It's a busy time for security. The Cybersecurity & Infrastructure Security Agency has released a number of guidance documents on SolarWinds and ActiveDirectory/M365 compromises as well as the recent Microsoft Exchange vulnerabilities that are

Denial of Service? What is it and what to do? | Grassroots Security (S2:E7)

Mar 1st, 2021 14m 1s

We've heard of a denial of service. But what is it? And what can we do?Blog Entry (With References):https://grassrootsecurity.com/2021/03/01/denial-of-service-what-is-it-and-what-to-do/

Protecting You Through Security Filtered Domain Lookups | Grassroots Security (S2:E6)

Feb 22nd, 2021 7m 26s

Protect your computer using a security-filtered Domain Name System (DNS) server configuration. Also hear about the Center for Internet Security (CIS) offering to protect US hospitals against malware through a similar method of DNS protection.B

We Need More Cyber Women! | Grassroots Security (S2:E5)

Feb 15th, 2021 15m 5s

No, I'm not talking about cyborgs here. We explore the cybersecurity workforce needs, certifications and the scholarships available especially for women. We need to improve the number of women who go into cybersecurity careers.Blog Post (incl

Safer Internet Day 2021 on Feb 9 | Grassroots Security (S2:E4)

Feb 10th, 2021 9m 51s

Every February 9 is Safer Internet Day. The slogan "Together for a better internet" looks toward promoting a safe and positive use of digital technology, especially among children and young people.Reference:https://www.saferinternetday.orgBlog

Data Privacy Day and Update on Solarwinds Hack | Grassroots Security (S2:E3)

Feb 1st, 2021 12m 4s

January 28 was Data Privacy Day and the 40th anniversary of Convention 108. Last January 11, we also got the update of the investigation on the Solarwinds Hack.Blog Post (including references):https://grassrootsecurity.com/2021/02/01/data-priv

EDPB Releases Data Breach Notification Examples | Grassroots Security (S2:E2)

Jan 25th, 2021 12m 2s

The European Data Protection Board (or EDPB) has released Guidelines 01/2021 on Examples regarding Data Breach Notification. It provides a number of examples across different areas from ransomware to data exfiltration.References are linked in

New Year, Your Memory and Misinformation | Grassroots Security (S2:E1)

Jan 18th, 2021 17m 50s

Happy New Year! In this episode, we talk about misinformation and disinformation and how your memory may contribute to both misattribution and bias. We also talk about how to deal better with misinformation.Blog Post (including references):http

Ransomware in CMA CGM, Ring Security Changes and Egypt's Data Protection | Grassroots Security (S1:E16)

Sep 30th, 2020 10m 58s

Ransomware has hit one of the biggest shipping companies CMA CGM. Also, Ring will be updating their devices to support end-to-end encryption. And Egypt has enacted their data protection law. Brazil's version is also now in effect.Published: Se

Validity of Standard Contractual Clauses and Strontium's Credential Harvesting Methods | Grassroots Security (S1:E15)

Sep 14th, 2020 13m 4s

With Facebook's high court challenge to the Irish Data Protection Commission's suggestion that Standard Contractual Clauses (or SCCs) may not be used, it begs the question what alternatives there are for the transfer of personal data to another

Governments release cybersecurity principles on space systems and IoT devices | Grassroots Security (S1:E14)

Sep 5th, 2020 9m 20s

The US Government released cybersecurity principles for space systems and the Autralian Government released guidelines on IoT devices.Created: September 5, 2020References:https://grassrootsecurity.com/2020/09/05/governments-released-cybersecuri

New Zealand Stock Exchange hit by Distributed Denial of Service | Grassroots Security (S1:E13)

Sep 1st, 2020 9m 3s

Last week and the beginning of this week, New Zealand's stock exchange was hit by Distributed Denial of Service attacks which impacted its service.Created: September 1, 2020References:https://grassrootsecurity.com/2020/09/01/new-zealand-stock-e

Tesla and FBI prevents a ransomware hack at the Gigafactory | Grassroots Security (S1:E12)

