On the Season 2 debut of Lost Cultures: Living Legacies , we travel to Bermuda, an Atlantic island whose history spans centuries and continents. Once uninhabited, Bermuda became a vital stop in transatlantic trade, a maritime stronghold, and a cultural crossroads shaped by African, European, Caribbean, and Native American influences. Guests Dr. Kristy Warren and Dr. Edward Harris trace its transformation from an uninhabited island to a strategic outpost shaped by shipwrecks, colonization, the transatlantic slave trade, and the rise and fall of empires. Plus, former Director of Tourism Gary Phillips shares the story of the Gombey tradition, a vibrant performance art rooted in resistance, migration, and cultural fusion. Together, they reveal how Bermuda’s layered past continues to shape its people, culture, and identity today. You can also find us online at travelandleisure.com/lostcultures Learn more about your ad choices. Visit podcastchoices.com/adchoices…
Player FM - Internet Radio Done Right
Checked 1d ago
اضافه شده در thirty-five هفته پیش
محتوای ارائه شده توسط CISO Marketplace. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط CISO Marketplace یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
Player FM - برنامه پادکست
با برنامه Player FM !
با برنامه Player FM !
))
Daily Deals
The Rise of AI-Powered Cyberattacks and the Imperative of Cyber Resilience
Manage episode 462592121 series 3604885
محتوای ارائه شده توسط CISO Marketplace. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط CISO Marketplace یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
This episode explores the escalating cybersecurity landscape, with a particular focus on how generative AI is enabling more sophisticated and personalized cyberattacks. We delve into the ways AI is being used by cybercriminals to refine social engineering tactics, create more convincing phishing attempts in multiple languages, and automate their malicious activities. The episode also highlights the critical need for organizations to prioritize cyber resilience, focusing on building stronger cybersecurity foundations, increasing awareness and education, and developing robust incident response plans. Additionally, we discuss the importance of ecosystem-level collaboration and the need for all organizations to adopt secure-by-design principles for AI systems. We also consider the ways that governments may create policies on biotech.
158 قسمت
اشتراک گذاریManage episode 462592121 series 3604885
محتوای ارائه شده توسط CISO Marketplace. تمام محتوای پادکست شامل قسمت‌ها، گرافیک‌ها و توضیحات پادکست مستقیماً توسط CISO Marketplace یا شریک پلتفرم پادکست آن‌ها آپلود و ارائه می‌شوند. اگر فکر می‌کنید شخصی بدون اجازه شما از اثر دارای حق نسخه‌برداری شما استفاده می‌کند، می‌توانید روندی که در اینجا شرح داده شده است را دنبال کنید.https://fa.player.fm/legal
This episode explores the escalating cybersecurity landscape, with a particular focus on how generative AI is enabling more sophisticated and personalized cyberattacks. We delve into the ways AI is being used by cybercriminals to refine social engineering tactics, create more convincing phishing attempts in multiple languages, and automate their malicious activities. The episode also highlights the critical need for organizations to prioritize cyber resilience, focusing on building stronger cybersecurity foundations, increasing awareness and education, and developing robust incident response plans. Additionally, we discuss the importance of ecosystem-level collaboration and the need for all organizations to adopt secure-by-design principles for AI systems. We also consider the ways that governments may create policies on biotech.
