In this episode...

• "Hackers remotely kill a Jeep!"
  • Lots to talk about
  • Basics of segmentation weren't followed, aren't followed
  • Discussion on software 'fitness' and liability
  • http://www.cato.org/blog/hackers-remotely-kill-jeep
• Firefox blocks Flash and FaceBook calls for its death
  • Should it concern you that FireFox can change your config without your permission or an update?
  • How helpful is this? Does the message/pop-up actually DO anything to stop users from clicking YES?
  • http://money.cnn.com/2015/07/14/technology/flash-firefox-facebook/index.html
• Ashley Madison (the cheating website) breached!
  • Check their privacy policy - is it consistent with actions?
  • Did this event delay or possibly end the company's aspirations of going public?
  • The morality of AM's business model shouldn't be an issue here - but it keeps coming up
  • http://www.csmonitor.com/World/Passcode/2015/0722/Ashley-Madison-breach-a-painful-reminder-of-online-data-s-permanence
• British Gas bows to criticism over blocking password managers
  • http://www.scmagazineuk.com/british-gas-bows-to-criticism-over-blocking-password-managers/article/426463/
• US Court says "pocket dialed" called are NOT private
  • http://www.itworld.com/article/2951715/security/us-court-says-pocketdialed-calls-are-not-private.html

In this episode

• Talent shortage - is it real, and how bad is it?
• We discuss: what does negative unemployment actually mean?
• Michael asks- ecurity is still relatively new, how do we determined what “qualified” means?
• What skills are necessary to be a good security professional?
• Hiring - we discuss how we get better at screening potentially qualified employees
• We discuss how we can vet out real experience, versus resume skills
• Mark and Michael discuss specialization, automation, and optimizing our workforce
• Mark shares his thoughts on growing and retaining top talent

Guest

• Mark Orlando ( @MarkAOrlando )  - As the Director of Cyber Operations, Mark is responsible for Foreground’s Federal practice as well as the Virtual Security Operations Center (V-SOC) managed service. He leads a national team of analysts, engineers, incident responders, and managers who secure some of the most high profile networks in the Federal, financial, commercial, and power and utilities industries. As the senior operations subject matter expert, he is also responsible for security services strategy and advises on strategic Foreground initiatives such as threat intelligence analysis, custom analytics development. Mark is also a key advisor to the company’s award-winning educational unit, Foreground University. Prior to joining Foreground Security, Mark advanced through the technical ranks as a Security Analyst and Technical Lead in a variety of operations environments. In his 13+ years of experience, he has built and led security operations teams at the White House, the Department of Energy, the Pentagon, and numerous commercial organizations. He has also managed the operations division of a major Managed Security Service Provider supporting hundreds of private and public sector clients. Mark enjoys teaching and learning from others. He has presented on security operations and assessment at the Institute for Applied Network Security Forum and RSA Conference. Mark has earned the CISSP, PMP, CEH, ITIL, and multiple SANS GIAC certifications and holds a B.S. In Advanced Information Technology from George Mason University. Mark served in the US Marine Corp where he was a Marine Artillery NCO.
  
  Foreground Security (http://foregroundsecurity.com/)

In this episode...

• Peter Morin joins us to talk through the upcoming HTCIA International 2015 Conference in sunny Orlando, Florida.
• We talk through a preview of talks, events, and some interesting reasons you should be going to HTCIA Int'l
• Check out the incredible lineup of keynotes, speakers and talks - http://www.htciaconference.org/
• Come see the #DtSR crew live and in person as we record and broadcast from the conference

In this episode...

• Appears as though Windows 10 WiFi Sense could have some issues with WiFi -- more on this as it develops
  • Why is the default opt-in, and why in the world do I have to change my SSID to opt out?!
  • Is it really a good idea to use an SSID to describe security constraints on your network? (Hint: NO)
  • http://www.computing.co.uk/ctg/news/2415787/windows-10-wi-fi-sense-security-warning-over-automatically-shared-passwords
• "Washington Post will encrypt the news"
  • Ridiculous click-bait headline
  • Is this a good idea? Should everything be HTTPS?
  • What about ads, are we defeating ourselves?
  • https://hacked.com/washington-post-encrypt-news/
• OPM hackers stole 21.5 million people worth of records
  • That's all government employees, past, present, and under-cover (possibly)
  • 1.1 million biometrics (fingerprints) -- quick! go reset your fingerprints... oh wait
  • Bad --> worse --> catastrophic --> now what?
  • http://www.computerworld.com/article/2946031/cybercrime-hacking/opm-hackers-stole-data-on-215m-people-including-11m-fingerprints.html
• Katherine Archuletta, Director of OPM, resigns
  • Shock. Awe. Not.
  • Did everyone else see this one coming?
  • Does this change anything? Does her departure make anything better or is she the sacrificial lamb, the way Washington operates?
  • http://www.nytimes.com/2015/07/11/us/katherine-archuleta-director-of-office-of-personnel-management-resigns.html

In this episode

• We take a little peek inside the mind of a CEO, from the security perspective
• We discuss the state of information security in the last decade
• Dan shares his wisdom on how the role of a security professional and security leadership has changed over the course of his career
• We discuss about the talent shortage - and get an in-depth look at solving some of this problem
• Dan shares with us his views on balancing people, processes and technology resources to achieve meaningful security
• We talk strategy, and Dan and the guys talk through why it's so vital
• We get Dan's "closing remark" (something you won't want to miss)

Guest

• Dan Burns, CEO Optiv, Inc. -  Dan Burns brings more than 23 years of business, technology and security industry experience to his role as chief executive officer. In this role he is responsible for the development and implementation of high-level strategies and direction of the company’s growth. Being able to provide clear insight into navigating the complex information security landscape is a priority for Burns. His philosophy is to focus on building long-term relationships with clients, working with them to simplify their lives and becoming a trusted information security partner rather than a reseller or outside consultant.
  From 2002 when he co-founded Accuvant, until 2012 when he assumed his position as the company’s first CEO, Burns served as senior vice president of Accuvant’s sales organization. In that role, he was responsible for strategic planning, sales growth and problem resolution. Burns co-developed and helped to successfully execute on Accuvant’s initial vision – to build a company with the breadth, depth and capabilities to address the information security needs of organizations worldwide. He launched the sales force and grew it to a national powerhouse organization within a 10-year period, conducting business with nearly half of the Fortune 500, and driving $740M in revenue in 2014.
  Prior to his achievements with Accuvant, Burns was the regional vice president of sales for the western region of OneSecure. He played an integral role in transitioning the organization from a managed security services (MSS) provider to a product company, delivering to the marketplace the first intrusion prevention system (IPS) and generating $40M in product sales in the first year.
  Previously, as the western region vice president for Exault, an integrator, consulting organization and reseller, Burns secured some of the largest enterprise clients in the Rocky Mountain region and helped grow revenues to nearly $150M in two years. He also held positions at Access Graphics, Arrowpoint, and Netrex where he supported some of the largest telecommunication companies in building their information security programs, implementing technology and taking advantage of Netrex’s world-class MSS.
  Burns earned a bachelor’s degree in economics from San Jose State University