Dark Reading Confidential

Dark Reading Confidential Episode 8: Federal funding for the CVE Program expires in April and a trio of experts agree the industry isn't doing enough to deal with the looming crisis. Bugcrowd's Trey Ford, expert Adam Shostack, and vulnerability historian Brian Martin sit down with Dark Reading to help us figure out what a "good" future of the CVE Program would look like, and how to get there.

Cyber researchers Ismael Valenzuela and Vitor Ventura share riveting stories about the creative tricks they used to track down advanced persistent threat groups, and the surprises they discovered along the way.

<p>Episode 4: The National Institute of Standards and Technology's (NIST) release of its new post-quantum cryptography standards last summer was the quiet start of a new chapter in cybersecurity. Now no longer something that can be filed away for future reference, post-quantum encryption has officially landed on the desks of cybersecurity leaders worldwide.</p><p> </p><p>We wanted to explore what comes next, so we recruited some world-class experts to help get answers. This episode of Dark Reading Confidential digs the world of quantum computing from a cybersecurity practitioner's point of view -- with guests Matthew McFadden, vice president, Cyber, General Dynamics Information Technology (GDIT) and Thomas Scanlon, professor, Heinz College, Carnegie Mellon University. </p><p><strong> </strong></p><p>They give practical advice on how to manage the upgrade of post-quantum standards across an array of systems, and how to prioritize the most critical cryptography vulnerabilities inside your organization. From threat actors to regulators, the pressure to update to post-quantum standards is on. This episode of Dark Reading Confidential is focused on what to do about it. </p><p> </p><p>Take a listen.</p>

<p>Episode 2: When a business gets infected with ransomware - its systems and data locked down by cybercriminals - there is rarely a quick fix to get back up and running. Sometimes the nature of the attack and the lack of backup options force the victim organization to pony up and pay ransom to the attackers. That's typically where a ransomware negotiator – often a third-party incident responder – steps in. These are the experts who communicate and negotiate with the ransomware attackers on the ransom demands, with the goal of decrypting locked-down systems so the victim business can get fully back up and running. In Episode 2 of Dark Reading Confidential, we meet two professional ransomware negotiators who share their real-world stories of the delicate deal-making process with cybercriminals who hold victims' computer systems and data for ransom. Among their stories: How they negotiated with cybercriminals to restore operations in a hospital NICU where lives were at stake, and a negotiation on behalf of a church, when the attackers themselves got "a little religion."</p>

<p>Breaking News: Dark Reading's brand-new podcast, Dark Reading Confidential, is coming this month. Dark Reading Confidential brings you rare, firsthand stories from cybersecurity practitioners in the cyber trenches. Join us for our inaugural episode, "The CISO and the SEC," with our guests Reddit CISO Fredrick Lee, Reddit Chief Legal Officer Ben Lee, and cybersecurity and data privacy attorney Beth Burgin Waller, who will share their stories and insights on the new SEC cyber incident reporting rules. Subscribe so you won't miss this or any episodes.</p>