Episodes

Justin and Jack surf on the recent Forrester Wave for Global Cybersecurity and end up hanging ten on some of the criteria, but wiping out on its usefulness. Some links we referenced in this episode can be found here: Bullsh*t Generator Alinea Restaurant Forrester Lead Analyst, Jeff Pollard PWC Link to Forrester Report McDonald’s in Paris Top 10 Accounting Firms in the US If you have any questions or suggestions, send us an email at pwned@nuharborsecurity.com. If you like our content, please l...

We're continuing our exploration of the intersection of cyber and real world disasters and this week we have a report from Cynet about unrelenting attacks that have occurred since the beginning of the COVID-19 crisis and how criminals are using this real world disaster to exploit people in the digital world. You can read the original story here https://thehackernews.com/2020/09/covid-cybersecurity-report.html and you can read our two most recent posts on Threat Intelligence and Threat Hunting, b...

It's National Preparedness Month! Zack is going to tap into his previous life as an emergency manager to discuss the increasing intersection of disasters and cybersecurity. From identity theft and fraud to the increasing reliance on cybersecurity to how cybersecurity professionals can increase their knowledge and skills to respond, we're exploring a lot on today's episode. We will likely take some deeper looks at these issues in the coming weeks because a large swath of the US is currently being...

We're back with the second half of our discussion on election security with Davis. This week we're talking about strategies and concepts that must be considered as part of a comprehensive security plan from physical security to ensuring people don't share bad information. If you like this episode, check out last week's episode discussing all of the threats and vulnerabilities that elections face. Check out NuHarbor Security for complete cybersecurity protection for your business and a security p...

We are back with our second episode exploring how NuHarbor Security began and what sets us apart from our peers. This week we're joined by Scott, NuHarbor's VP and guru of marketing and sales. Scott is another one of the OG crowd and has been with NuHarbor since the very early days. We'll talk to Scott about how he has embraced content creation, like this podcast, over using traditional methods of marketing and why he and Justin are willing to give away things that other companies may feel peopl...

We are just a couple of months away from the 2020 election and like many voters, we are discussing election security. This week we are joined again by Davis and we're talking about the threats to our election and how most people focus on the wrong thing when it comes to securing elections. From voting machines to hanging chads to social engineering, how much of a threat do we face and what can we do about it? This was a big episode, so big we actually split it into two, so this week we talk abou...

The original group, or OG's as they're referred to around the office, have seen NuHarbor grow from a scrappy little company trying to break the mold to a quickly expanding cybersecurity firm punching above their numbers. What is it that motivated the original members to take the leap and join Justin in his pursuit of building an infosec company in his own image? What is it that is driving the company growth despite the challenging economy? We're starting this discussion with Kyle, the company Sw...

This week Zack is solo and is discussing a new report out from IBM Security on the costs of data breaches. To put it bluntly, it's not cheap. However, the report shows that all is not lost and that organizations that have strong cybersecurity plans, software, and personnel, will save millions of dollars post-breach compared to those who have nothing. The lesson here is to hire us because every dollar you spend before an incident will return a lot more should something occur. We highly recommend ...

We are back with Part II of our taking care of the team series. In this episode, Zack and Justin will address some of the challenges in keeping staff and what leaders can do to support their staff as well as how to build up team members so that someday they can take over. Justin also discusses how taking care of your team is taking care of your customers. Listen in and let us know what you think! Contact us at pwned@nuharborsecurity.com if you have topics you'd like discussed or if you're intere...

On this week's breach, we're talking about a breach that took years to come to fruition. How many of us have sold, recycled, or tossed a used computer with the hard drive still in it? It happens countless times a day and we likely don't even think about the amount of data that remains, even after you "wipe" it. That's right, your secret list of coworkers with the worst taste in music could be out in the wild as we speak! Listen in to learn what you should do to secure these old drives as well as...

We're talking team care this week with Zack and Justin. They'll cover the challenges of leading a team in crisis (like a pandemic), how to keep up enough on the lives of your team members without being creepy, and why leaders fail to lead. This was a very long recording session so we're breaking it up into two separate episodes. If you take care of your team, they'll take care of you. Check out NuHarbor Security for complete cybersecurity protection for your business and a security partner you c...

Justin is back on the podcast and for this week's breach, we're talking about the big Twitter breach that opened up some of the biggest users on the system to a bitcoin scam. We were shocked at how incredibly easy it was to get into the system, access important accounts, and then waste the opportunity for a second rate bitcoin scam. We'll talk about how this type of vulnerability is far more common than you think and why businesses continue to fail at the most basic security practices. To learn ...

