Coffee and Security

Much ado about patching (as always this time of the month). 

In this episode we cover an upcoming feature from Microsoft, go over what to  expect today, and about why patch management is a thing for small  businesses. 

Tune in and listen until the end for a special offer for our listeners!    

You can find our one-week intro to building better businesses course at https://59.consulting

In today's episode we talk all about britches.. ok data breaches, and a  possible paradigm shift coming soon to cybersecurity that could prevent  many data breaches from ever happening.

In the news

• Microsoft Data Breach
• Okta Data Breach
• Another Google Vulnerability
• Sophos Vulnerability
• SonicWALL Vulnerability
• Fortinet Vulnerabilty

And then

• Microsoft rolls out Defender for Business to existing Microsoft 365 Business Premium subscribers
• A possible paradigm shift away from C.I.A. to D.I.E. (yeah I know that spells die)

Good cyber hygiene helps healthcare practices prevent harm like good medical hygiene helps prevent harm to patients.  

Practices that build up their immunity to cyber threats are 99% less likely to suffer cyber attacks. So tune in to learn how to get started.

Website: https://insula.tech/tag/coffee-and-security

When COVID struck, many physicians found themselves with far fewer patients on the schedule than before. Telehealth became a necessity. But based on the evidence we're seeing, it could be a huge business driver.  

For show notes and links to stories, check out our blog at https://insula.tech/tag/coffee-and-security

Has your business invested time in conducting a risk assessment in the past year? 

Tune in to today's episode to find out why you should be doing these more frequently, learn what the most used attack vector for ransomware is and find out how these are related.  

Show notes as always are at https://insula.tech/tag/coffee-and-security

Join me for a Conversation with a former colleague also turned business owner, David Levine of Restech Solutions, as we talk about small business cybersecurity.  Some great topics here including what small business owners need to know about IT and cybersecurity when they first get started.  

As always, you can find our show notes and news story links at the related post at https://insula.tech/tag/coffee-and-security

To get ahold of David @ Restech or check out his free content, head over to his website at https://restech.solutions

In 2022, threat actors and hackers are fine-tuning their attacks more than ever before. They are living in your network to collect and extract sensitive information, and then they are launching attacks.

It's time to fight hackers with hackers. Tune in to learn more about this cool topic

For show notes, check out our blog at https://insula.tech/tag/coffee-and-security

This week on our defense in depth series, we go over the Internet layer and how you can protect your devices both managed and unmanaged from becoming infected or phoning home (if they already are).  

Show notes as always at https://insula.tech/tag/coffee-and-security

Today, some heavy recommendations from the government entity CISA and a look into the next layer of our defense in depth strategy -- the network layer.

For show notes, see https://insula.tech/tag/coffee-and-security

STOP blaming your people for your data breaches and do something about it. Build your human firewall today using modern authentication techniques and role-specific bite-sized trainings to keep your culture of cybersecurity alive.

Show notes as always at our blog: https://insula.tech/tag/coffee-and-security

Our defense in depth series continues with layer 3, the application layer. Tune in to walk through this layer and important services to consider in your multi-layered cybersecurity defense strategy. Stay tuned throughout for important tips and tools to get you started.

For links and complete show notes, check out our blog at https://insula.tech/tag/coffee-and-security

Today, I talk about layer two of a multi-layered cybersecurity defense: devices. Stay tuned until the end to learn about a cool service you can offer your staff that may help retain them.

For show notes and to check out other episodes, here's our blog: https://insula.tech/tag/coffee-and-security

Today I talk about layered defense for cybersecurity controls. The art of selecting the best controls that matter to your business all starts with an assessment. Tune in today as I go through the first layer of a modern cybersecurity defensive strategy.

Reminder: not all of these will work for your business. Know thyself.  

Show notes at https://insula.tech/tag/coffee-and-security

Today's episode is all about cryptominers. Tune in to learn what these are and how to defend your business from them.

Show notes: https://insula.tech/tag/coffee-and-security

Special Video Edition:

-Watch on Spotify or YouTube at https://www.youtube.com/watch?v=2BtpmbO6SNo

Tune in to today's episode while I review 2021's biggest cybersecurity news, talk about the latest in the Apache Log4J vulnerability and a new patch, and discuss why the right tools and how they're used matters for your business.

For show notes and links discussed in the episode, here's our blog: https://insula.tech/tag/coffee-and-security

2022 Cybersecurity Predictions

Show notes: https://insula.tech/tag/coffee-and-security

Today: A Christmas wish, what we all hope for over the next few weeks, and Small Business Healthcare cybersecurity and compliance tips.

For show notes, check out https://insula.tech/tag/coffee-and-security

Network security starts with secure network architecture. Today's modern threats need a more modern approach to network detection and response (NDR) that evolves with the way we work and the way threat actors attack. On today's episode we'll check in on some of the high level aspects of what small businesses need to do to identify, detect, and recover from attacks using the network layer.

Show Notes: https://insula.tech/tag/coffee-and-security

Network security is a specialty within cybersecurity. One layer in a multi-layered approach to ensuring your business is ready for today's threat landscape. Tune in today for part 1 of 2 while I tell stories from a former life about my experience with secure network architecture and administration.

