Dark Rhino Security Podcast

Marius is also a public speaker, mentor, and non-executive director for many cybersecurity businesses. He was the former Cloud Security Architect and Analyst at Domino’s Pizza UK & Ireland, Analyst at Burberry, and many more. 00:00 Introduction 00:18 Our Guest: Marius Poskus 01:03 Physical Security to Cybersecurity 04:14 Tech talk overwhelms the nontechnical 11:00 How do you go about assessing risk? 17:20 A message to the executives 21:56 Cyber basics: How do you connect the dots? 26:39 Understanding the techniques from the 3 letter agencies 42:47 The Role of Offense 48:58 What can we do to implement processes to look out for configurations? 53:55 More about Marius ---------------------------------------------------------------------- To learn more about Marius visit https://www.linkedin.com/in/marius-poskus-92611b22/ To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com ---------------------------------------------------------------------- SOCIAL MEDIA: Stay connected wit

#SecurityConfidential #DarkRhinoSecurity Chris Rock is a Cyber Mercenary, A three-time presenter at DEFCON, Author of The Baby Harvest, and Co-Founder of SIEMonster. Chris has spent the last 30 years in the Middle East, the US, and Asia preventing cyber attacks for governments and private organizations alike. Chris and his team excel at countering sophisticated cyber threats with the implementation of advanced SIEM methods for all types of organizations. Chris is passionate about raising the public’s awareness of modern cybersecurity threats and trends. 00:19 Can Cyber Mercenaries overthrow the government? 04:32 What can we do about it? 09:50 SIEM logic for engineers 12:43 Could the government apply policies to help? 14:32 Refusing to loose Power 17:55 Chris’ Research

Chris Rock is a Cyber Mercenary, A three-time presenter at DEFCON, Author of The Baby Harvest, and Co-Founder of SIEMonster. Chris has spent the last 30 years in the Middle East, the US, and Asia preventing cyber attacks for governments and private organizations alike. Chris and his team excel at countering sophisticated cyber threats with the implementation of advanced SIEM methods for all types of organizations. Chris is passionate about raising the public’s awareness of modern cybersecurity threats and trends. 00:00 Introduction 00:24 Our Guest 01:18 How many Chris Rocks are there? 02:58 3 Cyber Threats to Society 05:56 Can you use Genralative Ai for malicious reasons? 09:00 The Third Cyber Threat to Society 12:26 Looking for flaws in the process 16:15 The Gartner Model 18:16 Is it Laziness, Apathy, or Indifference? 23:59 Terminated from speaking at TED Global ---------------------------------------------------------------------- Order his book here: https://www.amazon.com/Baby-Harvest-terrorist-cri

#SecurityConfidential #DarkRhinoSecurity --------------------------------------------------------------------------- Your life is important to everyone around you. If you have had Suicidal thoughts, please call or chat the: 988 Suicide and Crisis Lifeline Hours: Available 24 hours. Languages: English, Spanish You can also chat with them online: https://988lifeline.org/ --------------------------------------------------------------------------- Kevin Metcalf is a former federal agent turned prosecutor, author, and founder of the National Child Protection Task Force, which brings together recognized experts in fields such as strategic legal applications, OSINT, cellular mapping and analysis, dark web investigations, and cryptocurrency to aid law enforcement agencies everywhere. Kevin has assisted with the recovery of numerous missing and exploited children and the identification and apprehension of sexual predators in multiple states. 00:00 Disclaimer 00:10 Introduction 00:23 Our guest 01:30 What is OSIN

Benjamin Johnson is a serial entrepreneur with a track record of success and hands-on open-source programming experience. With 20+ years as a software developer and leader, Benjamin is the CEO & Founder of Particle41, a dev firm founded by industry veterans that aims to help companies accelerate their initiatives through Software Development, DevOps, and Data Science. 00:00 Introduction 00:20 Our Guest 01:25 Behind the name: Particle41 03:07 Ben’s Origin story 05:14 Where did the ideas come from? 08:20 Outsourcing DevOps 10:45 What makes a great DevOps team? 16:50 Extreme Ownership 19:50 “Bridge” Personality 21:30 Is there a benefit to being first to market? 22:55 Monetizing Open Source 28:22 Characteristics that make successful people 34:02 More about Ben ---------------------------------------------------------------------- To learn more about Ben visit https://www.linkedin.com/in/benjaminrjohnson/https://particle41.com/ https://www.linkedin.com/company/particle41/ To learn more about Dark Rhi

