We use cookies to provide you with the best experience across all Scoop News Group websites. By using Scoop News Group websites, you consent to the use of cookies. Learn more
In April, a small agency under the DOD released a bulletin that said a Chinese hacker group had been stealing data from cleared contractors via a leaked sinkhole. Shannon Vavra dug into that bulletin, and found the story behind it to be a very confusing mystery. In this episode, she talks about it with CyberScoop Editor-in-Chief Greg Otto.
The case for transitioning to a single, multi-cloud IAM platform
Cyber Everywhere: The growing threat of mis-, dis-, and malinformation
Practical strategies to establish a zero-trust security environment
Well-funded, organized attacks require strategic counter-defense strategies
Understanding ransomware at the Pentagon
How zero trust helped insulate Splunk from supply chain attack
Defenders need to increasingly rely on agility in cyberspace
Cloud and AI key to managing risk and compliance
Threat intelligence increasingly depends on AI
Securiosity: How is information being shared during the pandemic?
Cyber Everywhere: Aligning the CISO role with the business strategy
Securiosity: How important is API security?
Cyber Everywhere: Coordinate a successful identity governance plan
How do you fight off a ransomware attack?
How Oak Ridge National Lab DevSecOps team mobilized amid pandemic
Cybersecurity report shows an increase in cyberthreats during pandemic
Cyber Everywhere: Expand security capabilities with AI tools
Making changes to cyber risk management under new working conditions
Securiosity: Is there a different way to battle phishing emails?
Cyber Everywhere: As IoT and IT converge, so must enterprise risk assessments
Strategies for making an enterprisewide shift to zero-trust security
Securiosity: Where is the weak link in your application security?
Securiosity: Will we ever be able to vote online?
Securiosity: Is Winnti Group running front companies to hide its malware?
Securiosity: Why are we having the same conversation about threat intelligence?
Securiosity: How has COVID-19 changed the cybersecurity community?
Securiosity: How do you find a ransomware gang on the dark web?
Securiosity: What happened with the Vault 7 trial?
Cyber Everywhere: Reduce threat risk through public-private partnership
Securiosity: 20 minutes on S4x2020
Cyber Everywhere: Leaders see cyber transformation as greatest challenge in risk management
Securiosity: Changes at DHS's cyber shop
Securiosity: More disclosures, less vulnerabilities
Securiosity: CISA leadership is changing
Securiosity: Where’s the next place money will flow in cybersecurity?
Securiosity: What a week for insider threats
Securiosity: What's cybersecurity like at General Motors?
Why CDM tools – and their data – are important to reduce cybersecurity risk
Securiosity: Cozy Bear is still creepin'
Why cloud is the future of enterprise cybersecurity
Securiosity: Wait, what is cyber insurance for, anyway?
Securiosity: Oh great, another round of the crypto wars
Securiosity: CrowdStrike's week in conspiracy theory hell
Securiosity: The self-inflicted cybersecurity shortage
Securiosity: What is a 'Cyber Peace Institute,' anyway?
Securiosity: Apple has had a rough two weeks
Securiosity: Summer of Scammers
Securiosity: Capital One saga continues
Securiosity: Another successful hacker summer camp
Mobile security threats challenge CISOs to rethink device policies
Securiosity: Everything you need to know about Capital One's breach
Securiosity: Shine on, security diamonds
Securiosity: Have you patched BlueKeep yet?
Securiosity: Zoom & Doom
Securiosity: A $600,000 digital stick-up
How network modeling helps operations and security teams mitigate risk
Securiosity: The great cybersecurity consolidation circus is upon us
Securiosity: So, about this 'Crypto' movie...
Securiosity: Let's think through this Huawei thing
Securiosity: The infosec world is a mess
Securiosity: A month's worth of news, packed into a week
Securiosity: Move fast and break things, for real
Securiosity: You can't pentest an election
Securiosity: The world is hacked
Securiosity: Is Julian Assange really a hacker?
Securiosity: OPSEC fail of the year?
