As security is  primarily about  stopping  bad things  from happening, victories are often silent. At the same time, failures are often very public, so how can organizations tell when their security is paying off? In this episode, we are joined by guest speaker Laura Koetzle, Vice President and Group Director at Forrester and Robin Oldham, CEO of consulting firm Cydia, to discuss assessing the value of a result that produces nothing. Recorded on-site at SPHERE23.

As security is primarily about stopping bad things from happening, victories are often silent. At the same time, failures are often very public, so how can organizations tell when their security is paying off? In this episode, we are joined by guest speaker Laura Koetzle, Vice President and Group Director at Forrester and Robin Oldham, CEO of consulting firm Cydia, to discuss assessing the value of a result that produces nothing. Recorded on-site at SPHERE23.

080| The Power Of Putting Security Outcomes First

The time that an attacker spends on a network before attempting to achieve their objective is decreasing rapidly, making many organizations’ typical detection and response solutions ineffective. Speed is the key, but unfortunately the gap between detection and response is growing. In this episode, we are joined by WithSecure’s Threat Hunter Jojo O'Gorman and Principle Incident Response Consultant Mehmet Surmeli to discuss what we can do to solve these challenges. Read more &gt;&gt;  https://www.withsecure.com/en/expertise/resources/how-to-identify-your-response-gaps?utm_source=libsyn&amp;utm_medium=podcast&amp;utm_campaign=gl-pr-response-gap-tool Check out our Response Gap Assessment tool &gt;&gt;  https://www.withsecure.com/en/solutions/incident-readiness-and-response/identify-your-response-gap?utm_source=libsyn&amp;utm_medium=podcast&amp;utm_campaign=gl-pr-response-gap-tool

The time that an attacker spends on a network before attempting to achieve their objective is decreasing rapidly, making many organizations’ typical detection and response solutions ineffective. Speed is the key, but unfortunately the gap between detection and response is growing. In this episode, we are joined by WithSecure’s Threat Hunter Jojo O'Gorman and Principle Incident Response Consultant Mehmet Surmeli to discuss what we can do to solve these challenges. Read more &gt;&gt; <a href="https://www.withsecure.com/en/expertise/resources/how-to-identify-your-response-gaps?utm_source=libsyn&amp;utm_medium=podcast&amp;utm_campaign=gl-pr-response-gap-tool" rel="nofollow" target="_blank"> https://www.withsecure.com/en/expertise/resources/how-to-identify-your-response-gaps?utm_source=libsyn&amp;utm_medium=podcast&amp;utm_campaign=gl-pr-response-gap-tool</a> Check out our Response Gap Assessment tool &gt;&gt; <a href="https://www.withsecure.com/en/solutions/incident-readiness-and-response/identify-your-response-gap?utm_source=libsyn&amp;utm_medium=podcast&amp;utm_campaign=gl-pr-response-gap-tool" rel="nofollow" target="_blank"> https://www.withsecure.com/en/solutions/incident-readiness-and-response/identify-your-response-gap?utm_source=libsyn&amp;utm_medium=podcast&amp;utm_campaign=gl-pr-response-gap-tool</a>

079|(Mind the) Detection and Response Gap

John Grant

The development of new sustainable technologies undoubtedly benefits society, but it also opens the door to new cyber security challenges. For this episode, we were on-site at SPHERE23 with author John Grant to discuss the challenges for organizations to be sustainable and secure.

The development of new sustainable technologies undoubtedly benefits society, but it also opens the door to new cyber security challenges. For this episode, we were on-site at SPHERE23 with author John Grant to discuss the challenges for organizations to be sustainable and secure.

078| John Grant on the relationship between sustainability and cyber security

Stephen Robinson

Jessica Berlin

Russia's invasion of Ukraine changed the entire geopolitical landscape. For this episode, we were on-site at SPHERE23 with security and foreign policy analyst Jessica Berlin, and threat intelligence analyst Stephen Robinson, to discuss the use of cyber attacks and disinformation as policy instruments in the wake of the invasion. 

Russia's invasion of Ukraine changed the entire geopolitical landscape. For this episode, we were on-site at SPHERE23 with security and foreign policy analyst Jessica Berlin, and threat intelligence analyst Stephen Robinson, to discuss the use of cyber attacks and disinformation as policy instruments in the wake of the invasion.

