Channel Title: The CISO Perspective Channel Description: The CISO Perspective was created as a free resource for the benefit of the entire cybersecurity community. Have a cybersecurity question? Send us an email for free consultation response in 4 sentences or less. <video> Hacking with ChatGPT: Five A.I. Based Attacks for Offensive Security Description: ChatGPT may represent one of the biggest disruptions in modern history with it's powerful A.I based chatbot. But within weeks of ChatGPT's release, security researchers discovered several cases of people using ChatGPT for everything from malware development to exploit coding. In this video, take a look at the five ways attackers are utilizing ChatGPT for wrong doing. 0:14 Intro to ChatGPT / Natural Language Processing (NLP) & GPT 1:28 Using ChatGPT for Vulnerability Discovery 1:56 Vulnerability Prompts to Utilize 3:10 Writing Exploits 3:35 Exploit Prompts to Utilize 4:33 Malware Development 5:00 Malware Examples (Stealers, Command & Control) 5:42 Polymorphic Malware Development Using ChatGPT 6:21 A.I. Based Phishing using NLP (Natural Language Processing) 7:20 ChatGPT Advantages over Traditional Phishing Messages 7:41 Custom Messages Using GPT-3 8:04 Using Macros and LOLBINs 9:33 GPT-3 vs GPT-4 (Coming Soon) 9:56 Cybersecurity Considerations and Predictions </video> <video> What is Zero Trust Network Access (ZTNA)? The Zero Trust Model, Framework and Technologies Explained Description: Zero Trust Network Access (ZTNA) is a technology that is quickly replacing VPN’s as a more secure and scalable way to provide remote connectivity. Unlike VPNs, Zero Trust provides a scalable way to provide secure connectivity without the need of centralized equipment. In this video we take a deep dive on Zero Trust Network Access (ZTNA) and walk through the models, principles and architectures it’s based on. We’ll review what exactly “Zero Trust” is, as well as the foundational concepts that are at the core of ZTNA. The Zero Trust Network Access Hierarchy 0:22 The Zero Trust Model 0:57 Verification: Three Foundational Functions 2:06 Continuous Monitoring 3:27 What is Zero Trust Network Access (ZTNA) 3:52 On-premise vs Cloud 4:36 Cloud ZTNA Implementation and Vendors 4:46 On-premise Implementation and Vendors 5:02 ZTNA De-centralized Architecture 5:20 ZTNA Full Walk Through 6:21 </video> <video> Hacking Two Factor Authentication: Four Methods for Bypassing 2FA and MFA Description: Bypassing multi-factor authentication was once considered more of a proof of concept then an actual threat. In this video, we will review four common techniques an attacker will utilize to hack multi-factor and two-factor authentication. We’ll review Evilgenix2, which is a popular framework for stealing authentication cookies, and other methods that an attacker can utilize to bypass the authentication process. 1:06 Evilgenix2 Framework 2:51 Evilgenix Defense and Protection 3:45 Pass the Cookie 5:10 Pass the Cookie Defense and Protection 5:56 SMS Man-in-the-Middle 6:34 SIM Swap 8:13 Attack on Soft and Hard Tokens 9:22 Hard Token Example Resources/Links -Evilgenix GitHub: https://github.com/kgretzky/evilginx2 -Pass the Cookie example: https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/ -Android 0-day SMS: https://stealthbits.com/blog/bypassing-mfa-with-pass-the-cookie/ </video> <video> What is AIOps and MLOps? Artificial Intelligence for IT Operations Explained Description: AIOps (also known as MLOps) is a combination of big data with machine learning to enhance IT operations. Using artificial intelligence, the system can find and predict network issues in real time. With Gartner predicting an increase of 700% over the next three years, this technology is only just beginning. In this video, we'll review what AIOps is, uses cases, and the five Gartner components that make up the system. 