Episodes

  • A Conversation with Rob Allen from ThreatLocker
    Nov 18 2024

    In this conversation, I speak with Rob Allen, Chief Product Officer at ThreatLocker.

    We talk about:

    ThreatLocker’s Unique Zero Trust Approach to Cybersecurity:
    How ThreatLocker’s "deny by default, permit by exception" methodology, along with automated application learning and built-in definitions for over 4,000 applications, simplifies allowlisting and enhances endpoint security.

    Innovations in ThreatLocker’s Control Features:
    How ThreatLocker’s ringfencing prevents unauthorized application interactions and data access, and dynamic firewalls mitigate risks like lateral movement and ransomware attacks through endpoint-level network segmentation.

    Recent Developments and Cloud Expansion:
    How ThreatLocker Detect and Cloud Detect provide advanced detection capabilities for endpoint and cloud environments, including Office 365, enabling anomaly detection, centralized alerts, and proactive threat management.

    And more.

    Into (00:00:00)
    ThreatLocker's Zero Trust Cybersecurity Approach (00:00:31)
    Understanding Allow Listing in Cybersecurity (00:01:49)
    Managing Software Updates with ThreatLocker (00:02:13)
    Automated Application Updates for Over 4000 Programs (00:04:11)
    Vendor Collaboration for Early Software Updates (00:05:40)
    Challenges and Risks of Immediate Software Updates (00:06:53)
    Assuming Breach: A Core Cybersecurity Principle (00:08:10)
    Implementing Zero Trust Strategies with Ring Fencing (00:09:30)
    Controlling Application Interactions to Prevent Threats (00:09:50)
    Advanced Data Protection with Storage Control (00:13:17)
    Dynamic ACLs for Smarter Network Control (00:15:48)
    Ransomware Risks from Open Ports (00:16:50)
    Using Shodan to Identify Open Port Vulnerabilities (00:17:19)
    Building Application Allow Lists with Contextual Data (00:18:43)
    Learning Mode for Application and Traffic Visibility (00:19:36)
    Balancing User Behavior Control and Workflow (00:20:44)
    Integrating Detection and Control with ThreatLocker Detect (00:21:44)
    Why Detection is Critical in Cybersecurity Layers (00:22:41)
    Response Mechanisms and Automated Remediation (00:24:02)
    Lockdown Mode: Ultimate Isolation from Threats (00:25:38)
    Streamlined Application Approvals with Cyber Hero (00:26:36)
    Breaking Down Ransomware Attack Stages (00:27:46)
    Introducing Cloud Detect for Cloud Security (00:29:39)
    How to Learn More About ThreatLocker Solutions (00:30:47)

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    32 mins
  • UL NO. 458: Ollama Vulnerabilities, Rating AI Using AI, The Mantis Hack-back Framework
    Nov 17 2024

    My conversation with Jason Haddix from Flare, Google finds a Zero-Day with AI, Robot Dogs Protecting Mar-a-Lago, and more...

    Subscribe to the newsletter at:
    https://danielmiessler.com/subscribe

    Join the UL community at:
    https://danielmiessler.com/upgrade

    Follow on X:
    https://twitter.com/danielmiessler

    Follow on LinkedIn:
    https://www.linkedin.com/in/danielmiessler

    See you in the next one!

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    33 mins
  • A Conversation with Jason Haddix from Flare
    Nov 11 2024

    Streamline Your Cybersecurity with Flare Here:
    https://try.flare.io/unsupervised-learning/

    In this conversation, I speak with Jason Haddix, founder of Arcanum Security and CISO at Flare.

    We talk about:

    Flare's Unique Approach to Threat Intelligence:
    How Flare's capability to uncover compromised credentials and cookies from the dark web and private forums has been crucial in red team engagements.

    Challenges of Credential Theft and Advanced Malware Techniques:
    How adversaries utilize tools like the RedLine Stealer malware to gather credentials, cookies, and other sensitive information, and this stolen data enables attackers to bypass authentication protocols, emphasizing the need for comprehensive exposure management.

    Jason's Journey To Founding Arcanum & Arcanum's Security Training Programs:
    How Jason now advises on product development and threat intelligence as Flare's CISO and his journey to fund Arcanum, a company focused on red teaming and cybersecurity, and Arcanum's specialized training programs focusing on offensive security and using AI in security roles.

    And more

    Introduction to the Podcast (00:00:00)
    Guest Excitement on Podcast (00:00:20)
    Jason's New Business and Flair Role (00:00:24)
    Career Shift from Ubisoft to Red Teaming (00:01:02)
    Evolution of Adversary Tactics (00:02:04)
    Flair's Credential Exposure Management (00:02:58)
    Synergy Between Arcanum and Flair (00:03:55)
    Dark Web Credential Compromise (00:04:45)
    Challenges with Two-Factor Authentication (00:06:25)
    Cookie Theft and Unauthorized Access (00:07:39)
    Redline Malware and Its Impact (00:08:12)
    Flair's Research Capabilities (00:09:50)
    Potential for Advanced Malware Detection (00:11:40)
    Expansion of Threat Intelligence Services (00:12:15)
    Vision for a Unified Security Dashboard (00:13:25)
    Integrating Threat Intelligence with Identity Management (00:14:00)
    Credential Update Notifications via API (00:15:54)
    Automated Credential Management Potential (00:17:28)
    AI Features in Security Platforms (00:17:32)
    Exploration of Automated Security Responses (00:18:38)
    Introduction to Arcanum Security (00:19:25)
    Overview of Arcanum Training Courses (00:20:25)
    Necessity for Up-to-Date Training (00:22:15)
    Guest Experts in Training Sessions (00:23:08)
    Upcoming Features for Flair (00:25:11)
    Integrating Vulnerability Management (00:28:08)
    Accessing Flair's Free Trial (00:28:25)
    Learning More About Arcanum (00:29:09)

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    30 mins
  • UL NO. 454: The First AI Breaches
    Oct 18 2024

    AI Avatar Breaches, Gullibility is Vulnerability: Conspiracy is Threat, Caldera's New Plugin, and more...

