Times are tough and layoffs are imminent.  Here I talk about my experiences getting laid off and having to lay off employees (friends).  I spend a substantial amount of time discussing signs to watch for and actions companies take that precede layoffs.  I explain that it's a scary time filled with a lock of control and unknowns.  You are not alone and I explain what to do and how to move forward.

Cyber Security Grey Beard

Ep. - 11 Layoffs and the Job Hunt

45 minute presentation delivered to the Long Island ISC2 chapter on October 20, 2020.  I created this content for IIA/ISACA Chicago and launched for ISC2 as the content has wide appeal throughout the Cyber Security spectrum.  This talk focuses on leadership and the need for engagement throughout organizations.  We are, in many ways, the same in Cyber Security as we were 25+ years ago.  Something has to change and this talk focuses on leadership engaging as a potential solution.The agenda covers: Introduction, Leadership Matters, Disparity Requires Variety, True Stories, Statistics, Engage and Understand, Level Up Cyber Security, Solutions that Make a Difference, Conclusion.For a copy of the slides, please send a note to cybergreybeard@gmail.com.

Business Leadership and Cyber Security Integration

NOTE: THIS INFORMATION IS FOR EDUCATIONAL PURPOSES ONLY!  I DO NOT CONDONE OR ENDORSE USING THIS INFORMATION FOR ILLEGAL OR NEFARIOUS PURPOSES.Herein I provide key offensive testing tools along with clear description of what they do, when and why to use them and the impact these tools have on target systems.I discuss or mention the following products:Linux - Kali, UbuntuTORVPN - ExpressVPN, OpenVPN, Hide.meNMAP and NSE ScriptsMetasploitPacket Capture Tools - Wireshark, TCPDump, Windump, tshar, Network MinerPassword Crackers/Tools - Mimikatz, JohntheRipper, L0phtcrack, Hashcat, Hydra, xHydraHash Tools - Raidbow Tables, Crackstation, onlinehashcrackVulnerability Management - Nessus, Nexpose, Qualys

Ep. 21 - Cyber Security Offensive Tools

NOTE: THIS INFORMATION IS FOR EDUCATIONAL PURPOSES ONLY!  I DO NOT CONDONE OR ENDORSE USING THIS INFORMATION FOR ILLEGAL OR NEFARIOUS PURPOSES. Ethical hacking discussion on offensive actions.  I go through standard hacker methodology and actions performed in a breach.  I mention jobs associated with these skills and discuss defensive mechanism in association with these offensive actions. Thank you Cloud Academy (https://cloudacademy.com) for sponsoring this episodeLockheed Martin Kill Chain:  https://www.lockheedmartin.com/en-us/capabilities/cyber/cyber-kill-chain.htmlCertified Ethical Hacker: https://www.eccouncil.org/programs/certified-ethical-hacker-ceh/ 

Ep. 20 - Cyber Security Offensive Actions

Interview on my background and journey along with discussion on the cyber security profession.  Chris Seinko of Cyber Work hosts the Infosec Institute cyber security podcast and we discuss how to help students and early professionals grow in Cyber Security.Catch the video version recorded on Zoom at: Reach out with questions, comments or suggestions for future episodes: cybergreybeard@gmail.com

Interview by Chris Seinko, Host of Cyber Work Podcast

Episode responding to Greybeardian questions.  I’ve heard from a number of listeners and want to share their experiences along with my suggestions and recommendations to their common situations.  I know many listeners find themselves in the same position as these individuals, let’s all learn from one another and grow together.Examples of questions answered this episode:I'm struggling with my job hunt, can you please guide me with some career advice? How do I break into Cyber Security?I 'm looking to get into the world of cybersecurity & my goal is to become a CEH, where do I start?Send questions, comments, ideas and thoughts to cybergreybeard@gmail.comThanks to my sponsors:Populum https://www.populum.comCloud Academy: https://www.cloudacademy.com

