DrZeroTrust

A look back at 2021 and the major hacks we endured.  How did they happen?  What should we learn?  Where did it all go wrong?  Can we defend ourselves from these threats in the future?  Does Zero Trust really make sense?

Is disinformation actually affecting people?  What is narrative intelligence?  Should corporate organizations defend their brand from trolls and narrative attacks?  Will this be more important in the near future?

Do the crazy valuations of companies help them or hurt them?  Does big money in cyber security investing fix the problem?  Why do some people continue to build businesses even after they cash out?  

What can we learn from the game of golf and security strategy?  What telemetry matters most?  Do you practice right in cyber or in your golf game?  What's your favorite course?  And many more great golf analogies!

Is cyber insurance a rip off?  What do insurance providers do to get out of paying their policy holders?  Does cyberwar affect small businesses?  Is everything of value to defend?  Are humans really the biggest threat vector?  Should you pay attention to a CISA advisory?

What is multi spectrum warfare?  Is the US the global superpower anymore?  How do state and local governments look at cyber versus federal?  Will China maneuver in the next 2 years to prepare for a future war?

What does empathy really mean?  How do you deal with the "brilliant jerk"?  Where is the line on terminating an employee who endangers your business with bad cyber practices?  Is the industry really more fair?  What about sexism and privilege?

What do consumers really think about passwords?  Can technology solve the problem of unsafe passwords?  Where does the market go for better user access?  Does cloud make a difference?  And more on this episode.

Can I download and configure an SSI app during a live recording?  Is SSI useful for the average consumer use case?  How should we look at the combination of SSI and biometrics?  Does this ultimately help kill the password?

Disinformation with lobsters?  What about the Missouri Governor and "hacking" that website?  Does the new ransomware plan make much difference?  New threats in email from Microsoft and how do humans detect them?

How does he advise companies to select technology?  What does he think about strategy?  What is a non starter for him?  How do board members look at cyber risk and technology expenses?

Richard Stiennon (the OG Curmudgeon) and I discuss investments and market dynamics in cybersecurity.  He provides his views on a variety of topics and breaks down how he sees the market through his lens and vast experience.  Check out his books and his insights on this space every chance you get!

Stealing secrets via PB&J?  What is the MSSP market for ZT?  When is hacking not hacking?  Thoughts on the USAF Chief Software Officer's scorched earth letter, and more.

Cybersecurity awareness month at the White House, so what?  Big dollars for ZT in the DoD, really?  The demographics of cybercrime and what that means for the rest of us, and what about maritime cybersecurity?

Discussions on how a brand builder and designer worked to build one of the most successful brands in all of cybersecurity.  How valuable is culture and leadership to a brand in the space?  How do you "punch above your weight class" with marketing?  And how much value is there in a simple, authentic message?

Discussions on how a big time CISO handles security for his organization.  Getting executive buy in.  What is a non-starter for solutions and vendors?  How does his team select tooling?  What is the most important thing for his global organization?  These and other important questions in this episode.

Bad OPSEC on social media?  Farmers COOP hit with ransomware?  State government organization down for 4 months after "sophisticated" attack?  What should you know about cyber insurance?  Banking industry sees 1300% increase in attacks in 2021!  10 ways to avoid failing at ZT and more in this episode.

Are certifications worth it?  Does school prepare the workforce for a career in cyber?  What about K-12?  How do we get better?  What matters more being certified or time on the keyboard?  Why do we have a shortage of cyber folks when the labor statistics say so many people are looking for work in technology?

Deepfakes are being used by scammers, now!  What about the ZT study?  Do you need more money for ZT?  Is social media a valid threat vector?

Thoughts from a guy running a cyber security company on everything from growth, hiring, and how he keeps his company secure even though he knows they are a real target.

Is the new director of CISA doing the right thing?  Do people really pay for ransomware keys?  What about the T-Mobile hack?  Is sorry good enough?  What is the new method of ransomware that only encrypts part of a file?

A government and industry meeting on cyber at the White House?  Why is cyber insurance such a crazy market sector?  What do ransomware actors do when they get on a system?  What should we learn from those tactics and how can we defend ourselves better?

Insights and knowledge with an expert on China, the CCP, and the motivations and tactics around cyber warfare operations.

MFA/2FA is no good?  What about disinformation and propaganda with covid?  Is your baby's camera vulnerable to the new compromise?  And what do users actually think about going "around" security controls?

A conversation on Zero Trust with the person noted for coining the term and starting the ZT movement.