#SecurityConfidential #DarkRhinoSecurity This is part 2 of our discussion. Bec McKeown is a Chartered Psychologist with twenty years experience of in researching and evaluating human performance in high-risk, high-stakes organizations, including the UK Ministry of Defence. She is an expert on the ways humans behave when working in complex, uncertain, and ambiguous environments and human performance in cybersecurity. She established Mind Science which assists companies at an operational and strategic level. 00:00 Introduction 00:10 Does a person have the ability to pause their thoughts before taking action? 05:18 What is Resilience? 10:32 You can Train your mind 12:34 Why do teams still fall apart under pressure? 14:42 What would you say to the executive? 17:26 What to do if you get the same results again? 19:00 The Wicked Problem 21:04 The Chain of Command 28:01 Mandatory Security Awareness training: What does that have to do with me? 33:30 More about Bec Thinking, Fast and Slow by Daniel Kahneman https:

This is part 1 of our discussion. Bec McKeown is a Chartered Psychologist with twenty years’ experience of researching and evaluating human performance in high-risk, high-stakes organizations, including the UK Ministry of Defence.  She is an expert on the ways humans behave when working in complex, uncertain and ambiguous environments and human performance in cybersecurity. She established Mind Science which assists companies at an operational and strategic level. 00:00 Introduction  00:20 Our Guest 01:27 What is a chartered Psychologist? 03:40 How do you control chaos? 07:08 How we compare to mIlitary Training? 09:20 The baseline of response: How does the brain work? 13:31 So how do we structure a team? 17:10 Cognitive Agility: Passing along that knowledge 20:29 Getting Comfortable with being uncomfortable  Thinking, Fast and Slow by Daniel Kahneman https://www.amazon.com/Thinking-Fast-Slow-Daniel-Kahneman/dp/0374533555 --------------------------------------------------------------------- To learn more

#SecurityConfidential #DarkRhinoSecurity Phillip is an offensive security professional, educator, mentor, author, and frequent public speaker. His passions outside of the technical side of cybersecurity are sharing resources, professional networking, and bringing people together. He is also the host of The Hacker Factory Podcast and his new podcast, the Phillip Wylie Show. Phillip is the concept creator and coauthor of The Pentester Blueprint: Starting a Career as an Ethical Hacker. 00:00 Introduction 00:18 Our Guest 01:45 Phillips Origin Story 04:06 Wrestling a 750 pound bear 07:41 From Wresting to Cyber 10:12 What motivated Phillip to pursue Ethical Hacking? 11:43 Vulnerability management: What are we getting wrong? 14:52 Changing the Mindset 26:51 What is the role of Threat Intel? 28:08 Asset Intel approaches31:05 Ransomware: It’s still growing34:35 The Hacker Factory Podcast34:59 The Phillip Wylie Show36:17 News from Phillip37:44 Connecting with Phillip -----------------------------------------------

George Kamide was once an anthropologist, a rock climbing instructor, a wedding photographer, and a creative writer. He’s the host of the cybersecurity podcast First Watch and the podcast Bare Knuckles and Brass Tacks. As an advocate for greater representation in information security, he sits on the advisory board for Vision & Voice, a community dedicated to lifting women into cyber leadership positions. He has briefed US Cyber Command and the Congressional Cyber Caucus.  00:10 Changing the vulnerability landscape 01:48 Voice Cloning and email chat hacking 05:55 How does a machine generate context? 07:58 Social Media bots 10:06 What jobs will go away with AI?15:40 Whose fault is it? 20:40 Can you 100% trust something? 23:03 Work from Home 26:11 Connecting with George   ---------------------------------------------------------------------- To learn more about George visit https://www.linkedin.com/in/george-ka... To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com ------------

George Kamide is a Senior Director at SafeGuard Cyber. He was once an anthropologist, a rock climbing instructor, a wedding photographer, and a creative writer. He’s the host of the cybersecurity podcast First Watch and the podcast Bare Knuckles and Brass Tacks. As an advocate for greater representation in information security, he sits on the advisory board for Vision & Voice, a community dedicated to lifting women into cyber leadership positions. He has briefed US Cyber Command and the Congressional Cyber Caucus. 00:00 Introduction 00:18 Our Guest 01:30 George’s Origin story 05:04 Twitter bots controlled by Russia 07:37 Does Congress understand the cyber risks? 09:57 First Watch 13:03 Bare knuckles and Brass Tacks 14:15 Bad practices vendors make 18:40 Developing trust with People virtually 20:43 Using AI for Marketing ---------------------------------------------------------------------- To learn more about George visit https://www.linkedin.com/in/george-kamide/https://www.zdnet.com/article/twitter-b

