Technically proficient people often face challenges when looking for (or being elevated to) leadership roles. In the cyber realm, this can become even murkier. We have hackers, who often view rules as guideposts (or even challenges, for that matter); incident responders and threat intelligence officers who tend to have great regard for rules and a well-developed (if not regimented) approach to unraveling mysteries; and product engineers who are astute at design and technical issue resolution. The net is this: Cyber brainiacs are really good at solving problems. And less good at inspiring (or even allowing) others to solve them. In this episode, host Mitch Mayne talks with <a href="https://www.linkedin.com/in/brianfdonovan1/" rel="noopener noreferrer" target="_blank">Brian Donovan</a>, author of "<a href="https://www.amazon.com/dp/B07BNYYKLH?ref_=cm_sw_r_cp_ud_dp_FN6C68FSSVM77D0SS0RW" rel="noopener noreferrer" target="_blank">Leadership Is Changing the Game - The Transition from Technical Expert to Leader</a>." They explore some of the critical components of cyber leadership—including Donovan’s perspective that the trick isn’t to develop an entirely new skill set—or <a href="https://quiz.tryinteract.com/#/610dbd0f96add90017a757c8/q/1" rel="noopener noreferrer" target="_blank">superpower</a>, as he puts it—but to hone your existing superpower and learn how to influence and inspire. If you’ve ever wondered how to get out of your own way and transition into cyber leadership, this may be the episode for you. Take a listen—and venture Into the Breach.

Brian Donovan is the founder of Donovan Leadership. He is a dedicated advocate of powerful and practical leadership. His commitment to the field is informed by 40 years’ experience in the technology sector, as a senior executive in Telstra, Australia’s largest Telco and as CEO of the IT Skills Hub, a not-for-profit aimed at increasing the supply of IT professionals. He is an executive coach, speaker and author. Brian’s book, "Leadership Is Changing the Game - The Transition from Technical Expert to Leader" brings together his experience as a senior executive and his work as an executive coach.

He has helped countless technology leaders transform from technical experts into leaders who succeed. He can draw from his practical experience as a senior executive to assist his clients to build their influence with their key stakeholders. His programs enable leaders to achieve stretch results and to make the difference they are committed to making.

Brian is also writing his next book, with co-author Dean Phelan, called "The Gentle Art of Leadership." The book includes original research and interviews with leaders from around the globe to support the view that leaders who treat who people with dignity and respect get the best results.

Brian Donovan

Founder of Donovan Leadership

In this podcast episode, Mitch and Brian Donovan delve into the intricacies of leadership in the cybersecurity field. Brian highlights the importance of reinvention, urging leaders to recognize their inherent strengths and transform them into superpowers. They discuss the challenges faced by incident responders and red teamers, emphasizing the need for a growth mindset and the ability to lead through influence. The conversation also touches on imposter syndrome, with Brian advocating for the choice to change one's internal dialogue and focus on evidence-based self-affirmation. The episode provides valuable insights for aspiring leaders in the cybersecurity domain, stressing the significance of passion, influence, and continuous reinvention in driving positive change and making a lasting impact.


Cyber leaders: Stop being your own worst career enemy. Here’s how.

Cyber leaders: Stop being your own worst career enemy

Whether you are an individual who is always on your phone, an IT professional who lives through your laptop, or an organization that manages a vast amount of clients and services, a security breach can happen at any moment. Many of us think that we are prepared, but are we really? On this podcast, you’ll hear from a variety of cybersecurity professionals to better understand the underground world of cyber and you’ll walk away better prepared with tales, tools, and support to help you thrive in the face of uncertainty…

Into the Breach by IBM

Quantum computing relies on quantum physics for computational power and computes much faster than classical computers. It’s predicted to provide major breakthroughs across society, science and business. At the same time, it poses a risk to key cryptographic algorithms we depend upon for the safety of our digital world. Meaning, it has the potential to render existing communications as insecure as if they weren’t encoded at all. In this episode, host Mitch Mayne talks with one of the scientists working on quantum-safe encryption algorithms. Dr. Walid Rjaibi has spent considerable time experimenting with these algorithms and creating prototypes for transitioning current software to quantum-safe standards. They talk in-depth about the security risk quantum poses, how researchers are addressing that risk, how policy can (or should) shift to make standardization a reality, and what organizations might struggle with as they shift toward quantum—and how some of those struggles might be addressed. Things to listen for:<ul><li>[00:05&nbsp;-&nbsp;01:34] Introduction</li><li>[03:55&nbsp;-&nbsp;06:05] An overview of quantum computing</li><li>[06:45&nbsp;-&nbsp;11:30] Cyber risks associated with quantum</li><li>[15:03&nbsp;-&nbsp;18:42] Algorithms that are quantum-safe</li><li>[19:09&nbsp;-&nbsp;21:54] Encryption algorithms, RSA deep dive</li><li>[25:18&nbsp;-&nbsp;26:15] Effective policy regulations</li><li>[26:42&nbsp;-&nbsp;29:30] Where to begin when learning about quantum</li></ul>

