The Virtual CISO Moment

From August 31, 2022 - Scott Augenbaum was a special agent with the FBI and now continues his mission to help prevent businesses from becoming a victim of cybercrime as an author, speaker, and trainer. His story and mission is educational and inspirational! Check out https://www.cybersecuremindset.com/ and connect with Scott at https://www.linkedin.com/in/saugenbaum/.

I'm producing a limited YouTube series on lessons I've learned from being a successful consulting business owner. It's not all sunshine and roses, and I've made a lot of mistakes, but I've learned from them. Here are the latest two episodes - Consulting: Cyber Concerns and Consulting: Business Concerns. If you find these interesting and useful, please subscribe to the vCISO Services, LLC YouTube c...

NY hospitals cyber attack, AI to take phishing to new level, last two months busiest for ransomware, how to lower cyber insurance costs, joint advisory on BEC for stealing food, and Uber data breach caused by third-party vendor. https://www.cbsnews.com/newyork/news/one-brooklyn-health-battling-cyber-attack-that-forced-some-critical-services-offline/ https://www.bankinfosecurity.com/new-ai-bot-coul...

Infragard hacked, Google OSV Scanner tool, Atlassian issue, CSAF may help vuln management, reviewing the AUP, cybersecurity risks for banks and credit unions, and more predictions! Plus a word of advice regarding the job interview process based on a recent real-world example. https://krebsonsecurity.com/2022/12/fbis-vetted-info-sharing-network-infragard-hacked/ https://thehackernews.com/2022/12/go...

From August 30, 2022 - Susan Richards is a dynamic director of Information Security concentrated in compliance, project management, application development, and database administration. She is skilled in IT Strategy, Management, Compliance Assurance, and Risk Management including HITRUST, NIST and ISO security frameworks. She is also very involved in the information security community, including I...

Greg Flatt is the founder of Flatt Earth Networking, Inc. Since 1996, Flat Earth Networking, Inc. has provided mid- to large-sized businesses an authoritative approach to network security that includes superior enterprise products and effective problem-solving. Greg discusses his path beginning and growing Flat Earth Networking, Inc. over the past 26 years.

You can bet on increasing cyberattacks on casinos, new air gap attack method, education institutes have higher cyber risk this time of year, is cyber security being taught correctly, Sequoia PEO data breach, QA error turns ransomware into wiper, and cars' data easily accessed by law enforcement. https://cdcgaming.com/experts-warn-of-further-cyberattacks-on-casinos/ https://heimdalsecurity.com/blog...

Why SMBs should prioritize outsourcing cybersecurity, an interesting observation on the IHG cyberattack, log4j persists, the main cause of cybersecurity incidents, and this week's predictions discussed - plus why we made our next position entry level. https://www.standard.co.uk/tech/why-smes-should-prioritise-outsourcing-cyber-security-b1006499.html https://www.cpomagazine.com/cyber-security/it-sh...

From August 23, 2022 - Vanessa Taylor is a small business owner, a business technology consultant, an educator, and a mentor. She is well-versed in many aspects of GRC and infosec risk management, and has a mission to aspire to inspire!

Derek Andrews, Incident Response Manager at a Financial Institution, joins VCM to discuss his journey, incident response in the financial sector, and different types of virtual CISOs from the perspective of one who has worked with both the good and not so good. He also explains why he is the Resident Birdman of LinkedIn!

Chome Zero Day (again), offshore energy vyber threats, Rackspace Exchange hit by "incident", Australia dramatically increases breach penalties, and a ping vuln in FreeBSD - plus a couple of thoughts for entry-level information security analysts. https://cybersecuritynews-com.cdn.ampproject.org/c/s/cybersecuritynews.com/google-chromhe-9th-zero-day-bug/?amp https://www.pipeline-journal.net/news/us-o...

LastPass second incident, aged domains, Trigona ransomware, unemployment benefit fraud, ConectWise flaw, attackers target FI customers, and this week's 2023 predictions from SpiceWorks - plus some thoughts  on cyber culture. https://thehackernews.com/2022/12/lastpass-suffers-another-security.html https://www.bleepingcomputer.com/news/security/crafty-threat-actor-uses-aged-domains-to-evade-sec...