Huxley Barbee is a Security Evangelist at runZero (formerly Rumble Network Discovery), a company founded by Metasploit creator HD Moore that helps companies discover unmanaged devices for asset inventory. Huxley previously worked for Cisco, Sparkpost, and most recently, Datadog – where he formulated the Datadog Cloud Security Platform. He has spent over 20 years as a software engineer and security consultant. He attended his first DEF CON in 1999 and holds both CISSP and CISM certifications. On top of that, he’s also an organizer of BSidesNYC.   00:00 Introduction 00:15 Our Guest 01:00 Huxleys Origin Story 02:27 Proactive Security, Risk, and Asset Inventory: What’s the connection? 04:56 Using the right tools 07:17 IPv4 and IPv6 11:15 What do you need in terms of an ACCURATE Asset inventory? 21:56 Asset Inventory Playing a role in ransomware 26:17 Connecting with Huxley  https://www.runzero.com/ https://www.linkedin.com/in/jhbarbee/ https://www.helpnetsecurity.com/2023/02/24/bsidesnyc-2023/

Tom Dusenberry has spent 30 years of his career as an interactive entertainment executive and was the CEO of Hasbro Interactive, Games.com, and Atari. He is currently the CEO of Dusenberry Entertainment. Tom is closely associated with great game brands like Monopoly, Trivial Pursuit, Frogger, Star Wars, and Roller Coaster Tycoon. 00:00 Introduction 00:22 Our Guest 01:26 Are you a gamer? 01:55 Tom's Favorite Games in different eras 04:54 Elements for a good game 07:02 Streaming Games 09:55 The Blue Ocean Strategy 12:03 Controlling the Gaming Market 14:20 Dusenberry Entertainment 16:35 The Process needed to create a game 19:54 Is creating a gaming community part of the process? 22:20 Gaming Franchises 23:27 Ai and it’s Role in the gaming world 25:03 Does violence in games cause violence in real life? 27:30 Advice for being successful in gaming 29:33 Got a game idea? Contact Tom! (Tom@tomdusenberry.com) ---------------------------------------------------------------------- To learn more about Tom visit Du

Chris and Rory are BACK! This time with Tech news that you should know about. 00:00 Introduction 02:53 War Thunder Discord Documents 11:54 U.S. taking your Data vs. Chinese taking your Data 13:49 Apple Has Weird Terms and Conditions 15:23 A Guide to Understanding the Hoax of the Century 22:00 Russia’s Electronic Draft Bill ---------------------------------------------------------------------- To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com ---------------------------------------------------------------------- SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio! Instagram: @securityconfidential and @OfficialDarkRhinoSecurity Facebook: @Dark-Rhino-Security-Inc Twitter: @darkrhinosec LinkedIn: @dark-rhino-security Youtube: @Dark Rhino Security ​ ---------------------------------------------------------------------- https://www.cnn.com/2023/04/14/politics/discord-cha

Melissa Thornley is a leadership consultant who focuses on using emotional intelligence to drive better results. She has years of experience as an advertising/film industry executive and has worked with McDonald’s, Walgreens, Anheuser Busch, Nike, Capital One, Coca-Cola, and PBS. She's known for her contagious energy and passion for turning intangible concepts into tangible outcomes. 00:00 Introduction 00:18 Our Guest 01:15 Starting off in Tech 06:58 Working with Celebrities 09:05 Celebrity leadership 10:20 How do you create a leader? 14:07 Emotional intelligence: What is it? 19:37 Managing your triggers 22:20 Have a system or process 30:25 Personal and Team Accountability 32:38 “Your baby’s Ugly” 40:12 More about Melissa ---------------------------------------------------------------------- To learn more about Melissa visit https://www.melissathornley.com/ To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com ------------------------------------------------------------------

