US air grounding due to one engineer's error, vuln in chromium browsers, Citrix vuln, Tech Republic bundle offer, 10 penetration testing decision factors, and why soft skills are necessary in infosec. https://www.dailymail.co.uk/news/article-11628753/FAA-flight-grounding-debacle-stranded-tens-thousands-hours-caused-engineer.html https://thehackernews.com/2023/01/experts-detail-chromium-browser.html https://www.csoonline.com/article/3685414/royal-ransomware-group-actively-exploiting-citrix-vulnerability.html#tk.rss_all https://www.techrepublic.com/article/explore-information-security-huge-course-bundle/ https://christianespinosa.com/blog/top-10-penetration-testing-decision-factors/ https://technative.io/why-soft-skills-are-key-to-filling-the-digital-talent-gap/ If you're interested in filling the gap for Tuesday's episode please send me an email at [email protected]. --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

From September 20, 2022: Adam Bricker has led many career lives, from working on Tomahawk missiles to cofounding the Carolina Cyber Center, focused on hardening community resources and continuing education to address the nation's critical cybersecurity talent shortfall. He currently provides consulting services for businesses in high tech, IT-enabled and emerging markets as the founder of ePower Learning, and his testimony of faith in relation to his callings is truly inspirational. --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

Mary-Michael Horowitz, CISM, is the Founding Partner/CEO at Asylas, LLC. Asylas is a cybersecurity solutions firm heavily focused on remarkable service and customized approaches to security, privacy and risk consulting. We discuss small and midsized business security challenges, including passwords and password managers. --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

Experian security flaw, CISOs focus on three trends, email services encryption, importance of SaaS user permissions, $24B MATIC coin risk, and today's list: 10 CRUCIAL cybersecurity tips for small business. https://krebsonsecurity.com/2023/01/identity-thieves-bypassed-experian-security-to-view-credit-reports/ https://www.darkreading.com/microsoft/cisos-are-focused-on-these-3-trends-are-you- https://www.techrepublic.com/article/cloud-email-services-bolster-encryption-against-hackers/ https://thehackernews.com/2023/01/why-do-user-permissions-matter-for-saas.html https://www.cpomagazine.com/cyber-security/critical-vulnerability-that-put-24-billion-in-matic-coins-at-risk-patched-by-polygon/ https://esabda.com/10-crucial-cybersecurity-tips-for-small-business/ --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

Flipper phish, Slack breach, LastPass last trust, Twitter account info for free, Iran DDoS attack, data privacy trends, and a question of whether or not to use a VPN firewall (feedback encouraged, email [email protected]). https://www.bleepingcomputer.com/news/security/ongoing-flipper-zero-phishing-attacks-target-infosec-community/ https://cybernews.com/security/slack-admits-security-breach/ https://www.pcmag.com/opinions/lastpass-is-losing-our-trust https://www.forbes.com/sites/petersuciu/2023/01/04/data-from-200-million-twitter-users-offered-for-free-on-hacker-forum/ https://www.jpost.com/middle-east/iran-news/article-726852 https://www.law360.com/articles/1559756/5-data-privacy-law-trends-that-will-continue-into-2023 --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

From September 13, 2022 - Elvis Huff is the Vice President - Director of Security/Information Security Officer for Wilson Bank and Trust. His path to bank ISO is not typical but is inspirational, with 12 years as a police officer prior to entering the world of banking. His reason for the transition involves faith and following a calling. He also produces an awesome security newsletter, Security Stuff with Elvis Huff - check it out at https://www.wbtsecurityblog.com/! --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

For our kickoff episode of Season Five, Dave Evangelista joins us. He has 20 years of experience with financial institutions and is currently the Vice President Information Technology for a midwestern credit union where he is responsible for the tactical direction, control, and ongoing analysis and planning for the credit union’s IT environment. Infrastructure, Operations, Critical Systems, Information Security, Development, e-Services, Service Delivery, Digital and Technology Support. He also has 24 years of law enforcement experience, including as a Kentucky certified Cyber and Financial Crimes Investigator, Kentucky certified Advanced Internet Crimes Investigator, election consultant on crimes against children to former Governor Ernie Fletcher, founder  and executive director for the United States Internet Crime Task Force (1998-2020), and is a recognized expert witness on digital forensics. --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

Twitter GDPR investigation, ransomware group clones victim's site, LockBit apologizes to children's hospital, ransomware ecosystem diversifying, IT Pros' cybersecurity fears, FinTech cybersecurity issues, and cybersecurity tools to keep you safe as a remote worker...sort of. https://gdprbuzz.com/news/twitter-faces-investigation-in-ireland-over-data-breach/ https://www.bleepingcomputer.com/news/security/ransomware-gang-cloned-victim-s-website-to-leak-stolen-data/ https://www.bleepingcomputer.com/news/security/ransomware-gang-apologizes-gives-sickkids-hospital-free-decryptor/ https://www.csoonline.com/article/3684248/ransomware-ecosystem-becoming-more-diverse-for-2023.html https://securityboulevard.com/2023/01/an-overview-of-cybersecurity-issues-faced-by-the-fintech-industry/ https://www.digitalinformationworld.com/2023/01/85-of-it-pros-fear-cybersecurity-issues.html https://www.makeuseof.com/best-free-cybersecurity-tools-to-keep-you-safe-as-a-remote-worker/ --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

Ransomware not covered by cyber insurance, cyberattacks may be impossible to insure without some changes, whatever happened to UEBA, 100,000 students have their data exposed, six tips for hiring cybersecurity talent, and my predictions for 2023. https://www.jurist.org/news/2022/12/ohio-supreme-court-says-insurance-policy-does-not-cover-ransomware-attack-on-software/ https://www.techspot.com/news/97118-cyberattacks-could-soon-become-impossible-insure.html https://www.darkreading.com/dr-tech/how-to-get-the-most-out-of-ueba? https://www.bitdefender.com/blog/hotforsecurity/renowned-education-platform-leaks-personal-data-of-100-000-students-online/ https://www.forbes.com/sites/forbestechcouncil/2022/12/22/six-ways-to-pivot-hiring-strategies-to-attract-cybersecurity-talent/?sh=2b3a54af742e --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message

From September 6, 2022 - Donna Gallaher, President and CEO of New Oceans Enterprises, LLC, is a seasoned IT and information security pro providing virtual CISO and risk management services. She is a FAIR (Factor Analysis of Information Risk) evangelist and is passionate about growing the virtual CISO community, including serving on the Board of Directors for vCISO Catalyst, a Public Benefit Corporation supporting the improvement of cybersecurity programs of small and medium businesses. If you have never heard of FAIR or are interested in the virtual CISO field (or both), check out this episode! New Oceans Enterprises, LLC - https://www.newoceansenterprises.com/ --- Send in a voice message: https://anchor.fm/virtual-ciso-moment/message