DrZeroTrust

Was Blackhat worth the trip, no.  What happens when you ransom a tractor?  How big is the ZT market?  Another hospital is shut down due to an attack, did patients die?  What about JCDC?

Is ransomware a weapon?  What do we do about these attacks?  What is the task force doing about this?  Do the folks on Capitol Hill get it?  And that one time I got beat up by a bully...

Why does Jeff talk so fast?  What's a solid 10 year prediction if there is such a thing?  How should some of the major problems be solved?  Will we all be unemployed after this podcast?  Those items and more on this episode.

Masks everywhere at Blackhat?  Why does Kaseya have a ransomware decryptor NDA?  Why the lack of MFA in Twitter?  Are we getting better at fixing vulnerable software?  And What is the Ransomware Sheriff?

What is a Zero Trust Overlay Network?  Why do people with British accents sound so smart?  Is Zero Trust achievable with today's digital infrastructure?  More on those topics and other interesting discussions on how to use SDN/SDP and what this all means for security practitioners.

Laws for critical infrastructure security and pipelines? A federal breach notification law?  The US indicts for APT actors for hacking?  An interview with a ransomware operator?  Will NATO's condemnation of APT actions make a difference?

Art from @britive and Martin from @vubiquity talk about how they see access playing a key role in Zero Trust and discuss how they enable focused access controls in an on demand model.

A Congressional bill on Deepfakes?  What about the trend in phishing and ransomware?  Do APT nation state leaders care about our "requirements"?  And what happens when a law firm sues a ransomware gang?

Some really great reports published recently on a variety of issues in cyber.  Check it out.

Sandy has forgotten more about SDLC, AppSec and software security than most folks will ever know.  I was very lucky to get to pick her brain for a few minutes on how this affects the software lifecycle, and discuss her thoughts on how we "shift left" on building secure code.  

Some really great reports published recently on a variety of issues from leadership in cyber to how the SEC is getting involved in enforcing fines in this space.  Check it out.

"Think like a hacker" with Tal Kollender from Gytpol.  Check out her background and learn about what it's like to be a real woman in technology and how she looks at helping customers fix their issues and stop threats in their tracks.

Some finer points on a recent ZT EO and the new guidance, a rant on the issues that continue to plague organizations as ransomware gangs keep coming back, and my thoughts on the next generation of cyber folks coming into the workforce.

Some finer points on a recent ZT market publication, a rant on the issues that continue to plague organizations, and my thoughts on how SMB's should face this threat.

What should we think about with the most recent ransomware hacks and are we doing enough nationally to counter this threat?  Also how can or should Zero Trust be part of this conversation, and what can a person in a leadership position do when faced with guaranteed failure?

This session I interviewed my intern.  We talked about how our generation (the old guard) can help bring the next generation of cyber security pro's into the workforce and about how we can help them be interested and engaged during their work.