mnemonic security podcast

The importance of identity within our field has been established. According to analysis from CrowdStrike, 8/10 attacks are identity-based. But what does that actually mean? How do we even define identity these days, and how has it changed? To look into this, Robby has invited an expert within the field, Peter Barta. Peter works as a Senior Cloud Security Engineer at Rothesay, the UK's largest...

Bots; they can be both helpful assistants and harmful pests, and you’ll find them all over the internet targeting most public facing applications in some way or another. But what actually are they? To explore the bad bots on the Internet, Robby is joined by someone that has spent the last seven years studying them, Dan Woods, Global Head of Intelligence, F5. They talk about why Dan became fascinat...

House of Pain: new EU cyber regulations NIS2, DORA, the Cyber Resilience and Artificial Intelligence acts; have you started to familiarise yourself with the new EU cyber regulations that are coming into force? In this episode, Robby welcomes Rolf von Roessing, former Vice Chair of ISACA Global, and CEO of FORFA Consulting, a German company specialising in senior level consultancy and advisory work...

This episode is for anyone working within cybersecurity that has ever had to explain what they actually do, or defend why they are investing in security. We’re happy to welcome Jeff Barto back to the podcast, to go through his presentation “We are Defending” that he presented at mnemonic’s C2 summit this summer. Jeff is the CISO of a large hedge found in the US, and has worked in security for over...

What happens when cyber criminals don’t get what they believe they're owed? For this episode, Robby is joined by John Fokker, Head of Trellix Threat Intelligence. John shares from his long experience fighting cybercrime, where he among other places has worked for the Dutch National High-Tech Crime Unit (NHTCU), the Dutch National Police unit dedicated to investigate advanced forms of cybercri...

Network detection and response (NDR): the value of evidence What exactly is NDR, how have these technologies changed over the years, and are they more relevant now than ever? To help answer these questions, Robby is joined by Jean Schaffer. She’s had, to say the least, an interesting career with more than 33 years of experience from the US Department of Defense. Including managing the network of t...

Industrial Control Systems (ICS) in the cloud Can the cloud fundamentally revolutionise Operational Technology (OT) security? To help Robby understand some of the nuances of OT security and help connect the dots between IT and OT, we’re joined by Vivek Ponnada from the OT, ICS & IoT security company Nozomi Networks. Vivek shares from his 24 years of experience working with ICS, and explains ho...

Enterprise Security Architecture Most organisations find it challenging to protect themselves against the ever-evolving list of risks and threats. The fact that most of us do this with a limited set of resources makes this even more complicated. Knowing what you should spend your time and efforts on is far from straight forward. But hopefully this episode on enterprise security architecture can gi...

Azure monitoring & hardening What is the best way to build and automate security in the world of Azure? For this episode, Robby has invited someone that spends all their time doing exactly that, or more specifically, identifying all the things that can go wrong within the Microsoft ecosystem; Rik van Duijn, Hacker & Co-Founder of the Dutch cybersecurity company Zolder B.V. They discuss wha...

Who are the people helping us to keep the lights on? And what are our adversaries doing to get in the way of this?  This episode of the mnemonic security podcast is directing some love and attention toward the people working with Operational Technology (OT) / Industrial Control Systems (ICS).  To help him navigate this field, Robby is joined by Michael Weng, Senior Security Consultant OT/ICS at th...

What does mobile security mean in 2022? And what are defenders doing to keep the bad guys out of our pockets? To provide some insight into these questions, Robby has invited someone who has worked his entire career in Android security; Dario Durando, Android Malware Analyst at the Dutch security company ThreatFabric. During their conversation, they chat about the top attack vectors in this space,...

As a follow up from last week’s episode on the malicious use-cases of drones with Mario Bartolome Manovel, Robby chats with Pablo Ruiz Encinas, Security Consultant at mnemonic. He recently did a course on drone security – the Drone Security Operations Certificate (DSOC) by DroneSec - and hence has a lot to say on the subject. Pablo did not only bring with him his drone certification to the recordi...

