Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Mike Mimoso
WEF Buyers Guide
Admiral Michael S. Rogers, (Ret) Admiral (Ret.) Michael S. Rogers retired in 2018 from the U.S. Navy after a distinguished 37-year career. In March 2014 he was appointed by President Barack Obama as the 17th Director of the National Security Agency and the 2nd Commander of U.S. Cyber Command. Prior to earning his fourth star he commanded the U.S. Tenth Fleet and U.S. Fleet Cyber Command.
The C-Suite Innovation Club launched to help mid-sized businesses thrive
New space for the C-suite to network and share insight into an all-too-often forgotten space in the market A new networking and innovation platform for C-Suite and IT leaders of mid-to-large sized enterprises has been launched by the CEO and founder of a leading managed-IT company. The platform will be used by its members to share advice and insight on how the mid-market can navigate today’s greatest challenges and use technology to scale effectively.
Security and Threat Intelligence
Josh Lefkowitz Chief Executive Officer Josh Lefkowitz executes the company’s strategic vision to empower organizations with Business Risk Intelligence (BRI). He has worked extensively with authorities to track and analyze terrorist groups. Mr. Lefkowitz also served as a consultant to the FBI’s senior management team and worked for a top tier, global investment bank. Mr. Lefkowitz holds an MBA from Harvard University and a BA from Williams College.
'Tumultuous' Underground Markets Analysis
Collective Intelligence Podcast, Underground Markets Podcasts November 18, 2019 By Mike Mimoso Underground markets continue to thrive across the internet. This is in spite of successful law enforcement action against a number of entities peddling anything from malware to drugs, as well as other markets’ self-imposed shutdowns due to economic pressures within the underground.
Chris Cochran on Building a Culture of Security, Intelligence
By Mike Mimoso Chris Cochran spent the money his mother gave him in high school earmarked for clothes instead on a networking certification prep manual. Someone has always been an outside-the-box thinker and leader. Cochran embodies the atypical path many security and intelligence professionals take in their careers. He joined the military intent on being a scout sniper, but after acing the Armed Service Vocational Aptitude Test, he had his pick of disciplines to choose from.
CISOs and the Security Culture
Collective Intelligence Podcast, CISOs and the Security Culture Podcasts September 24, 2019 By Mike Mimoso Embedding security deep inside the culture of an enterprise or smaller organizations means two things to Anthony Johnson, an industry veteran and former Fortune 100 CISO. One, organizations must have a mindset of security engrained at every layer of the business, and two, must move toward enablement of not only security technology, but also processes.
Deepfake CEO Voice Scam, Facebook Data Breach on Apple Podcasts
21 min Threatpost editor Lindsey O'Donnell discusses security threats, attacks, vulnerability research and trends with a variety of industry executives, researchers and experts. 21 min
Alex Klimburg on Ideologies, Cyber Conflict, Internet Governance
By Mike Mimoso As the internet has transformed economies and human communication, it has largely maintained a multistakeholder model in terms of internet governance. The public network is still characterized by its openness, innovation, and decentralized, transnational governance. More and more, however, political conflict has seeped online and the threat of military conflicts taking place in cyberspace looms as well.
Cyber Insurance for CISOs
By Mike Mimoso Cyber insurance and software liability have been hovering over the security industry for the better part of two decades but have decidedly failed to kick down the door and become mainstream. That dynamic may be changing, however.
Access to Chat Services Data Imperative to Lowering Risk
By Mike Mimoso Good guys and bad are constantly testing each other. One zigs, and the other zags. It’s the essence of the chase for the white hat and the instinct to survive for the black hat. This scenario plays out with hackers all the time. Exploitable vulnerabilities get patched. Ransomware gets decrypted. In turn, new hacks are developed. Variants of malware pop up all the time. This also plays out within illicit communities on the deep and dark web (DDW), as well as the open web.
Collective Intelligence Podcast, Mathy Vanhoef on Dragonblood WPA3 Attacks
By Mike Mimoso LAS VEGAS—Vulnerabilities in the WPA3 WiFi protocol continue to surface, whereby resourced attackers would be able to leak memory from a client connection to a wireless access point and perform offline dictionary attacks to retrieve a user’s password to a wireless network.
Collective Intelligence Podcast, Akamai’s Tony Lauro at Black Hat USA 2019
By Mike Mimoso LAS VEGAS—Defenders inside the enterprise and within the public sector are facing a head-spinning array of threats. And with Black Hat, the industry’s biggest offensive security research conference, kicking off today, more weight in the form of new vulnerabilities and threat actor tactics is about to be placed on the shoulders of security teams worldwide.
Flashpoint's Eric Lackey on Mitigating Insider Threat
By Mike Mimoso Insiders are privileged, and operate inside the perimeter and behind the firewall. Yet defenders exhaust resources and concentrate investments and policy enforcement around external actors and threats. Insider threats are still not on par with external attacks such as ransomware and zero days despite the potential for insiders to abuse their access and steal the most coveted of internal secrets such as intellectual property.
The Unique Challenges and Risks Posed by Insiders
The Unique Challenges and Risks Posed by Insiders Blog June 25, 2019 By Mike Mimoso Insiders should make private- and public-sector security teams nervous. Their access to critical IT systems, company assets such as intellectual property, and the personal information of customers and employees makes insiders a formidable risk that deserves the same level of attention as external threats. And insiders don’t have to act maliciously to be a risk to the business.
