Collecting and sharing threat intelligence
mnemonic security podcast
02/07/22
•35m
About
Comments
Featured In
How does one of the world’s largest cybersecurity companies collect and share their Threat Intelligence?
For this episode, Ryan Olson, Vice President of Threat Intelligence (Unit 42) at Palo Alto Networks, joins Robby for a chat about Palo Alto Networks’ telemetry pool and how Threat Intelligence has evolved over the last decade.
His team, Unit 42, are responsible for collecting, analysing and producing intelligence for a large number of organisations worldwide, and Ryan shares what goes on in the Unit 42 team when an event like Log4shell occurs.
He also looks back at the major trends they observed in 2021, and what new adversary techniques and potential attack paths interests him the most these days.
Produced by Paul Jæger
Previous Episode
Innsiderisiko
January 25, 2022
•29m
Insider threats | In Norwegian only
Where should organisations start to protect themselves from insider threats?
For this episode on insider risks, Robby is joined by Frode Skaarnes, COO at Lørn, a startup creating digital learning programs, with long experience from The Norwegian National Security Authority (NSM), as well as Kristian Haga from mnemonic’s Governance Risk and Compliance department.
They share from their experience working to help organisations minimise their risks of insider threats towards both the public and private sector, discuss how insiders often operate and why it’s especially important to separate between intentional and unintentional insiders.
Frode and Kristian also go into what organisations can do to pre-emptively minimise their own risks, and how working from home during the pandemic has impacted how we approach this risk.
Related reading:
https://nsm.no/regelverk-og-hjelp/rad-og-anbefalinger/grunnprinsipper-for-personellsikkerhet/introduksjon/
https://www.mnemonic.no/globalassets/security-report/we-need-to-talk-about-insider-threats.pdf
Producer: Paul Jæger
Next Episode
Deception technology
February 21, 2022
•30m
Deception technology
Deception as an attack tactic has been used in many forms, for many years. Both on the battleground in the physical world, and in the digital sphere.
For this episode on deception technology, Robby is joined by Ofer Israeli, Founder & CEO of Illusive, a cybersecurity company aiming to remove the vulnerable connections that enable attackers to move undetected, and replace them with deceptive versions that reveal the attacker’s presence.
Ofer explains how he suggests moving away from a reactive mind-set to avoid always playing catch-up with attackers, how deception technology has evolved beyond honeypot-based approaches, and the importance of detection for this to succeed.
Produced by Paul Jæger
If you like this episode you’ll love
Promoted