Treceți offline cu aplicația Player FM !
Uber and LastPass Breaches + Self-Protection
Manage episode 354669422 series 3392091
**DISCLAIMER: All of our opinions are our own. They do not represent, nor are they affiliated with the interests and beliefs of the companies we work for. **
In this episode, we discuss the obvious….BREACHES, BREACHES, EVERYWHERE!!! Maril & Erika discuss two recent breaches at large organizations: Uber & LastPass. Maril breaks down how they happened from an offensive perspective & as always Erika her common sense of how to avoid being a victim of a breach. We also offer guidance on how to be proactive vs. reactive to the day-to-day users. After listening to the live episode, we realized that the industry has a boatload of acronyms as usual! Don’t worry we are keeping a tally of them for you and plan to release a Cyber Acronym Cheat Sheet for you! I hope you enjoy this episode as much as we did and remember to share with a friend/family member/lover/whatever.
Key Topics:
- Breaches, Breaches, Everywhere!
- Current Breaches In Large Companies
- Ramifications & Responses We Are Seeing
- How Breaches Happen From An Offensive Perspective
- How The Average User Can Be Proactive vs. Reactive From Breaches
- Advice For Users & Companies If/When You Are Breached
- Password Policies & Multi-Factor Authentication (MFA)
- Executive Order 14028
- High-Profile Breaches of 2022
- Potential Ramifications For Users & Their Data As A Result Of The Hack For An Organization & The Basic User?
- What To Do If Your Account Is Hacked/Compromised As A Basic User
- Smishing…..What Tha?????
Sources:
- ChatGPT
- Article: “Google Fi suffers data breach following T-Mobile hack”
- Twitch Layoffs
- Uber Breach
- LastPass Breach
- Who Is Lapsus$?
- Maril’s LinkedIn Post Around Two Marines Defeating AI
- 1Password
- Bitwarden
- EO On Improving The Nation’s Cybersecurity: https://tinyurl.com/3j82p4kn & https://tinyurl.com/4srnxy2u
- Aquia Inc’s Webinar Discussing EO 14028 with Chris Hughes (Aquia CISO): https://tinyurl.com/3dx2rzbk
- Microsoft Digital Defense Report 2022 (MDDR 2022): https://tinyurl.com/5n872652
- The Basic Security Controls From CIS: https://tinyurl.com/2j9fpeh4
- MITRE Matrix
- COMPTIA Sec+
Get in Touch:
- Maril Vernon LinkedIn
- Stacey Champagne LinkedIn
- Queens Twitter - @TheCyberQueens
- Queens LinkedIn
Calls to Action:
- Subscribe to our newsletter for exclusive insight and new episodes!
- If you love us- share us!
Capitole
1. Introductions (00:00:00)
2. Breaches, Breaches Everywhere (00:00:45)
3. Risk Appetitie (00:02:20)
4. Uber & LastPass Breaches (00:04:00)
5. Email Spoofing & How to Verify Senders (00:06:38)
6. How Hackers 'Pretect' Phishing Emails (00:07:30)
7. Uber Breach- How It Happened (00:08:12)
8. Password Policies & Multi-Factor Authentication (MFA) - How Important Are These? (00:10:50)
9. Maril's Trick for 'Salting' Password Vaults (00:11:30)
10. Proactive vs Reactive Breach Stances (00:16:00)
11. CORRECTION On The Deadline To Become Compliant With The EO That Erika Mentioned, It’s Not January 14, 2023. The Deadlines Are June 11, 2023 & September 14, 2023 (00:17:26)
12. We Ask ChatGPT How It Would Secure an Org (00:22:00)
13. High Profile Breaches of 2022 (00:26:11)
14. Breach Ramifications for Orgs & End Users (00:26:50)
15. What To Do If You're Breached (00:33:56)
16. Final Thoughts (00:42:42)
25 episoade
Manage episode 354669422 series 3392091
**DISCLAIMER: All of our opinions are our own. They do not represent, nor are they affiliated with the interests and beliefs of the companies we work for. **
In this episode, we discuss the obvious….BREACHES, BREACHES, EVERYWHERE!!! Maril & Erika discuss two recent breaches at large organizations: Uber & LastPass. Maril breaks down how they happened from an offensive perspective & as always Erika her common sense of how to avoid being a victim of a breach. We also offer guidance on how to be proactive vs. reactive to the day-to-day users. After listening to the live episode, we realized that the industry has a boatload of acronyms as usual! Don’t worry we are keeping a tally of them for you and plan to release a Cyber Acronym Cheat Sheet for you! I hope you enjoy this episode as much as we did and remember to share with a friend/family member/lover/whatever.