077| Jessica Berlin and Stephen Robinson on the cyber front

Advanced persistent threats, or APTs, are generally seen as a sort of apex predator in the cyber threat landscape. And while they’re certainly noteworthy, their reputation can distort what makes them unique, and what they may have in common with other adversaries. In this episode, we’re joined by Senior Threat Intelligence Analyst Stephen Robinson, and Security Consultant Richard Suls, to shed some light on APTs and how we can protect ourselves against them. Read more:https://labs.withsecure.com/publications/no-pineapple-dprk-targeting-of-medical-research-and-technology-sector

Advanced persistent threats, or APTs, are generally seen as a sort of apex predator in the cyber threat landscape. And while they’re certainly noteworthy, their reputation can distort what makes them unique, and what they may have in common with other adversaries. In this episode, we’re joined by Senior Threat Intelligence Analyst Stephen Robinson, and Security Consultant Richard Suls, to shed some light on APTs and how we can protect ourselves against them. Read more:<a href="https://labs.withsecure.com/publications/no-pineapple-dprk-targeting-of-medical-research-and-technology-sector" rel="nofollow" target="_blank">https://labs.withsecure.com/publications/no-pineapple-dprk-targeting-of-medical-research-and-technology-sector</a>

076| What we get wrong (and right) about APTs

Security protects organizations from cyber attacks. However, studies show that limiting your understanding of security to this basic premise can hinder protection efforts or even other business goals. Instead of spending more and more on security to simply keep things running, maybe it’s time for a different approach. In this episode, we are joined by WithSecure Chief Information Security Officer Christine Bejerasco, and guest speaker Laura Koetzle, Vice President and Group Director at Forrester to discuss a strategy called outcome-based security.

Security protects organizations from cyber attacks. However, studies show that limiting your understanding of security to this basic premise can hinder protection efforts or even other business goals. Instead of spending more and more on security to simply keep things running, maybe it’s time for a different approach. In this episode, we are joined by WithSecure Chief Information Security Officer Christine Bejerasco, and guest speaker Laura Koetzle, Vice President and Group Director at Forrester to discuss a strategy called outcome-based security.

075| Winning with outcome-based security

Vulnerabilities and security gaps are increasingly being identified in software and applications daily. Attackers are often quick to act when any vulnerabilities are made known - even within minutes. You may have heard of the term patching in cyber security, but what is it exactly, and how does it figure into an organization's security posture? WithSecure security consultants Katie Inns and Antti Laatikainen join us to discuss all things patching.

Vulnerabilities and security gaps are increasingly being identified in software and applications daily. Attackers are often quick to act when any vulnerabilities are made known - even within minutes. You may have heard of the term patching in cyber security, but what is it exactly, and how does it figure into an organization's security posture? WithSecure security consultants Katie Inns and Antti Laatikainen join us to discuss all things patching.

074| Do you even patch bro?

In our last episode, we were joined by cyber security advisor Paul Brucciani and WithSecure Intelligence Researcher Andy Patel to discuss some notable 2022 infosec developments. Now that 2022 is in the rear-view mirror, all eyes are turning to the year ahead. What should we expect? Is there some disaster on the horizon for which we need to prepare? Conversely, are there any positive devlopments that we can look forward to? We're once again joined by Paul and Andy to discuss some of the trends we should look out for in 2023.

In our last episode, we were joined by cyber security advisor Paul Brucciani and WithSecure Intelligence Researcher Andy Patel to discuss some notable 2022 infosec developments. Now that 2022 is in the rear-view mirror, all eyes are turning to the year ahead. What should we expect? Is there some disaster on the horizon for which we need to prepare? Conversely, are there any positive devlopments that we can look forward to? We're once again joined by Paul and Andy to discuss some of the trends we should look out for in 2023.

073| 2023 - Looking Forward

As the year draws to a close, it’s time for us to review and reflect on notable infosec events and trends from 2022, and also what might happen in 2023. In this episode we’re joined by cyber security advisor Paul Brucciani and WithSecure Intelligence Researcher Andy Patel to hear their thoughts on the impact of Russia’s invasion of Ukraine on cyber security, what they think about the changes at Twitter, and other significant developments from the last 12 months. 

As the year draws to a close, it’s time for us to review and reflect on notable infosec events and trends from 2022, and also what might happen in 2023. In this episode we’re joined by cyber security advisor Paul Brucciani and WithSecure Intelligence Researcher Andy Patel to hear their thoughts on the impact of Russia’s invasion of Ukraine on cyber security, what they think about the changes at Twitter, and other significant developments from the last 12 months.

072| 2022 Wrap-Up

Until recently, AI-generated synthetic content has been more commonly used for gaming and art creation, where the tech is still relatively new, and pixel perfection is unnecessary. However, with the tech rapidly advancing in complexity and speed, it's probably only a matter of time before it's genuinely challenging to determine if something is fake or not. Unfortunately, this increase in technology will also provide many avenues for disinformation and other assorted nefariousness. Digital artist and YouTuber Nerdy Rodent and WithSecure Researcher Andy Patel join is to discuss how the technology is developing and its possible implications, good and bad.

Until recently, AI-generated synthetic content has been more commonly used for gaming and art creation, where the tech is still relatively new, and pixel perfection is unnecessary. However, with the tech rapidly advancing in complexity and speed, it's probably only a matter of time before it's genuinely challenging to determine if something is fake or not. Unfortunately, this increase in technology will also provide many avenues for disinformation and other assorted nefariousness. Digital artist and YouTuber Nerdy Rodent and WithSecure Researcher Andy Patel join is to discuss how the technology is developing and its possible implications, good and bad.