Ep. 19 - Cyber Security Greybeardians Questions Answered

Discussion surrounding critical defensive actions all information security users must utilize.  I talk about managing and maintaining personal devices and how this directly relates to professions involving cyber security.  Network security, system administration, endpoint protection, identity and access management as well as other jobs deal with daily work we should all do on our personal devices.To comment, ask questions or give suggestions for future episodes reach out at cybergreybeard@gmail.comNotes: Thank you Populum for sponsoring this episode: https://populum.com/. I appreciate the support in this episode from Cloud Academy:  https://cloudacademy.com/ Tools/Products Mentioned in this Episode: Privacy related web browser: https://duckduckgo.com/Host Intrusion Freeware: https://ossec.netLinux Log Monitoring: https://kde.org/applications/en/ksystemlogWindows Event Viewer: Search in WindowsDefault Router Passwords: https://bestvpn.org/default-router-passwords/Software and Driver Updates: https://www.kcsoftwares.com/?download (SUMO and DUMO)Identity and Access Management: https://www.okta.com/Cloud File Storage – Dropbox https://www.dropbox.com/Cloud File Storage – Box https://www.box.com 

Ep. 18 - Cyber Security Defensive Actions

Tools and recommendations to enhance personal and understand corporate cyber security defense.  I go over endpoint protection including anti-virus, anti-spyware, and anti-malware discussing how this ties into a SIEM in the corporate world.  I spend a bit of time on VPN's and what the network sees and how these enhance privacy and security.  I discuss password managers and why they are important. I talk about multi-factor authentication and conclude with digital certificates and email encryption.Thank you Populum for sponsoring this episode: https://populum.com/. I appreciate the support in this episode from Cloud Academy: https://cloudacademy.com/ To comment, ask questions or give suggestions for future episodes reach out at cybergreybeard@gmail.comTechnologies that I use and reference in this episode:ExpressVPN - https://www.expressvpn.com/LastPass - https://www.lastpass.com/Norton AV (Norton360) - https://us.norton.com/products/norton-360-standard?inid=nortoncom_nav_norton-360-standard_homepage:homeSuperAntiSpyware - https://www.superantispyware.com/ProtonMail - https://protonmail.com/

Ep. 17 - Cyber Security Defensive Tools

Today's remote work and school environments enhance cyber security risks.  I discuss real attacks and technologies now bypassed due to work at home policies.  With so many new devices, and millions of additional individuals working and going to school remotely, there are increased and enhanced threats impacting anyone utilizing devices to access the Internet.  I conclude with solutions and dwell on the fact that we all must be diligent to this new world of Internet access.Thank you Populum for sponsoring this episode.  https://populum.com/. Thank you Anita A. of Canada for this Topic.  Please send your thoughts, comments or ideas to cybergreybeard@gmail.comOther Notes: VPN Split Tunneling Article: https://www.infosecurity-magazine.com/opinions/vpn-split-tunneling/July Issue of CISO Magazine, Cyber Security After COVID: https://cisomag.eccouncil.org/SANS News Bites: https://www.sans.org/newsletters/newsbitesMurder during Zoom Class: https://www.washingtonpost.com/nation/2020/08/13/girl-witness-mother-murder-zoom/Toy Gun Story: https://www.thecollegefix.com/boy-showed-zoom-class-his-nerf-gun-teacher-assumed-it-was-a-toy-school-called-police-on-him-anyway/Zoom Bombing: https://www.kvue.com/article/news/education/river-ridge-elementary-leander-isd-zoom-bombing-porn-williamson-county-texas/269-e470ec4b-b77d-4a8d-8cad-55c38827b1a4Data on Stuxnet: https://www.techrepublic.com/article/stuxnet-the-smart-persons-guide/Corrections: Stuxnet launched in 2010, not 2015 as I incorrectly stated.

Ep. 16 - Cyber Security Threats in Remote Work and School Environments

Discussion around cyber security governance and compliance.  What they are, the professions that perform these roles and what they do and how they differ.  I go over key regulations including SOX, HIPAA, GDPR and others explaining what they cover and why it matters to cyber security professionals.cybergreybeard@gmail.com Sarbanes Oxley: https://www.soxlaw.com/PCI-DSS: https://www.pcisecuritystandards.org/HIPAA: https://www.hhs.gov/hipaa/index.htmlGDPR: https://gdpr-info.eu/CCPA: https://oag.ca.gov/privacy/ccpaGDPR Enforcement and Fines: https://www.enforcementtracker.com/HIPAA Fines: https://compliancy-group.com/hipaa-fines-directory-year/Tennessee Diagnostic Medical Imaging Service: https://www.hhs.gov/hipaa/for-professionals/compliance-enforcement/agreements/tmi/index.htmlLifespan Health: https://www.hhs.gov/about/news/2020/07/27/lifespan-pays-1040000-ocr-settle-unencrypted-stolen-laptop-breach.html

