PODCAST · technology
AttackIQ
by Think Bad, Do Good Podcast
AttackIQ’s podcast series, Think Bad, Do Good, brings together security researchers, informed defenders, and intelligence practitioners for discussions about how security teams can build a strong threat-informed defense strategy. Listen in for lively discussions on emerging strategic concepts, threats and emulation plans, optimizing your cybersecurity investments, and cybersecurity events in the news.About AttackIQ: Adversaries across the globe, from nation-states to criminal organizations, hold our businesses, democracy, and society at risk through cyberspace. Our mission at AttackIQ is to help solve that problem and make the world safe for compute.As the leading independent vendor of breach and attack simulation solutions, we built the industry’s first Security Optimization Platform for continuous security control validation and improving security program effectiveness and efficiency. We are trusted by leading organizations worldwide to identify security improvements and verify tha
Episodes
-
Confronting the Disinformation Age: A Conversation with Renée di Resta
Guest: Renée DiResta, Research Manager, Stanford Internet Observatory Renée di Resta is a pioneer in the study of disinformation, and through her research at the Stanford Internet Observatory and regular contributions to The Atlantic Monthly she has made her voice heard on the harms of amplified...
-
Catastrophic Loss: The State of the Cyberinsurance Market Today, with Josephine Wolff
Guest: Josephine Wolff, The Fletcher School of Law and Diplomacy For anyone interested in understanding cybersecurity insurance, Josephine Wolff is the premier global expert on the issue. And cyberinsurance is a tricky market. “We’re all relying on the same infrastructure or the same fairly small...
-
Lessons in Venture Capital: Building a Cybersecurity Company, with Marcus Bartram
Guest: Marcus Bartram, General Partner at Telstra Ventures Telstra Ventures’ Marcus Bartram understands the growing pains inherent in building a business. Working at high-growth companies early in his career helped him build wisdom and resilience and foster a sense of empathy towards…
more -
Not Your Normal CISO: Lessons In Security Leadership, with Rob Hornbuckle
Rob Hornbuckle, Chief Information Security Officer, Allegiant Airways. Years before he became Chief Information Security Officer (CISO) at Allegiant Airways, Rob Hornbuckle studied acting and worked as a bartender – lessons that served him well as a four-time CISO. He understands business, he...
-
Preparing for Disaster and Achieving Cybersecurity Readiness, with Juliette Kayyem
Guest: Juliette Kayyem, Faculty chair of the Homeland Security and Security and Global Health Projects at Harvard’s Kennedy School of Government Juliette Kayyem wants you to fail safer when disaster inevitably strikes. A former assistant secretary of homeland security, Harvard professor, and...
-
AttackIQ Purple Hats 2022: How to Catch the Winds of Luck
The confusion between fortune, chance, and luck speaks to the fact that most people aren’t fully aware of how much control they have over their own fate. If you look closely though, you will see lots of ways to increase your luck. The key is understanding that luck is rarely a lightning strike—...
-
AttackIQ Purple Hats 2022: Putting Threat Informed Defense Into Practice
How are leading companies and organizations adopting a threat-informed defense? Join Chris Kissel, Research Director, International Data Corporation (IDC)'s Security & Trust Products Group, Russ Nolan, Security Engineer, Stripe and Stephan Chenette, Co-Founder and CTO, AttackIQ. Speakers: Chris...
-
AttackIQ Purple Hats 2022: AI Threats & Vulnerabilities
MITRE’s Jonathan Broadbent and Dr. Christina Liaghati discuss AI Threats & Vulnerabilities, real-world observations, demonstrations from ML red teams and security groups, and the state of the possible from academic research and MITRE ATLAS, the Adversarial Threat Landscape for AI Systems, a...
-
AttackIQ Purple Hats 2022: Human Performance Factors in Cybersecurity Operations
As the security industry has matured over the last decade, businesses now invest in the most advanced security technologies to stop attacks, from endpoint detection to next generation firewalls to micro-segmentation. The problem is that companies overemphasize technology procurement at the…
more -
AttackIQ Purple Hats 2022: Time Out: Thinking About AI
Time Out: Thinking About AI. This session will discuss the future of artificial intelligence and how we engage with data. "Time Out" is not just time away from our normal discourse, but time further out, as the security of artificial intelligence will be an issue of the future. We turned to...
-
AttackIQ Purple Hats 2022: The Art of Adversary Emulation
The creation of the MITRE ATT&CK framework has helped security teams focus on specific adversaries to enhance their defense effectiveness. Since the launch of the Center for Threat-Informed Defense in 2020, the Center has built out a library of adversary emulations, beginning with APT29 and FIN6....