Dr. Walid Rjaibi is a Distinguished Engineer and CTO for Data Security at IBM. He drives the research for data security as well as the technical architecture and vision for products and services.

Prior to his current role, Walid held several technical and management roles within IBM including Research Staff Member at the IBM Zurich Research Lab, Security Architect for DB2 at the IBM Toronto Lab, and Chief Security Architect for Data & AI at the IBM Toronto Lab. His Data Security work resulted in 27 granted patents, publications in leading scientific and academic journals/conferences, and industry-proven commercial capabilities that are relied upon by thousands of organizations from around the world to protect critical data and meet security and compliance mandates.

Walid is also an Adjunct Professor of Computer Science at Toronto Metropolitan University. He additionally serves on the professional advisory board for the Department of Electrical Engineering & Computer Science at York University, the Department of Computer & Information Systems at the University of Michigan and the Cybersecurity Center at the University of Missouri.

Dr. Walid Rjaibi

Distinguished Engineer & CTO for Data Security

Explore the complexities of quantum computing and the imminent threats it poses to existing encryption methods. Dr. Walid Rjaibi, an expert in the field, explains the principles of quantum computing, emphasizing its potential to break widely used cryptographic algorithms. Learn about the urgency for organizations dealing with data of long-term value, such as government agencies, healthcare, and banking sectors, to transition to quantum-safe encryption. Discover the steps for a successful transition, including education, identifying champions, and implementing a comprehensive transition plan. Stay informed on policy developments and understand the proactive measures needed to mitigate risks in the quantum era.


The Quantum Quandary: How researchers are bridging the supercomputer security concerns

It’s been eight years since the Cybersecurity Information Sharing Act was signed into law, and today we have a thriving network of public/private threat sharing groups—like the Joint Cyber Defense Counsel (JCDC) and National Artificial Intelligence and Cybersecurity ISAO (NAIC/ISAO), offering platforms where member organizations can both share threat information and gain access to the larger collection. Yet, perception challenges still exist for threat sharing groups. These include both liability and confidentiality concerns, with some organizations wondering if information shared in a group could be traced back to—and used against—the organization that shared the data in the first place. In this episode, host Mitch Mayne talks with Michael Thiessmeier, Co-founder and Executive Director of the NAIC/ISAO, about the history of threat sharing and how the “public good” has benefitted. They also explore the perceived hurdles to entering threat sharing groups and explore whether or not those are legitimate concerns. Things to listen for:<ul><li>[00:05&nbsp;-&nbsp;01:41] Introduction</li><li>[03:23&nbsp;-&nbsp;05:54] Notable wins as a result of groups sharing intelligence</li><li>[06:19&nbsp;-&nbsp;07:23] What information to consider sharing in an information-sharing group</li><li>[11:00&nbsp;-&nbsp;14:03] Has trust been restored that the government does the right thing in terms of privacy and surveillance?</li><li>[20:09&nbsp;-&nbsp;21:23] Michaels information products</li><li>[22:15&nbsp;-&nbsp;23:20] Why threat sharing is important</li></ul>

Michael Thiessmeier is a distinguished security enthusiast with over two decades of experience in cybersecurity and emerging technologies. He is the Executive Director and Co-founder of the US National AI and Cybersecurity ISAO, former CISO of Enjoy Technology, and a member of the Overseas Security Advisory Council's planning committee for the country of Latvia. 

 

Mr. Thiessmeier has served as a U.S Delegate Expert to the International Standards Organization and on working groups of the United Nations, and the U.S. Department of Commerce. He has contributed to more than 40 international information security standards, and his work has received numerous awards, including the Lawrence D. Eicher Award for excellence in technology. 

