View source for PSWEpisode642

From Security Weekly Wiki

← PSWEpisode642

You do not have permission to edit this page, for the following reason:

---

You can view and copy the source of this page.

<!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> = Paul's Security Weekly Episode 642 - 2020-03-05 = ==Episode Audio== <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> <p>[https://securityweekly.com Paul's Security Weekly Episode 642]</p> == Announcements == <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> <p> <ul style="margin-left: 50px;"> <li>Is your Open Source code secure? Learn how to verify your code during development, not after the build in our next webcast with Synopsys. Register for our upcoming webcasts or virtual trainings by visiting securityweekly.com/webcasts. You can also access our on-demand library of previously recorded webcasts/trainings by visiting securityweekly.com/ondemand. Each webcast will earn you 1 CPE credit that we will submit on your behalf if you provide your ISC2 number.</li> <li>Join us at InfoSecWorld 2020 - June 22nd-24th at the Disney Contemporary Resort! Security Weekly listeners save 15% off the InfoSec World Main Conference or World Pass! Visit securityweekly.com/ISW2020, click the register button to register with our discount code or the schedule button to sponsor a micro-interview!</li> <li>OSHEAN and the Pell Center are partnering together to present Cybersecurity Exchange Day on Wednesday, March 18th from 9am-3pm at Salve Regina University in the beautiful Newport, RI! Visit securityweekly.com/OSHEAN2020 to register for free and come join in the fun!</li> </ul> </p> = Interview: Active Directory, Azure and Windows Security - 6:00-6:45PM = <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="10" |<center>{{#ev:youtube|eViUg_WH_5w }}</center> |- |<p>'''Description:'''<br><br> Active Directory & Microsoft Cloud (Azure AD & Office 365) Security, including a breakdown of Microsoft's security offerings and recommendations for cloud migrations for Active Directory.</p> |} {|style="width: 100%;margin: auto; " cellpadding="5" |'''Guest:''' |'''Bio:''' |- |[[Image:SeanMetcalf-0.jpg|200px|thumb|<center>'''[https://twitter.com/@PyroTek3 Sean Metcalf]''' is Founder & CTO at Trimarc</center>]] |Sean Metcalf is founder and CTO at Trimarc (www.TrimarcSecurity.com), a professional services company which focuses on improving enterprise security. He is one of about 100 people in the world who holds the Microsoft Certified Master Directory Services (MCM) certification, is a Microsoft MVP, and has presented on Active Directory & Microsoft Cloud attack and defense at security conferences such as Black Hat, BSides, DEF CON, and DerbyCon. He currently provides security consulting services to customers and posts interesting Active Directory security information on his blog, ADSecurity.org. |- |} ==Hosts== <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="1" |[[Image:Jeff_Man_2-0.jpg|100px|thumb|<center>[https://twitter.com/@MrJeffMan Jeff Man] - Sr. InfoSec Consultant at Online Business Systems</center>]] |[[Image:Joff_Thyer-0.jpg|100px|thumb|<center>[https://twitter.com/@joff_thyer Joff Thyer] - Security Analyst at Black Hills Information Security</center>]] |[[Image:larry_headshot-0.jpg|100px|thumb|<center>[https://twitter.com/@haxorthematrix Larry Pesce] - Senior Managing Consultant and Director of Research at InGuardians</center>]] |[[Image:Lee_Neely-0.jpg|100px|thumb|<center>[https://twitter.com/@lelandneely Lee Neely] - Senior Cyber Analyst at Lawrence Livermore National Laboratory</center>]] |} = Fullaudio - None = <!-- ************************* MAKE CHANGES IN THE TEMPLATES BELOW! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="10" |- |<p>'''Description:'''<br><br> This week, we welcome back Sean Metcalf, Founder and CTO at Trimarc, to discuss Azure AD & Office 365 Security, including a breakdown of Microsoft's security offerings and recommendations for cloud migrations for Active Directory! In the second segment, we welcome Mark Cooper, President and Founder of PKI Solutions, to talk about how SHAKEN/STIR and PKI will end the global robocall problem! In the Security News, Shark Tank Star Corcoran Loses $400K in Email Scam, Backdoor malware is being spread through fake security certificate alerts, Venezuela Power outage knocked out part of the internet connectivity, Experts warn of mass scans for Apache Tomcat Ghostcat flaw, 4 essential things security experts do to protect their own data, and more! Link to an article Mark wrote for Dark Reading: https://www.darkreading.com/endpoint/shaken-stir-finally!