View source for Psw674


<!--  
************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! ***************************
-->
= Paul's Security Weekly Episode #674 - November 12, 2020 =

Subscribe to all of our shows and mailing list by visiting: https://securityweekly.com/subscribe

<!--  
************************* DO NOT EDIT THIS SECTION. THIS IS AUTO-GENERATED BY PPWORKS. YOUR CHANGES WILL BE LOST! ***************************
-->
= 1. Disrupt Attacks at the Endpoint with Attivo Networks - 06:00 PM-06:45 PM  =
<!--  
************************* MAKE CHANGES IN THE TEMPLATES BELOW! ***************************
-->

<center>{{#ev:youtube|zC6r3iGcXns }}</center>


=== Sponsored By ===
<gallery mode="packed" widths=150px heights=150px>
Image:Attivo_CorpR-CMYK-1.jpg
</gallery>
<center><strong>Visit https://securityweekly.com/attivonetworks for more information!</strong></center>


=== Announcements ===
<ul style="margin-left: 50px;">

<li>	<p>Security Weekly, in partnership with CyberRisk Alliance, is excited to present Security Weekly Unlocked on December 10, 2020. This 1 day virtual event wraps up with the 15th anniversary edition of Paul&#8217;s Security Weekly live on Youtube! Visit https://securityweekly.com/unlocked to view the agenda and register for free!</p></li>

</ul>

=== Description ===

Attackers have repeatedly demonstrated that they can evade perimeter defenses to compromise a system inside the network. Once they get in, they must break out from that beachhead, conduct discovery, credential theft, lateral movement, privilege escalation, and data collection activities. Suppose they go looking for locally stored files or network shares and instead see nothing of value? What if they query Active Directory and don’t get real credentials in the responses? What if they look for ports or services to attack, and instead, their connections get redirected to systems with no value? If they can’t see and access data or accounts that move them forward, they can’t attack anything of value. Learn how deception and concealment technology can deny, detect, and disrupt attackers when they first enter the network.

This segment is sponsored by Attivo Networks.

Visit https://securityweekly.com/attivo to learn more about them!


Calculating ROI for Attivo Deception and Concealment Technology: https://attivonetworks.com/documentation/Attivo_Networks-Calculating_ROI_for_Deception_Concelament.pdf

Using a Commercial Deception Solution to Improve MITRE ATT&CK Test Results for Endpoint Security: https://go.attivonetworks.com/Improving-MITRE-test-results-endpoint-security.html

Attivo Networks MITRE Shield Mapping: https://go.attivonetworks.com/WC-MITRE-Shield-Mapping-whitepaper.html



==Guest(s)==


===Joseph Salazar===
<gallery mode="nolines" widths=175px heights=175px>

Image:JosephSalazar-0.jpg|'''Joseph Salazar''' is Technical Deception Engineer at Attivo Networks<br>

</gallery>
Joseph Salazar is a veteran Information Security professional with over 20 years of both military and civilian experience. He is a retired Major from the US Army Reserves, having served 22 years as a Counterintelligence Agent, Military Intelligence Officer, and Cyber-Security Officer. He's been a Systems and Security Administrator, a CSIRT Analyst, a Security Operations Manager, and a Computer Forensic Investigator in his civilian career. He maintains the CISSP, CEH, and EnCE certifications, holds a BA in Legal Studies from UC Berkeley, and currently works for Attivo Networks as a Technical Deception Engineer.<br>


==Hosts==

<gallery mode="nolines" widths=175px heights=175px>

Image:Jeff_Man_2-0.jpg|<center>[https://twitter.com/@MrJeffMan Jeff Man]  - Sr. InfoSec Consultant at Online Business Systems</center>

Image:larry_headshot-0.jpg|<center>[https://twitter.com/@haxorthematrix Larry Pesce]  - Senior Managing Consultant and Director of Research at InGuardians</center>

