Spotlight: “Securing AI Innovation: Safeguarding AI Amid Emerging Threats” - Chris Sestito, Co-founder & CEO of HiddenLayer, a cybersecurity start-up dedicated to preventing adversarial artificial intelligence attacks.
 
Sources:
Topic 1: Credit card fraud and tips for guarding credit cards while traveling.
Source: N/A
 
Topic 2: Bill
Article title: AI generates convincing phising attacks
Source: https://www.csoonline.com/article/656698/generative-ai-phishing-fears-realized-as-model-develops-highly-convincing-emails-in-5-minutes.html
 
Topic 3: Patrick
Article title: Jonhson Controls breach
Source: https://www.msspalert.com/news/johnson-controls-struck-by-king-size-ransomware-attack-demanding-51-million-payoff
 
Topic 4: Tito
Article title: Emerging AI Regulations & Its Effect on Innovation
Source: N/A

September 2023 Episode (Recorded on 9.21.2023)
Expert panelists and host Marco Estrela discuss current cybersecurity topics ripped from the headlines.
Hot Topics: MGM and Caesar’s Cyberattack, TransUnion Data stolen, Microsoft AI Employee Accidental Leak, Canadian Airports DOS, Clorox Breach
Extras:  CISCO’s $28B purchase of SPLUNK, NaviLogic’s name change to Virtual Guardian
 
Sources:
Topic 1: Bill #1
Article title: MGM and Caesar’s cyberattack
Source: https://www.reviewjournal.com/business/casinos-gaming/mgm-hackers-could-have-tried-to-get-slots-to-spit-out-money-2907417/
https://www.bloomberg.com/news/articles/2023-09-13/caesars-entertainment-paid-millions-in-ransom-in-recent-attack?embedded-checkout=true
 
Topic 2: Patrick #1
Article title: Law 25 Event in Montreal       
Source: N/A
 
Topic 3: Marco #1
Article title: TransUnion data stolen, but they say their weren’t hacked!
Source: https://www.techradar.com/pro/security/transunions-data-stolen-in-major-data-breach
 
Topic 4: Bill #2
Article title: Microsoft AI Employee Accidentally Leaks 38TB of Data
Source:  https://www.pcmag.com/news/microsoft-ai-employee-accidentally-leaks-38tb-of-data?utm_medium=browser_notifications&utm_source=pushly&utm_campaign=3558823&utm_country_code=CA
 
Topic 5: Patrick #2
Article title: Source: Canadian Airports DOS
 Source: https://www.lapresse.ca/actualites/national/2023-09-19/agence-des-services-frontaliers/la-panne-dans-les-aeroports-provenait-bien-d-une-attaque-informatique.php?utm_campaign=internal+share&utm_content=ulink&utm_medium=referral&utm_source=lpp&redirectedFrom=https%253A%252F%252Fplus.lapresse.ca%252Fscreens%252Fbd53d576-4f02-4d19-853b-a9f64e7d1a31__7C___0.html%253Futm_campaign%253Dinternal%252520share%2526utm_content%253Dulink%2526utm_medium%253Dreferral%2526utm_source%253Dlpp
 
Topic 6: Marco #2
Article title: Clorox Breach
Source: https://www.cnn.com/2023/09/18/business/clorox-cyberattack-production-disruption/index.html
 
 

August 2023 Episode (Recorded on 8.3.2023)
Hot Topics: Cybersecurity labeling for smart devices, New 4-Day disclosure requirement by SEC, Chinese Malware’s Potential Impacts to US, WormGPT, JumpCloud hack linked to North Korea, US’s Data Breach Record
Extras:  Rapid Fire Q&A for the panel; Remembering Kevin Mitnick, 1990s “Most Wanted Computer Outlaw”
Sources:
Topic 1: Patrick #1
Article title: Cybersecurity labeling for smart devices aims to help people choose those less vulnerable to hacking
Source: https://apnews.com/article/cybersecurity-smart-devices-fcc-cyber-trust-mark-74af5829296ba65cddd2b2287b47422a
 
Topic 2: Bob #1
Article title: SEC now requires companies to disclose cyberattacks in 4 days
Source: https://www.bleepingcomputer.com/news/security/sec-now-requires-companies-to-disclose-cyberattacks-in-4-days/
 
Topic 3: Bill #1
Article title: Chinese Malware Could Cut Power To U.S. Military Bases, Businesses And Homes, Report Claims
Source: https://www.forbes.com/sites/tylerroush/2023/07/29/chinese-malware-could-cut-power-to-us-military-bases-businesses-and-homes-report-claims/?sh=397fec1224ae
 
Topic 4: Patrick #2
Article title: WormGPT: New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks
Source: https://thehackernews.com/2023/07/wormgpt-new-ai-tool-allows.html?m=1
 
Topic 5: Bob #2
Article title: JumpCloud hack linked to North Korea after OPSEC mistake
Source: https://www.bleepingcomputer.com/news/security/jumpcloud-hack-linked-to-north-korea-after-opsec-mistake/
 
Topic 6: Bill #2
Article title: US on Track For Record Number of Data Breaches
Source: https://www.infosecurity-magazine.com/news/us-track-record-number-data/