071| Deepfakin it: AI content in cyber attacks

Cyber Security Sauna brings you expert guests with sizzling insight into the latest information security trends and topics. WithSecure's Janne Kauhanen hosts the show to make sure you know all you need to about the hotter-than-ever infosec game. Join us as we sweat out the hot topics in security.

Mikko Hypponen is always so interesting to listen to.

Very interesting and timely discussion

From F-Secure, this podcast cuts through noise to deliver pure signal about cyber security. Don&#39;t miss the first episode with Mikko Hypponen.

Top-Notch Cyber Security Talk

Cyber Security Sauna

Cyber security has never been a hotter field to get into, but how do you gain the skills needed for landing a job? There are various paths to a cyber security career, from a formal university education to being a self-taught hacker. In this episode we hear from our guest about cyber security education from both a student and teacher perspective. Jesse Rasimus is a graduate of F-Secure's Cyber Security Academy who is now employed with F-Secure, and Tom Van de Wiele is an F-Secure consultant who also teaches infosec. They discuss university versus practical training, starting out in the field, dealing with imposter syndrome, and the cyber security careers of the future. Links: Episode 33 transcript

Cyber security has never been a hotter field to get into, but how do you gain the skills needed for landing a job? There are various paths to a cyber security career, from a formal university education to being a self-taught hacker. In this episode we hear from our guest about cyber security education from both a student and teacher perspective. <a href="https://twitter.com/nulllzero" rel="noopener noreferrer nofollow" target="_blank">Jesse Rasimus</a> is a graduate of F-Secure's Cyber Security Academy who is now employed with F-Secure, and <a href="https://twitter.com/0xtosh" rel="noopener noreferrer nofollow" target="_blank">Tom Van de Wiele</a> is an F-Secure consultant who also teaches infosec. They discuss university versus practical training, starting out in the field, dealing with imposter syndrome, and the cyber security careers of the future. Links: <a href="https://blog.f-secure.com/podcast-cyber-security-education/" rel="noopener nofollow" target="_blank">Episode 33 transcript</a>

033| Cyber Security Education from Student and Teacher Perspectives

Mikko Hypponen

Cyber war is a term we often hear tossed about, but is it just science fiction, or is it really happening? How worried should we be about the potential governmental offensive use of cyber power, and what constitutes a cyber weapon? Mikko Hypponen, Chief Research Officer of F-Secure, joins us this episode to discuss governmental APT actors, why words matter when it comes to cyber war, and why cyber weapons are the perfect weapons. Links: Episode 20 transcript

Cyber war is a term we often hear tossed about, but is it just science fiction, or is it really happening? How worried should we be about the potential governmental offensive use of cyber power, and what constitutes a cyber weapon? <a href="https://twitter.com/mikko" rel="noopener nofollow" target="_blank">Mikko Hypponen</a>, Chief Research Officer of F-Secure, joins us this episode to discuss governmental APT actors, why words matter when it comes to cyber war, and why cyber weapons are the perfect weapons. Links: <a href="https://blog.f-secure.com/podcast-cyber-warfare-mikko" rel="noopener nofollow" target="_blank">Episode 20 transcript</a>

020| Defining Cyber Warfare, with Mikko Hypponen

In this episode, veteran hacker and red teamer Tom Van de Wiele answers questions from our listeners. Tom covers the ethics of ethical hacking, how to prioritize solving the myriad of security issues companies face, why he includes a banana in his hacking kit, the importance of communication skills in his job, and much more. A great listen both for those already in the industry and those wanting to break in. Links: Episode 29 transcript Episode 2 - Breaking into Infosec: Advice from an Ethical Hacker 21 tips for getting started in ethical hacking

In this episode, veteran hacker and red teamer <a href="https://twitter.com/0xtosh" rel="noopener nofollow" target="_blank">Tom Van de Wiele</a> answers questions from our listeners. Tom covers the ethics of ethical hacking, how to prioritize solving the myriad of security issues companies face, why he includes a banana in his hacking kit, the importance of communication skills in his job, and much more. A great listen both for those already in the industry and those wanting to break in. Links: <a href="https://blog.f-secure.com/podcast-ask-a-hacker/" rel="noopener nofollow" target="_blank">Episode 29 transcript</a> <a href="https://blog.f-secure.com/podcast-infosec-advice-ethical-hacker/" rel="noopener nofollow" target="_blank">Episode 2 - Breaking into Infosec: Advice from an Ethical Hacker</a> <a href="https://blog.f-secure.com/so-you-want-to-be-an-ethical-hacker-21-ways/" rel="noopener nofollow" target="_blank">21 tips for getting started in ethical hacking</a>

029| Ask a Hacker: Red Teamer Answers Listener Questions

The cloud has changed the way we do business and the way we develop and deploy software and infrastructure. What are the security benefits of moving to the cloud, and what are the special concerns? What should companies do to ensure their cloud stays secure? Janne is joined by Laura Kankaala and Antti Vaha-Sipila of F-Secure to talk about what it means to be cloud native, why breaches happen in the cloud and much more. Links: Episode 21 transcript