-
AttackIQ Purple Hats 2022: Securing Medical Devices and the Healthcare Sector with MITRE ATT&CK
Attacks on the healthcare sector have increased exponentially under the coronavirus pandemic, from ransomware attacks on strained hospitals to intellectual property theft of vaccine data from research institutions. What is the evolving threat landscape for the healthcare sector, particularly for...
-
AttackIQ Purple Hats 2022: Using DeTTECT and the MITRE ATT&CK Framework
Are you capturing the right logs? Are your logs complete? Would you be able to detect the next Solorigate attack? These questions may keep you awake at night. But using DeTT&CT and the MITRE ATT&CK Framework can help you understand where you need to shore up your logging. Let me show you how! In...
-
AttackIQ Purple Hats 2022: Strategies for Agility and Confidence in the Face of New Threats
What will cybersecurity leaders Gabriel Lawrence of Toyota and Uma Mahesh Reddy of Prime Healthcare Services have to say about staying on top of threats and how to find your blind spots? Join this session to hear their thoughts on strategies for agility in the face of new threats, and if you can...
-
AttackIQ Purple Hats 2022: Strategic Imperatives In Cyberdefense Operations
Nation-state and cybercriminal adversaries are investing substantially in cyberoffensive capabilities in order to accomplish their objectives. Year over year, we continue to see a massive escalation in both frequency and severity of attacks. While organizations are spending more than ever before…
more -
AttackIQ Purple Hats 2022: Solving for X with XDR
There has been a lot of buzz around Extended Detection and Response (XDR) as an evolution of Endpoint Detection and Response (EDR), however definitions of what comprises an effective XDR solution vary depending on who you ask. The dramatic changes to IT infrastructure as organizations accelerate...
-
AttackIQ Purple Hats 2022: MITRE ATT&CK In Action: Seven Years On
Since MITRE ATT&CK was first published in 2015, it has led to a transformation in how security teams think about and approach threats and cybersecurity effectiveness. Now ATT&CK is being amplified by cutting-edge research from the Center for Threat-Informed Defense, a non-profit, privately funded...
-
AttackIQ Purple Hats 2022: Defending Our Physical & Digital Supply Chains
Information technology is creating a more connected world, and our dependence on technology for all aspects of our lives continues to increase. However, the advanced technology and sophisticated logistics networks that support this connectivity are facing unprecedented attacks, which risk...
-
AttackIQ Purple Hats 2022: Modern Threat Hunting
Threat hunting is one of the most popular techniques used by security analysts for all kinds of investigations. It is both science and, to some degree, inspiration. However in the last years the security industry has developed new tools and techniques that can dramatically improve the…
more -
AttackIQ Purple Hats 2022: Measuring Your Cybersecurity Return on Investment
Despite spending billions of dollars adopting best-in-class cyberdefense technologies and hiring top-tier personnel, organizations continue to suffer security breaches. How can organizations achieve a strong return on their cybersecurity investments, particularly through the use of purple teaming...
-
AttackIQ Purple Hats 2022: Improving Cloud Security Effectiveness
Public cloud providers have built native security controls into their cloud offerings so customers can easily defend their data in the cloud, but organizations still need a means to test and optimize their cloud security effectiveness. Join leaders from major cybersecurity providers in a…
more -
AttackIQ Purple Hats 2022: Principles of Evidence-Based Cybersecurity Management
How do you build an evidence-based cybersecurity program? To learn how to improve your cybersecurity performance, come listen to leading cybersecurity strategists discuss how to measure program success, what data is important to collect, and other aspects of using evidence-based cybersecurity...
-
AttackIQ Purple Hats 2022: Challenges in Cybersecurity and Cyberspace Operations
What are the key challenges in cybersecurity and cyberspace operations today, and how can the U.S. government best respond? Listen to two of the United States’ most important thinkers and leaders in cybersecurity and technology, Jen Easterly, Director of the U.S. Cybersecurity and Infrastructure...
-
AttackIQ Purple Hats 2022: Elevating Cybersecurity Performance
In an increasingly complex world, security teams struggle over how best to improve their program performance. Even after decades of investment in the best technologies and teams, intruders keep breaking past and having an impact. Why? Just like a World Cup soccer team, security teams need to…
more -
AttackIQ Purple Hats 2022: 2022 Kick-Off
Welcome to the 2nd annual, award-winning virtual Purple Hats Conference — the industry destination for cybersecurity practitioners to collaborate, share ideas, and learn how to evolve from a reactive to proactive threat-informed defense! Founded by AttackIQ, Purple Hats provides free access to...
-
Adopting a Threat-Informed Defense, with Christopher Frenz
Guest: Christopher Frenz, Information Security Officer and AVP of IT Security at Mount Sinai South Nassau In this episode, Christopher and Jonathan discuss the zero trust security model and look at how to achieve an evidence-based security program by adopting a threat-informed defense in the...