Image:Lee_Neely-0.jpg|<center>[https://twitter.com/@lelandneely Lee Neely]  - Senior Cyber Analyst  at Lawrence Livermore National Laboratory</center>

Image:Paul_Asadoorian-0.png|<center>[https://twitter.com/@securityweekly Paul Asadoorian]  - Founder & CTO at Security Weekly</center>

Image:Tyler_Robinson-0.png|<center>[https://twitter.com/@tyler_robinson Tyler Robinson]  - Managing Director of Network Operations at Nisos, Inc</center>

</gallery>

= 2. Challenges With Securing Container Environments - 07:00 PM-07:45 PM  =
<!--  
************************* MAKE CHANGES IN THE TEMPLATES BELOW! ***************************
-->

<center>{{#ev:youtube|DZG_cUpUFe8 }}</center>


=== Sponsored By ===
<gallery mode="packed" widths=150px heights=150px>
Image:1920x1080-VMDR_2nd_test-0.png
</gallery>
<center><strong>Visit https://securityweekly.com/qualys for more information!</strong></center>


=== Announcements ===
<ul style="margin-left: 50px;">

<li>	<p>Join Amit Bareket, Co-founder &amp; <span class="caps">CEO</span> of Perimeter 81 &amp; Paul Asadoorian for a technical deep-dive into the problems inherent in legacy <span class="caps">VPN</span> technology. Together they will explore solutions for the modern workforce &amp; how momentum toward perimeter-less architecture is helping redefine the future of cybersecurity. Register Now by visiting https://securityweekly.com/perimeter81</p></li>

</ul>

=== Description ===

Sumedh and Badri discuss challenges associated with container Security & DevOps need for visibility into containers. Qualys' new approach to runtime security.

This segment is sponsored by Qualys.

Visit https://securityweekly.com/qualys to learn more about them!


Container Runtime Security Press Release: https://www.qualys.com/company/newsroom/news-releases/usa/qualys-adds-runtime-defense-capabilities-to-its-container-security-solution/

Container Runtime Security Technical Blog: https://blog.qualys.com/product-tech/2020/11/03/built-in-runtime-security-for-containers

Container Security webpage: https://www.qualys.com/apps/container-security/

Qualys Security Conference. https://www.qualys.com/qsc/2020/virtual/



==Guest(s)==


===Badri Raghunathan===
<gallery mode="nolines" widths=175px heights=175px>

Image:BadriRaghunathan-0.jpg|'''Badri Raghunathan''' is Director of Product Management at Qualys<br>

</gallery>
Badri Raghunathan is a director of product management at Qualys, responsible for spearheading Qualys’ product initiatives around cloud-native infrastructure (containers, serverless). A technology entrepreneur at heart, Badri thrives on understanding customer problems, building differentiated products, and taking them to market. Badri has worked in product and engineering management roles in a variety of industries, including security, networking and consumer electronics. Most recently, Badri was a founder at an early stage cloud DevSecOps startup, and prior to that, he led cloud-based security and networking products at companies like Symantec and Cisco. Badri holds 9 U.S. patents and has several more applications in the pipeline. He holds an MBA from the University of California Berkeley, and M.S. and B.S. degrees in electrical engineering from Oklahoma State University and the University of Madras respectively.<br>

===Sumedh Thakar===
<gallery mode="nolines" widths=175px heights=175px>

Image:Medium-Sumedh-Thakar-0.png|'''[https://twitter.com/@ssthakar Sumedh Thakar]''' is President and Chief Product Officer at Qualys<br>

</gallery>
As Chief Product Officer at Qualys, Sumedh oversees worldwide engineering, development and product management for the Qualys software-as-a-service (SaaS) platform and integrated suite of security and compliance applications. A core systems and database engineer, Sumedh started at Qualys in 2003, architecting and delivering Qualys' PCI compliance platform to meet the Payment Card Industry (PCI) Data Security Standard (DSS) requirements. Today, more than 69 percent of ASVs and 50 percent of QSAs worldwide use Qualys PCI to perform PCI DSS certification.<br>