The cloud has changed the way we do business and the way we develop and deploy software and infrastructure. What are the security benefits of moving to the cloud, and what are the special concerns? What should companies do to ensure their cloud stays secure? Janne is joined by <a href="https://twitter.com/lllarppa" rel="noopener nofollow" target="_blank">Laura Kankaala</a> and <a href="https://twitter.com/anttivs" rel="noopener nofollow" target="_blank">Antti Vaha-Sipila</a> of F-Secure to talk about what it means to be cloud native, why breaches happen in the cloud and much more. Links: <a href="https://blog.f-secure.com/podcast-cloud-security/" rel="noopener nofollow" target="_blank">Episode 21 transcript</a>

021| The Cloud: Security Benefits, Risks & Why You Should Use It

When people look for logos or symbols that emanate security, they often choose a lock. Sure, we know locks can be picked. But what would the world look like if attackers could just walk in without breaking their stride? After years of research, two F-Secure researchers have discovered that by exploiting design flaws in an electronic hotel lock system used in tens of thousands of hotels worldwide, they could create a master key to open any room in the building. In this episode, F-Secure’s Tomi Tuominen and Timo Hirvonen share their story, plus they get real with the unvarnished truth about hacking. The road wasn't easy, but these guys proved that after countless dead ends you can still come out on top.  Links:  Episode 7 blog post and transcript Hotel lock hack webpage &amp; FAQ Hotel lock hack presentation at Infiltrate 2018

When people look for logos or symbols that emanate security, they often choose a lock. Sure, we know locks can be picked. But what would the world look like if attackers could just walk in without breaking their stride? After years of research, two F-Secure researchers have discovered that by exploiting design flaws in an electronic hotel lock system used in tens of thousands of hotels worldwide, they could create a master key to open any room in the building. In this episode, F-Secure’s <a href="https://twitter.com/tomituominen?lang=en" rel="noopener nofollow" target="_blank">Tomi Tuominen</a> and <a href="https://twitter.com/TimoHirvonen?lang=en" rel="noopener nofollow" target="_blank">Timo Hirvonen</a> share their story, plus they get real with the unvarnished truth about hacking. The road wasn't easy, but these guys proved that after countless dead ends you can still come out on top.  Links:  <a href="https://business.f-secure.com/podcast-cyber-security-sauna-episode-7" rel="noopener nofollow" target="_blank">Episode 7 blog post and transcript</a> <a href="https://www.f-secure.com/en/web/business_global/electronic-lock-systems-are-vulnerable?_ga=2.195009389.1976490758.1525699061-556496135.1502796414" rel="noopener nofollow" target="_blank">Hotel lock hack webpage &amp; FAQ</a> <a href="https://vimeo.com/267613809" rel="noopener nofollow" target="_blank">Hotel lock hack presentation at Infiltrate 2018</a>

007| Popping Hotel Locks: The Hard Truth About Hacking

Andrea Barisani

With the disclosure of Meltdown and Spectre early this year, hardware security has come into focus. What are the special challenges of securing hardware versus software? What about securing high-risk industries like aviation and automotive? In this fascinating episode, Andrea Barisani, head of hardware security at F-Secure, shares why we should be thankful for Meltdown, why security problems do not equal safety problems, the one piece of advice he would give hardware manufacturers, and much more. Links: Episode 5 blog post

With the disclosure of Meltdown and Spectre early this year, hardware security has come into focus. What are the special challenges of securing hardware versus software? What about securing high-risk industries like aviation and automotive? In this fascinating episode, <a href="https://twitter.com/AndreaBarisani" rel="noopener nofollow" target="_blank">Andrea Barisani</a>, head of hardware security at F-Secure, shares why we should be thankful for Meltdown, why security problems do not equal safety problems, the one piece of advice he would give hardware manufacturers, and much more. Links: <a href="https://business.f-secure.com/podcast-cyber-security-sauna-episode-5" rel="noopener nofollow" target="_blank">Episode 5 blog post</a>

005| Demystifying Hardware Security, with Andrea Barisani

Operational security is about turning the tables, looking at things from an attacker's point of view, and identifying how your own actions are making you vulnerable. Listen as Erka Koivunen, CISO of F-Secure, gets us up to speed on opsec: selecting your appropriate threat model, why you should never trust the office network, and tips for "spring cleaning" your opsec (potato chips and nail polish are recommended tools). And don't miss his favorite story of an epic corporate opsec fail. Links: Episode 6 blog post &amp; transcript If you travel with your laptop, you probably should travel with nail polish Common Sense security tips from Erka