Michael Thiessmeier

Executive Director and Co-founder of the US National AI and Cybersecurity ISAO

Explore the dynamic landscape of cyber threat sharing in this insightful podcast episode with Mitch Mayne and Michael Thiessmeier. From the evolution of threat sharing since the Cyber Security Information Sharing Act in 2015 to the current challenges and successes, the conversation delves into the history and impact of information-sharing groups like the Joint Cyber Defense Council and the National AI and Cybersecurity ISAO. Learn about the benefits, perceived hurdles, and policy measures encouraging participation. Join the discussion to understand the critical role of threat sharing in defending against sophisticated threat actors.


Threat sharing evolution: How groups offer less risk and better intelligence to members

Late last year, a well-known ride share app and a gaming company were hacked using well-crafted social engineering attacks.&nbsp;<a href="https://www.linkedin.com/in/stephanie-carruthers/" rel="noopener noreferrer" target="_blank">Stephanie Caruthers</a>—known online as “Snow,’ is a professional hacker herself and has a solid&nbsp;<a href="https://securityintelligence.com/posts/an-ibm-hacker-breaks-down-high-profile-attacks/" rel="noopener noreferrer" target="_blank">working theory</a>&nbsp;on how the attacks happened. Stephanie’s take: the criminal may have purchased already stolen credentials of users off the dark web, used that data to research the target victims, and then combine those sources of information to engineer highly targeted attacks.Which raises the question: Is your information out on the dark web, and how can it be used by a criminal?Let’s find out. Join us as we venture, Into the Breach. Things to listen for:<ul><li>[00:05&nbsp;-&nbsp;01:36] Introduction</li><li>[01:55&nbsp;-&nbsp;02:30] The genesis of online name Snow</li><li>[05:42&nbsp;-&nbsp;06:41] Spearfishing vs. social engineering</li><li>[07:21&nbsp;-&nbsp;08:21] What Snow knows about Uber and Rockstar hacks</li><li>[08:45&nbsp;-&nbsp;10:37] Snow's thoughts on TeaPot purchasing credentials from the dark web for who they were targeting</li><li>[11:04&nbsp;-&nbsp;12:20] What Snow looks for to find information from a social media perspective</li><li>[19:37&nbsp;-&nbsp;22:43] Advice on how to avoid being attacked</li><li>[21:00&nbsp;-&nbsp;22:43] How the attacks happened</li><li>[23:38&nbsp;-&nbsp;24:38] For the average citizen: What to do or not to do</li></ul>

Stephanie “Snow” Carruthers is a member of the IBM Security X-Force team, performing two roles as Chief People Hacker of the X-Force Red team and Global Head of Innovation and Delivery. Carruthers applies her expertise in the digital dark arts to help clients detect and close security gaps. She has distinguished herself in the information security field by winning the Social Engineering Capture the Flag at DEF CON, which granted her a coveted black badge. Snow is actively involved in the industry, co-founding the Social Engineering Community at DEF CON, judging the Collegiate Social Engineering Competition, and organizing the physical security village at SAINTCON. In her free time, she indulges in trips to Disneyland and romantic strolls in other people’s data centers.

Snow

Global Head of Innovation and Delivery, X-Force | Chief People Hacker, X-Force Red

In this episode, cybersecurity expert Stephanie Carruthers, known online as Snow, discusses the sophisticated social engineering attacks on a well-known ride-share app and a gaming company. These attacks, orchestrated by a 17-year-old hacker named TeaPot, involved a combination of spearphishing, vishing, and SMS manipulation. Snow shares insights into how TeaPot may have acquired stolen credentials from the dark web and used them to engineer highly targeted attacks. The discussion delves into the prevalence of personal information on the dark web, the vulnerabilities of multifactor authentication, and practical advice for individuals and companies to enhance their cybersecurity measures. Join the conversation as Snow reveals the intricacies of these cyber threats and offers valuable tips for staying secure in an increasingly digital world.


Your private information is probably being sold on the dark web. How can criminals use it?

