Five Minute Forecast for the week of November 27th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• Hacktivists breach U.S. Nuclear lab• GE investigates claims of sensitive data theft• The FCC takes steps to curb SIM-swappingAnd senior threat researcher Joshua Miller gives an update on activity by advanced persistent threat actor, TA402.

Five Minute Forecast for the week of November 13th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• World’s largest bank hit by LockBit ransomware attack• US sanctions money launderer linked to Russian ransomware• LockBit leaks gigabytes of stolen Boeing dataAnd senior threat intelligence analyst Selena Larson shares an update on opportunistic cybercrime activity related to the Israel-Hamas conflict.

Five Minute Forecast for the week of November 6th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• Okta explains how hackers breached its support system• Global coalition vows to stop paying ransomware gangs• Discord ditches permanent file links to curb malware deliveryAnd senior threat intelligence analyst Selena Larson shares news of recent campaigns by threat actor TA571.https://www.proofpoint.com/us/blog/threat-insight/security-brief-ta571-delivers-icedid-forked-loader

Five Minute Forecast for the week of October 30th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• Okta hit by another data breach• France says J’accuse! to Russian cyberattackers• Mystery attackers target Russian government and industryAnd senior threat intelligence analyst Selena Larson shares update from the recent VirusBulletin conference in London.VB Conference AgendaVB YouTube Channel

Five Minute Forecast for the week of October 23rd. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• ICC hit by cyber espionage amid sensitive trials• Spanish police bust phishing ring that stole data of 4 million people• DC voter roll compromised in data breachAnd threat detection analyst Dusty Miller shares updates on campaigns using fake browser updates.

Five Minute Forecast for the week of October 16th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• CISA shares list of common ransomware vulnerabilities• Google points the way to a password-free future• 23andMe braces for multiple lawsuits after data breach And senior threat researcher Sarah Sabotka shares key themes and concerns from this year’s Cybersecurity Awareness Month.Sign up for our cybersecurity awareness month threat research webinar.

You’ve probably heard the old cybersecurity cliché that attackers have to be right just once to be successful, while defenders have to be right all the time. In this episode we turn the concept on its head as we discuss the concept of the attack chain—and the opportunities it gives defenders to disrupt it.Ryan Kalember, Executive Vice President of Cybersecurity Strategy at Proofpoint, joins host Brian Reed for an in-depth look at the modern attack chain. As Kalember explains, effective cybersecurity is not trying to secure every possible asset. Instead, it’s understanding that even in a technically secure environment, the “human factor” remains a major threat across the attack chain. That’s why addressing social engineering and human vulnerabilities is critical. Only by correlating disparate aspects of cybersecurity—especially when it comes to identity and user behavior—can organizations create a more holistic approach to security.They also discuss:A useful framework of cybersecurityWhich areas to address in regards to elimination vs. securing each assetUnderstanding the human element and social engineeringResources mentioned:Board Members Feel Good Yet Unprepared (Sept Blog)Cybersecurity Awareness Hub from ProofpointCybersecurity Awareness Kit

Five Minute Forecast for the week of October 9th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• FTC warns of “staggering” social media scam losses• 23andMe confirms user data stolen in credential stuffing attack• MGM counts the $100 million cost of a recent ransomware attack And senior threat research engineer Tony Robinson discusses a newly discovered malware, dubbed “ZenRAT.”

Five Minute Forecast for the week of October 2nd. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• Details emerge of a massive email breach at the State Department• Ransomware gangs double down on victims with dual encryption• Bing’s AI chatbot answers some queries with malwareAnd threat intelligence analyst Selena Larson discusses an unusual campaign using romance lures to distribute malware.

The 20th Annual National Cybersecurity Month is upon us in October. Today’s guest is the esteemed Executive Director of the National Cybersecurity Alliance, Lisa Plaggemier. This episode focuses on what to expect with this year’s campaign, including a more evergreen approach so that more people can benefit. The NCA tries to lean into preparedness in the light of confidence and peace of mind vs. a gloomy, fearful outlook. Having everyone on board within the organization is critical, and it all starts with an understanding and empathetic CISO.They also discuss:The value of security training and motivationIncorporating behavioral science models that include motivation, capability and opportunityThe nuances of generational differences of cybersecurity awareness and the types of risksResources mentioned:StaySafeOnline.orgCybersecurity Awareness Hub from ProofpointCybersecurity Awareness Kit

Five Minute Forecast for the week of September 25th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• T-Mobile under the microscope as new breach claims emerge• A successful conviction highlights the huge cost of BEC attacks• Signal announces new security measures aimed at quantum computing And threat researcher Bryan Campbell discusses a recent wave of cyber attacks targeting Chinese-language speakers.