Operational security is about turning the tables, looking at things from an attacker's point of view, and identifying how your own actions are making you vulnerable. Listen as <a href="https://twitter.com/ekoivune" rel="noopener nofollow" target="_blank">Erka Koivunen</a>, CISO of F-Secure, gets us up to speed on opsec: selecting your appropriate threat model, why you should never trust the office network, and tips for "spring cleaning" your opsec (potato chips and nail polish are recommended tools). And don't miss his favorite story of an epic corporate opsec fail. Links: <a href="https://business.f-secure.com/podcast-cyber-security-sauna-episode-6" rel="noopener nofollow" target="_blank">Episode 6 blog post &amp; transcript</a> <a href="https://safeandsavvy.f-secure.com/2016/06/09/if-you-travel-with-your-laptop-you-should-probably-travel-with-nail-polish/" rel="noopener nofollow" target="_blank">If you travel with your laptop, you probably should travel with nail polish</a> <a href="https://issuu.com/editorhelsinki/docs/businessclass_oct17_jan18_epaper/34" rel="noopener nofollow" target="_blank">Common Sense security tips from Erka</a>

006| Spring Cleaning for Opsec

Phishing is one of today's biggest cyber security issues, a go-to tactic for threat actors. It's simple and effective, and perhaps that's why it has become such a source of frustration for companies. Kayleigh O'Donovan of MWR Infosecurity's Phishd team joins the show to talk about how phishers play with your emotions to get you to click, how to spot a phishing email, how phishing simulation can help companies reduce their click rates, and more.  Links:  Episode 25 transcript

Phishing is one of today's biggest cyber security issues, a go-to tactic for threat actors. It's simple and effective, and perhaps that's why it has become such a source of frustration for companies. Kayleigh O'Donovan of MWR Infosecurity's <a href="https://www.phishd.com/" rel="noopener nofollow" target="_blank">Phishd</a> team joins the show to talk about how phishers play with your emotions to get you to click, how to spot a phishing email, how phishing simulation can help companies reduce their click rates, and more.  Links:  <a href="https://blog.f-secure.com/podcast-phishing/" rel="noopener nofollow" target="_blank">Episode 25 transcript</a>

025| The Psychology of Phishing

The internet seems to be changing from being a relatively unrestricted space into something more regulated. More countries are implementing policies that restrict or filter the way their citizens experience the online world. Is the internet we know and love breaking up into many internets along geographical lines? Is true internet freedom a thing of the past? F-Secure's Tom Van de Wiele joins Janne to talk about digitally controlling regimes, bypassing those controls, and why consuming a healthy information diet is important for all of us. Links: Episode 31 transcript

The internet seems to be changing from being a relatively unrestricted space into something more regulated. More countries are implementing policies that restrict or filter the way their citizens experience the online world. Is the internet we know and love breaking up into many internets along geographical lines? Is true internet freedom a thing of the past? F-Secure's <a href="https://twitter.com/0xtosh?lang=en" rel="noopener nofollow" target="_blank">Tom Van de Wiele</a> joins Janne to talk about digitally controlling regimes, bypassing those controls, and why consuming a healthy information diet is important for all of us. Links: <a href="https://blog.f-secure.com/podcast-internet-freedom/" rel="noopener nofollow" target="_blank">Episode 31 transcript</a>

031| Filtered & Fragmented: Is True Internet Freedom a Thing of the Past?

Steve Lord

The Internet of Things promises futuristic smart homes, energy savings and efficiencies, and improvements to health and well-being. But the IoT still has a long way to go before we can safely enjoy these benefits - currently, it threatens our security and privacy. Steve Lord, a 20-year industry veteran and director at Mandalorian, joins the show to talk about the IoT, from smart cars and TVs to Amazon Alexa and Apple Health. You'll learn why companies love your data, the biggest misconception about the IoT, and the one thing you can do to stay secure if you own a smart device. Links: Episode 4 blog post You Actually Own Your Device, and Other Myths About the IoT F-Secure Report: Pinning Down the IoT Corey Doctorow, The Coming War on General Computation

The Internet of Things promises futuristic smart homes, energy savings and efficiencies, and improvements to health and well-being. But the IoT still has a long way to go before we can safely enjoy these benefits - currently, it threatens our security and privacy. <a href="https://twitter.com/stevelord" rel="noopener nofollow" target="_blank">Steve Lord</a>, a 20-year industry veteran and director at Mandalorian, joins the show to talk about the IoT, from smart cars and TVs to Amazon Alexa and Apple Health. You'll learn why companies love your data, the biggest misconception about the IoT, and the one thing you can do to stay secure if you own a smart device. Links: <a href="https://business.f-secure.com/podcast-cyber-security-sauna-episode-4" rel="noopener nofollow" target="_blank">Episode 4 blog post</a> <a href="https://safeandsavvy.f-secure.com/2018/03/09/you-actually-own-your-iot-device-and-other-myths-about-the-iot/" rel="noopener nofollow" target="_blank">You Actually Own Your Device, and Other Myths About the IoT</a> <a href="https://fsecureconsumer.files.wordpress.com/2018/01/f-secure_pinning-down-the-iot_final.pdf" rel="noopener nofollow" target="_blank">F-Secure Report: Pinning Down the IoT</a> <a href="https://www.youtube.com/watch?v=gbYXBJOFgeI" rel="noopener nofollow" target="_blank">Corey Doctorow, The Coming War on General Computation</a>

