Cybersecurity with Evgeniy Kharam | E195

Jason is going to talk to cyber security expert, Evgeniy Kharam. They talk about general concerns around cybersecurity and best practices. Episode Highlights: 01.07: Evgeniy work full time in the company for Herjavec group, being around almost 20 years and they are a cyber security company that focuses on cybersecurity only, and they have enterprises on a variety of talks. 03.14: Evgeniy explains that ransomware is basically somebody was able to get access to your environment. Your environment could be your service or IoT devices or your gas station tanks. 07.11: Evgeniy points out that they always have different scales of cyber security controls for protection. She asks if you run a small business and this business is acceptable to the public and people walking in back and forth, but you never lock your screen, then what is the point? 13.47 Jason says you are able to have different unique complex passwords for every website so, if one thing gets hacked, only the one thing gets hacked, not everything else. 15.02: Jason asks, in small medium besides businesses who are users of technology, to talk to me about best practices for protecting themselves. 16.25: Evgeniy says, if you create your own software, you also wanted to have an MFA for the users or in the majority of the cases, if you can pass the authentication to LinkedIn, to Google then people can utilize this way to connect to you and you not going to be saving their credentials. 23.41: Jason points out that making an email look like it comes from another company is very easy. 24.10: Jason says there is no full delegation of your diligence, you have to take responsibility for basically being your first line of protection. 24.59 Jason explains why when you look at a marketing website, the first thing as a sales pitch is not security. 25.28: Evgeniy says the biggest challenge in the cyber security industry is definitely the amount of information we have, and we just don’t have enough time to be aware about everything. There is so much going on daily that just impossible for one person to know everything. 3 Key Points: In small scale business, you want to have an antivirus or EDR and protection response or EPP and word protection on all your devices, at least if or when somebody will get into not have such easier time to affect your system, says Evgeniy. The most common form of getting into people’s systems without authorization is human engineering. There are a variety of tools on the market, something called US dynamic access through the channels that will basically validate what can be done with your website, what can be done with the APIs from your website. Tweetable Quotes: “There’s a lot of information support lines for hacker organizations.” – Evgeniy “There are definitely attacks that are based on just hacking through code absolutely.” – Evgeniy “It doesn’t matter what innovation we’re talking about security plays a role in all of it.” - Jason Resources Mentioned: Facebook – Jason Pereira’s Facebook LinkedIn – Jason Pereira’s LinkedIn Woodgate.com – Sponsor Evgeniy Kharam – LinkedIn