==Hosts==

<gallery mode="nolines" widths=175px heights=175px>

Image:Jeff_Man_2-0.jpg|<center>[https://twitter.com/@MrJeffMan Jeff Man]  - Sr. InfoSec Consultant at Online Business Systems</center>

Image:larry_headshot-0.jpg|<center>[https://twitter.com/@haxorthematrix Larry Pesce]  - Senior Managing Consultant and Director of Research at InGuardians</center>

Image:Lee_Neely-0.jpg|<center>[https://twitter.com/@lelandneely Lee Neely]  - Senior Cyber Analyst  at Lawrence Livermore National Laboratory</center>

Image:Paul_Asadoorian-0.png|<center>[https://twitter.com/@securityweekly Paul Asadoorian]  - Founder & CTO at Security Weekly</center>

Image:Tyler_Robinson-0.png|<center>[https://twitter.com/@tyler_robinson Tyler Robinson]  - Managing Director of Network Operations at Nisos, Inc</center>

</gallery>

= 3. Cobalt Strike Leak, DNS Cache Poisoning, & Decrypting Open SSH - 08:00 PM-09:30 PM  =
<!--  
************************* MAKE CHANGES IN THE TEMPLATES BELOW! ***************************
-->

<center>{{#ev:youtube|-PUnQdr90OI }}</center>



=== Announcements ===
<ul style="margin-left: 50px;">

<li>	<p>Would you like to have all of your favorite Security Weekly content at your fingertips? Do you want to hear from Sam &amp; Andrea when we have upcoming webcasts &amp; technical trainings? Have a question for one of our illustrious hosts, someone from the Security Weekly team, or wish you could &#8220;hang&#8221; out with the Security Weekly crew &amp; community? Subscribe on your favorite podcast catcher, sign up for our mailing list, and join our Discord Server to stay in the loop on all things Security Weekly! Visit: https://securityweekly.com/subscribe</p></li>

<li>	<p>In our upcoming webcasts &amp; technical trainings, you will learn how to thwart attackers using deception &amp; how to build a risk-based vulnerability management program! Visit https://securityweekly.com/webcasts to see what we have coming up, or visit securityweekly.com/ondemand to view our previously recorded webcasts!</p></li>

</ul>

=== Description ===

In the Security News, not all cyberattacks are created equal, Google patches two more Chrome zero days, What does threat intelligence really mean, Cobalt Strike leaked source code, DNS cache poisoning is back, and Zebras & Dots!



==Hosts==


==[https://twitter.com/@MrJeffMan Jeff Man]'s Content: ==
<gallery mode="nolines" widths=150px heights=150px>
Image:Jeff_Man_2-0.jpg
</gallery>
{{Template:PSW674NewsJeffMan}}

==[https://twitter.com/@haxorthematrix Larry Pesce]'s Content: ==
<gallery mode="nolines" widths=150px heights=150px>
Image:larry_headshot-0.jpg
</gallery>
{{Template:PSW674NewsLarryPesce}}

==[https://twitter.com/@lelandneely Lee Neely]'s Content: ==
<gallery mode="nolines" widths=150px heights=150px>
Image:Lee_Neely-0.jpg
</gallery>
{{Template:PSW674NewsLeeNeely}}

==[https://twitter.com/@securityweekly Paul Asadoorian]'s Content: ==
<gallery mode="nolines" widths=150px heights=150px>
Image:Paul_Asadoorian-0.png
</gallery>
{{Template:PSW674NewsPaulAsadoorian}}

==[https://twitter.com/@tyler_robinson Tyler Robinson]'s Content: ==
<gallery mode="nolines" widths=150px heights=150px>
Image:Tyler_Robinson-0.png
</gallery>
{{Template:PSW674NewsTylerRobinson}}