June 2023 Episode (Originally Aired Live on 6.15.2023)
Hot Topics: US-based white hat researcher, Eaton Zveare, discovers serious flaws in well-known carmaker; Phishing controversy using pay raise as bait; Making progress in the war against cybercrime.
Special Guest Panelist: Graham Cluley of the award-winning “Smashing Security” podcast.
Spotlight: Rudolph Araujo, Arista Networks: IoT, Ransomware, Insider Threats and Your Data: Threat Hunting to the Rescue
Sources:
Topic 1
Source: https://www.securityweek.com/vulnerabilities-in-honda-ecommerce-platform-exposed-customer-dealer-data/
https://eaton-works.com/2023/06/06/honda-ecommerce-hack/
 
Topic 2:
Source: https://www.economist.com/by-invitation/2023/05/26/ciaran-martin-argues-that-cyberspace-is-finally-if-unevenly-getting-safer
 
Topic 3:
Source: https://grahamcluley.com/staff-salary-phishing-test-backfire/
https://www.rollonfriday.com/news-content/exclusive-incredulity-firm-sends-lawyers-fake-pay-rise-emails

May 2023 Episode (Originally Aired Live on 5.18.2023)
Hot Topics: Cisco IOS vulnerabilities and UQAM’s 2023 Report on geopolitical cyber incidents.
Spotlight: Amber Borgersen, Product Manager for IBM Security's Threat Management functionalities - the QRadar Suite, discusses “SIEM is dead! Or is it…?”

April 2023 Episode (Originally Aired Live on 04.19.2023 in front of a live audience at Esterel Resort, Quebec Canada)
Panelists: Pulitzer Prize Winning Journalist Byron Acohido (lastwatchdog.com), VG CEO Patrick Naoum, Co-Founders of NaviLogic Bill Strub and Bob Bennett, and VG’s Sr. Director Cybersecurity and host of the show, Marco Estrela.
Hot Topics:
Topic 1:  Article title: Six arrested in Quebec as police dismantle international identity theft network
Source: https://montreal.ctvnews.ca/six-arrested-in-quebec-as-police-dismantle-international-identity-theft-network-1.6344156
Topic 2: Article title: Putin’s secret weapon: weaponized ransomware
Source: https://www.bleepingcomputer.com/news/security/new-ransomware-attacks-in-ukraine-linked-to-russian-sandworm-hackers/
https://www.bleepingcomputer.com/news/security/security-firms-find-thin-lines-connecting-notpetya-to-ukraine-power-grid-attacks/
Topic 3: Article title: SlashNext's 2023 Mobile BYOD Security Report Reveals 71% of Employees Have Sensitive Work Information on their Personal Devices; 43% Were the Target of Phishing Attacks
Source: https://www.prnewswire.com/news-releases/slashnexts-2023-mobile-byod-security-report-reveals-71-of-employees-have-sensitive-work-information-on-their-personal-devices-43-were-the-target-of-phishing-attacks-301785360.html
Sponsor/Spotlight: Byron Acohido “Network security reborn: Leveraging machine learning, automation to drive legacy defenses into obsolescence.”
Bonus Segment: Rapid Fire Topics with Byron Acohido
This is a recording of an event that took place live, virtual and in-person. To attend future virtual Behind the Shield events and ask the panelists questions, register at virtualguardian.com/event

March 2023 Episode (Originally Aired Live on 03.16.2023)
Hot Topics: Multi Factor Authentication Blind Spots, T-Mobile's Security Breach (API Attack vector), TikTok ban (US & Canada governments), Return of IceFire Ransomware.
Sponsor/Spotlight: Branden Williams, VP of IAM Strategy at Ping Identity: "Fostering Collaboration to Build Trust in an Untrustworthy World.
This is a recording of an event that took place live. To attend live Behind the Shield events and ask the panelists questions, register for future events at virtualguardian.com/event

Hot Topics: Mortgage Broker 8Twelve’s leak (where everything went wrong), Reddit cyberattack, AI in the wrong hands, and clickbait article of the month: “Cyber Apocalypse 2023: Is The World Heading For A ‘Catastrophic’ Event”.
Spotlight Speaker & Sponsor: Mike Britton, CISO for Abnormal Security (sponsor), brings guest customer Joel Godbout, Cybersecurity Manager at PCL Construction, to discuss “Securing Your Cloud Email Platform from Socially-Engineered Attacks”.
Sources:
Topic 1:
Article title: Customer database of Canadian mortgage broker left open on internet
Source: https://www.itworldcanada.com/article/customer-database-of-canadian-mortgage-broker-left-open-on-internet/525096
 
Topic 2:
Article title: Hackers breach Reddit to steal source code and internal data
Source: Hackers breach Reddit to steal source code and internal data (bleepingcomputer.com)
 
Topic 3:
Article title: Security risks of ChatGPT and other AI text generators
Source: Security risks of ChatGPT and other AI text generators | SC Media (scmagazine.com)
 
Topic 4 (Bonus):
Article title: Cyber Apocalypse 2023: Is The World Heading For A ‘Catastrophic’ Event?
Source: Cyber Apocalypse 2023: Is The World Heading For A ‘Catastrophic’ Event? (forbes.com)
 
Register free to attend the live virtual taping of the March 2023 episode at www.virtualguardian.com/event

Monthly cybersecurity podcast from Virtual Guardian experts and friends. This episode is a special "Year In Review" featuring 7 panelists talking the most memorable 2022 cybersecurity hacks and events, followed by their wishes and predictions for 2023. This event originally aired on 1/19/2023. To join future Behind the Shield events and ask your questions live, visit www.virtualguardian.com/event.