004| Security, Privacy and the IoT, with Steve Lord

They say that the best defense is a good offense, as football fans or anyone that’s played a game of Risk might agree. But how does this idea look when you apply it to cyber security? F-Secure Principal Security Consultant Tom Van de Wiele joins this episode of Cyber Security Sauna to talk about offensive and defensive approaches to cyber security, and how defenders can use these strategies to protect their systems, operations and data. Links: Episode 19 transcript F-Secure Incident Response Report

They say that the best defense is a good offense, as football fans or anyone that’s played a game of Risk might agree. But how does this idea look when you apply it to cyber security? F-Secure Principal Security Consultant <a href="https://twitter.com/0xtosh" rel="noopener nofollow" target="_blank">Tom Van de Wiele</a> joins this episode of Cyber Security Sauna to talk about offensive and defensive approaches to cyber security, and how defenders can use these strategies to protect their systems, operations and data. Links: <a href="https://blog.f-secure.com/podcast-offense-defense" rel="noopener nofollow" target="_blank">Episode 19 transcript</a> <a href="http://images.secure.f-secure.com/Web/FSecure/%7B4bd84317-1b99-4bb0-bc5a-a04e1d12c020%7D_f-secure-incident-response-report.pdf" rel="noopener nofollow" target="_blank">F-Secure Incident Response Report</a>

019| The Best Defense is Good Offensive Security

Passwords. You plug them into your accounts and the services you use at work, you try little tricks to make them more unique, but have you ever wondered what a hacker thinks of your passwords? For episode 13, ethical hacker Jan Wikholm joins us to talk about passwords – how he cracks them in his job at F-Secure, the tricks hackers know you're using, and what you should do to keep your credentials safe. Jan also fills us in on hashing, how he does brute forcing, how companies should protect their users' passwords, and how to create a secure password you can actually still remember. Links: Episode 13 transcript

Passwords. You plug them into your accounts and the services you use at work, you try little tricks to make them more unique, but have you ever wondered what a hacker thinks of your passwords? For episode 13, ethical hacker <a href="https://twitter.com/unfo" rel="noopener nofollow" target="_blank">Jan Wikholm</a> joins us to talk about passwords – how he cracks them in his job at F-Secure, the tricks hackers know you're using, and what you should do to keep your credentials safe. Jan also fills us in on hashing, how he does brute forcing, how companies should protect their users' passwords, and how to create a secure password you can actually still remember. Links: <a href="https://blog.f-secure.com/podcast-passwords-hacker-cracking-protecting" rel="noopener nofollow" target="_blank">Episode 13 transcript</a>

013| Passwords: A Hacker's Take on Cracking & Protecting Your Creds

How can companies know if their security investments are actually working? Getting attacked is the ultimate test, but hiring a red team is a less disruptive way to find out. These guys rely on technical chops, acting skills and pure creativity to engage in an all-out attack on a company’s defenses. Joining us this episode is Tom Van de Wiele, Principal Security Consultant at F-Secure, to talk about how red teaming can help companies improve their security posture, his tricks for hustling his way into a company, and why the coffee machine is a red teamer's best friend while on a job (but not for the caffeine). Be warned: You’ll never look at strangers around your office the same way again. Links: Episode 12 transcript Video - The Value of Red Teaming, with Tom Van de Wiele

How can companies know if their security investments are actually working? Getting attacked is the ultimate test, but hiring a red team is a less disruptive way to find out. These guys rely on technical chops, acting skills and pure creativity to engage in an all-out attack on a company’s defenses. Joining us this episode is <a href="https://twitter.com/0xtosh" rel="noopener nofollow" target="_blank">Tom Van de Wiele</a>, Principal Security Consultant at F-Secure, to talk about how red teaming can help companies improve their security posture, his tricks for hustling his way into a company, and why the coffee machine is a red teamer's best friend while on a job (but not for the caffeine). Be warned: You’ll never look at strangers around your office the same way again. Links: <a href="https://blog.f-secure.com/podcast-adventures-red-teaming" rel="noopener nofollow" target="_blank">Episode 12 transcript</a> <a href="https://www.youtube.com/watch?v=3SRTLZ9HMpQ&amp;t=1429s" rel="noopener nofollow" target="_blank">Video - The Value of Red Teaming, with Tom Van de Wiele</a>

012| Adventures in Red Teaming

Cyber security is relevant for everyone. Not everyone realizes it though, and not everyone understands what those in the infosec industry take for granted. How should security-minded individuals communicate with friends, relatives, colleagues and the general public about this important topic? What are the misconceptions regular folks often have about infosec, and what could we in the industry be doing better? Security consultant Laura Kankaala joins Janne to discuss. Links: Episode 30 transcript

Cyber security is relevant for everyone. Not everyone realizes it though, and not everyone understands what those in the infosec industry take for granted. How should security-minded individuals communicate with friends, relatives, colleagues and the general public about this important topic? What are the misconceptions regular folks often have about infosec, and what could we in the industry be doing better? Security consultant <a href="https://twitter.com/lllarppa?lang=en" rel="noopener noreferrer nofollow" target="_blank">Laura Kankaala</a> joins Janne to discuss. Links: <a href="https://blog.f-secure.com/podcast-talking-infosec/" rel="noopener nofollow" target="_blank">Episode 30 transcript</a>

