Skip to content
Sign in
Artwork for Cyber All Day
TechnologyBusinessExplicit

Cyber All Day

Michael VIRGONE

Cybersecurity Podcast

Play
Open in
  • 4 episodes
  • Avg 33 min
  • English

Episodes 4

NewestOldestLongest
All4Unplayed4In progress0Played0
  • #3
    Monday · 49 min

    MSSP SOC reporting has a metrics problem #03

    First part of my conversation with Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment. CHAPTERS (00:00) - In this episode & intro (01:20) - Dave’s introduction (04:34) - Dave jokes that he “tortures” vendors for a living (07:47) - The story behind his talk at Security BSides London, “You Scored 46” - and why SOC metrics matter (12:34) - For the purposes of his talk, he went to AI and asked for a monthly service delivery report + scope + inventory (15:57) - AI averages the internet, vendor claims & pure filler slides (17:00) - The industry doesn't know how to measure SOC performance: MSSP economics & honesty (24:30) - Those monthly service delivery meetings should be more about what is happening rather than the stats (30:29) - Goodhart’s Law: when metrics create the behaviour you want to avoid (33:28) - The MSSP value paradox: they want to bring value, but it's good to have “boring customers” too (38:59) - Why we need to keep clarifying the terminology: alerts, incidents & events (42:52) - What is even an incident? It depends who you ask: security vs data incidents GUEST Dave MCKENZIE, Cyber Risk Reducer, at Cyber Increment LinkedIn: https://www.linkedin.com/in/davewmckenzie/ HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io Website: https://cyberallday.io/ ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

  • #2
    August 17 · 38 min

    What is wrong with cybersecurity marketing #02

    Second part of my conversation with Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr, Conference Organizer of multiple BSides events, with a background in global threat response. CHAPTERS (02:24) - A lot of teams in cybersecurity marketing hire great marketing people who know absolutely bugger all about cybersecurity (04:29) - The problems with absolutes (09:08) - Product claims and their limitations (what works on paper vs. what actually works) (11:25) - Sam's thoughts: “I think authentic is the word I always want to go with” (14:12) - Being honest about where a product isn't strong enough (including walking away from a deal) (18:24) - The balance between what you say you do, what you actually do and what somebody actually needs (21:25) - Building products with a finite amount of engineering resources (customer requests, roadmaps and validating ideas) (24:42) - The information candidates give away during interviews (CVs, LinkedIn, background and what they reveal) (27:13) - Speaking to people on the ground (customers, Gong transcripts and cybersecurity events) (28:09) - The value of cybersecurity events for marketing, product and sales (B-Sides, grassroots events vs. RSA and Black Hat) (30:00) - Talking to people outside your product bubble (red team, offensive security, SOC, etc.) (31:44) - Fake companies and fake jobs (35:58) - Sam's 2020 example: when she halted a product release because it wasn't ready (37:13) - The importance of speaking to people more (getting outside the vendor bubble) (37:59) - The message to remember: stop saying absolutes, don't scare people, authenticity matters GUEST Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr LinkedIn: https://www.linkedin.com/in/safesecs/ HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io Website: https://cyberallday.io/ ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

  • #1
    August 17 · 38 min

    A real-world deepfake job applicant #01

    First part of my conversation with Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr, Conference Organizer of multiple BSides events, with a background in global threat response. CHAPTERS (03:06) - Real-life example: the deepfake job applicant. What happened during the interview (05:21) - Why a deepfake may be used for a job interview (salary differences, subcontracting, etc.) (07:47) - This candidate looked great on paper (CV, LinkedIn, job description, covering email) (08:36) - The red flags that started to add up (new LinkedIn profile, Romania, skills and experience) (10:32) - The Romanian language odd situation. The candidate didn't want to switch languages (15:15) - Deepfakes getting better and cheaper (16:30) - How attackers can prepare for interviews with AI (research, LinkedIn, prompts) (19:03) - In this particular situation, the technology wasn't the problem, it was the preparation (21:19) - How to mitigate the risk (job descriptions, identity verification, etc.) (26:02) - The information candidates give away (CVs, LinkedIn, previous employers, etc.) (31:44) - Fake companies and fake jobs (35:31) - Sam's message, and as the technology gets better: what can companies actually do GUEST Samantha SWIFT, Chief Marketing Officer at Cyberr and Heelr LinkedIn: https://www.linkedin.com/in/safesecs/ HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io Website: https://cyberallday.io/ ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

  • August 13 · 6 min

    Welcome to Cyber All Day #00

    A short introduction to Cyber All Day: who I am, what the podcast is about, why I created it, and why I follow a two-conversation format. CHAPTERS (00:00) - Introduction to Cyber All Day (00:27) - About me and how I approach the podcast (01:51) - What is Cyber All Day about? (02:26) - The two-episode format and how I approach conversations (04:30) - The vibe, where to find the podcast, and timestamps (05:54) - Outro GUEST None - Episode 0 HOST Michael VIRGONE LinkedIn: https://www.linkedin.com/in/michaelvirgone/ GET IN TOUCH If something in an episode made you think, or you have an idea for a conversation, feel free to reach out. I'd love to hear from you. LinkedIn is my preferred way to get in touch, but you can also reach me by email. LinkedIn: above Email: hello@cyberallday.io Website: https://cyberallday.io/ ENJOYING THE PODCAST? If you find Cyber All Day useful, a rating or review on your podcast app, my website or YouTube really helps people discover it 👌. And if you have a minute, I'd love to hear what you think.

Showing 1–4 of 4 episodes