158 قسمت
همه قسمت ها
×
A tabletop exercise is a discussion-based simulation designed to help teams determine how to respond to a crisis. These exercises provide a safe environment to test and refine an organization's incident response plan and identify weaknesses in processes. By engaging key personnel in simulated scenarios, tabletop exercises allow for practicing decision-making, communication, and coordination before an actual unexpected event occurs. www.securitycareers.help/assessing-and-enhancing-organizational-security-and-risk-management…
Evolving cyber threats are a significant business risk that boards and executives must oversee, moving beyond simply protecting systems to building resilience. This episode explores how a focus on preparedness, including robust incident response plans and regular testing, combined with continuous management like ongoing monitoring and adapting strategies, is essential for organizations to navigate the dynamic threat landscape. We discuss how these combined efforts enable businesses to respond and recover quickly, ensuring operations continue even when faced with an attack. www.securitycareers.help/mitigating-evolving-cyber-threats-building-resilience-through-preparedness-and-continuous-management…
This episode delves into the essential methodologies and services organizations use to assess their cybersecurity posture. We explore techniques like Enterprise Risk Assessments, Threat Analysis, Vulnerability Management and Assessment, and Penetration Testing. Learn how understanding attacker tactics and human behavior through methods like Social Engineering Assessments and Red/Blue/Purple Teaming can reveal critical weaknesses in your defenses. Discover how these assessments inform strategic planning, prioritize investments, and build a more mature and resilient security program, often guided by frameworks like the NIST Cybersecurity Framework (CSF). www.securitycareers.help/beyond-the-firewall-why-understanding-attackers-and-human-nature-is-key-to-a-cybersecurity-career…
Large language models present new security challenges, especially when they leverage external data sources through Retrieval Augmented Generation (RAG) architectures . This podcast explores the unique attack techniques that exploit these systems, including indirect prompt injection and RAG poisoning. We delve into how offensive testing methods like AI red teaming are crucial for identifying and addressing these critical vulnerabilities in the evolving AI landscape. www.securitycareers.help/navigating-the-ai-frontier-a-cisos-perspective-on-securing-generative-ai/ www.hackernoob.tips/the-new-frontier-how-were-bending-generative-ai-to-our-will…
The financial sector is a frequent target for cyberattacks, facing a staggering rise in cases and significant costs from data breaches. Preparing for these threats requires understanding ransomware-as-a-service (RaaS), phishing, and other malicious activities, as well as implementing robust cybersecurity programs and incident response plans. This episode explores effective strategies for planning, detecting, analyzing, containing, and recovering from cyber incidents to build cyber resilience and maintain trust in a rapidly evolving digital marketplace breached.company/the-expanding-shadow-unpacking-the-multifaceted-financial-costs-of-cybersecurity-incidents https://finemydata.com/ https://databreachcostcalculator.com/ https://irmaturityassessment.com/ https://ircost.breached.company/ https://cyberinsurancecalc.com/…
The 2025 Worldwide Threat Assessment by the Defense Intelligence Agency describes a rapidly changing global security environment where national security threats are expanding, fueled by advanced technology. It identifies key regional security flashpoints, including threats to the U.S. Homeland and Southern Border, China's assertiveness in the Indo-Pacific (especially regarding Taiwan and the South China Sea), Russia's actions in Ukraine and its global influence, and Iran and its proxy forces in the Middle East. The assessment highlights the growing cooperation among U.S. competitors and adversaries—specifically China, Russia, Iran, and North Korea—who are strengthening ties, supporting each other in conflicts, collaborating to evade sanctions, and leveraging technology to undermine the influence of the United States and its allies. breached.company/navigating-the-threat-horizon-key-regional-flashpoints-and-their-global-implications-in-2025…
2025 saw unprecedented international law enforcement efforts shatter major cybercrime networks like the LummaC2 infostealer, the Cracked and Nulled forums, the 8Base ransomware gang, and the Zservers bulletproof hosting service. These coordinated operations, involving over 20 nations and resulting in thousands of server seizures, disrupted criminal infrastructure and affected millions of potential victims globally. However, criminal organizations are adapting by quickly attempting to rebuild infrastructure and fragmenting into more numerous groups, presenting ongoing challenges for law enforcement's sustained efforts. https://breached.company/global-cybercrime-takedowns-in-2025-a-year-of-unprecedented-law-enforcement-action…