-
Preparing for Russian State-Sponsored Cyberthreats, with Ken Towne and Adam Moore
Guest: Ken Towne, Adversary Emulation Engineer, and Adam Moore, Head of Adversary Research and Development, AttackIQ In the face of Russian aggression and with the risk of potential cyberattacks increasing, it’s time to make sure that your cyberdefense shields work. Join Ken Towne, Adversary...
-
Ransomware, Security Readiness, And Resilience, with Ted Harrington
Guest: Ted Harrington, Author of Amazon’s best seller Hackable In episode 10 of Think Bad, Do Good, Jonathan speaks with Ted Harrington, best-selling author of the book Hackable: How to Do Application Security Right, about the way attackers think, readiness and resilience, and how to live a...
-
What to Know, How to Prevent: menuPass, with Jose Barajas
Guest: Jose Barajas, Director of Global Sales Engineering, AttackIQ In episode 8 of Think Bad, Do Good, Jose Barajas and Jonathan Reiber discuss MITRE Engenuity’s Center for Threat-Informed Defense and AttackIQ’s emulation plan for menuPass. This plan will enable defenders to replicate tactics…
more -
Dimensional Fund Advisors on MITRE ATT&CK and Security Optimization, with Pete Luban
Guest: Pete Luban, Head of Information Security and IT Risk at Dimensional Fund Advisors Chief information security officers and security leaders all over the globe struggle with complexity. Complex socio-political risk; complex risk management organizations; and complex technologies. In Episode…
more -
AmerisourceBergen On Cybersecurity Risk And Effectiveness, with Kumar Chandramoulie
Guest: Kumar Chandramoulie, Vice President, Cyberdefense, Data, and Threat Management at AmerisourceBergen Kumar Chandramoulie is no stranger to challenge. As Vice President, Cyberdefense, Data, and Threat Management at AmerisourceBergen, Chandramoulie is responsible for planning his firm’s...
-
The National Cyber Power Index, with Julia Voo
Guest: Julia Voo, Cyber Fellow at the Belfer Center, Harvard University Julia Voo once auditioned for a part in Harry Potter because she wanted to go to Hogwarts. But it was much cooler to be a British foreign service officer in Beijing after Brexit covering China’s approach to cybersecurity…
more -
Defending Digital Democracy, with Harvard’s Belfer Center for Science and International Affairs
Guests: Maria Barsallo Lynch, Siobhan Gorman, and Robby Mook of Harvard’s Belfer Center for Science and International Affairs. Mis/Disinformation and the 2020 Presidential Election. In this episode of Think Bad Do Good, join cybersecurity and public affairs experts Robby Mook, Siobhan Gorman, and...
-
FIN6 MITRE Emulation Plan, with Jose Barajas
Guest: Jose Barajas, Director, Global Sales Engineering at AttackIQ Join Jonathan Reiber and Jose Barajas for Episode 4 of “Think Bad, Do Good” diving into the first adversary emulation plan developed at the Center for Threat Informed Defense. The target of this plan is none other than cybercrime...
-
Best Practices In Threat Informed Defense, with Ben Opel
Guest: Ben Opel, Director for Customer Success, AttackIQ Join Jonathan Reiber and Ben Opel for a discussion of threat-informed defense lessons learned from their time serving in the Department of Defense in episode 3 of Think Bad, Do Good. Reiber and Opel reflect on lessons from their two…
more -
How To Achieve Cybersecurity Effectiveness, with The Chertoff Group
Guests: Adam Isles, Principal, Chertoff Group; Kurt Alaybeyoglu, Senior Associate, Chertoff Group Less fear, uncertainty, and doubt. How can you optimize your cybersecurity investments to achieve maximum effectiveness? Listen to two of the world’s leading practitioners of cybersecurity and hear...
-
APT29 and Threat Informed Defense, with Jose Barajas
Guest Speaker: Jose Barajas, Technical Director, AttackIQ Welcome to the first episode of AttackIQ's Think Bad, Do Good. In this episode we discuss APT29, threat informed defense, and how to take on a "purple" team approach. With Jose Barajas, Technical Director at AttackIQ, Ben Opel, AttackIQ...
-
Purple Hats 2021: What Do a Simpsons Writer and TED Talk Speaker Have to Do Cybersecurity?
What do an Emmy-winning Simpsons writer and TED Talk speaker have to do with the practice of cybersecurity? They may not be certified in Purple Teaming, but they've both had to deal with pressure-cooker environments, challenge perceptions, and deliver innovative solutions time after time. Join…
more -
Purple Hats 2021: Putting MITRE ATT&CK into Practice: The “MAD” Certification Process
For years in cybersecurity, security teams lacked clarity about adversary tactics, techniques, and procedures and as a result, defenders stumbled in the dark as they tried in vain to defend their data. The result resembled swiss cheese: everyone from the financial sector to the U.S. military to...