Joel Beasley is a well-known figure in the tech industry. In 2017, he founded the Modern CTO Podcast while writing the Modern CTO book, with the goal of interviewing CTOs and sharing their experiences with others in the tech community. From there, Joel founded ProSeries Media to help companies worldwide create their own podcasts. Through his work on the Modern CTO Podcast and ProSeries Media, Joel has inspired others to share their knowledge and insights with the wider community. His passion for creating engaging content that informs, inspires, and entertains has made him a sought-after speaker and advisor on all things tech. 00:00 Introduction 00:22 Our Guest 01:04 Joel’s Origin Story 05:45 Motivation to keep you going 07:18 Maintaining a positive attitude 08:49 What does a CTO do? 12:09 The Role of Failure in Success 15:51 What if Success happens easily? 17:02 Is there a secret sauce to say motivated through the failures. 21:11 Self-awareness 22:25 Playing the Victim 22:52 Nashville shooting 30:18 Moder

Josh has 10 years of military experience, as an Air Force pilot and cyberwarfare officer. Currently, Josh is a Senior Technical Trainer for Neuvik Solutions, providing training, engagement management, penetration testing, risk assessments, and business consulting for clients 00:00 Introduction 00:22 Our Guest 01:06 U.S Air Force Academy to Cyber 07:28 Is there a bias against Veterans entering Cybersecurity? 08:49 What are clients getting wrong with Infosec? 13:14 Learning Lessons 16:58 People like “Free” 17:35 Constantly Changing 20:43 More about Josh ---------------------------------------------------------------------- To learn more about Josh visit https://www.linkedin.com/in/joshuacmason/ To learn more about Dark Rhino Security visit https://www.darkrhinosecurity.com ---------------------------------------------------------------------- SOCIAL MEDIA: Stay connected with us on our social media pages where we'll give you snippets, alerts for new podcasts, and even behind the scenes of our studio!

Shea has over 25 years in cybersecurity, risk, and technology. Including incident response planning, crisis management, security assessments, developing and maturing cybersecurity programs, and more. 00:00 Introduction 01:07 Our Guest 02:39 The policy question that made me pause my vacation 05:16 Diversity in Cyber 06:22 Echelon Risk 07:05 Has the Executive Mindset changed? 12:52 Hack-Back and the Biden administration 18:50 News from Shea ---------------------------------------------------------------------- 2023 Central Ohio InfoSec Summit (https://www.infosecsummit.com/website/44575/home/) – it’s titled “Beyond Checking the Box: Putting Compliance at the Forefront of Decision-Making” being presented by Amelia Fisher https://echeloncyber.com/ Hack-Back https://www.techdirt.com/2023/01/27/biden-administration-declares-war-on-the-internet-clears-path-for-offensive-hacking-efforts-by-federal-agencies/https://www.securityweek.com/us-national-cyber-strategy-pushes-regulation-aggressive-hack-back-operations/

Continuing our Conversation with Navy SEAL, Mike Rice   00:00 Introduction  00:18 Our Guest  00:30 The Future of War  05:06 Is China our biggest threat?  09:13 TikTok and other Chinese Apps  11:40 Spy Balloons? Weather balloons? What was it?  16:13 Where do you see the war in Ukraine headed?  17:58 Who is the Wagner group?  18:41 Russia

Host Rory Meikle chats with Mike Rice. Mike is a retired Navy Seal officer who started out his Military career as an enlisted marine corp infantry. This is part 1 of their conversation. 00:00 Introduction 00:18 Our Guest 00:33 The Navy SEAL Team 04:05 What made you shift to SEAL Team? 08:16 What was the atmosphere like in BUD/S? 11:09 How was the SEAL Team Technology after 9/11? 13:21 Leveraging Technology 17:39 Where do you see technology affect you the most? 21:40 Stories with Mike

David is a SOC Analyst, Cyber Mentor, Educator, and Founder and Creator of CyberTech Dave. He holds a Master of Science degree in Information Systems and has a wide array of skills ranging from Teaching to Virus Removal. David is passionate about Cybersecurity and enjoys using his platform to teach people how to protect themselves and stay safe online.   00:00 Introduction  00:17 Our Guest   01:12 Using LinkedIn to break into Cybersecurity  07:30 Fake Profiles on Linkedin  08:30 Having a complete profile  10:19 the LinkedIn Algorithm   14:20 Useful Certifications and Resources  26:39 Davids Book about Women in Cyber  32:28 SOC fatigue  36:27 What role does Automation has?  37:46 Will Automation replace a SOC Analyst?  39:30 How can Clients improve their Cybersecurity?  42:35 Risk Assessments: Who should be leading?  45:20 Connecting with David ----------------------------------------------------------------------  To learn more about