030| Talking Infosec to Non-Infosec Folks

Disinformation. Fake news. Social media manipulation. Lately another dark side of the internet has come into focus - its use as a tool for deception. Technologies like machine learning and artificial intelligence are being employed to play hoaxes and mislead on purpose. Seeing is no longer believing - and moving forward, it's only going to get harder to distinguish facts from falsehoods.  Andy Patel from F-Secure's Artificial Intelligence Center of Excellence has been studying this phenomenon. He joins Janne in this episode to share what he's learned about Twitter bots, deepfakes, voice cloning and the tools that make it all possible. Do concerns about these technologies outweigh the benefits, and how will they affect society? Links: Episode 11 transcript Andy's Twitter research

Disinformation. Fake news. Social media manipulation. Lately another dark side of the internet has come into focus - its use as a tool for deception. Technologies like machine learning and artificial intelligence are being employed to play hoaxes and mislead on purpose. Seeing is no longer believing - and moving forward, it's only going to get harder to distinguish facts from falsehoods.  <a href="https://twitter.com/r0zetta" rel="noopener nofollow" target="_blank">Andy Patel</a> from F-Secure's Artificial Intelligence Center of Excellence has been studying this phenomenon. He joins Janne in this episode to share what he's learned about Twitter bots, deepfakes, voice cloning and the tools that make it all possible. Do concerns about these technologies outweigh the benefits, and how will they affect society? Links: <a href="https://blog.f-secure.com/podcast-ai-deliberate-deception" rel="noopener nofollow" target="_blank">Episode 11 transcript</a> <a href="https://labsblog.f-secure.com/tags/twitter/" rel="noopener nofollow" target="_blank">Andy's Twitter research</a>

011| The Rise of AI and Deliberate Deception

Supply chain attacks are on the increase, with attackers abusing the trust we place in vendors and software. Why are these attacks growing, and what can companies do about them? Jyrki Huhta, senior security consultant at F-Secure, joins the show to share his thoughts on these devastating attacks and why "trust but verify" should be the motto for preventing them. Links: Episode 28 transcript

Supply chain attacks are on the increase, with attackers abusing the trust we place in vendors and software. Why are these attacks growing, and what can companies do about them? <a href="https://twitter.com/jyrkihuhta" rel="noopener nofollow" target="_blank">Jyrki Huhta</a>, senior security consultant at F-Secure, joins the show to share his thoughts on these devastating attacks and why "trust but verify" should be the motto for preventing them. Links: <a href="https://blog.f-secure.com/podcast-supply-chain-attacks/" rel="noopener nofollow" target="_blank">Episode 28 transcript</a>

028| When the Well is Poisoned: The Devastation of Supply Chain Attacks

The summer holiday season is upon us, and people are looking forward to trading their daily workplace grind for a new adventure. Traveling is always exciting, but it takes you out of your comfort zone, and that gives thieves and criminals opportunities to exploit you. F-Secure principal security consultant Tom Van de Wiele is back to tell us how we can keep our devices and data safe while enjoying a fabulous vacation. Are the kids safe from strangers when playing Minecraft on the hotel WiFi? Is it OK to use Bluetooth in your rental car? What are the most common vacation scams to watch out for? Don't miss this episode, complete with Tom's checklist for what to pack. Links: Episode 9 transcript How You Can Travel Like an Ethical Hacker: Do's and Don'ts

The summer holiday season is upon us, and people are looking forward to trading their daily workplace grind for a new adventure. Traveling is always exciting, but it takes you out of your comfort zone, and that gives thieves and criminals opportunities to exploit you. F-Secure principal security consultant <a href="https://twitter.com/0xtosh" rel="noopener nofollow" target="_blank">Tom Van de Wiele</a> is back to tell us how we can keep our devices and data safe while enjoying a fabulous vacation. Are the kids safe from strangers when playing Minecraft on the hotel WiFi? Is it OK to use Bluetooth in your rental car? What are the most common vacation scams to watch out for? Don't miss this episode, complete with Tom's checklist for what to pack. Links: <a href="https://blog.f-secure.com/podcast-opsec-tips-vacation-travel" rel="noopener nofollow" target="_blank">Episode 9 transcript</a> <a href="https://safeandsavvy.f-secure.com/2018/06/28/how-you-can-holiday-like-an-ethical-hacker/" rel="noopener nofollow" target="_blank">How You Can Travel Like an Ethical Hacker: Do's and Don'ts</a>

009| Top OpSec Tips for Vacation Travel

Over the past few years, ransomware stole headlines as the biggest malware threat to worry about. Consumers and businesses alike were being hit and forced to shell out money to retrieve their files. But the cybers never stand still, and neither does malware. Nowadays ransomware is being eclipsed by new trends. F-Secure Labs researchers Paivi Tynninen and Jarkko Turkulainen join us to explain why ransomware is on the decline, and what’s taking its place. Listen for the story on cryptojacking and the current world of cybercrime. Links: Episode 10 transcript 2016 study: Evaluating the Customer Journey of Crypto-Ransomware