For show notes, check out our blog at https://insula.tech/tag/coffee-and-security

Zero-day critical vulnerability in Log4J causes massive concerns in security community while most others sleep like babies. At the end of last week (Dec 10th), this zero-day vulnerability was announced and given a critical 10 CVSS score by NIST based on its attributes. Tune in to hear about this vulnerability, upcoming patches for December, and more about running a vulnerability management program that works.

Show notes are here: https://insula.tech/tag/coffee-and-security

In this two-part episode I break mobile device security down and we chat about what is needed, why it's needed, and what you can do to protect yourself. Part 2 includes more detail about what you can do to protect yourself and what types of threats are out there specifically attacking mobile devices.

Show notes at https://insula.tech/tag/coffee-and-security

As threats continue to increase in the mobile smart phone market, so must the evolution of mobile threat protection. In today's episode, I talk a bit about what Mobile Threat Defense (MTD) is, how it's better than Mobile Device Management (MDM), and what is driving the need for this defense.

Show notes and links to news articles: https://insula.tech/tag/coffee-and-security

RMM tools, used primarily by Managed IT Service Providers to remotely manage and monitor their customer's environments, may not be patching well. I've come up with the top five reasons why they fail and what can be done to make them more effective in today's Coffee and Security podcast episode.

Show notes and links to RMM resources: https://insula.tech/tag/coffee-and-security

A tale of two phish is a true story where I discuss two recent phishing attacks, details about what makes them risky, and how businesses can start to defend themselves against them.

Show notes at https://insula.tech/tag/coffee-and-security

Happy Thanksgiving! Cybersecurity is always a challenge for businesses and consumers alike; however, there are certain times each year when the threat increases: Holidays. Threat actors rarely take the holidays off. In fact, holidays are when we typically see an increase in cyber attacks because of a lack of available staff and increased susceptibility to some types of scams. My advice, stay frosty.. and check out some additional tips below.

Check out show notes and links at https://insula.tech/tag/coffee-and-security/

Ever wonder why so many Microsoft 365 and Google Workspace customers are phished or compromised even when these companies are huge? While it is true the service provider bears some security responsibility for the infrastructure, you may be surprised to know that you are still responsible for securing and monitoring security for your 'tenant' in their software as a service solution. Today, I talk about one of the largest SaaS solutions, Microsoft 365, and a couple of other big ones (Google Workspace and Salesforce) and what you should be considering when securing your tenant.

Show notes as always on https://insula.tech/tag/coffee-and-security

While reading the news today I wondered what are some essential skills that every cybersecurity professional needs to have to be successful. Listen to today's episode or read below to find out more.

For show notes and links, check out our blog at https://insula.tech/tag/coffee-and-security/

An email server at the FBI was recently hacked and used to send spam warnings. And, the Qualys Security Conference is gearing up for a start; but before it starts some recommendations on what to include in your ransomware playbook from their CTSO.

Listen in to here about these recent events and what your business can start doing today.

Show notes at our blog https://insula.tech/tag/coffee-and-security/

In part 2 of Incident Response (IR) planning, join me as I go through the next two important parts of a cybersecurity incident response plan: response and recovery.  

Find out why you need to be looking for an IR firm now instead of waiting for the worst to happen.

Show notes as always can be found at our blog: https://insula.tech/tag/coffee-and-security/

In part 1 of Incident Response (IR) planning, join me as I go through the first two important parts of a cybersecurity incident response plan: prevention and detection.  Find out why you need to be looking for an IR firm now instead of waiting for the worst to happen.

As always, show notes and links found here: https://insula.tech/tag/coffee-and-security/ (when I have my coffee)

The Internet of things, or IoT, is a generic label given to the multitude of devices that can be networked to make our lives better. This includes devices like smart speakers, thermometers, connected appliances, and security cameras. With every device that we connect to our networks, it's essential that we understand the risks and work to protect our personal or business information from cyber threats.

As always, read more on our blog at https://insula.tech/tag/coffee-and-security/

Cybersecurity incidents in hospitals is on the rise. On today's episode, we'll talk about a few recent examples in the news, what hospitals and medical offices can do to avoid being in the headlines, and why as a consumer you should be more angry about this.

Show notes as always on our blog at https://insula.tech/tag/coffee-and-security/

Hear about a couple of recent events in the news and how cybersecurity code review could have prevented them.

As always, you can listen here and then feel free to read about it or get the links we discuss on our blog at https://insula.tech/tag/coffee-and-security/

Today, let's talk about building up your business's human firewall by implementing a culture of cybersecurity. What does it take? listen to find out!

Show notes as always can be found on our blog at https://insula.tech/tag/coffee-and-security/

What is smishing and what is a simple thing you can do about it? Find out on today's episode.

Show notes and links discussed in each episode can be found on our blog here: https://insula.tech/tag/coffee-and-security/

What was antivirus originally built for? Why isn't that effective any more? What should I be considering? Find out on today's episode of Coffee and Security.

Show notes and more can be found here on our blog: https://insula.tech/tag/coffee-and-security/

Tune in to today's episode to hear the most common passwords still used in the US, find out what Sweden did earlier this year that made the news regarding passwords, and hear tips about how you can upgrade your password game.

For written show notes and links referenced in the show, check out our blog here: https://insula.tech/tag/coffee-and-security/