1:02 - Current I.T. Operations Triaging 1:53 - Intro to AIOps (Artificial Intelligence for IT Operations) 2:15 - Machine Learning for Operations 2:36 - Big Data Analytics for Operations 3:20 - Gartner's Five Functions 3:33 - Function 1: Ingestion 4:32 - Function 2: Topology 4:57 - Function 3: Correlate 5:39 - Function 4: Recognition 6:49 - Function 5: Remediation 7:39 - AIOps Market </video> <video> What is Security Service Edge (SSE)? SASE vs SSE vs VPN Description: In this video, we compare traditional VPN vs SASE and SSE (Security Service Edge). SSE and SASE are categories of technology that provide Cloud-delivered security services. We’ll review the components that make up SASE and SSE, and look at how these two similar services compare. The Problem with VPNs 0:01 Secure Access Service Edge (SASE) Overview 1:28 SASE Components 2:10 SASE Integration 3:08 Security Service Edge (SSE) 4:40 SASE vs SSE 4:53 Choosing Between SASE and SSE 5:31 </video> <video> How Hackers ACTUALLY Break In (Cybersecurity Kill Chain Explained) Description: The Cybersecurity Kill Chain is a model for describing the steps an attacker must complete to carry a successful attack. Check out the full video here: https://youtu.be/II91fiUax2g In this video, we'll look at defensive tools we can apply at every phase of the kill chain as part of a multi layered security strategy. </video> <video> Becoming a Product Manager - 60 Second Overview #shorts Description: According to Glassdoor, Product Management (PM) is one of the fastest growing and highest paying jobs in technology. As a PM, you're responsible for the vision, strategy and implementation of a given product. For people coming from a technical background, the PM role is a great career aspiration. In this #short 60 second video, we discuss the role of a Product Manager, and the four knowledge domains every PM should have. </video> <video> The 2023 Deepfake Guide (Roop, Wave2Lip, ElevenLabs, Tortoise) Description: FULL VIDEO GUIDE COMING SOON.. These are Deepfake samples for educational purposes only. The goal is to demonstrate the current capabilities and techniques used for deepfakes. Full video coming to The CISO Perspective YouTube channel -Sample #1 uses ElevenLabs to voice clone and Wave2Lips to lip sync the audio. -Sample #2 uses Roop Unleashes for the face swap -Sample #3 uses Tortoise to voice clone and Wave2Lips to lip sync the audio. </video> <video> T-Mobile Data Breach: Timeline, Analysis and Lessons Learned Description: The most recent T-Mobile hack is one of the largest data breaches in US history. 50 million current and former T-Mobile customer records containing social security numbers, driver's licenses, addresses, and phone numbers have made their way to dark web forums. In this video, we'll review the timeline of events, as well as what T-Mobile could have done differently to stop this attack from ever occurring. 0:57 - T-Mobile data breach first reported 1:25 - How the attacker hacked T-Mobile 2:08 - T-Mobile confirms 50 million users impacted 2:40 - Alleged attacker speaks with WSJ 3:30 - What went wrong and prevention steps 4:24 - What's next for impacted users 4:50 - Lifecycle of a data breach 5:10 - Phishing attacks 5:35 - SIM swaps 5:58 - Account takeovers (ATO) Lifecycle of a data breach: https://krebsonsecurity.com/2021/07/the-life-cycle-of-a-breached-database/ </video> <video> Exploits Explained: How Log4j, Buffer Overflows and Other Exploits Work Description: Exploits represent any piece of code, data or sequence of commands that targets a vulnerable application for the purpose of gaining unauthorized access. Log4j is one of the most popular recent exploits that is widely considered to be the most dangerous exploit of our time. In this video, we will break down the anatomy of an exploit, and how each part of the malicious code comes together to target a vulnerable application. We’ll discuss the three distinct parts most exploits have in common, as well as a deep dive into Log4j. Exploit Anatomy 0:51 Lof4j Overview 1:12 Types of Exploits 2:25 Buffer Overflows 2:44 Buffer Overflow Demo 3:18 Shell Codes 4:07 Jumping the Memory Stack 5:26 Payloads 5:49 Meterpreter 6:30 Layered Defense Against Exploits 7:05 </video> <video> What is Machine Learning ? A.I., Models, Algorithm and Learning Explained Description: In this video, we go over what Machine Learning is and how it works within the Artificial Intelligence framework. We’ll review the Machine