#WordNotes

#WordNotes: SOAR platforms, or security orchestration, automation and response platforms, allow organizations to automatically process telemetry from various IT and security tools. Let @racebannon99 take you through it here:

On #WordNotes, @racebannon99 covers the Executive Order on Improving the Nation's #Cybersecurity that includes specific shortterm and longterm deadlines designed to enhance the federal government's digital defense posture. Have a listen:

#WordNotes: #ArtificialIntelligence or #AI. Rick Howard talks of Alan Turing from a fav movie in nerd reference. In "Imitation Game" starring Benedict Cumberbatch he illustrates how Turing defined one of the first tests for artificial intelligence. Listen:

#WordNotes: Rick Howard does a little experiment with this week's term #ChatGPT. Most of the content in this episode was gleaned from the ChatGPT interface & then run through a text to audio synthesizer that we have on hand at the CyberWire. Have a listen:

#WordNotes: A method of brute-force attacks is dictionary attacks. Attacker builds a dictionary of possible words like password1234 & admin. Then they automate a cracking program using each password for the system they are trying to break into. Hear more:

Example sentence: Denial-of-service attacks, or DoS attacks, can cost an organization both time and money by rendering their resources and services inaccessible. Hear more about that and @racebannon99's fav hacking TV shows, Mr. Robot, on #WordNotes:

#WordNotes: Origin and context: In order to block bad guy activity or detect that a bad guy is in your network, security practitioners have used the concept of #indicatorsofcompromise since the internet was young. Let @racebannon99 tell you more about it:

#WordNotes: @racebannon99 delves into #AppleLockdownMode. As of this episode, Lockdown Mode is an upcoming security feature that will be included with iOS 16, iPadOS 16, & macOS 13 Ventura. Disabled by default, it can be enabled in settings. Hear more:

#WordNotes: ASCII only represents 128 or 256 symbols. Unicode displays > 144,000 characters & in many different languages. #Homographphishing attacks use similar-looking Unicode characters to craft deceptive #phishing URLs. @racebannon99 tells us more:

On #WordNotes this week: #SBOM. There is a specific requirement to deploy a minimum SBOM program by the spring of 2022 as part of President Joe Biden's May, 2021 Executive Order on Cybersecurity, E.O. 14028. Hear @racebannon99 talking about it:

Overriding the RAM before shutting down the machine or using encryption programs that don't write sensitive keys into RAM can avoid data loss due to #coldbootattacks. #WordNotes is your go-to place to help you expand your #cyber vocabulary. Listen:

#WordNotes: #ManintheMiddle -a cyber attack technique where adversaries intercept communications between 2 parties in order to collect useful information or to sabotage or corrupt communication in some manner. Hear more from Rick Howard on #MITM attacks:

On #WordNotes, Rick Howard explains the #passkey concept. The definition: A passwordless authentication protocol based on the FIDO2 standard. Hear more about it:

#WordNotes has #TrustedPlatformModule, or TPM. @racebannon99 describes this browser configuration control that prevents accessing resources within a private network. Check it out:

#WordNotes term this week: #IdentityAccessManagement (IAM). Hear @racebannon99's nerd reference he describes as "the perfect example of a failed IAM program & a flawed #ZeroTrust deployment, I give you the 1982 movie "Star Trek II, The Wrath of Khan.""

#WordNotes: #vulnerabilitymanagement. Definition: The continuous practice of identifying classifying, prioritizing, remediating, and mitigating software vulnerabilities within this. Listen:

#WordNotes: #DomainNamingSystem consists of 4 #DNS server types: 1. recursive resolver 2. root server 3. top level domain name servers, or #TLDservers 4. domain name server. The domain name server stores the actual IP address. Hear more from Rick Howard:

#WordNotes: #SecurityOperationsCenter. #SOC teams are typically staffed w/ skilled security analysts, #incidentresponders, threat hunters, & other #cybersecurity professionals working in shifts providing 24/7 monitoring & response capabilities. Learn more:

#WordNotes: This week's word is #COBIT...we had to listen to the episode to get the gist of that one. Lots of acronyms in #cybersecurity. Get them all straight with @racebannon99 and his fun #nerdreferences that place the terms into pop culture examples.

Time to celebrate! #WordNotes kicks off our 3rd season with this episode! 🌟 @Racebannon99 talks about #microsegmentation: A #zerotrust security technique that isolates application workloads from each other, allowing each one to be protected individually.