Over the past few years, ransomware stole headlines as the biggest malware threat to worry about. Consumers and businesses alike were being hit and forced to shell out money to retrieve their files. But the cybers never stand still, and neither does malware. Nowadays ransomware is being eclipsed by new trends. F-Secure Labs researchers Paivi Tynninen and Jarkko Turkulainen join us to explain why ransomware is on the decline, and what’s taking its place. Listen for the story on cryptojacking and the current world of cybercrime. Links: <a href="https://business.f-secure.com/podcast-ransomware-cryptojacking-cybercrime" rel="noopener nofollow" target="_blank">Episode 10 transcript</a> <a href="https://safeandsavvy.f-secure.com/2016/07/18/why-these-online-criminals-actually-care-about-your-convenience/" rel="noopener nofollow" target="_blank">2016 study: Evaluating the Customer Journey of Crypto-Ransomware</a>

010| Ransomware Out, Cryptojacking In? Latest Cybercrime Trends

Following in the footsteps of GDPR, the US is seeing more progressive data privacy laws coming down, with the new California Consumer Privacy Act leading the charge. What does the CCPA mean for consumers and for companies? What can the US learn from GDPR? F-Secure's Timo Laaksonen, previously head of F-Secure's consumer business in North America, and Hannes Saarinen, F-Secure's data protection officer join this episode to discuss the new law and compare and contrast it with GDPR. Links: Episode 32 transcript TechCrunch: Silicon Valley is terrified of California's privacy law

Following in the footsteps of GDPR, the US is seeing more progressive data privacy laws coming down, with the new California Consumer Privacy Act leading the charge. What does the CCPA mean for consumers and for companies? What can the US learn from GDPR? F-Secure's <a href="https://twitter.com/CloudTimo" rel="noopener noreferrer nofollow" target="_blank">Timo Laaksonen</a>, previously head of F-Secure's consumer business in North America, and <a href="https://www.linkedin.com/mynetwork/heathrow-redirect/?isSendInvite=true" rel="noopener noreferrer nofollow" target="_blank">Hannes Saarinen</a>, F-Secure's data protection officer join this episode to discuss the new law and compare and contrast it with GDPR. Links: <a href="https://blog.f-secure.com/podcast-ccpa-privacy-law/" rel="noopener nofollow" target="_blank">Episode 32 transcript</a> <a href="https://techcrunch.com/2019/09/19/silicon-valley-terrified-california-privacy-law/" rel="noopener nofollow" target="_blank">TechCrunch: Silicon Valley is terrified of California's privacy law</a>

032| How California's New Privacy Law Strikes Where the Pain Is

If you're looking for love nowadays, you'll likely turn to an online dating app. But what do these apps mean for your security? What privacy concessions are you making when you swipe? How does your online behavior impact your real life? Sean Sullivan joins Janne this episode to discuss the balancing act of maintaining your privacy while finding a match, avoiding romance scams and the tradeoffs you're making when using Tinder and apps like it. Links:  Episode 18 transcript FBI Internet Crime Complaint Center (IC3) AARP Scams &amp; Fraud page DTR podcast - Mixed Signals episode

If you're looking for love nowadays, you'll likely turn to an online dating app. But what do these apps mean for your security? What privacy concessions are you making when you swipe? How does your online behavior impact your real life? <a href="https://twitter.com/5ean5ullivan" rel="noopener nofollow" target="_blank">Sean Sullivan</a> joins Janne this episode to discuss the balancing act of maintaining your privacy while finding a match, avoiding romance scams and the tradeoffs you're making when using Tinder and apps like it. Links:  <a href="https://blog.f-secure.com/podcast-online-dating" rel="noopener nofollow" target="_blank">Episode 18 transcript</a> <a href="https://www.ic3.gov/default.aspx" rel="nofollow" target="_blank">FBI Internet Crime Complaint Center (IC3)</a> <a href="https://www.aarp.org/money/scams-fraud/" rel="noopener nofollow" target="_blank">AARP Scams &amp; Fraud page</a> <a href="https://creative.gimletmedia.com/episode/mixed-signals/" rel="noopener nofollow" target="_blank">DTR podcast - Mixed Signals episode</a>

018| Online Dating and Trading Data for Love (It's Complicated)

The best podcast episodes on Startups. For anyone working in a startup, or anyone interested in the incredible stories behind how people built companies like Instagram, and Facebook. Offering both practical advice and insights, as well as the stories for how many of the biggest startups got to where they are today. Add episodes you're interested into your queue below!

OwlTail

Best Startups Podcasts

The best podcast episodes on parenting. Interviewing experts and talking through common issues surrounding parenting. This topic is filled with important lessons and insights for anyone listening. Add episodes you're interested into your queue below!