    Try Out the ThreatLocker to take your security to the next level:

    https://www.threatlocker.com/ul

    Subscribe to the newsletter at:
    https://danielmiessler.com/subscribe

    Join the UL community at:
    https://danielmiessler.com/upgrade

    Follow on X:
    https://twitter.com/danielmiessler

    Follow on LinkedIn:
    https://www.linkedin.com/in/danielmiessler

    See you in the next one!

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    35 mins
  • How My Projects Fit Together (Substrate, Fabric, Telos, Daemon, and Human 3.0)
    Oct 15 2024

    This episode, "How My Projects Fit Together," is a follow-up to a previous post called "What I Am Doing & How It's Going".

    Here, Daniel Miessler addresses the most commonly asked questions: "I see all your projects, but what are they? How are they related?"

    He takes an individual look at his various projects (Substrate, Fabric, Telos, Daemon, and Human 3.0) and then how they work together to tackle big issues such as the lack of purpose and meaning in people's lives, preparing people for the impact of AI in society, and the need for holistic human development.

    For all the projects’ links,visit: https://danielmiessler.com/p/how-my-projects-fit-together

    - Intro (00:00:00)
    - Identifying Major Problems (00:00:47)
    - Lack of Purpose and Meaning (00:01:50)
    - Impact of AI on Society (00:01:50)
    - Training for Full-Spectrum Individuals (00:03:02)
    - Security as a Core Focus (00:03:02)
    - Helios: Attack Surface Monitoring (00:04:11)
    - Daemon: Security Program Management (00:05:16)
    - Substrate: Enhancing Human Understanding (00:06:21)
    - Argument Components in Substrate (00:07:35)
    - AI and Argument Detection (00:10:59)
    - Fabric: Augmenting Humans with AI (00:15:26)
    - Fabric Patterns for Problem Solving (00:16:31)
    - Fabric Overview (00:19:36)
    - Telos Introduction (00:20:50)
    - Articulating the Mission (00:21:50)
    - Telos File Example (00:22:53)
    - Managing Personal Life with Telos (00:23:57)
    - AI and Purpose (00:26:10)
    - Daemon Introduction (00:28:21)
    - API Concept in Daily Life (00:29:28)
    - Digital Assistants and APIs (00:31:40)
    - Human Connection through Sharing (00:37:52)
    - Daemon Personal API Broadcast (00:39:53)
    - Human 30 Introduction (00:43:07)
    - Human 30 Philosophy (00:45:22)
    - Impact of AI on Work (00:48:47)
    - Human 30 Platform Overview (00:51:00)
    - Summary of Projects (00:54:03)
    - Vision of Future AI Integration (00:56:21)
    - Encouragement for Clarity and Purpose (00:57:39)
    - Encouragement for Purpose (00:59:47)
    - Articulating Your Work (01:00:46)

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    1 hr and 1 min
  • Human 3.0—The Skills & Mental Frames Required To Thrive In An AI World
    Oct 9 2024

    Human 3.0 is here.

    In this conference for the United Nations, Daniel Miessler introduces the topic of Human 3.0 philosophy and the skills and mental frameworks needed to thrive in an AI-driven world.

    Learn about:

    - The future of work and the human 3.0 economy.

    - How AI will revolutionize startups and entrepreneurship.

    - How one-person billion-dollar companies are becoming a reality.

    - Creative expression and AI.

    - The importance of personal visibility and authenticity.

    - How to survive and thrive in today's rapidly evolving technological landscape.

    Subscribe to the newsletter at:
    https://danielmiessler.com/subscribe

    Join the UL community at:
    https://danielmiessler.com/upgrade

    Follow on X:
    https://twitter.com/danielmiessler

    Follow on LinkedIn:
    https://www.linkedin.com/in/danielmiessler

    See you in the next one!

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    30 mins
  • UL NO. 452: The New Hotness: NotebookLM
    Oct 7 2024

    China prepping for kinetic using cyber?, Automatic podcast creation using NotebookLM, VM + AI, and more...

    Subscribe to the newsletter at:
    https://danielmiessler.com/subscribe

    Join the UL community at:
    https://danielmiessler.com/upgrade

    Follow on X:
    https://twitter.com/danielmiessler

    Follow on LinkedIn:
    https://www.linkedin.com/in/danielmiessler

    See you in the next one!

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    50 mins
  • NotebookLM Podcast: David Deutsch, Understanding, and AI
    Oct 2 2024

    This is a NotebookLM podcast based on a long conversation I had with my AI, DARSA, on the topic of whether AIs truly understand things and/or are capable of creativity.

    Become a Member: https://danielmiessler.com/upgrade

    See omnystudio.com/listener for privacy information.

    Show More Show Less
    13 mins