Studio 471

Intel 471

Join us into the world of cybercrime. Studio 471 brings you the latest trends, emerging threats, and expert advice to arm you with the insights needed to protect your business. By unraveling the mysteries of the underground, our series empowers teams, organizations, and communities to make informed decisions and discover actionable strategies to safeguard your digital footprint.

  1. 1 day ago

    Managing a cyber crisis ft. Tom Bolitho, Cybersecurity & Data Privacy Communications, FTI Consulting

    Most organizations will be touched by an IT security incident at some point whether it be a data breach, ransomware or fraud. These complex incidents may draw attention from consumers, the media, customers and partners as well prompt legal and regulatory inquiries. This is when organizations’ crisis communications plans are put to the test. How can organizations control the narrative? How can they manage requests for more detail while forensic investigations are underway? What if threat actors drip-feed samples of stolen data? In this Studio 471, Tom Bolitho of FTI Consulting shares how IT security incidents can be managed to minimize reputational damage. Participants:Tom Bolitho, Senior Director, Strategic Communications, Cybersecurity & Data Privacy Communications, FTI ConsultingJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  2. 28 Jul

    Writing high-quality IDS detection rules ft. Eindhoven University of Technology on Studio 471

    Security operations centers, or SOCs, are a core defensive component for organizations.  Quickly processing alerts can give a clue if an organization is under attack. But the volume and quality of alerts can greatly vary depending on how well the detection rules have been written. Some rules may return too many low-quality alerts, which can distract analysts from more important ones. Luca Allodi and Koen Teuwen of Eindhoven University of Technology co-authored a recent academic study that examines how to write lower-noise rules for intrusion detection systems (IDSs). The researchers developed six design principles for rule writing that balance specificity with coverage. The aim is to help analysts make better sense of what’s going on in their networks. The research also resulted in the development of a command-line tool, suricata-check, which gives feedback on how a rule written for the Suricata open-source IDS can be improved. Participants:Luca Allodi, Associate Professor and head of the Threat Analysis group within the Security Cluster of the Eindhoven University of TechnologyKoen Teuwen, PhD Candidate at Eindhoven University of TechnologyJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  3. 21 Jul

    The evolution of Russian cybercrime

    Roman Sannikov immigrated with his parents from Russia to the United States when he was a teenager. Through his parents, he kept up his Russian-language skills. For more than two decades, he worked as an interpreter for the FBI and U.S. Department of Justice, interviewing cybercriminals and even secretly acting as a moderator of a top but now-defunct Russian language cybercriminal forum. He has worked cyber threat intelligence (CTI) and blockchain analysis companies including Recorded Future, Flashpoint and TRM Labs. He now runs Constellation Cyber, a CTI consultancy based in New York. In this Studio 471, Sannikov shares his insight into the Russian cybercriminal landscape, the evolution of online crime and what lies ahead with ransomware. Participants:Roman Sannikov, Founder, Constellation CyberJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  4. 14 Jul

    How threat actors are using artificial intelligence featuring Ashley Jess on Studio 471

    Artificial intelligence is a red-hot mess, filled with contradicting predictions over whether it will bring vast benefits. From a cybercriminal perspective, AI is already providing productivity gains, from reconnaissance to drafting phishing emails to help in creating scripts and code. Ashley Jess, senior intelligence analyst with Intel 471, says threat actors in 2024 developed AI tools for specific tasks, such as data exfiltration and analysis tools designed for ransomware and data extortion groups. The cost of these tools has fallen significantly since 2022, increasing their diversity as well as their availability. Threat actors are using a combination of open-source models such as Meta’s Llama and API access to others. In this Studio 471, Jess shares her insight into how AI will shape the threat landscape. Participants:Ashley Jess, Senior Intelligence Analyst, Intelligence Operations, Intel 471Jeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  5. 7 Jul

    Extracting Useful Cyber Threat Intelligence from Underground Markets | Studio 471