Key Topics:
- Breaches, Breaches, Everywhere!
- Current Breaches In Large Companies
- Ramifications & Responses We Are Seeing
- How Breaches Happen From An Offensive Perspective
- How The Average User Can Be Proactive vs. Reactive From Breaches
- Advice For Users & Companies If/When You Are Breached
- Password Policies & Multi-Factor Authentication (MFA)
- Executive Order 14028
- High-Profile Breaches of 2022
- Potential Ramifications For Users & Their Data As A Result Of The Hack For An Organization & The Basic User?
- What To Do If Your Account Is Hacked/Compromised As A Basic User
- Smishing…..What Tha?????
Sources:
- ChatGPT
- Article: “Google Fi suffers data breach following T-Mobile hack”
- Twitch Layoffs
- Uber Breach
- LastPass Breach
- Who Is Lapsus$?
- Maril’s LinkedIn Post Around Two Marines Defeating AI
- 1Password
- Bitwarden
- EO On Improving The Nation’s Cybersecurity: https://tinyurl.com/3j82p4kn & https://tinyurl.com/4srnxy2u
- Aquia Inc’s Webinar Discussing EO 14028 with Chris Hughes (Aquia CISO): https://tinyurl.com/3dx2rzbk
- Microsoft Digital Defense Report 2022 (MDDR 2022): https://tinyurl.com/5n872652
- The Basic Security Controls From CIS: https://tinyurl.com/2j9fpeh4
- MITRE Matrix
- COMPTIA Sec+
Get in Touch:
- Maril Vernon LinkedIn
- Stacey Champagne LinkedIn
- Queens Twitter - @TheCyberQueens
- Queens LinkedIn
Calls to Action:
- Subscribe to our newsletter for exclusive insight and new episodes!
- If you love us- share us!
Capitole
1. Introductions (00:00:00)
2. Breaches, Breaches Everywhere (00:00:45)
3. Risk Appetitie (00:02:20)
4. Uber & LastPass Breaches (00:04:00)
5. Email Spoofing & How to Verify Senders (00:06:38)
6. How Hackers 'Pretect' Phishing Emails (00:07:30)
7. Uber Breach- How It Happened (00:08:12)
8. Password Policies & Multi-Factor Authentication (MFA) - How Important Are These? (00:10:50)
9. Maril's Trick for 'Salting' Password Vaults (00:11:30)
10. Proactive vs Reactive Breach Stances (00:16:00)
11. CORRECTION On The Deadline To Become Compliant With The EO That Erika Mentioned, It’s Not January 14, 2023. The Deadlines Are June 11, 2023 & September 14, 2023 (00:17:26)
12. We Ask ChatGPT How It Would Secure an Org (00:22:00)
13. High Profile Breaches of 2022 (00:26:11)
14. Breach Ramifications for Orgs & End Users (00:26:50)
15. What To Do If You're Breached (00:33:56)
16. Final Thoughts (00:42:42)
25 episoade
همه قسمت ها
×Bun venit la Player FM!
Player FM scanează web-ul pentru podcast-uri de înaltă calitate pentru a vă putea bucura acum. Este cea mai bună aplicație pentru podcast și funcționează pe Android, iPhone și pe web. Înscrieți-vă pentru a sincroniza abonamentele pe toate dispozitivele.