-
Purple Hats 2021: A View from the US FDA: Cybersecurity in the Healthcare and Public Health Sectors
As medical devices become more digitally interconnected and interoperable, they can improve the care patients receive and create efficiencies in the health care system. However, medical devices, like computer systems, can be vulnerable to security breaches, potentially impacting the safety and...
-
Purple Hats 2021: Understanding the Threat Landscape for Financial Services
FIN6, a financially-motivated cybercrime group possibly of Russian origin, has been linked to attacks against point-of-sale systems in retail and hospitality sectors since at least 2015. The group is known to have used FrameworkPOS and GratefulPOS malware, deployed Ryuk and LockerGaga ransomware,...
-
Purple Hats 2021: Pioneering Threat Research: ATT&CK and the Center for Threat-Informed Defense
Since the publication of MITRE ATT&CK, MITRE Engenuity has been at the global forefront in fostering the practice of “threat-informed defense.” Since the founding of MITRE Engenuity’s Center for Threat-Informed Defense two years ago, the Center has brought industry leaders together to learn from...
-
Purple Hats 2021: The Journey to a Threat Informed Defense
How do you operationalize the concept of “cyber excellence” in your organization and move your program from being reactive to proactive and preventative? It takes an evolution of your technology stack, organizational structure, and processes. Join Marlys Rodgers, CISO of CSAA Insurance Group…
more -
Purple Hats 2021: Lessons from the Trenches
Since the field of cybersecurity began, teams have struggled to measure a clear return on cyberdefense investment. After years of focus on advanced technology procurement and workforce development, today there’s a shift occurring in cybersecurity practice away from “speeds and feeds” and towards...
-
Purple Hats 2021: How to Manage Risk in Health Systems
Against a backdrop of increasing cybersecurity risk — particularly ransomware and concurrent data exfiltration — CISOs in healthcare and public health (HPH) organizations are investing hundreds of billions of dollars in cybersecurity. Much of this is going to security controls that protect…
more -
Purple Hats 2021: Strategies for Building Operational Resiliency
The definition of resilient is “being able to withstand or recover quickly from difficult conditions.” In cybersecurity, resilience is “the ability to prepare, prevent, respond and successfully recover to the intended secure state during a crisis or after a security breach.” Learn how Clayton...
-
Purple Hats 2021: Cybersecurity Transformation in 2021 and Beyond
Faced with mounting attacks, tighter regulations, and greater budget scrutiny, cybersecurity teams have increasingly found themselves in strategic boardroom conversations. Yet, despite years of "blank check' investments in security controls, adversaries keep coming. What questions should business...
We're indexing this podcast's transcripts for the first time — this can take a minute or two. We'll show results as soon as they're ready.
No matches for "" in this podcast's transcripts.
No topics indexed yet for this podcast.
Loading reviews...
ABOUT THIS SHOW
AttackIQ’s podcast series, Think Bad, Do Good, brings together security researchers, informed defenders, and intelligence practitioners for discussions about how security teams can build a strong threat-informed defense strategy. Listen in for lively discussions on emerging strategic concepts, threats and emulation plans, optimizing your cybersecurity investments, and cybersecurity events in the news.About AttackIQ: Adversaries across the globe, from nation-states to criminal organizations, hold our businesses, democracy, and society at risk through cyberspace. Our mission at AttackIQ is to help solve that problem and make the world safe for compute.As the leading independent vendor of breach and attack simulation solutions, we built the industry’s first Security Optimization Platform for continuous security control validation and improving security program effectiveness and efficiency. We are trusted by leading organizations worldwide to identify security improvements and verify tha
HOSTED BY
Think Bad, Do Good Podcast
CATEGORIES
Loading similar podcasts...
Frequently Asked Questions
How many episodes does AttackIQ have?
AttackIQ currently has 47 episodes available on PodParley. New episodes are automatically indexed when they're published to the podcast feed.
What is AttackIQ about?
AttackIQ’s podcast series, Think Bad, Do Good, brings together security researchers, informed defenders, and intelligence practitioners for discussions about how security teams can build a strong threat-informed defense strategy. Listen in for lively discussions on emerging strategic concepts,...
How often does AttackIQ release new episodes?
AttackIQ has 47 episodes. Check the episode list to see recent publication dates and frequency.
Where can I listen to AttackIQ?
You can listen to AttackIQ on PodParley by clicking any episode. We provide an embedded audio player for direct listening, and you can also subscribe via your preferred podcast app using the RSS feed.
Who hosts AttackIQ?
AttackIQ is created and hosted by Think Bad, Do Good Podcast.
URL copied to clipboard!