    The advent of cybercrime-as-a-service – where cybercriminals create tools and products for use by other cybercriminals – has revolutionized online crime, allowing it to scale and become more effective. The discussions and products in underground forums and marketplaces can give clues as to how cybercriminals are exploiting and profiting. But these markets can be sprawling. Extracting useful cyber threat intelligence about emerging threats and monitoring the rise of novel threat actors can be a challenge. Michele Campobasso completed his doctoral thesis in 2024 about these issues while at the Eindhoven University of Technology. In this Studio 471, Campobasso shares his insight into these markets and how to maximize CTI collection. Participants:Michele Campobasso, PhD, Eindhoven University of TechnologyJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  6. 30 Jun

    Using CTI in Realistic Attack Simulations, Cyber Operational Resilience Intelligence-led Exercises

    Australia holds regular attack simulation exercises to test the cyber resilience of the financial services sector. These exercises, called Cyber Operational Resilience Intelligence-led Exercises (CORIE), are designed to be as realistic as possible, drawing on targeted cyber threat intelligence to create attack scenarios. By using tactics, techniques and procedures (TTPs) that match active threat groups, organizations can learn their potential weak points and improve. In this Studio 471, two experts from the cybersecurity consultancy CyberCX discuss how these exercises are developed and executed. Participants:Diego Silva, Technical Principal, Cyber Threat Intelligence, CyberCXWillem Mouton, Technical Director of Adversary Simulation, CyberCXJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  7. 23 Jun

    Cybersecurity Regulations: Will Processing CTI Become Legally Risky? | Studio 471

    In this video, learn about cybersecurity regulations and if processing CTI could become a potential legal risk.  An increasing number of regulations in different countries and regions require data to be processed locally for privacy and national security reasons. But these regulations have potential negative impacts on cybersecurity, such as limiting the sharing of information useful for threat hunting and penetration testing. For example, Europe’s General Data Protection Regulation considers IP addresses – a common indicator of compromise – as personal data. Since 2021, Professor Peter Swire of Georgia Tech’s College of Computing has led a team that has published two papers (linked below) studying the effects of data localization on the provision of cybersecurity services. In this Studio 471, Swire discusses the regulatory environment, how it could impact the use of cyber threat intelligence and what could be done to ensure attackers don’t leverage these changes to their advantage. Participants:Peter Swire, Professor, Georgia Tech College of ComputingJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

  8. 16 Jun

    Russian Cybercrime feat. Alec Jackson—U.S. Department of Defense | Studio 471

    In this video, learn about the rise of Russian cyber crime with U.S. Department of Defense Analyst, Alec Jackson.  At a state level, Russia is a top-tier cyber power, with capable advanced persistent threat groups. It is also the source of a significant amount of underground cybercriminal activity. That activity is a product of its strong educational systems but poor economic opportunity for IT professionals and low penalties for cybercrime, according to U.S. Department of Defense Analyst Alec Jackson who recently wrote a paper, “How the Collapse of the Soviet Union Made Russia a Great Cyber Power.” In this Studio 471, Jackson discusses how deep, institutional corruption ties Russian IT professionals, organized criminal groups and the state together and how Russia leverages this to its advantage. Participants:Alec Jackson, Analyst, U.S. Department of DefenseJeremy Kirk, Executive Editor, Cyber Threat Intelligence, Intel 471---------- Stay in Touch! Twitter: https://twitter.com/Intel471Inc LinkedIn: https://www.linkedin.com/company/intel-471/ YouTube: https://www.youtube.com/channel/UCIL4ElcM6oLd3n36hM4_wkg Discord: https://discord.gg/DR4mcW4zBr Facebook: https://www.facebook.com/Intel471Inc/

See All (20)

About

Join us into the world of cybercrime. Studio 471 brings you the latest trends, emerging threats, and expert advice to arm you with the insights needed to protect your business. By unraveling the mysteries of the underground, our series empowers teams, organizations, and communities to make informed decisions and discover actionable strategies to safeguard your digital footprint.

Information

  • Creator
    Intel 471
  • Years Active
    2026
  • Episodes
    20
  • Rating
    Clean
  • Copyright
    © Intel 471
  • Show Website
    Studio 471