Drones: malicious use-cases and how to counteract them. As unmanned aerial vehicles (UAVs), or drones, are growing in popularity commercially, their use-cases are also growing in numbers.  To discuss them from a security professional’s view point, Robby has invited Mario Bartolome Manovel, Offensive Security Engineer at Telefonica.  Mario talks about how drones are regulated these days, their pote...

Application Programming Interfaces (APIs) Why is Gartner predicting that API-based attacks will become the most frequent attack vector for applications?  Although APIs deserve the credit for a lot of digital transformation and innovation, they’re also an attractive target for bad actors. To explain how APIs are being used these days, and why they are getting more attention as an attack vector, Rob...

From the 14th to the 16th of November, the annual Industrial Security Conference will take place in Copenhagen, Denmark.  Are you interested in Operational Technology and Industrial Control System security, and wonder what's going on in that part of our industry? Or just curious about the conference, and some of the speakers that will be there? Robby’s caught up with a few of them to get a sn...

Securing LinkedIn For this episode, Robby welcomes the CISO, and VP of Engineering for LinkedIn, Geoff Belknap. Geoff has more than 20 years of experience in security and network architecture, and has previously also held the CISO positions at Slack and Palantir.  He shares some advice on navigating the security job market, and reflects on his role at LinkedIn, the challenges of his organisation,...

Lessons learned from a real incident: Nordic Choice Hotels What can we learn from the Nordic Choice Hotels supply chain attack of December 2021, and how it was handled? For this episode, we’re happy to welcome Kari Anna Fiskvik, Vice President Technology at Nordic Choice Hotels, that will share some of her lessons learned from being at the centre of attention as Nordic Choice had to shut their sys...

Threat Intelligence-Based Ethical Red-teaming In most organisations, there’s more to security than preventive measures. This means that testing your capabilities within detection, investigation and containment can be just as relevant as looking at preventive capabilities. One way of doing so, is by following the Threat Intelligence Based Ethical Red-teaming (TIBER) framework, and simulating a real...

Security leadership essentials for managers What knowledge base should a CISO have? And what is the best approach to shaping the next generation of security leaders? Our guest today is better equipped than most to answer these questions. Frank Kim, former CISO of and currently a Fellow and Curriculum Director at SANS Institute, joins Robby to discuss leadership essentials for security managers. Fr...

Zero trust vs. castle and the moat What does zero trust have to do with electric cars? For this episode, Robby is joined by Tony Fergusson CISO – EMEA at Zscaler. Tony has more than 25 years of experience in IT networking and security in Manufacturing, Information Technology and Financial Services, and even more importantly, he loves talking about zero trust – and has done so for more than a decad...

Security of things “IoT security today is like what IT security was in the early 90s”. This is how our returning guest introduces this episode’s topic; IoT security, and how it affects organisations and companies. For the third time, Robby is joined by Brian Contos, serial security entrepreneur and now Chief Security Officer at Phosphorus Cybersecurity, a company providing IoT and OT defense solut...

mnemonic, all government agencies and the majority of organisations in the security community advise against paying ransom to the criminal groups behind ransomware extortions. There are also legal considerations that need to be considered depending on the country or industry you are operating in.  There is however, a value in knowing more about how these criminal groups work. To shed some light on...

Encrypted traffic management TLS, SSL, HTTP,  keys, authentication, clients, servers and ciphers - encryption is complicated. To help shed some light on how enterprises can remove the "blind spot" of encrypted network communication, we’ve invited David Wells, co-founder of Netronome, who is a pioneer in the SSL/SSH inspection  space. David explains why being able to see and analyse encry...

What can we actually learn about cybercrime and what really goes on inside of criminal organisations from the Conti leaks? This episode we welcome Sergey Shykevich,  who has more than a decade of experience within threat intelligence and defence. He’s currently leading the threat intelligence research group in Check Point, and Robby has invited him to share his findings after examining the data le...

The science of SOAR Is cybersecurity automation and orchestration actually complicating, instead of reducing, the human workload it is meant to relieve? Joining us, to discuss this and more, we have Dr. Vasileios Mavroeidis, Cybersecurity scientist at the University of Oslo, specialising in security automation and cyber threat intelligence representation, inference, and sharing. He explains how he...