Safe Mode Podcast

In the latest episode of Safe Mode, we talk to Peter Anaman, principal investigator in Microsoft’s Digital Crimes Unit. Peter takes us on a deep dive on how the Digital Crimes Unit (DCU) has morphed since its inception in 2008. We'll explore how investigative approaches have evolved over the years and discuss how cybercriminals are adapting in response to disruptive actions. In our reporter chat, Greg Otto talks with Christian Vasquez about Cape, a new mobile phone company looking to change the privacy game with a hardened phone that doesn’t keep metadata, while also adhering to the strict U.S. criminal and national security laws. LINK: https://cyberscoop.com/cape-phone-privacy-calea-tracking/

In this episode, Greg Otto chats with David Brumley, an offensive cybersecurity professor at Carnegie Mellon and CEO of Mayhem Security, as he is collaborating with the FAA and airplane manufacturers to tackle critical software security challenges in the aerospace industry. David delves into the most pressing cybersecurity threats facing aircraft today, examines the types of software currently in use on airplanes, and highlights areas of concern within the broader aerospace sector. He also discusses potential strategies the FAA could employ to strengthen cybersecurity in aviation. Also in this episode: ThreatLocker co-founder and CEO Danny Jenkins joins SNG host Wyatt Kash in a sponsored podcast discussion on why zero trust and least privilege access are foundational to how critical infrastructure enterprises should secure their operations today. This segment was sponsored by ThreatLocker. Greg also chats with Tim Starks about the latest cybersecurity news related to the incoming Trump administration. LINK: https://cyberscoop.com/dhs-nominee-kristi-noem-cyber-grants-trump-admin/

In this conversation, Casey Bleeker, CEO of SurePath AI, a leader in generative AI security, delves into the evolving landscape of AI regulation in the U.S. He discusses the potential for varying regulations across states, akin to current data privacy laws. The challenges of creating a cohesive national strategy are highlighted, along with the need for robust governance frameworks for generative AI. Further, Casey emphasizes the importance of transparency and consumer protection, addressing how companies can balance innovation with compliance.

In case you didn't have the chance to attend CyberTalks, we have the keynote address from the event: National Cyber Director Harry Coker highlighted the White House's focus on strategy and policy to address internet routing vulnerabilities, particularly with the Border Gateway Protocol (BGP). Coker emphasized the importance of Resource Public Key Infrastructure (RPKI) for authenticating BGP routing information, acknowledging its slow adoption and implementation challenges, but reported progress with expectations for significant federal coverage by year's end. In our reporter chat, Greg Otto talks with Tim Starks about his story examining the legal barriers anti-spyware advocates are dealing with in a number of high-profile court cases aimed at bringing victims justice. LINK: https://cyberscoop.com/spyware-court-cases-nso-group-meta-whatsapp-apple/

Sean McNee, Head of Threat Research at DomainTools, shares his expertise on how China is monitoring the Russia-Ukraine conflict to strategize its potential moves regarding Taiwan. He delves into the increasing cyber threats from China, including espionage operations like those from the Typhoon group. Derek B. Johnson discusses the U.S. government's efforts to regulate data brokers and protect personal data from foreign adversaries, emphasizing the urgency for stronger privacy laws to safeguard individual rights.

This episode of Safe Mode explores the critical issue of software supply chain security with Saša Zdjelar, ReversingLabs' chief trust officer. Discover why the hidden components of commercial off-the-shelf software pose significant risks to enterprises and how current security practices fall short. We'll discuss the explosive growth in breaches due to third-party software, the limited utility of Software Bill of Materials (SBOMs), and the need for more comprehensive security assessments. Saša will share insights on how to effectively "open the black box," enabling companies to identify threats and ensure compliance before deploying applications. In our reporter chat, CyberScoop senior reporter Tim Starks talks with Greg Otto about the indictments brought against Anonymous Sudan. LINK: https://cyberscoop.com/alleged-anonymous-sudan-leaders-charged-prolific-gangs-tool-disabled/

How can small nonprofits and civic organizations defend themselves against some of the most insidious malware on the planet? By reaching out to Elijah Baucom. The director of Citizen Clinic at UC Berkeley, Baucom runs a public-interest cybersecurity program that trains students to support organizations in defending against cyber threats. A digital security expert and educator, Baucom talks with Greg Otto about making cybersecurity resources accessible to all students and vulnerable groups, drawing on his extensive background in management consulting and network engineering. In our reporter chat, Greg talks with Derek Johnson about the work OpenAI is doing to prevent malicious actors from user generative AI in their schemes. LINK: https://cyberscoop.com/openai-threat-report-foreign-influence-generative-ai/

Since 2022, Mandiant has tracked North Korean IT workers who, posing as non-North Koreans, secure employment in various industries to fund DPRK's weapons programs, often engaging in cyber intrusions with the help of foreign facilitators. In this episode, CyberScoop Editor-in-Chief Greg Otto talks with Mandiant’s Michael Barnhart on what is going on in terms of North Korea’s goals, and how organizations can take precautions to prevent remote worker fraud. Greg also talks to CyberScoop reporter AJ Vicens on the latest LockBit takedown, which was conducted by a host of different countries. LINK: https://cyberscoop.com/russian-cybercrime-raids-cryptex-uaps/

In a captivating discussion, John Fokker, Head of Threat Intelligence at Trellix and a leading expert on ransomware-as-a-service, shares insights on the evolving cybercrime landscape. AJ Vicens, a cybersecurity reporter, dives into the Snowflake breach, exploring how a notorious cybercriminal is facing increasing pressure from law enforcement. The conversation also highlights how AI is reshaping threat tactics, with criminals experimenting with new tools while law enforcement struggles to keep up. A must-listen for anyone interested in the future of cybersecurity!

AI is transforming how companies secure their IT infrastructure, especially in industries like airlines, health care, retail, and telecommunications, which rely on applications and APIs for seamless digital experiences. However, there's a risk of companies improperly deploying AI tools or using insecure vendors, potentially leading to widespread data breaches and operational outages. CyberScoop Editor-in-Chief Greg Otto talks with F5 Networks CTO Kunal Anand about the increasing challenges in IT security and complexity as more AI applications are adopted and what companies should focus on to safeguard their systems as policies and regulations evolve. CyberScoop reporter Derek B. Johnson also sits down with Greg to talk about a congressional hearing that heavily focused on cybersecurity issues for election officials ahead of November.