Learning model, learning methods and the algorithms used for different use cases. A.I. vs Machine Learning vs Deep Networks 0:42 Machine Learning Overview 1:18 Machine Learning Model 1:45 Supervised Learning 2:15 Unsupervised Learning 2:40 Semi-Supervised Learning 3:09 Reinforcement Learning 3:27 Machine Learning Formula 4:05 Classification Algorithm 4:40 Clustering Algorithm 5:40 Recommendation Algorithm 6:43 Regression Algorithm 7:18 Dimensionality Reduction 8:17 Machine Learning Summary 9:27 </video> <video> What is XDR vs EDR vs MDR? Breaking down Extended Detection and Response Description: Extended Detection and Response (XDR) is a cybersecurity tool that integrates with multiple products to detect and respond to threats. While EDR (Endpoint Detection and Response) focuses on the endpoint, XDR uses A.I. to ingests information from multiple sources and detect patterns across different device types. In this video, we'll discuss what XDR is and how it compares to EDR and MDR (Managed Detection and Response). Overview 0:55 - What is Endpoint Detection and Response (EDR)? 3:11 - Traditional Endpoint vs EDR 3:46 - What is Extended Detection and Response (XDR)? 4:27 - XDR Components 5:13 - How XDR uses A.I. (artificial intelligence) 6:06 - What is Managed Detection and Response (MDR)? 6:30 - Forrestor MDR definition 7:08 - MDR Segments / Markets 7:48 - Putting it together: EDR vs XDR vs MDR </video> <video> The 2024 Cybersecurity Trends You NEED to Know Description: With over 30,000 security incidents analyzed, the 2024 Verizon Data Breach Investigations Report (DBIR) is the most comprehensive and cited report in the cybersecurity incident. In this video, we dive deep into this 100-page report, exploring the most significant trends and insights from over 10,000 breaches over the last year. We'll wrap up by looking at actionable insights and defense measurements, based on the DBIR's key metrics. 💡 In This Video: 0:48 - High-Level Trends: A closer look at how attackers are getting into networks. 2:00 - Method Breakdown: Which attack methods saw the biggest increase 3:18 - The Rise of Exploits: With the significant rise in exploite breaches, what statistically safer? 4:40 - The Human Factor: Why the human element remains a top cybersecurity challenge. 5:13 - Supply Chain Attacks: New DBIR metrics on third-party risk and how to address it. 7:10 - Defense Strategies: Practical tips to safeguard your organization based on DBIR insights. </video> <video> AI Generated Fakes: The Stable Diffusion Revolution Description: In this video, we dive into the world of how A.I generated fake images are created using the popular Stable Diffusion LLM. Unlike Midjourney and Open AI's DALL-E, Stable Diffusion's opensource nature has an extensive community and tools for custom training. But this hub for innovation has also sparked a wave of hyper-realistic A.I. fakes. In This video, we'll not just cover how these images are created but, more importantly, how to detect A.I. generated fake images. Stable Diffusion Overview 0:25 Forms of A.I. Generated Fake Images 1:14 Why Stable Diffusion? 2:32 Stable Diffusion Framework for Fakes 3:16 Models and Checkpoints for Realistic Images 3:33 Training the Model (Text Embeddings and LoRa's) 4:18 Kohya_SS for Training 4:44 Using the LoRa in Stable Diffusion 5:11 User Created Model Database 5:40 How to Spot a Fake 6:12 Software Detection (AI Detectors) 9:17 Reverse Engineering a Photo 10:19 Other Fakes and Considerations 11:14 </video> <video> Cybersecurity News Recap for December 2024 #cybersecurity Description: Cybersecurity minute recaps all the major cybersecurity events and news for the month of December. Spoiler alert: ALOT of China linked activity - Chinese U.S. Treasury Hack - Salt Typhoon: U.S. Telecom Breach - SMS Based 2FA Bypass - TP-Link Routers Ban #cybersecuritytrends #cybersecurity #cybersecurity #news </video>

Contacts and Links

Description

The CISO Perspective was created as a free resource for the benefit of the entire cybersecurity community. Have a cybersecurity question? Send us an email for free consultation response in 4 sentences or less.

Videos from channel