Coming to you live from New York City, it’s a special episode of Protecting People from Proofpoint’s conference: Protect 2023! Sharing about the happenings of Protect is host, Brian Reed, Senior Director of Cybersecurity Strategy at Proofpoint, and today’s guest, Tim Choi, Group Vice President of Product Marketing at Proofpoint. This year’s theme, "Break the Attack Chain," emphasizes a comprehensive approach to safeguarding both people and data from various threats, including advanced email attacks, identity threats, data loss, insider risks, and more. One of the standout aspects of the event was the customer interaction, where attendees shared experiences and best practices. Protect 2023 featured several announcements, highlighting innovations across the security landscape, particularly focused on disrupting the attacker's tactics and strategies.Generative AI emerged as a central topic, with a focus on practical applications to enhance security. The discussions emphasized the importance of leveraging technology to provide real-time insights and actionable intelligence.They also discuss:The application of AI and machine learning to prevent misdirected emailsIdentity ProtectionThe concept of attack path riskAttend an upcoming Q&A on Sept 28th, 2023--registration link found here Resources mentioned: Protect 2023 Round Up

Five Minute Forecast for the week of September 18th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• CISA offers security reviews to critical infrastructure• Iranian attackers spray and prey against defense contractors• Caesars renders a big payment unto Scattered Spider ransomwareAnd senior threat intelligence analyst Selena Larson explains the current state of direct ransomware delivery.

Five Minute Forecast for the week of September 11th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• U.S. authorities issue sanctions against ransomware masterminds• Microsoft reveals North Korean espionage targeting Russia• Security researchers attacked in new campaignAnd Proofpoint director of threat research, Chase Farais, shares his perspective on our recent Protect 2023 summit.

Five Minute Forecast for the week of September 4th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• Qbot malware taken offline by international law enforcement• Freecycle says don’t recycle passwords after data breach• And more data thefts from popular retailersAnd senior threat researcher Kelsey Merriman discusses all things Qbot.

Most workers need some form of insider access to do their jobs. But when that access is misused—whether by malicious, careless or compromised users—it becomes an insider threat that can harm the organization.Not every insider threat is obvious, and there’s no single approach to managing them.In this episode Brian Reed, Senior Director of Cybersecurity Strategy at Proofpoint, talks to Stephanie Torto, Senior Product Marketing Manager at Proofpoint. Stephanie provides stories and perspectives on insider threat management. They also discuss:Response strategies for organizationsHow the pandemic accelerated the risk of insider threats What the modern DLP and ITM program looks like Resources mentioned:Insider Threat Management BlogJustifying the Importance of Your DLP Program to the BoardInsider Threat Management Starter Pack

Five Minute Forecast for the week of August 28th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• Data thieves employ underhand tactics to steal French unemployment records• Millions of Duolingo user email addresses posted online• And Lapsus$ hackers found guilty in LondonAnd threat research manager Selena Larson gives an update on threat actor TA2715.

Five Minute Forecast for the week of August 21st. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• Cryptocurrency recovery scams promise to steal your funds• Interpol takes down thousands of malicious networks in Africa• Stolen crime forum logins show that hackers are human tooAnd threat research manager Daniel Blackford gives an update on this year’s Black Hat conference.

Five Minute Forecast for the week of August 14th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast.• U.K. voter data exposed in massive breach• Millions of health records stolen by MOVEit attackers• Google moves to close the patch gap for Chrome usersAnd security research engineer Chris Talib discusses attacks involving an unpatched vulnerability in Microsoft Word.

Five Minute Forecast for the week of August 7th. All the cyber security news you need to stay ahead, from Proofpoint’s Protecting People podcast. Intelligence agencies identify last year’s biggest vulnerabilitiesRussian attackers go phishing in Microsoft Teams chatsBritish researchers say they can hear what you’re typing And senior reverse engineer Pim Trouerbach shares details on a newly discovered malware dubbed WikiLoader. https://www.proofpoint.com/us/blog/threat-insight/out-sandbox-wikiloader-digs-sophisticated-evasion