Easy Prey15 Marras 2023

Preventing and Reporting Cyber Attacks with Robert Karas

Cyber criminals are growing in their attack planning. CISA is continuing training their teams to look for vulnerabilities and help out not only the government, but other entities secure their networks and products. Today's guest is Robert Karas. Rob came to the Cybersecurity and Infrastructure Security Agency in 2010. He has over 30 years experience in the information security field and significant experience in building nationally recognized security platforms. At CISA, Rob built the Cyber Hygiene Program, risk and vulnerability assessments, and penetration testing programs. He has also created the Cyber Defense Education training programs to address industry challenges. Rob was also recognized by Cyber Patriot as Mentor of the Year.

Show Notes:

[1:03] - Robert shares his background, what he does at CISA, and what CISA does as an agency.
[4:01] - At CISA, agents hack into a company's system with their permission to see where the vulnerabilities are.
[5:53] - Phishing and social engineering continue to be the most successful attacks.
[8:41] - A lot of times it feels like good security equals bad customer service.
[10:27] - Playbooks are all the same or similar but the tools that CISA uses are unique.
[12:29] - With the introduction and evolution of AI, there is some preparation to be done for an inevitable increase in attacks.
[14:07] - Attackers prey on human vulnerability and emotion.
[15:53] - Phishing emails are so good now that many times they really appear to come from someone you know.
[17:15] - Over the last ten years, the statistics of people reporting a scam have improved.
[20:16] - It is important for organizations to be prepared. For help with this, you can email Central@cisa.dhs.gov.
[23:39] - CISA has implemented Secure by Design.
[25:30] - If you suspect you are communicating with a scammer, stop communicating right away.
[27:02] - It is overwhelming when you think about the amount of devices we have that are connected and relied on.
[30:16] - The amount of data we have and can have access to is so immense. How can we inspect everything?
[32:09] - When it comes to purchasing new devices, ensure that frequent updates are part of the guarantee.
[34:41] - A great place to start for resources on CISA's website. Robert shares some of the resources available, including Secure Our World.
[35:54] - CISA also offers free vulnerability scans for businesses.

Thanks for joining us on Easy Prey. Be sure to subscribe to our podcast on iTunes and leave a nice review.

Links and Resources:

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(342)

Hidden Phone Tracking

Your phone gives off a surprising amount of information just by being connected to a cellular network. Things like your location, who you communicate with, and your daily patterns can all become part ...

23 Syys 45min

Ransomware Evolution

Ransomware has changed dramatically over the years. What started as criminals locking up individual computers and demanding relatively small payments has grown into a much larger operation involving s...

16 Syys 40min

The Counterfeit Economy

A counterfeit handbag may leave someone disappointed. A counterfeit medication, airbag, or child's car seat can do far more damage. Fake products now reach into nearly every part of daily life, and ma...

9 Syys 43min

The Internet is Playing You

A convincing lie no longer needs to look suspicious. It can appear in a familiar social media feed, come from someone who seems real, or arrive as a video that looks almost impossible to fake. By the ...

2 Syys 44min

The Psychology of Yes

It is easy to say you would never fall for a scam when you are looking at the situation from the outside. In the moment, though, things can feel much less obvious. A request may sound reasonable, the ...

26 Elo 49min

Drink Spiking

A drink can be out of your sight for only a moment, but that may be all it takes for someone to tamper with it. Spiking can happen in bars, restaurants, festivals, and even among people who already kn...

19 Elo 35min

Love, Lies and Locked Up

What sounds like the plot of a crime thriller was Sharon Armstrong's real life. An online romance drew her into an elaborate web of lies involving overseas contracts, invented emergencies, and several...

12 Elo 52min

The Recruitment Trap

Everybody is searching for ways to increase income. Unfortunately, MLMs often look like an easy way to start a business without taking on the cost of a traditional company. The pitch sounds simple. Bu...

5 Elo 51min