Digest

The Cyberwire Intel Briefing podcast begins with a sponsor message for Kiteworks, a secure file-sharing solution for defense contractors. The episode then dives into recent cyber security news, including a Russian GRU unit's cyber operations, vulnerabilities in Apache's OFBiz system and SonicWall devices, a novel technique exploiting Linux's PAM modules, and a critical vulnerability in the Linux kernel's net filter component. The podcast also discusses the resurgence of Predator spyware and a major data breach at Confidant Health, exposing sensitive health information. The episode features an interview with Mary Hague, Global CISO of BAE Systems, who shares her insights on building an effective cybersecurity team. Hague emphasizes the importance of diversity, data-driven decision making, and skills-based hiring. She believes that a team with diverse backgrounds and a shared moral code is essential for building a strong foundation and fostering a culture of trust and collaboration. The podcast concludes with a sponsor message for DeleteMe and Vanta, followed by a story about a musician who allegedly used AI-generated songs and bots to generate millions of dollars in fake royalties from streaming platforms. The episode ends with closing remarks and information about upcoming episodes.

Outlines

00:00:00

Cyber Security News and Data Breaches

This segment covers various cyber security news stories, including a Russian GRU unit's cyber operations, vulnerabilities in Apache's OFBiz system and SonicWall devices, a novel technique exploiting Linux's PAM modules, and a critical vulnerability in the Linux kernel's net filter component. It also discusses the resurgence of Predator spyware and a major data breach at Confidant Health, exposing sensitive health information.

00:01:55

Building an Effective Cybersecurity Team

This segment features an interview with Mary Hague, Global CISO of BAE Systems, discussing her approach to building an effective cybersecurity team, emphasizing the importance of diversity, data-driven decision making, and skills-based hiring.

00:03:36

AI Music Streaming Scheme and Closing Remarks

This segment covers a story about a musician who allegedly used AI-generated songs and bots to generate millions of dollars in fake royalties from streaming platforms. The segment concludes with closing remarks and information about upcoming episodes.

Keywords

Q&A

• What are some of the key challenges facing defense contractors in complying with CMMC 2.0 security standards?

  Defense contractors face pressure to comply with CMMC 2.0 standards, requiring secure file-sharing solutions and a robust security posture. Kiteworks, a FedRAP-moderate authorized solution, helps address these challenges by supporting CMMC 2.0 requirements and leveraging a zero-trust framework.

• How can organizations defend against the novel technique exploiting Linux's PAM modules?

  Organizations should implement proactive measures like privilege management for Unix and Linux systems, file integrity monitoring to detect suspicious changes, and regular security audits to mitigate the risks associated with PAM's flexibility.

• What are some of the key factors Mary Hague considers when building an effective cybersecurity team?

  Mary Hague emphasizes the importance of diversity, data-driven decision making, and skills-based hiring. She believes that a team with diverse backgrounds and a shared moral code is essential for building a strong foundation and fostering a culture of trust and collaboration.

• What are some of the challenges and opportunities in professionalizing the cybersecurity field?

  Professionalizing cybersecurity involves standardizing roles, developing career frameworks, and ensuring that qualifications reflect the evolving needs of the industry. It's important to balance professionalization with the value of diverse backgrounds and ensure that career paths remain accessible for individuals from various fields.

• What are some of the roadblocks to achieving greater diversity in the cybersecurity field?

  While there is a growing consensus on the need for diversity, roadblocks include unconscious bias, lack of mentorship opportunities, and a perception that certain backgrounds are not suitable for cybersecurity roles. Addressing these issues requires proactive efforts like mentorship programs, skills-based hiring, and promoting inclusive environments.

Show Notes