From August 16, 2022 - Jack Poltorak discusses vCIO and vCISO services offered by MSSPs, how those services may not be exactly what a small or midsized business (SMB)  is looking for, and tips how an SMB can ensure they are getting the virtual CISO services they need.

In this month's special end of month Wednesday episode we talk with Jacob Horne, who was born with a rare genetic mutation that allows him to read NIST publications and government regulations without experiencing boredom like a normal person and has made a career out of using this power for good. He does a great job of using NIST SP 800-53 to clarify the bizarre, heavily tailored world of NIST SP...

Cheri Hotman of the Hotman Group ( https://hotmangroup.com ) is a CPA, has her MBA, and is a CISSP - a combination rare in information security. She discusses her experiences and lessons learned managing a business providing quality virtual CISO services to a variety of clients, including navigating "the land of 1000 piranhas"!

Cyber Monday, FCC bans Chinese equipment, Twitter breach cover up, WhatsApp data leak, and BMC firmware flaws - plus thoughts about how the interconnected world got something wrong for me. https://news.yahoo.com/fbi-warning-shoppers-online-holiday-172655986.html https://securityaffairs.co/wordpress/138998/breaking-news/fcc-bans-import-chinese-equipment.html https://www.cshub.com/attacks/news/iotw-...

Cybersecurity as part of business strategy, free resources from CISA, dysfunctional security team isn't good, AirAsia ransomware affects 5 million, and more predictions for 2023, this time from Deloitte - plus are we heading for a cybersecurity compensation bubble burst? https://www.forbes.com/sites/forbestechcouncil/2022/11/21/why-cybersecurity-should-be-part-of-any-business-strategy/ https://www...

From August 9, 2022 - CISO and vCISO Monica Rowe joins us to discuss cybersecurity in financial services; the benefits of sharing information through ISACs, presentations, and other means; and how to provide a sense of calm to the cybersecurity storm.

Robin Wilde is the Director of Business Solutions for TeamHealth. She is passionate about project management and cyber security, particularly Identity Management, as well as promoting women in cyber. She holds a variety of certifications, including the  CISSP, CRISC, PMP, ACP, CSP, and Prosci, demonstrating her vast skillset and experience. She introduces the phrase "privilege sprawl" - liste...

MS zero day (and a term I should have known), banning cyber ransom payments, FI IT staff greatest cybersecurity risk, cybersecurity is the C-Suite responsibility, and five "starter" certs. https://www.bleepingcomputer.com/news/security/new-attacks-use-windows-security-bypass-zero-day-to-drop-malware/amp/ https://theconversation.com/australia-is-considering-a-ban-on-cyber-ransom-payments-but-it-cou...

From November 13. 2019 - Information security policies direct the governance of the information security program. What are elements of effective policies, and what mistakes do SMBs often make with their information security policy program?

CISA claims elections secure, US network hacked, 42,000 imposter domains used by attackers, iOS 16 security features, CheckPoint predictions, and the security posture of Twitter. https://www.infosecurity-magazine.com/news/cisa-midterm-uncompromised-by/ https://cybersecuritynews.com/u-s-federal-network-hacked/ https://thehackernews.com/2022/11/chinese-hackers-using-42000-imposter.html https://9to5m...

From August 2, 2022 - Steve Mallard has over 20 years in Information Technology; is a Master Teacher in Information Technology/Infrastructure Management and Information Systems Manager at Tennessee College of Applied Technology - Shelbyville; is a private consultant for government organizations, higher-ed, and private corporations, a technical writer, and a public speaker on cybersecurity. He has...

Lin Clark, the Carolina Cyber Center's SOC Director, discusses how the SOC benefits both the students in the Carolina Cyber Center program and the western North Carolina small business community. Recorded at RETR3AT Cyber Conference Montreat College September 23, 2022. Audio only.

I've started a limited YouTube series on lessons I've learned from being a successful consulting business owner. It's not all sunshine and roses, and I've made a lot of mistakes, but I've learned from them. Here are the first two episodes - Consulting: Introduction and Consulting: Risk Assessment. If you find these interesting and useful, please subscribe to the vCISO Services, LLC YouTube channel...