Artificial intelligence is rapidly transforming industries, but its increasing power necessitates robust governance and compliance. This episode delves into the evolving global regulatory landscape, exploring key frameworks like the EU AI Act and the NIST AI Risk Management Framework that aim to ensure AI systems are safe, transparent, and accountable. We'll discuss the practical steps organizations must take to build effective AI compliance programs, manage risks, and foster trust while leveraging the benefits of AI www.compliancehub.wiki/navigating-the-ai-regulatory-maze-a-compliance-blueprint-for-trustworthy-ai www.securitycareers.help/building-trust-in-the-age-of-autonomous-systems-a-cisos-perspective-on-ai-governance https://airiskassess.com/ https://risk.quantumsecurity.ai/ https://globalcompliancemap.com/…
Discover how Artificial Intelligence is reshaping the demanding world of the Security Operations Center, moving beyond the overwhelming volume of alerts and analyst burnout that plague traditional SOCs. We explore how AI automates routine tasks, enhances threat detection, and accelerates incident response, freeing up human analysts for higher-value activities like threat hunting and complex investigations. Learn why human expertise remains crucial for critical decision-making and oversight in this evolving, augmented security landscape. www.securitycareers.help/building-the-ai-driven-soc-a-cisos-blueprint-for-enhanced-security-and-efficiency www.cisomarketplace.services www.generatepolicy.com www.cyberagent.exchange…
Explore the latest cloud security landscape by analyzing recent real-world breach cases from the CSA Top Threats Deep Dive. We dive into the technical details, business impacts, and contributing factors like misconfigurations, inadequate identity management, and supply chain weaknesses. Gain crucial insights and actionable takeaways to enhance your organization's cloud resilience and defend against top security risks. www.securitycareers.help/building-cloud-resilience-lessons-for-cisos-from-real-world-breaches www.hackernoob.tips/enhancing-cloud-resilience-actionable-lessons-for-cisos-from-real-world-incidents…
In today's interconnected world, supply chains are increasingly vulnerable to sophisticated cyberattacks. This episode explores the primary threats impacting these vital networks, from exploiting trust relationships with third-party vendors to the dangers of malware and compromised software. We'll discuss the pervasive threat of ransomware attacks, like those involving the CL0P gang and the MOVEit vulnerability, and the significant risks of data breaches and theft. We'll also touch upon how social engineering and credential theft are used to infiltrate networks, the targeting of supplier-managed resources, and vulnerabilities in IoT and OT devices. Finally, we examine the rise of advanced and AI-powered attacks that are making it harder to detect and defend against these evolving threats. Understanding these risks is the first step in implementing effective cybersecurity supply chain risk management (C-SCRM) practices www.securitycareers.help/navigating-the-perilous-digital-supply-chain-key-cybersecurity-threats…
Welcome to "Bridging the Gap: Translating Cyber Risk for the Boardroom." In today's complex digital landscape, Chief Information Security Officers (CISOs) face the crucial challenge of communicating intricate technical risks in a way that resonates with executive leaders and board members. This podcast explores how CISOs can effectively translate technical details into business terms that convey the potential impact of cybersecurity risks and the value of security investments. We'll delve into strategies for speaking the language of the business, using financial, economic, and operational terms to explain cyber risk. Learn how to quantify risks by focusing on the likelihood of cyber events and their potential severities or financial loss. Discover how to align cybersecurity strategies with the company's mission, strategic goals, and operational processes. Crucially, we examine the power of storytelling to make abstract risks tangible and compelling for your audience. Building strong relationships and fostering open communication with different departments and leadership levels is key to creating a collaborative environment where risk can be managed effectively. Tune in to learn how to become a more effective communicator, gain leadership buy-in, and ensure cybersecurity is viewed as a strategic enabler, not just a technical problem www.securitycareers.help/the-modern-ciso-bridging-the-technical-and-business-worlds-for-strategic-impact…
