Securonix SIEMple Talks

Securonix

Join Augusto Barros, VP of Product Marketing at Securonix and former Gartner analyst, for insightful conversations with cybersecurity leaders. SIEMple Talks explores the ever-evolving landscape of threat detection, investigation, and response (TDIR) with a focus on SIEM solutions. Gain unique perspectives from Securonix customers, partners, and industry experts on navigating today's security challenges.

Episodes

  1. Testing Deepfakes: The Reality of AI Impersonation Attacks

    03/21/2025

    Testing Deepfakes: The Reality of AI Impersonation Attacks

    Send us a text What happens when your company's cyber defenses face a deepfake attack impersonating leadership? Bill Shearstone, Director of Information Security in the energy sector, shares the eye-opening results from a penetration test where his team used AI-generated deepfake technology to trick an employee into resetting credentials. Despite technical limitations and the employee's "gut feeling that something wasn't right," the attack succeeded - revealing crucial lessons about human psychology in security. Drawing from both his extensive commercial experience and previous work at the NSA during the global war on terrorism, Shearstone offers practical insights on how organizations should approach penetration testing. Rather than repeatedly testing external defenses, he advocates starting tests with internal access to thoroughly evaluate detection capabilities, incident response procedures, and lateral movement controls. This approach uncovered a critical finding: security tools detected suspicious activity but failed to provide the complete picture of what was happening. Shearstone emphasizes why cybersecurity's strength lies in continuous improvement and incident response preparation: "If I look at an attack coming in and I'm able to contain it without impacting business operations tremendously, to me that's just as good as preventing an attack." His pragmatic approach acknowledges that perfect prevention is impossible, making effective detection and response capabilities equally crucial for organizational resilience.

    42 min
  2. Securing the Digital Battlefield: The Role of Threat Research in Cyber Defense

    02/12/2025

    Securing the Digital Battlefield: The Role of Threat Research in Cyber Defense

    Send us a text Discover the world of cybersecurity through the eyes of Tim Peck, the Senior Security Researcher at Securonix, as he shares his journey from a sysadmin role to a leading figure in threat research and incident response. Learn how Securonix integrates advanced threat intelligence into its products to outsmart cyber adversaries and enhance detection capabilities, offering unparalleled value to both the industry and their customers. Tim reveals how timely advisories can disrupt the plans of threat actors, highlighting the proactive nature of modern cybersecurity. Join us as we unravel the complexities of modern cyber warfare, focusing on the tactics of high-profile APT groups and the innovative challenges posed by malware like STEEP#MAVERICK. Understand the necessity of a layered security approach and how pairing technologies can close potential gaps in detection, particularly through SIEM systems. This episode sheds light on the evolving strategies of cyber adversaries and explores how organizations can bolster their defenses against sophisticated threats. Explore the dual impact of AI on cybersecurity, where it serves as both an ally and a threat. While AI enhances our capabilities, it also empowers malicious actors to deploy threats at unprecedented speed and scale. Despite these challenges, threat intelligence remains a cornerstone of cybersecurity, transforming into actionable insights that fortify defenses. By understanding threat actors' methodologies, organizations can not only react to known threats but also anticipate and mitigate future risks, proving that informed strategies are key to securing the digital frontier.

    42 min

About

Join Augusto Barros, VP of Product Marketing at Securonix and former Gartner analyst, for insightful conversations with cybersecurity leaders. SIEMple Talks explores the ever-evolving landscape of threat detection, investigation, and response (TDIR) with a focus on SIEM solutions. Gain unique perspectives from Securonix customers, partners, and industry experts on navigating today's security challenges.