Ep. 15 - Cyber Security Governance and Compliance

Detailed talk around cyber security and privacy.  I provide examples around IOT devices such as RING and Echo as well as GPS, social media and other areas involving privacy today.  I give real world stories involving court cases and tales where people had and /or could have their privacy violated by others using certain technologies.  I provide corporate examples as to how privacy impacts cyber security and information technology professionals.  I spin in personal examples as to how privacy situations impacted me in three different instances throughout my careers showing this is not "pie in the sky."References:https://www.forbes.com/sites/tjmccue/2019/04/19/alexa-is-listening-all-the-time-heres-how-to-stop-it/#546fe9145e2dhttps://techcrunch.com/2018/11/14/amazon-echo-recordings-judge-murder-case/#:~:text=A%20New%20Hampshire%20judge%20has,further%20clues%20to%20their%20killer.https://www.scotusblog.com/case-files/cases/carpenter-v-united-states-2/https://encyclopedia.ushmm.org/content/en/article/martin-niemoeller-first-they-came-for-the-socialistshttps://securityintelligence.com/think-youve-got-nothing-to-hide-think-again-why-data-privacy-affects-us-all/

Ep. 14 - Cyber Security and Privacy

Discussion around a handful of key cyber security trends including IOT/IOMT, AI/ML, Mobile, Social Engineering and Threat Hunting.  Back to the roots of Cyber Security Grey Beard, I take 13 minutes to help students, early professionals and job changers understand a handful of areas requiring knowledge and skill based on today's trends.  I provide examples of IOT/IOMT and how they impact lives and why it affects cyber security professionals.  I do the same for the other areas with a detailed wrap up on an up and coming cyber security professional, the Threat Hunter, what they do and why they are important.Thank you Anita A. from Canada for the topic idea.Reference:https://www.congress.gov/congressional-report/116th-congress/senate-report/112/1https://www.forbes.com/sites/leemathews/2017/07/27/criminals-hacked-a-fish-tank-to-steal-data-from-a-casino/#7c2640432b96Correction: The fish tank breach did lead to data loss.

Ep. 13 - Cyber Security Trends

With the dreariness of the world today between COVID-19, riots, lock downs, and increased crime in certain areas, I thought it would be nice to have a positive pep talk for my listeners.  Herein I discuss focusing on a North Star and driving to success.  Take responsibility for yourself, don't blame others.  Understand that everyone falls down and that's okay, it's about how we get up that matters.Note that my comment on Copyright should've been Trademark.Note that my comment at the end about another "article" refers to another episode.Email me at Cybergreybeard@gmail.com with episode ideas and/or questions.

Ep.12 - Pep Talk

Many people want it all right now.  Life is a journey, both personally and professionally.  This 10-minute podcast discusses that it's okay to be where you are and finding happiness along the journey should take precedence over everything else.  Plan, prepare, progress, patience, these factors enable success and happiness throughout the journey.  Understand you are not alone, you're in a good place and it's normal to take time between promotions, jobs and raises.

Ep. - 10 Life is a Journey

A replay of the presentation I delivered on October 29,2019, at the Swissotel in Chicago, IL for the IIA/ISACA 6th Annual Cyber Security and Hacking Conference.  The topic covers a handful of well-known hacks, how they happened and what could've and should've been done to prevent them.  I continue talking about people, processes and technologies that organizations should employ and deploy to protect themselves.  I conclude the session talking about potential solutions and risk remediation including executive sponsorship, governance, risk and compliance, security awareness training and others.  If you'd like a copy of the slides used in this presentation, please send an email to cybergreybeard@gmail.com and I'll provide them.

Proactive Defense in Lieu of a Panicked Response

I'm a Cyber Security Grey Beard helping students, early professionals and seasoned cyber security specialists with career advice as well as job hunting assistance and ways to advance a career. I have over 25 years' information technology experience including over 20 years' in cyber security specifically. I've worked in numerous industries including entertainment, defense, aerospace, telecommunications, technology, and healthcare. I've worked with and for some of the largest companies in the world with a deep focus on healthcare and financial services. I created this podcast to share my experience and help others advance their careers and enjoy professional happiness based on my successes and failures.

hubhopper

Ep. - 11 Layoffs and the Job Hunt

hubhopper