Episodes

You would be hard pressed to find a cyber security company that isn’t marketing its artificial intelligence capabilities. If you believe the hype, you probably think that AI can block zero day attacks, find the bad guys, and bring them to justice. The reality of what AI can and can’t do, is quite different from what you may be seeing in advertisements. While it’s not a silver bullet, AI does have a role in cyber security. Can it catch things that the good ol’ fashioned human being would otherwis...

On this week’s Breach of the Week, we learn the importance of measure twice, cut once. Why are we sharing this timeless carpentry advice? Well, for one, it is great advice to ensure you don't waste construction materials but for our purposes, the breach this week is about an email sent out with the best of intentions and instead releasing significant PII data. As if you need another reason to check your email, we also talk about an email involving Nicholas Cage and yet another email that reveale...

On this week’s Breach of the Week, we learn the importance of measure twice, cut once. Why are we sharing this timeless carpentry advice? Well, for one, it is great advice to ensure you don’t waste construction materials but for our purposes, the breach this week is about an email sent out with the best of intentions and instead releasing significant PII data. As if you need another reason to check your email, we also talk about an email involving Nicholas Cage and yet another email that reveale...

Welcome to our first GigaByte episode! In this long episode, we are taking a big dive into information and cyber security industry trends with two of our Trusted Security Advisors, Chad, and Travis. They share what they have seen over the last few months, what changed with COVID-19 and what the future holds for the information security industry. As the industry has adapted, so has NuHarbor (in fact, this entire podcast was recorded remotely) and Chad and Travis explain how they have had to use t...

Welcome to our first GigaByte episode! In this long episode, we are taking a big dive into information and cyber security industry trends with two of our Trusted Security Advisors, Chad, and Travis. They share what they have seen over the last few months, what changed with COVID-19 and what the future holds for the information security industry. As the industry has adapted, so has NuHarbor (in fact, this entire podcast was recorded remotely) and Chad and Travis explain how they have had to use t...

This week we're mixing it up with our Breach of the Week: The Case of the Missing CD-ROM. Yes, CD-ROM. Zack and Justin discuss the theft of a CDROM with PII and ponder why anyone would want to steal a CD-ROM and if they would even have a drive to get the data off in the first place. A real whodunit. Was it the Smithsonian, a confused child, or a Pintrest fail? Tune in to find out. Also, we've already hit 1000 listens for the new season! Thank you to everyone that listens to and enjoys our podcas...

This week we’re mixing it up with our Breach of the Week: The Case of the Missing CD-ROM. Yes, CD-ROM. Zack and Justin discuss the theft of a CDROM with PII and ponder why anyone would want to steal a CD-ROM and if they would even have a drive to get the data off in the first place. A real whodunit. Was it the Smithsonian, a confused child, or a Pintrest fail? Tune in to find out. Also, we’ve already hit 1000 listens for the new season! Thank you to everyone that listens to and enjoys our podcas...

This week we're exploring Tactics, Techniques and Procedures (TTP) related to COVID-19 threats. As with many disasters, cyber criminals are hoping to exploit people who are trying to find helpful information online and may be more likely to open sketchy links or email attachments. Therefore, the best ways to protect your organization is to understand what these threats look like, how they work, and who may be behind them, all of which requires that you understand the TTPs being used. So, check o...

This week we’re exploring Tactics, Techniques and Procedures (TTP) related to COVID-19 threats. As with many disasters, cyber criminals are hoping to exploit people who are trying to find helpful information online and may be more likely to open sketchy links or email attachments. Therefore, the best ways to protect your organization is to understand what these threats look like, how they work, and who may be behind them, all of which requires that you understand the TTPs being used. So, check o...

On today's episode we're talking COOP, or Continuity of Operations Planning. It's estimated that as many as 50 percent of businesses impacted by a disaster will fail and that number is even higher for small businesses. You're likely operating some form of a COOP plan due to COVID-19 and you may not have even realized it and hopefully you had a plan before everything hit the fan. Unfortunately, we're seeing business close up shop because they were not prepared. COOP at it's most basic level is pl...

On today’s episode we’re talking COOP, or Continuity of Operations Planning. It’s estimated that as many as 50 percent of businesses impacted by a disaster will fail and that number is even higher for small businesses. You’re likely operating some form of a COOP plan due to COVID-19 and you may not have even realized it and hopefully you had a plan before everything hit the fan. Unfortunately, we’re seeing business close up shop because they were not prepared. COOP at it’s most basic level is p...

This week we explore security orchestration, automation and response (SOAR) and how managed security service providers (MSSP) can leverage SOAR to better secure your organization. We’ll discuss the challenges of traditional security monitoring and the benefits of working with an MSSP that integrates SOAR in its practice to be better prepared to respond to real events and understand how traditional methods of monitoring cyber security events can create complacency and miss real world incidents. W...

Without question, we’ve entered a new era of web-based meetings. This has become how most companies are conducting business with the current pandemic. And I suspect this is going to remain even active after we’re all back at our offices. One thing that’s come up with the proliferation of web meetings is the failure to secure those meetings. It’s gotten bad enough that the FBI field office in Boston actually sent out an advisory today talking about the risks of meetings being infiltrated. So, wha...

Many organizations are finding themselves scrambling to secure their remote workforce due to COVID-19. On this episode, we’re talking remote workforce security best practices and what you can do to keep your team running out of the office. Best case scenario, you planned and exercised for just this situation and your team was ready to make the switch to off site, your staff were trained on how to securely work away from the office, and your system was built to keep your network and data safe bot...

NuHarbor Security announces the relaunch of PWNED – The Information Security Podcast with Justin Fimlaid. Stay tuned for episodes about staying secure while working from home, artificial intelligence, and emerging threats in 5G.

Exim Server Vulnerabilities and Exploits

Sponsor: https://www.nuharborsecurity.com Contact Me: https://justinfimlaid.com/contact-me/ Twitter: @justinfimlaid LinkedIn: https://www.linkedin.com/in/jfimlaid/

Winnti Malware for Linux

APT10 Update

Ohio’s Data Protection Act

SHA-1 Collision Attacks Explained

Vulnerability Management and Patching

Getting started with NIST Cybersecurity Framework

Penetration Testing or Red Teaming?