SpyCloud sponsors NAC-ISSA January lunch

Join NAC-ISSA and SpyCloud for our January 2025 chapter lunch on January 28, 2025 from 11:30 to 12:30. We’ll be hosted by the Auburn University Research and Innovation Center. Phillip Ogle will be our presenter with tales from the Dark Web trenches.

SpyCloud uses human intelligence “officers” who set up fake identities and use those identities to infiltrate criminal groups. In these groups criminal will share data to get help understanding the value of the data, get help to develop a plan of attack with that data, and then get help to figure out a way to best monetize on the attack.

 In these offline groups SpyCloud can see high value records such as:

• User Credentials,
• Session Cookies,
• API Tokens,
• Credit Cards,
• Banking numbers,
• Social Security Numbers (US) and National IDs
• Date of Birth

SpyCloud can also see low value records such as:

• Driver’s License Number
• Physical Address
• Phone numbers
• Vehicle Identification Numbers

Whether you have heard of SpyCloud or not, you have likely unknowingly seen some of their data presented in commercials by companies we partner with to help their solutions be more complete.

In the presentation we will go back in time to a real-world cyber-attack that made an ISP unable to service its customers for most of the day.  You will see the real patient zero and see how the criminals were able to impersonate the patient to gain access.

The weakest variable that we struggle to control is still the human. That is still the case, and we will end on automated remediation.  If one of my users gets an unmanaged, or undermanaged device compromised because of their action, or perhaps another member of their household, we will end on automated remediation so you, the protector, can keep your organization secure. We will also see that humans still try to use their brain verses a good password manager, and how an automated approach can better assist with this problem as well.