Attacks on Operational Technology (OT) and Industrial Control Systems (ICS) grabbed the headlines more often in 2022—a direct result of Russia’s invasion of Ukraine sparking a growing willingness on behalf of criminals to target the ICS of critical infrastructure. Conversations about what could happen if these kinds of systems were compromised were once relegated to “what ifs” and disaster movie scripts. But those days are behind us, and the threats to OT and ICS are real and ongoing. <a href="https://www.linkedin.com/in/roya-gordon-16245437/" rel="noopener noreferrer" target="_blank">Roya Gordon</a> and her team at Nozomi Networks keep a close eye on these kinds of threats, and recently released their biannual <a href="https://www.nozominetworks.com/blog/nozomi-networks-researchers-take-a-deep-look-into-the-ics-threat-landscape/" rel="noopener noreferrer" target="_blank">OT/IoT Security Report</a> that examines what’s happened in the landscape for this sector in the latter half of 2022. She joins me in this episode to talk in-depth about what her team found—including the latest on the types of attacks hitting OT and IoT, what effect increased regulation may have on industries in this sector, how Russia’s invasion of Ukraine continues to change the landscape, and what may be on the horizon for cyber insurance. And maybe most importantly, she helps us understand what OT/IoT organizations can do to stay safer. Join us—and together we’ll venture Into the Breach. Things to listen for:<ul><li>[00:05&nbsp;-&nbsp;00:44] Introduction</li><li>[01:00&nbsp;-&nbsp;02:50] Important pieces from Nozomi's security report</li><li>[03:23&nbsp;-&nbsp;05:21] Threat actors Roya sees at Nozomi</li><li>[06:16&nbsp;-&nbsp;08:10] Roya explains being anti-cyber insurance</li><li>[11:40&nbsp;-&nbsp;15:21] Sector-specific plans: What do we know and are they needed?</li><li>[16:19&nbsp;-&nbsp;17:21] International efforts for a safer sector</li><li>[20:45&nbsp;-&nbsp;23:06] Advice for loT and OT friends</li></ul>

Roya Gordon is a Security Research Evangelist at Nozomi Networks. Her primary role is to raise awareness (via conferences, podcasts, webinars, etc.) of the latest OT/IoT vulnerability, intelligence, and threat detection research conducted by Nozomi Networks Labs. Prior to Nozomi Networks, Roya worked as the Cyber Threat Intelligence SME for OT and Critical Infrastructure at Accenture, a Control Systems Cybersecurity Analyst at Idaho National Laboratory (INL), and as an Intelligence Specialist in the United States Navy. She holds a Masters in Global Affairs with a focus on cyberwarfare from Florida International University (FIU).

Roya Gordon

 Security Research Evangelist, Nozomi Networks

Explore the latest insights into OT and IoT security with Roya Gordon from Nozomi Networks in this podcast episode. Discover key findings from Nozomi's biannual threat intelligence report, including alarming trends in IoT botnet attacks and the widespread use of default passwords. Roya shares her expertise on the evolving threat landscape, the impact of cyber insurance, and the changing dynamics of threat actors targeting critical infrastructure. Gain valuable advice on bolstering cybersecurity measures and preparing for the challenges posed by hybrid attacks. Join the conversation as Roya takes you deep into the world of OT and IoT security, providing actionable insights for individuals and organizations alike.


Operational Technology: The evolving threats that might shift regulatory policy

Every year, the <a href="https://www.ibm.com/x-force" rel="noopener noreferrer" target="_blank">IBM Security X-Force</a> team of cyber experts mine billions of data points to reveal today's biggest attack trends and patterns. In this episode, host Mitch Mayne is joined by Michael Worley, one of this year’s primary authors, and digs into the guts of the X-Force <a href="https://www.ibm.com/reports/threat-intelligence" rel="noopener noreferrer" target="_blank">Threat Intelligence Index 2023</a> to uncover the continuously changing cybersecurity landscape and understand how to defend against the latest threats. Join us as we journey into 2023 — and Into the Breach. Things to listen for:<ul><li>[00:05&nbsp;-&nbsp;00:35] Introduction</li><li>[01:04&nbsp;-&nbsp;03:17] What changes were made to the X-Force Threat Intelligence Index for 2023</li><li>[03:48&nbsp;-&nbsp;04:37] How Michael's background shaped how he examined data for this years report</li><li>[05:00&nbsp;-&nbsp;06:04] The biggest aha moment from this year's report</li><li>[11:10&nbsp;-&nbsp;13:39] Phishing and other vulnerabilities</li><li>[15:20&nbsp;-&nbsp;16:30] Steps to to take to protect yourself</li></ul>

Mike Worley is a Strategic Cyber Threat Analyst on the IBM X-Force Threat Intelligence Production Team. He joined the team in 2021 with 8 years of experience in cyber, counterintelligence and open source intelligence analysis. He holds the Network+, Security+ and GCTI certifications and an MA in European and Eurasian Studies.