Aug 29th, 2020 14m 23s

Hear how an employee at Tesla and the FBI prevented a ransomware hack at the Gigafactory in Nevada.Created: August 29, 2020Reference:https://grassrootsecurity.com/2020/08/29/tesla-and-fbi-prevents-a-ransomware-hack-at-the-gigafactory/https://el

Fraudster Tricks Experian Africa causing a Data Security Incident | Grassroots Security (S1:E11)

Aug 24th, 2020 7m 33s

Looking into the recent data incident with Experian Africa where a fraudster was successful in impersonating a legitimate customer.Created: August 24, 2020References:https://grassrootsecurity.com/2020/08/23/fraudster-tricks-experian-africa-caus

Digital Empathy and Zero Trust in the Pandemic | Grassroots Security (S1:E10)

Aug 21st, 2020 8m 55s

Microsoft's recent security blog entry talked about the acceleration of a number of digital transformation brought about by the pandemic. We talk about two of these: Digital Empathy and Zero Trust.Created: August 21, 2020Reference:https://gras

Redirecting Invoices as an Example of Business Email Compromise | Grassroots Security (S1:E9)

Aug 19th, 2020 6m 4s

Information on Invoice Redirection: What is it? Why does it occur? And what can you do about it?Created: August 19, 2020References:https://grassrootsecurity.com/2020/08/17/redirecting-invoices-is-an-example-of-a-business-email-compromise-bec/h

Update on Fake Text in Ireland and TLS 1.3 Blocking in China | Grassroots Security (S1:E8)

Aug 14th, 2020 7m 6s

Bank of Ireland has responded and made a U-turn on their policy. The latest version of TLS 1.3 is also now being blocked in China.Created: August 14, 2020References:https://grassrootsecurity.com/?p=592https://www.irishtimes.com/business/financ

Protecting yourself from cases of fake bank text messages | Grassroots Security (S1:E7)

Aug 10th, 2020 7m 8s

Attacks using fake text messages from banks like Bank of Ireland surfaced recently on LiveLine with Joe Duffy. I also provide some tips to protect yourself when you do receive these text messages.Created: August 10, 2020Reference:https://grassr

Charges on Twitter Hack and Canon Ransomware | Grassroots Security (S1:E6)

Aug 8th, 2020 8m 8s

Charges have been made to three individuals relating to the Twitter hack and also developing news on the Canon Ransomware. Tips are included in the discussion.Created: August 8, 2020References:https://grassrootsecurity.com/2020/08/02/three-ind

Garmin Ransomware Update and Privacy Badger | Grassroots Security (S1:E5)

Jul 31st, 2020 6m 18s

Recent update on the Garmin Ransomware and more privacy tips including Privacy Badger.Created: July 31, 2020References:(https://privacybadger.org/)(https://news.sky.com/story/garmin-obtains-decryption-key-after-ransomware-attack-12036761)

Ransomware and #NoMoreRansom | Grassroots Security (S1:E4)

Jul 28th, 2020 6m 42s

Prevalence of ransomware, backing up and the fourth year anniversary of #NoMoreRansom project.Created: July 28, 2020Reference:https://www.nomoreransom.org/https://grassrootsecurity.com/2020/07/27/ransomware/

Superman and Privacy | Grassroots Security (S1:E3)

Jul 24th, 2020 7m 41s

How did a recent clickbait on Superman result in me thinking about Privacy?Superman and Brainiac are trademarks of DC Comics.Created: July 24, 2020References:https://support.google.com/chrome/answer/7440301https://support.mozilla.org/en-US/kb/p

Ruling on EU-US Privacy Shield | Grassroots Security (S1:E2)

Jul 22nd, 2020 7m 22s

Let's talk about the recent EU-US Privacy Shield ruling by the European Court of Justice. I will also recall a bit of history on how it came about.Created: July 22, 2020References:https://curia.europa.eu/jcms/upload/docs/application/pdf/2020-0

Recent Twitter Attack and Setting Up Two Factor | Grassroots Security (S1:E1)

Jul 21st, 2020 9m 6s

First episode for the Grassroots Security Podcast! I set up the Grassroots Security podcast for two things:Provide better awareness about security including tips that hopefully most people can understand.Talk about what's happening in the news

Rate