Securiosity: Closing Pandora's Box
Securiosity: Norsk Hydro's best-case scenario
Securiosity: Oh man, this 'Crypto' trailer
Securiosity: Everything you missed at RSA
Securiosity: Hacker Time Trials
Securiosity: Marcus Carey's 'Tribe of Hackers'
Securiosity: Back to your regularly scheduled podcast
Securiosity: DHS's DNS Problem
Securiosity: An ICS Security Bonanza!
Securiosity: Hacky New Year
Securiosity: ...And China indictments close the year
Securiosity: Persistent Pegasus
Securiosity: Wait, a breach during the 2018 campaign?
Securiosity: Welcome to breach week
Securiosity: Deals, Deals, Deals
Securiosity: All quiet on the election front
Securiosity: Brazen behavior everywhere
Securiosity: A double dose
Securiosity: How to look for hardware hacks
Securiosity: Behind the big supply chain story
Securiosity: ZIP disks! In 2018!
Securiosity: Officially on offense
Securiosity: The uncertainty principle
Securiosity: A couple charges, lots of questions
Securiosity: Voting vendors vs. voting village
Securiosity: Phalse Alarm
Securiosity: Election security soapbox
Securiosity: Dispatches from hacker summer camp
Securiosity: The election security rain delay
Securiosity: Maria Butina's curious, too!
A president at war with his own intelligence community
Introducing Securiosity: CyberScoop's newest podcast
How identity can control shadow IT
Separating fact from fiction with GDPR
The push back on Trump's 5G plan
The case for zero-trust networks
What Trisis means for the ICS security world
What to expect in 2018
Threat intelligence can be the tie that binds security strategies
A week full of election cybersecurity news
Apple's horrible, no good, very bad month
Just how bad will the Uber fallout be?
Why everyone needs to learn about two-factor authentication
How to make threat intelligence actionable
Why the dark web continues to fracture
How to protect your kids' privacy online
Security strategies that merge with modernization
What you need to know about Krack
The IRS' messy relationship with Equifax
How threat intelligence leads to counterintelligence
Depending on AI to keep Android malware to a minimum
Avast and the growing supply chain security problem
The U.S. government vs. Eugene Kaspersky
The value of threat intelligence
How cyberespionage is playing into the South China Sea conflict
The crazy idea of the U.S and Russia working on cybersecurity in harmony
North Korea's ongoing hacker onslaught
Why the anti-virus fight has gotten so nasty
The future of Cyber Command's split
DHS's quest for better election system protections
How the world is reacting to Petya
What the Reality Winner leak means for the greater security community
VEP bill gets groans from federal leadership
GrammaTech's Tim Teitelbaum talks DARPA’s Cyber Grand Challenge
How Underwriters Laboratories is dealing with IoT security
Five encryption myths debunked for feds
OWASP Global Board Member Matt Konda discusses this year’s AppSec USA conference
Invincea's Anup Ghosh on using machine learning to improve cybersecurity detection capabilities
Veracode's Chris Wysopal talks about the impact of '90s hacker think tank
RSA President Amit Yoran: 'Don’t invest myopically in protection'
FireEye's Tony Cole discusses this year's M-Trends Report
NIST's Paul Black discusses UL's cyber certification, 'formal methods'
Bowie State prof discusses using DHS’ SWAMP software in her curriculum
Crowdstrike CEO George Kurtz: Indicators of attack are the future
IUPUI prof James Hill discusses static analysis tools
Sonatype's Joshua Corman on IoT: 'More code, more problems'
Code Dx CEO Anita D’Amico on commercializing government-funded research in cyber
Bugcrowd CEO Casey Ellis on bug bounty programs
Cylance's Stuart McClure on cyberthreats to critical infrastructure
Parasoft’s Arthur Hicken on software cybersecurity — and his ‘IoT hall of shame’
A federal 'bug bounty' program? HackerOne's Katie Moussouris weighs in on the challenges
Cyber guru Ron Ross on policy surrounding IoT, NIST's 2016 plans
NIST's Ron Ross on baking security into the government's software systems
NASA's Jerry Davis talks about information sharing, securing federal agencies
Robert Seacord on the intersection of DevOps and security
Lancope's Gavin Reid on how federal agencies can improve their threat intelligence
Robin Gandhi on making FISMA compliance decisions
Jeff Williams on making applications more secure at federal agencies
Bart Miller on making software assurance central to cyber defense