Episode 74 - Let's Talk Advanced Email Security

11/30/22 • 45 min

In this episode I have a 1 on 1 conversation with the one and only Brian 'Schneebs' Schneble about Advanced Email Security. Brian is a Senior Enterprise Account Executive for Abnormal Security. Brian is not only an active member of the Michigan cybersecurity community but he has extensive knowledge of the automotive industry.

Talking Points:

In a break from the traditional talking points, for this episode we break down a real world use case where a company was hit by a very creative 'double whammy'. Both a compromised email account and a look-a-like domain were used in this attack.

Brian and I walk through what happened, how it could happen and how you can do things to avoid this in your company.

Compromised Email Accounts
How Malicious Actors 'Learn' Your Workflows
Look Alike Domains
Defensive Domains
DMARC

This was a highly informative episode and don't mind the state of security talk about the beginning. Listen/View the whole episode, as it will definitely be worth spending your time on!

Podcast Sponsor:

This episode is sponsored by Abnormal Security. Abnormal Security is an Email Security Solutions provider that is known for using Machine Learning to detect non-traditional email attacks. Parts of the proceeds from this sponsorship will be going towards a 2023 InfoSec scholarship at my alma matter Grand Rapids Community College.

Talking Points:

Brian and I walk through what happened, how it could happen and how you can do things to avoid this in your company.

Compromised Email Accounts
How Malicious Actors 'Learn' Your Workflows
Look Alike Domains
Defensive Domains
DMARC

This was a highly informative episode and don't mind the state of security talk about the beginning. Listen/View the whole episode, as it will definitely be worth spending your time on!

Podcast Sponsor:

Previous Episode

Episode 73 - Thinking Differently About Privacy

In this episode I sit down with Paul McManus about all things Privacy. Paul is a Senior Information Governance Analyst for Corewell Health Corporate. I have had the distinct pleasure of working with Paul on several different privacy related engagements over the years.

Talking Points:

What are some of the challenge you are seeing in privacy space right now?
- Integration
- Who watches the watcher?
As more and more things are outsourced, how do you this with digital assets?
Do people realize that data that may not be considered 'confidential' now may considered something different in a year or two?
How are privacy laws changing?
How is the GDPR different than the US laws?
Are what point do we 'globalized' healthcare privacy
- Ownership vs Rights
What are re-selling of de-identified data?
What about privacy with wearables and driving trackers?

We even had the pleasure of having a quick appearance from a special 'In-House' guest that knows a thing or two about Research Privacy, resident System Architect, Heather Bregg.

Next Episode

Episode 75 - Where are My Logs at? Rethinking Loggin in 2023

In this the 3rd annual holiday fundraiser podcast episode, I talk with Kam Amir and Brenden Morgenthaler about what enterprise logging will look like in 2023. Kam is the Director of Technical Alliances for Cribl. Brenden is an Enterprise Architect for CDW.

Talking Points:

Kam has developed a formula for getting the most value from your setup using the three 'Vs':