Pwned: The Information Security Podcast

Another pull from the mailbag combined with some wisdom from BSides’ Jack Daniel prompt Justin and Jack to talk about the importance and authenticity of cyber grassroots groups. “These types of organizations are exactly who we need in the community” – Justin Fimlaid We would like to give a huge shoutout to the following individuals and groups: Jack Daniel – LinkedIn Page Steve Morgan & Cyberse...

Recently, former ransomware group Lapsus$ threatens to expose the private information of NVIDIA if they don’t stop disabling crypto-mining. Justin and Jack break it down. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. The links we mentioned in this podcast can be found...

In a security community match that tops a Kardashian hookup, Google and Mandiant have found each other and this time, Justin and Jack aren’t in sync on the love match. Come hear why. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. To view our Google and Siemplify episode...

A new Breach of the Week episode highlights NSO, Pegasus, and iPhone breaches. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. Resources Mentioned: New York Times Article Washington Post Article Check out NuHarbor Security for complete cyber security protection for your...

A rant on “Eyes on Glass” turns into a new entry into the Pit of Despair. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust. Website:  https://www.nuha...

It looks like KKR and Optiv may be moving on. Was this a missed Swipe, or have they just grown apart? Justin and Jack have got the details. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. Check out NuHarbor Security for complete cyber security protection for your busines...

Jesse wants to go from Down Under to tops in cybersecurity, and is looking to Justin and Jack for some advice. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. Check out NuHarbor Security for complete cyber security protection for your business and a security partner you...

Cybersecurity has evolved over the years. The increased accessibility of features and functionality requires less understanding of the cybersecurity practice and discipline to be successful. Is the “art of cybersecurity” lost, or does a shift in consumption bring more people to the fight? At the 3:08 minute mark, we reference episode 8: “We’ve Got Mail – The Science of Security Spend”. Make sure y...

You ask, we answer. Thank you to investor Ryan for your insightful question into market share, security vendors, and what it means for the security marketplace. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. Check out NuHarbor Security for complete cyber security protec...

This week’s Pwned episode comes with a zero-sum Breach of the Week! Jack and Justin talk one publicly disclosed breach, and one publicly disclosed breach that could have been, but wasn’t. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe! We’ll catch you next time. Check out NuHarbor Security for com...

Google recently acquired Siemplify to integrate it into Google Cloud Chronicle. Jack and Justin give the run down of the pair and decide if the match has chemistry and will thrive in their relationship, or if Google should have just gone home alone. If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please like, share, and subscribe!...

We’re back – like Groundhog Day! Wait, it is Groundhog Day! The debate of supporting open source software and software supply chain security keeps repeating. Learn what one programmer does to get peoples attention and put an explanation point on the power that open source software developers have. Earmuff your whistle pigs and open the bottle of WhistlePig while you listen to the story of the Punx...

Zero Trust is a highly attractive term that conjures beneficial impacts, but is inconsistently defined (hint: it means “Don’t Trust Anything”). Its history of overuse means Justin and Jack have to spend some time making it clear. Beware the Pit of Despair! If you have any suggestions on what might fall into the pit next, send us an email at pwned@nuharborsecurity.com. Content referenced in this ep...

Episode 3 of the Pwned podcast is here and a new victim, Trellix, joins its old friend XDR in the Pit of Despair. Join Justin and Jack through their deep dive into the pit. If you have any suggestions on who might fall into the pit next, send us an email at pwned@nuharborsecurity.com. Check out NuHarbor Security for complete cyber security protection for your business and a security partner you ca...

Welcome back to season 3 of Pwned! In this Breach of The Week episode, Justin and Jack cover the base and the wind up of the log4j vulnerability exposed in December, and the impact it has on the world’s supply chain. Tune in to learn more about the vulnerability, and how NuHarbor Security can help you secure your network. Check out NuHarbor Security for complete cyber security protection for your...

Aaaaaaand…. We’re back! Justin and Jack kick off season 3 of Pwned by introducing the Pit of Despair, where marketing terms end up when they have a strong start and a promising future, but derail from the path of meaning and end up in the ditches. What will the first victim of the Pit of Despair be? Check out NuHarbor Security for complete cyber security protection for your business and a security...

Pwned Season 3! WE’RE BACK! Time to rub the haze out your eyes and earmuff the kids. Gloves are off this time. I’ve had too long with my personal thoughts and the cybersecurity industry still can’t figure this thing out. Season 3 kicks off in January! Catch you later! Check out NuHarbor Security for complete cyber security protection for your business and a security partner you can trust. Website:...

Zack's final episode. We made him edit his own final episode kinda like tying his own noose. Zack you'll be missed - Season 3 is going to blow up, maybe not. You also missed our Best Places to Work Award, thanks for being part of it. Check out NuHarbor Security for complete cybersecurity protection for your business and a security partner you can trust. Website: https://www.nuharborsecurity.com Fa...

Pfizer falls victim to cloud misconfiguration. Clouds can be complex.

This week we’re surveying identity as a mechanism of compromise in a first-of-its-kind “Partner Spotlight” series. In Part 2, we chat with Brandon Traffanstedt, Global Director, Solutions Engineering at CyberArk. He digs into the complications of super powerful access, and reminds us exactly why we don’t write our passwords on sticky notes. Check out NuHarbor Security for complete cybersecurity pr...

This week we’re surveying identity as a mechanism of compromise in a first-of-its-kind “Partner Spotlight” series. In Part 1, Justin talks shop with CyberArk’s Scott Whitehouse, VP Channels and Alliances for the Americas. Get the scoop on how NuHarbor partner and global leader in privileged access management continues to innovate in the name of helping folks become consistently more secure. Check...

Every company operating in the United States is required to maintain a Form I-9 file on every employee to ensure that they are legally allowed to work and not subject to more restrictive immigration rules. But Form I-9 files can contain a ton of sensitive information making a good target for identity thieves. Check out NuHarbor Security for complete cybersecurity protection for your business and a...

Geez, I guess nothing is off limits.  Vastaamo was first breached in 2018, but this…just…keeps…going. Vastaamo has been requested by attackers to pay half a million USD in Bitcoin. But to make it worse employees and patients are also targets of extortion. Check out NuHarbor Security for complete cybersecurity protection for your business and a security partner you can trust. Website:  https://nuha...

Long story short, somebody hacked Harvest Finance and by manipulating asset values, stole tens of millions of dollars. Soon there was a bounty on the black hat, and the relationship is still complicated – Harvest is offering the hacker $1M for their $23M back. Check out NuHarbor Security for complete cybersecurity protection for your business and a security partner you can trust. Website:  https:/...

So Nitro PDF got hit. The popular PDF software had an undisclosed number of accounts and files released into the wild. Contracts, agreements, love letters, etc. were up for sale on the dark web within hours. Hear what Justin hates to say about it. Check out NuHarbor Security for complete cybersecurity protection for your business and a security partner you can trust. Website:  https://nuharborsecu...