Patrick Wardle on Synthetic Click Vulnerabilities in macOS
Collective Intelligence Podcast, Patrick Wardle on Synthetic Click Vulnerabilities in macOS Podcasts June 13, 2019 By Mike Mimoso Hackers and defenders aren’t the only players in the security cat-and-mouse game. Vendors and researchers are also playing too. Apple, for example, has spent the last year touting new security and privacy enhancements in the latest version of macOS, Mojave.
Allison Nixon on SIM Swap Fraud and Account Takeover
Collective Intelligence Podcast, Allison Nixon on SIM Swap Fraud Podcasts June 5, 2019 By Mike Mimoso SIM swap is a powerful fraud technique that has largely gone under the radar, despite devastating consequences to some of its victims, and losses that are quickly multiplying. For criminals, SIM swapping is a gateway to account takeover.
Peri Doerfler on Login Challenges and Account Takeover
By Mike Mimoso Given the billions of compromised and publicly leaked credentials available on the surface web and within illicit underground communities, account takeover attacks are being elevated as a pressing issue for fraud teams. Those defenders have a number of authentication methods at their disposal, and unsurprising to anyone, each has a varying degree of efficacy.
David Maimon on the Dark Web Market for SSL/TLS Certs
Collective Intelligence Podcast, David Maimon on the Dark Web Market for SSL/TLS Certs Podcasts May 6, 2019 By Mike Mimoso Compromised, stolen, or forged TLS and SSL certificates open many doors to profit for a cybercriminal. In parallel, they are also a precursor to difficult times for victims, who may find themselves conducting transactions on spoofed ecommerce sites that are given legitimacy by the padlock that symbolizes the presence of a legitimate certificate and an encrypted connection.
Intelligence Requirements for the Public Sector
Intelligence Requirements for the Public Sector Blog April 17, 2019 By Mike Mimoso Developing intelligence requirements for the public sector is a different experience than what commercial-sector counterparts endure. Entities that require intelligence to carry out a mission in the public sector collect data that supports long-term goals and addresses persistent threats.
Troy Hunt on Changing Password Behaviors
Collective Intelligence Podcast, Troy Hunt on Changing Password Behaviors Podcasts April 10, 2019 By Mike Mimoso Passwords, death, and taxes, none of them are ever going away. Even Troy Hunt has conceded as much. Hunt’s Have I Been Pwned website recently turned 5 years old, and for much of that time it has been the definitive place for computer users to determine their exposure from data breaches.
Threat Actors Shifting from Opportunistic to Targeted Ransomware
By Mike Mimoso CryptoLocker, WannaCry, and the hundreds of other ransomware families that indiscriminately infected businesses and government agencies worldwide have been studied and in some cases neutralized by researchers who figured out how to decrypt data locked down by the respective malware. Nimble threat actors, however, have lately focused on a much more targeted approach to potential profits.
Cryptocurrency Risks to Consider: From Cryptomining to Money Laundering
Cryptocurrency Risks to Consider: From Cryptomining to Money Laundering Blog March 21, 2019 By Mike Mimoso In the not-so-distant past, cybercriminal use of cryptocurrency was largely limited to using Bitcoin or Monero as an anonymous means of collecting ransomware payments. Today, however, threat actors have discovered more direct ways of profiting off the yo-yoing valuation of various cryptocurrencies, which has profoundly impacted the underground economy.
Unstructured Data is not Threat Intelligence
Lesson 1: Data is Not Intelligence BRI February 6, 2019 By Mike Mimoso One thing we’re good at in information security is conflating terms—and there are no shortage of mistakes on this front. For example, vulnerabilities are not exploits, worms are not viruses, and data is not intelligence. Data in the context of threat intelligence is just that: raw and often voluminous.
Vitali Kremez on Redbanc Hack and Lazarus Group
Collective Intelligence Podcast, Vitali Kremez on Redbanc Attack and Lazarus Group Podcasts January 22, 2019 By Mike Mimoso North Korea’s Lazarus Group has notoriously been linked to massive thefts of information and money since its 2014 attack against the Sony Group.
Threat-actor opportunism during peak season
Attackers’ opportunism is never higher during the year than in the holiday shopping season. As a result, businesses must be aware of the potential for increases in malware attacks against point-of-sale (PoS) systems, the possibility of distributed denial-of-service (DDoS) attacks against popular web-based services, and attempts to bypass fraud-detection systems, to name just a few seasonal risks.
Drop Networks, Label-Creation Services Sustain Shipments Of Fraudulent Purchases.
Most often, headlines fixate only on the loss of sensitive personal data and payment card information in the wake of a data breach. There is another—and often ignored—piece to this segment of the underground economy: cashing out by criminals, in particular through fraudulent purchases.
Chatbots Say Plenty About New Threats to Data
Chatbots are becoming a useful customer interaction and support tool for businesses. These bots are powered by an artificial intelligence that allows customers to ask simple questions, pay bills, or resolve conflicts over transactions; they’re cheaper than hiring more call centre personnel, and they’re popping up everywhere. As with most other innovations, threat actors have found a use for them too.
Cybercriminals target job listing portals to recruit unwitting mules for fraud
Job listing and recruitment portals have been an attraction for cybercriminals given the volume of personal information uploaded to those sites in the form of resumes, cover letters and other data specific to individuals. But there’s more to criminals’ interest than just stealing personally identifiable information. Security shortcomings on some of these sites can expose job applicants, business account holders and the recruiters themselves to a number of different threats.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Mike
Contact Mike, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack