ESW #312 - Tom Kellermann, Donald Fischer

<p>Kellermann will discuss the recently published report “Cyber Bank Heist” that exposes the cybersecurity threats facing the financial sector. Security must be a top-of-mind issue amid rising geopolitical tensions, increased destructive attacks utilizing wipers and a record-breaking year of zero-day exploits. Podcast listeners will learn what financial sector security leaders from around the world revealed in a series of interviews about specific trends when it comes to notable cyberattacks, e-fraud and cyber defense.</p> <p>Segment Resources:</p> <p> - <a href= "https://www.contrastsecurity.com/cyber-bank-heists-report">https://www.contrastsecurity.com/cyber-bank-heists-report</a></p> <p>- <a href= "https://www.contrastsecurity.com/security-influencers/cyber-bank-heists-report-code-patrol-podcast-contrast-security">https://www.contrastsecurity.com/security-influencers/cyber-bank-heists-report-code-patrol-podcast-contrast-security</a></p> <p> </p> <p>Overall increase in government regulations. EU as well. Shift in liability from consumers to organizations.How to take advantage of safe harbor protections and reduce organizational risk and liability. NIST SSD Framework - how do you understand the security practices of the open source packages you use in your applications and ensure they are following the NIST practices (so you can take full advantage of safe harbor protections and reduce potential liability). Creating a network of open source maintainers, documenting and attesting to their security practices, is a solution. Work with the maintainers to be able to provide documentation. How to get more involved with development in open source security. What is the mechanism?</p> <p>Segment Resources:</p> <p><a href= "https://tidelift.com/government-open-source-cybersecurity-resources"> https://tidelift.com/government-open-source-cybersecurity-resources</a></p> <p><a href= "https://blog.tidelift.com/webinar-how-the-nist-secure-software-development-framework-impacts-open-source-software"> https://blog.tidelift.com/we