We're joined by Kristof to dig into another compliance frontier, the Cybersecurity Maturity Model Certification (CMMC). Kristof will give us a primer on who CMMC affects, what they need to do get compliant, how you get certified, and when this certification goes live. If you fall into the Defense Industrial Base (DIB) or work with the Dept of Defense or contractors who are connected to the DoD, you better ready for CMMC. Kristof also discusses how this will replace NIST with the DoD and the pote...

We're joined by two NuHarbor staffers this week to explore the dark web. We posted a poll on Twitter yesterday and the people have spoken, they wanted dark web content and we are delivering. We'll discuss what the dark web is, how it is used, and whether or not it is a good idea to visit it on your home computer. We'll also learn what happens to your stolen credentials post hack and what they may be used for. So if you're a dark web noob, tune in and get educated. Check out NuHarbor Security for...

We are back with another throwback episode, this time on Application Security Authentication Requirements. You probably would not be surprised to realize that there are still organizations out there that are not using best practices when it comes to authentication requirements and their lack of understanding often results in security headaches for their organization and potential data leaks for users. Justin shares 10 requirements from OWASP and how they can help you in your quest for compliance...

We are back with another throwback episode, this time on Application Security Authentication Requirements. You probably would not be surprised to realize that there are still organizations out there that are not using best practices when it comes to authentication requirements and their lack of understanding often results in security headaches for their organization and potential data leaks for users. Justin shares 10 requirements from OWASP and how they can help you in your quest for compliance...

On this week’s episode we're talking to Kristof about ISO 27001. We cover the who, what, when, why, and how of ISO and discuss how the process works from initial discussion through certification. Kristof points out some of the pitfalls and shares his thoughts on why ISO is often a better choice than some of the other standards that exist (NIST, we are looking at you.) If you're a organization interested in ISO, be sure to listen! Check out NuHarbor Security for complete cyber security protection...

On this week’s episode we’re talking to Kristof about ISO 27001. We cover the who, what, when, why, and how of ISO and discuss how the process works from initial discussion through certification. Kristof points out some of the pitfalls and shares his thoughts on why ISO is often a better choice than some of the other standards that exist (NIST, we are looking at you.) If you’re a organization interested in ISO, be sure to listen! Check out NuHarbor Security for complete cyber security protectio...

This week Justin and Zack realize with terror, that their favorite form of transportation has betrayed them. The NuHarbor train system of choice, Amtrak, found itself on the receiving end of a data breach and unfortunately the train has left the station. The breach appears to have originated within the app used to access your Amtrak guest points system, sharing all the weird things you purchased using your points and your PII like social security number, names, and addresses. At the same time, t...

For this week’s Breach of the Week, we're talking about a software on a chip maker that got hit by our old friend, Maze Ransomware. Justin talks about the persistence of viruses after you've been hit and how companies can try to prevent this from happening. We also are beginning to discuss 5G. What is 5G? Well, if you believe the hype, it is literally everything. Stay tuned for more 5G coverage in the future as we begin to explore the benefits and challenges of this new tech. To learn more about...

What is up everyone! For this week's episode we're digging into the archives and we picked one of the most popular episodes from Season 1 of Pwned, Exim Server Vulnerabilities. What's fascinating about Exim is that it first launched 25 years ago and still supports a lot of email systems around the globe. The software’s longevity and proliferation mean that hackers have had a long time to learn the vulnerabilities of the platform and unpatched servers seems to be the target that get picked off th...

What is up everyone! For this week’s episode we’re digging into the archives and we picked one of the most popular episodes from Season 1 of Pwned, Exim Server Vulnerabilities. What’s fascinating about Exim is that it first launched 25 years ago and still supports a lot of email systems around the globe. The software’s longevity and proliferation mean that hackers have had a long time to learn the vulnerabilities of the platform and unpatched servers seems to be the target that get picked off th...

We have a very special episode this week! NuHarbor Security is literally the best place to work. Seriously, NuHarbor was selected as a "Best Places to Work in Vermont" for the second time! Justin and Zack discuss why they think NuHarbor was selected and why NuHarbor staff members make the difference. Justin also talks about how having a strong corporate philosophy that emphasizes staff wellness above all else can help any company succeed and how he prioritizes building a company of people who wo...

We have a very special episode this week! NuHarbor Security is literally the best place to work. Seriously, NuHarbor was selected as a “Best Places to Work in Vermont” for the second time! Justin and Zack discuss why they think NuHarbor was selected and why NuHarbor staff members make the difference. Justin also talks about how having a strong corporate philosophy that emphasizes staff wellness above all else can help any company succeed and how he prioritizes building a company of people who wo...