The role of the Chief Information Security Officer (CISO) is more critical and demanding than ever, placing leaders in a persistent high-stress environment. This podcast delves into the unique pressures faced by CISOs and cybersecurity professionals, including the immense responsibility and potential for blame, resource constraints, excessive workload, and the relentless "always-on" nature of the job. We explore the significant mental health impacts, such as anxiety, burnout, and the psychological toll of managing data breaches, which can include feelings of violation and loss of control. More than just identifying the challenges, this podcast offers insights and strategies for building resilience and fostering well-being, drawing on experiences from security leaders. Learn how supportive organizational culture and leadership, prioritizing well-being, building strong teams, and effective stress management techniques are crucial for not only personal health but also for maintaining optimal professional performance and sustaining a vital career in cybersecurity leadership. Join us to understand how to thrive, not just survive, in the CISO's crucible. www.securitycareers.help/the-cisos-crucible-how-organizational-culture-and-leadership-shape-well-being-and-tenure www.cisomarketplace.services…
The digital transformation journey in critical infrastructure organizations and other sectors like healthcare is increasingly connecting operational technology (OT) and integrating Internet of Things (IoT) devices. While this convergence of OT and IT creates efficiencies, it also introduces new vulnerabilities and expands the attack surface for cybersecurity threats. Cyber actors are actively exploiting internet-accessible OT assets against critical infrastructure, and these cyberattacks are growing in size, sophistication, and prevalence. Securing OT presents additional complexities compared to traditional IT security, partly due to differences in priorities (Availability, Integrity, Confidentiality in OT versus Confidentiality, Integrity, Availability in IT) and the mix of old and new technology used. Threats can range from insider risks and nation-state attacks to ransomware. In healthcare, integrating IoT devices offers benefits but exposes patients to unique cybersecurity threats, where compromising devices like implantable devices could cause harm The lines between physical security and cybersecurity have become blurred, as physical security systems are increasingly connected and cyber-physical systems bridge the digital and physical realms10. Siloed security functions, treating physical and cyber security separately, mean security leaders lack a holistic view of threats, creating blind spots and hindering rapid identification, prevention, mitigation, and response to complex threats. For example, an unsecured IoT device can serve as a backdoor into enterprise networks, allow unauthorized physical access, or disrupt operations by hijacking physical systems, as seen in the casino fish tank hack. Addressing these challenges requires a shift towards integrated security functions and a holistic approach that aligns physical and cybersecurity efforts. This includes unified risk assessments, enhancing visibility of unmanaged devices, implementing specific security measures like segmentation and hardening, employing robust authentication and secure design principles, establishing continuous monitoring, and developing comprehensive incident response plans, guided by frameworks such as the NIST Cybersecurity Framework, IEC 62443, and C2M2. Leveraging AI and machine learning can further enhance threat detection and anomaly detection. Ultimately, effective integrated security protects cyber-physical infrastructure and enhances resilience against hybrid threats. www.securitycareers.help/securing-the-converged-frontier-why-integrated-security-is-paramount-in-the-age-of-iot-and-ot www.secureiotoffice.world/securing-the-smart-office-why-integrated-security-is-no-longer-optional 25% off - ' LAUNCH ' https://securecheck.tools https://policyquest.diy…
Delve into the essential and intricate application of Zero Trust (ZT) principles within Operational Technology (OT) and Industrial Control Systems (ICS) environments. This episode explores the unique challenges of securing critical infrastructure, where safety, reliability, and availability are primary objectives, and legacy systems, unique protocols, and often unencrypted communications present distinct complexities compared to traditional IT security models. We'll discuss how the increasing convergence of IT and OT, driven by digital transformation, is reshaping the threat landscape and exposing previously isolated systems. Learn about the tailored roadmap for implementing Zero Trust in these vital sectors, employing a systematic five-step process: defining Protect Surfaces, mapping operational flows, building a Zero Trust Architecture (ZTA), creating policies, and ongoing monitoring and maintenance. Discover how established frameworks like the ISA/IEC 62443 Zone and Conduit Model and the SANS Top 5 Critical Controls for OT/ICS integrate with and are fortified by a Zero Trust approach to enhance security and resilience in the face of evolving threats. www.securitycareers.help/securing-the-industrial-heartbeat-why-zero-trust-is-imperative-and-different-for-ot-ics…
به Player FM خوش آمدید!
Player FM در سراسر وب را برای یافتن پادکست های با کیفیت اسکن می کند تا همین الان لذت ببرید. این بهترین برنامه ی پادکست است که در اندروید، آیفون و وب کار می کند. ثبت نام کنید تا اشتراک های شما در بین دستگاه های مختلف همگام سازی شود.
Daily Deals
Daily Deals
Player FM - برنامه پادکست
با برنامه Player FM !
با برنامه Player FM !
))