Michael Worley

Strategic Cyber Threat Analyst

Every year, the IBM Security X-Force team of cyber experts mine billions of data points to reveal today's biggest attack trends and patterns. In this episode, host Mitch Mayne is joined by Michael Worley, one of this year’s primary authors, and digs into the guts of the X-Force Threat Intelligence Index 2023 to uncover the continuously changing cybersecurity landscape and understand how to defend against the latest threats. Join us as we journey into 2023 — and Into the Breach.


The threat landscape 2023: Top targets, top attack types, top geographies

In this episode, we’ll use 2022 as a lens to foretell what this year may have in store for us. Joining me is <a href="https://www.linkedin.com/in/danlohrmann/" rel="noopener noreferrer" target="_blank">Dan Lohrmann</a>, a well-known voice in cybersecurity whose resume boasts an impressive list of positions in cyber leadership in both the public and private sector, in addition to authorship of three books on cybersecurity.&nbsp;Dan publishes an annual review of top cyber organization predictions (check out <a href="https://www.govtech.com/blogs/lohrmann-on-cybersecurity/the-top-23-security-predictions-for-2023-part-1" rel="noopener noreferrer" target="_blank">Part One</a> and <a href="https://www.govtech.com/blogs/lohrmann-on-cybersecurity/the-top-23-security-predictions-for-2023-part-2" rel="noopener noreferrer" target="_blank">Part Two</a>). Think of them like a content analysis of over two dozen industry leading reports. Among those surveyed is the 2022 IBM Security X-Force <a href="https://www.ibm.com/reports/threat-intelligence/" rel="noopener noreferrer" target="_blank">Threat Intelligence Index</a> and our annual <a href="https://securityintelligence.com/articles/cybersecurity-trends-ibm-predictions-2023/" rel="noopener noreferrer" target="_blank">predictions blog</a> published just last month. And of course, I’d miss the chance to humble-brag if I didn’t tease the fact that we’ll be releasing our 2023 Threat Intelligence Index in early February, too, so stay tuned for that one. &nbsp;&nbsp;Given the hours he’s devoted to analyzing the market predictions, Dan’s view is both broad and deep. We’re going to utilize his expertise to focus on a few hot topics for 2023:&nbsp;·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ransomware: How it will evolve, and who may be targeted·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Social engineering: How increased sophistication (including attempts to bypass MFA) may impact business·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Cyber insurance: Will it become more difficult to get in 2023·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; The Ukraine war: What fallout we might expect this year·&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Crypto and social media: Given the tumult in 2022, what we might see changing both on a market and a policy front&nbsp;Join us, and together we’ll venture Into the Breach. Things to listen for:<ul><li>[00:05&nbsp;-&nbsp;01:17] Introduction</li><li>[07:21&nbsp;-&nbsp;08:58] What we got right in 2022</li><li>[09:52&nbsp;-&nbsp;12:29] What we might see for ransomware in 2023</li><li>[13:50&nbsp;-&nbsp;16:33] What we might see in terms of social engineering, and what will be the role of deep fakes?</li><li>[17:37&nbsp;-&nbsp;19:55] Insurance providers in 2023</li><li>[25:06&nbsp;-&nbsp;26:08] Changes in crypto, and will there be a push to regulate?</li><li>[29:07&nbsp;-&nbsp;30:17] Potential positives to look for in 2023</li></ul>

Dan Lohrmann is a well-known voice in cybersecurity whose resume boasts an impressive list of positions in cyber leadership in both the public and private sector, in addition to authorship of three books on cybersecurity.

Dan Lohrmann

Field Chief information Security Officer

Explore cybersecurity predictions for 2023 with Dan Lohrmann, a renowned voice in the field. Dive into topics such as ransomware, social engineering, cyber insurance, the Ukraine war, cryptocurrency, and social media. Gain insights into the evolving landscape and potential regulatory changes in the realms of cybersecurity, talent acquisition, and more. Stay informed and prepared for the cybersecurity challenges and opportunities that lie ahead in the coming year..


Recent Episodes

SEASON 2

The Quantum Quandary: How researchers are bridging the supercomputer security concerns

Threat sharing evolution: How groups offer less risk and better intelligence to members

Your private information is probably being sold on the dark web. How can criminals use it?

Operational Technology: The evolving threats that might shift regulatory policy

The threat landscape 2023: Top targets, top attack types, top geographies

2023 Cybersecurity Predictions

About The Show

Into the Breach by IBM

Mitch Mayne

Editor in Chief, IBM Security X-Force