{"id":39419,"date":"2021-02-03T17:00:34","date_gmt":"2021-02-03T17:00:34","guid":{"rendered":"https:\/\/www.microsoft.com\/security\/blog\/?p=92785"},"modified":"2021-02-03T17:00:34","modified_gmt":"2021-02-03T17:00:34","slug":"afternoon-cyber-tea-privacy-the-pandemic-and-protecting-our-cyber-future","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/afternoon-cyber-tea-privacy-the-pandemic-and-protecting-our-cyber-future\/","title":{"rendered":"Afternoon Cyber Tea: Privacy, the pandemic, and protecting our cyber future"},"content":{"rendered":"
<\/div>\n

Much of our everyday life has moved online with the pandemic continuing to play a role in how we work and communicate with others. This migration has meant that security and privacy continue to remain top-of-mind for both security professionals and those who may not have given these cyber issues a second thought once before.<\/p>\n

In this episode of Afternoon Cyber Tea<\/a>, I had a chance to talk about this impact with cybersecurity expert Theresa Payton<\/a>, CEO of Fortalice Solutions and co-founder of Dark Cubed.<\/p>\n

In our discussion, we focus on Theresa\u2019s experience with election security, social engineering, and about her book \u201cManipulated: Inside the Cyberwar to Hijack Elections and Distort the Truth<\/a>.\u201d We also look at how the cyber operatives behind misinformation campaigns choose their targets, and how digital empathy and human-centered design can help combat cybercrime.<\/p>\n

\u201cNation-state hackers invade social issues\u2014such as fracking, elections, or vaccinations\u2014all while posing as Americans,\u201d Theresa explains. She recounts how, in researching her book, she found herself speaking to a group of Macedonian hackers who targeted the 2016 election, only to discover the hackers were apolitical. \u201cWe\u2019re pro-capitalism,\u201d they told her, explaining how they\u2019d created detailed models that showed how much revenue they could earn by pushing certain candidates rather than others.<\/p>\n

\n

\u201cMicrosoft was one of the early leaders in offering free tools to help states improve their voting technology<\/a>. They looked at something that could be a revenue generator, then chose to make it about the public good instead.\u201d<\/em>\u2014Theresa Payton, CEO of Fortalice Solutions and co-founder of Dark Cubed<\/p>\n<\/blockquote>\n

During our conversation, we talk about how social engineering attacks are often made easier by our own trusting natures, with vacation photos, birthdays, and other personal content providing the raw data hackers rely on. Since privacy settings for social media usually require users to opt-in, many users are unknowingly laying their online life out like a buffet for hackers. And, since many people don\u2019t read the terms of service, they often have no idea what data is being collected, or what it\u2019s being used for. Theresa mentions a study done by MIT researchers<\/a> that found even anonymized data grabbed from phone records, credit card transactions, and mobile apps can be easily cross-referenced by zip code and gender to narrow the user\u2019s identity to within just five people.<\/p>\n

Theresa and I agree that people cannot be expected to be experts on cybersecurity or system designs, which is where digital empathy comes into play. As we get better at building security into systems, employees can be free to do what they were hired to do. \u201cMicrosoft has been leading the way in going passwordless<\/a>,\u201d Theresa says. \u201cI\u2019m excited that technology has finally caught up to our needs. Now we\u2019ll only be limited by our own creative minds.\u201d<\/p>\n

Find out how Theresa went from working as a bank manager to handling cybersecurity at the George W. Bush White House and get some tips on how to protect yourself from social engineering schemes\u2014listen to the full episode<\/a>.<\/p>\n

What\u2019s next<\/h2>\n

In this ongoing podcast series, I talk with cybersecurity influencers about the evolving threat landscape and explore the promise of systems powered by AI, IoT) and other emerging tech. In every episode, we\u2019ll look at how to empower people and organizations to create a more secure, productive digital environment.<\/p>\n

Listen to Afternoon Cyber Tea with Ann Johnson on:<\/h2>\n