UNSECURITY: Information Security Podcast

This week, Brad and Evan are joined by Mike (Pinky) Thompson, FRSecure's IR team lead, to discuss the recent log4j incident. They go into detail on what it is, how it happened, and some best practices to protect yourself. Give episode 159 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com . Don't forget to like and subscribe!

In this week's episode, Brad and Evan discuss some things your office can do to prepare for attackers who might be waiting until the holidays to attack. Give episode 158 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com . Don't forget to like and subscribe!

In this week's episode, Brad and Evan put their heads together to discuss some of the scams that are attempted around the holidays, and how to protect yourself against them. Give episode 157 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com . Don't forget to like and subscribe!

In this week's episode, Brad and Evan are joined by FRSecure's Lori Blair, a seasoned veteran of the cyber security industry! With Lori's help, they dive into some of the most important client relationships a CISO can build when working with a company to develop or mend existing security practices.

In this week's episode, Brad and Evan discuss the difference between IR service providers and cyber insurance policies, working with an IR provider to eliminate issues before falling back on insurance, and using the providers recommended by insurers. Give episode 155 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com Don't forget to like and subscribe!

In this week's episode, Brad and Evan discuss the recent federal grant meant to aid in bolstering election security in the United States. Also covered, are some recent news stories from the information security industry.

In this week's episode, Brad and Evan are joined by the leader of FRSecure's Technical Services Team, and Team Ambush's very own Oscar Minks to recount some of the scariest stories they can remember from a career's worth of IR cases. ​ Give episode 153 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com Don't forget to like and subscribe!

In this week's episode, Brad and Evan discuss the first ever death via ransomware lawsuit, as well as the future of info security and the importance of it as more and more technology is relied upon to keep us alive. They also touch on some industry news and more including GCAT- Google's Security Advisory Service. First death via ransomware lawsuit https://www.healthcareitnews.com/news/hospital-ran...

In this week's episode, Brad and Evan discuss incident response retainers, the market, sizes, and categories of IR providers, and the difference between IR retainers and managed IR. They also touch on Project Hyphae, a new goodwill threat hunting initiative powered by FRSecure, and FRSecure's annual Hacks and Hops event which took place last Thursday, October 14th. Project Hyphae https://projecthy...

In this week's episode, Brad and Evan talk Zero Trust (ZTA). They go into detail about what it is, how to do it, and how not to fall victim to the marketing BS that some people are selling. Also discussed, is Zero Trust not being a new concept, but a more complex version of the same things we've been preaching since the beginning, and how complexity is the enemy of security. Give episode 150 a lis...

On this week's episode, Evan and Brad dive into cybersecurity awareness month, the free S2me security rating app, and discuss the already infamous Facebook outage. Give episode 149 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com Don't forget to like and subscribe! S2me https://s2me.io/

In this episode, Brad and Evan discuss state government security issues and working with the Carolina Cyber Center, to provide higher education students with hands-on practical experience using SecurityStudio to deliver information security risk assessments to SMBs. Also included in episode 148 is a conversation about PDEIS at the Cybersecurity Summit and updates about the future of the Unsecurity...

In episode 147, Brad and Evan discuss the general busyness in their lives lately, as well as accountability and negligence in the security world. As always, they review some news articles including recent patches from major companies like Microsoft, Apple, and Google, 3 former U.S. intelligence officers who admitted to hacking for a U.A.E. company, and the low levels of ransomware preparedness des...

In this episode, Evan and Brad discuss the Women's Society of Cyberjutsu (WSC) class on using your home network to learn attacks and defenses, plus a recap on the Wisconsin FBI Infragard SuperCon. In the news this week, the FBI says surge in sextortion attacks cost targeted users $8M this year. Give episode 146 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmai...

In this episode, Evan and Brad conduct a mental health check-in and have a candid discussion about their own struggles. They also discuss the first foundational steps in building a security program including less "what to do", and more "how to do". In the news this week, a cryptocurrency hacker returns $260 million in stolen funds, and the State Department is hit by a cyberattack amid Afghan evacu...

In this episode, Evan and Brad focus on the concept of PDEIS (Programmatic Distributed Empowerment of Information Security) and its ability to involve and empower others within the organization; not just CISOs, to make their own risk decisions. They also debate the trend of information security leaders facing legal repercussions in the wake of the recent SolarWinds incident. As always, they close...

The boys are back with Team Ambush recapping their DEF CON 29 experience. This sparked a conversation about everyone's highs and lows at the event. Team Ambush brings insight about the hacking challenges and competitions they won, were involved in, and why it's important. Evan & Brad continued to discuss how Team Ambush finished in 1st place in the biomedical hacking and dive deep into the medical...

It's finally here, the annual BlackHat and DefCon29 events are back again in Las Vegas, Nevada. What are these events? Evan & Brad unravel everything you need to know about these two events in this week's UNSECURITY episode. They also touched on: LockBit ransomware: recruiting insiders to breach corporate networks https://www.bleepingcomputer.com/news.. . SolarWinds urges US judge to toss out crap...

Today, state and local government Chief Information Security Officers (CISO) are playing a game they can't win. CISOs are facing many obstacles and are losing focus of their roles and responsibilities. So, how do we change the way we play the game? Evan and Brad attempt to answer this question in this week's UNSECURITY episode. They also touched on: Apples recent IOS 14.7 and 14.7.1 and advisors l...

Recently, Amazon made changes to their terms of service. This sparked a conversation between Evan and Brad about terms and conditions, privacy, and what we tend to blindly agree to. Together Evan and Brad discuss: Amazon’s Conditions of Use https://www.amazon.com/gp/help/customer/display.html?nodeId=GLSBYFE9MGKKQXXM Amazon.com Privacy Notice https://www.amazon.com/gp/help/customer/display.html?nod...

Evan is down in Mexico and took Ryan Cloutier (Head of SecurityStudio) and John Harmon (President at FRSecure) down with him. The two replace Brad this week, and together, the three break down what the first half of 2021 looked like in the security industry. Give this episode a listen and send questions, comments, and feedback to unsecurity@protonmail.com .

Kaseya VSA, a remote management software, experienced a breach over the holiday weekend that is already impacting a number of clients. It appears that this attack is connected to the Russian hacker gang known as REvil—but it has not been determined whether or not it is the work of REvil itself or an affiliate in their Ransomware as a Service (RaaS) program (and yes, that's a thing). Evan and Brad...

Between pirated games, customer support tools, SolarWinds group targeting customers, customer service systems being hacked, a malware supply chain fiasco, and a nasty Edge bug, Microsoft has a lot going on security-wise. Evan and Brad break down all the notable Microsoft security news surfacing recently on this episode of the UNSECURITY Podcast. Give episode 137 a watch/listen and send questions,...

Ryan Cloutier joins this episode of the UNSECURITY Podcast. Ryan has taken a special interest and focus on cybersecurity in schools, so he and Evan talk all things K-12 security—including Ryan's "Awesome Top 5." Give episode 136 a listen/watch and send questions, comments, and feedback to unsecurity@protonmail.com .

Evan and Brad are back with episode 135 of the UNSECURITY Podcast. This week, they take a look at some of the issues stemming from the Colonial Pipeline attack—what the economic impact of cyber crime is, how attacks may begin to impact the power grid, and more. Give this episode a listen or watch and send comments, questions, and feedback to unsecurity@protonmail.com . US recovers most of Colonial...