Tag Archive for: exec

ZeroFox Puts Spotlight on Exec


WASHINGTON, Jan. 18, 2023 (GLOBE NEWSWIRE) — ZeroFox ( ZFOX), a leading external cybersecurity provider, will participate in a webinar through the SANS Institute about the importance of executive protection on Jan. 24, 2023 at 1 p.m. EST. AJ Nash, ZeroFox’s VP & Distinguished Fellow of Intelligence, will speak alongside Jeff Daisley, Senior Security Intelligence Engineer at Comcast and former lead analyst at the U.S. Secret Service. The webinar is free to attend and will address the growing external attack surface and threats to high profile individuals; the benefits of an executive protection program; and best practices to create an effective executive protection strategy.

Targeted cyberattacks on executives are on the rise, and exposed PII for sale puts executives and organizations at an increased risk of spear phishing, ransomware, and social engineering. The cost of not taking executive protection seriously can be detrimental to a company’s bottom line.

“Each year, more company executives’ and employees’ personal data is exposed and marketed for sale by third parties in publicly searchable databases,” said AJ Nash, VP & Distinguished Fellow of Intelligence at ZeroFox. “In a world where the pool of security professionals is shrinking while the external attack surface is expanding, it’s never been more important – or more challenging – to protect leaders from external threats. As corporate security teams build effective executive protection strategies, ZeroFox is increasingly included because we reduce their workload through ongoing monitoring and automated removal of executive PII, account takeovers, impersonations, and physical threats.”

To register for the SANS webinar with ZeroFox and Comcast and learn why protecting people should be a pillar of any strong cybersecurity strategy, visit SANS.org.

About ZeroFox
ZeroFox ( ZFOX), an enterprise software-as-a-service leader in external cybersecurity, has redefined security outside the corporate perimeter on the internet, where businesses operate, and threat actors thrive. The ZeroFox platform combines advanced AI analytics, digital risk and privacy protection, full-spectrum threat intelligence, and a…

Source…

Ex-Twitter exec files whistleblower complaints, alleging major security problems | Technology


Twitter has major security problems that pose a threat to its own users’ personal information, to company shareholders, to national security, and to democracy, according to an explosive whistleblower disclosure obtained exclusively by CNN and The Washington Post.

The disclosure, sent last month to Congress and federal agencies, paints a picture of a chaotic and reckless environment at a mismanaged company that allows too many of its staff access to the platform’s central controls and most sensitive information without adequate oversight. It also alleges that some of the company’s senior-most executives have been trying to cover up Twitter’s serious vulnerabilities, and that one or more current employees may be working for a foreign intelligence service.

The whistleblower, who has agreed to be publicly identified, is Peiter “Mudge” Zatko, who was previously the company’s head of security, reporting directly to the CEO. Zatko further alleges that Twitter’s leadership has misled its own board and government regulators about its security vulnerabilities, including some that could allegedly open the door to foreign spying or manipulation, hacking and disinformation campaigns. The whistleblower also alleges Twitter does not reliably delete users’ data after they cancel their accounts, in some cases because the company has lost track of the information, and that it has misled regulators about whether it deletes the data as it is required to do. The whistleblower also says Twitter executives don’t have the resources to fully understand the true number of bots on the platform, and were not motivated to. Bots have recently become central to Elon Musk’s attempts to back out of a $44 billion deal to buy the company (although Twitter denies Musk’s claims).

People are also reading…



Source…

OYO Appoints Ex-PayU Exec. Prakash Padariya As Chief Information Security Officer


Global hospitality technology platform, OYO, has announced the appointment of Prakash Padariya as the Chief Information Security Officer (CISO) for IT and security teams. In his role at OYO, Prakash will helm a security strategy for OYO’s systems globally, including regions such as India, SEA, Europe, USA and the UK. 

In his role as CISO at OYO, Prakash will lead the operations for teams working specifically for IT and Cyber Security services. In addition to this, Prakash will be also responsible for leveraging technologies such as big data analytics and artificial intelligence to enhance cyber security functions from the ground. Padariya joins OYO from Netherlands headquartered online payment solutions provider PayU, where he was in a similar role. 

He brings with him 19+ years of experience across geographies with extensive expertise in corporate security consulting, cyber security, cyber warfare, vulnerability assessment, ethical hacking, surveillance audits, legal regulatory compliance, computer forensics, law enforcement cybercrime prevention, among others. Besides PayU, Prakash has worked in senior management roles across leading Fortune 100 MNCs like GE, Royal Bank of Scotland, IBM, Target Corporation and Accenture. 

At OYO, Padariya will directly report into the company’s Chief Technology Officer – Ankit Mathuria. Commenting on his appointment, Prakash Padariya, Chief Information Security Officer, OYO said, “I am super excited to join OYO at this stage where all of travel is transforming and resurging post-COVID-19. I am honored to be a part of this team and can’t wait to start developing solutions to enhance the maturity of all of OYO’s products to the next level of security and privacy.” 

Commenting on Prakash’s appointment, Ankit Mathuria, Chief Technology Officer, OYO said, “OYO’s data privacy and security are at the core of how we build technology. And for this reason, we believe in working with industry experts who can best lead the…

Source…

Former Cisco exec jailed for fraud, dodging taxes • The Register


A former Cisco executive was this month sentenced to 36 months in a US prison, and ordered to pay more than $3.6m in fines, for wire fraud and tax violations.

Former senior director of Cisco’s global supplier management operation, Prithviraj “Roger” Bhikha, admitted in November last year, as he pleaded guilty, that he took kickbacks to the tune of $1.15m while sourcing suppliers on Cisco’s behalf.

A supplier that hoped to do business with Cisco paid money to a Hong Kong company Bhikha created, called Lucena. Lucena was later transferred under his wife’s name. Bhikha then hired Lucena to provide Cisco with price negotiation services.

Cisco had no idea what was going on.

Lucena and an affiliated Singapore-based company pulled in a cool $10.06m from Cisco between August 2014 and April 2017. Bhikha even concealed his efforts to distance himself from Lucena by having a fake CEO attend a 2016 Cisco meeting and present fictional data in order to ensure continued business.

Bhikha and his wife extracted $9m from Lucena’s foreign accounts and neglected to include the income on his taxes, resulting in an underpayment of $2.5m.

The business arrangement fell apart in 2017 when Cisco cottoned on to its employee’s illicit dealings.

Interestingly, a court document [PDF] signed by Judge Charles Breyer asserted that Bhikha’s endeavors did benefit Cisco to some extent.

“Bhikha did not simply use his companies to steal money from Cisco without providing anything in return. Consistent with their contractual obligations, his companies negotiated lower prices on behalf of Cisco,” said the filing, adding “Even assuming that the $69 million figure is inflated, there appears to be no dispute that Bhikha’s secretly-owned companies saved Cisco tens of millions of dollars.”

Of the more than $3.6m Bhikha must cough up, $1.15m will go to Cisco, while the…

Source…