-a-solution-to-caller-id-spoofing/a/d-id/1336285 Link to landing page with more info: https://www.pkisolutions.com/shakenstir/ Visit https:</p> |} ==[https://twitter.com/@MrJeffMan Jeff Man]'s Content: == [[Image:Jeff_Man_2-0.jpg|50px|thumb|left]] <br> {{Template:PSW642FullaudioJeff Man}} ==[https://twitter.com/@joff_thyer Joff Thyer]'s Content: == [[Image:Joff_Thyer-0.jpg|50px|thumb|left]] <br> {{Template:PSW642FullaudioJoff Thyer}} ==[https://twitter.com/@haxorthematrix Larry Pesce]'s Content: == [[Image:larry_headshot-0.jpg|50px|thumb|left]] <br> {{Template:PSW642FullaudioLarry Pesce}} ==[https://twitter.com/@lelandneely Lee Neely]'s Content: == [[Image:Lee_Neely-0.jpg|50px|thumb|left]] <br> {{Template:PSW642FullaudioLee Neely}} ==[https://twitter.com/@securityweekly Paul Asadoorian]'s Content: == [[Image:Paul_Asadoorian-0.png|50px|thumb|left]] <br> {{Template:PSW642FullaudioPaul Asadoorian}} = Interview: Mark Cooper, PKI Solutions - 6:00-6:45PM = <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="10" |<center>{{#ev:youtube|N3C-a3rtuAA }}</center> |- |<p>'''Description:'''<br><br> How SHAKEN/STIR and PKI will end the global robocall problem Link to an article Mark wrote for Dark Reading: https://www.darkreading.com/endpoint/shaken-stir-finally!-a-solution-to-caller-id-spoofing/a/d-id/1336285 Link to landing page with more info: https://www.pkisolutions.com/shakenstir/</p> |} {|style="width: 100%;margin: auto; " cellpadding="5" |'''Guest:''' |'''Bio:''' |- |[[Image:MarkCooper-0.jpg|200px|thumb|<center>'''[https://twitter.com/@thepkiguy Mark Cooper]''' is President and Founder at PKI Solutions</center>]] |Mark B. Cooper, president and founder of PKI Solutions, is known as “The PKI Guy” since his early days at Microsoft. He has deep knowledge and experience in all things Public Key Infrastructure (PKI.) PKI Solutions Inc. provides consulting, training - including online training - and implements software solutions for Microsoft PKI and related technologies at enterprises, many of them Fortune 500 companies. PKI Solutions has led hundreds of PKI trainings, including private trainings, across the country and around the world. Cooper is an avid proponent of the SHAKEN/STIR global standard to end robocalls, that uses authentication and PKI to verify callers' identities. Prior to founding PKI Solutions, Cooper was a senior engineer at Microsoft, where he was a PKI and identity management subject matter expert who designed, implemented, and supported Active Directory Certificate Services (ADCS) environments for Microsoft's largest customers. |- |} ==Hosts== <!-- ************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="1" |[[Image:Jeff_Man_2-0.jpg|100px|thumb|<center>[https://twitter.com/@MrJeffMan Jeff Man] - Sr. InfoSec Consultant at Online Business Systems</center>]] |[[Image:Joff_Thyer-0.jpg|100px|thumb|<center>[https://twitter.com/@joff_thyer Joff Thyer] - Security Analyst at Black Hills Information Security</center>]] |[[Image:larry_headshot-0.jpg|100px|thumb|<center>[https://twitter.com/@haxorthematrix Larry Pesce] - Senior Managing Consultant and Director of Research at InGuardians</center>]] |[[Image:Lee_Neely-0.jpg|100px|thumb|<center>[https://twitter.com/@lelandneely Lee Neely] - Senior Cyber Analyst at Lawrence Livermore National Laboratory</center>]] |[[Image:Paul_Asadoorian-0.png|100px|thumb|<center>[https://twitter.com/@securityweekly Paul Asadoorian] - Founder & CTO at Security Weekly</center>]] |} = News - Tomcat, AWS Malware, Hacker Movies = <!-- ************************* MAKE CHANGES IN THE TEMPLATES BELOW! *************************** --> {|style="width: 100%;margin: auto; " cellpadding="10" |<center>{{#ev:youtube|-RfBpscesOQ }}</center> |- |<p>'''Description:'''<br><br> Apache Tomcat AJP exploit, malware in AWS, hacker movies and more!</p> |- |<p>'''Content:'''<br><br> Why Doesn't Software Get Sold With a List of Ingredients? Allan Friedman talks about the ‘Software Bill of Materials’ Time for cybersecurity to take back control of its story What do yours truly and Sulu have in common? THIS!Black Market White Washing: Why You Shouldn't Take Legal Advice From Criminals Backdoor malware is being spread through fake security certificate alerts Shark Tank TV star loses almost $400,000 in Business Email... Venezuela Power outage knocked out part of the internet connectivity Researchers use ultrasound waves vibrating through tables to access cellphones Apache Tomcat - AJP 'Ghostcat File Read/Inclusion WiFi Kr00K and plaintext traffic - and more Exploiting WiFi OWE</p> |} ==[https://twitter.com/@MrJeffMan Jeff Man]'s Content: == [[Image:Jeff_Man_2-0.jpg|50px|thumb|left]] <br> {{Template:PSW642NewsJeff Man}} ==[https://twitter.com/@joff_thyer Joff Thyer]'s Content: == [[Image:Joff_Thyer-0.jpg|50px|thumb|left]] <br> {{Template:PSW642NewsJoff Thyer}} ==[https://twitter.com/@haxorthematrix Larry Pesce]'s Content: == [[Image:larry_headshot-0.jpg|50px|thumb|left]] <br> {{Template:PSW642NewsLarry Pesce}} ==[https://twitter.com/@lelandneely Lee Neely]'s Content: == [[Image:Lee_Neely-0.jpg|50px|thumb|left]] <br> {{Template:PSW642NewsLee Neely}} ==[https://twitter.com/@securityweekly Paul Asadoorian]'s Content: == [[Image:Paul_Asadoorian-0.png|50px|thumb|left]] <br> {{Template:PSW642NewsPaul Asadoorian}}

Return to PSWEpisode642.