iamit.org

Media / Speaking

A collection of media clippings, speaking videos, and interviews.

Here are a few of the media clippings from the past years. I have had the pleasure of being interviewed multiple times to media outlets around the world and discuss findings, general security and technology topics, express my opinions on ongoing matters, and speak at conferences.
First of all - the easiest: my current blog. Older posts under the former Finjan and Aladdin are a bit harder to find as both were acquired and renamed, while losing the original blogs.
For a summarized view of most of my publications through different media outlets over the years you can view this Google Archive Search.
If you'd like to inquire about a speaking opportunity, I'm usually booked 2-3 months in advance, but feel free to email me or use my contact form. Note that at a minimum travel and acommodations should be covered, along with a negotiable speaker honorarium.

Date		Description
2022	February	Opening panel speaker on Leveraging AI to Monitor Employees and Mitigate External Threats at Compliance Week
2021	August	Interview for NPR on the NSO spyware issues - NPR 2021 CyberWeek Conference Closing Keynote
2020	December	Guest on the Tech Trek Podcast - Part 1 and Part 2
	April	Webinar interview with Preetham Peter of Infoedge about using loss scenarios in security practices Interviewed by Liberation.fr on the measures taken by the Israeli government amidst the coronavirus crisis handling. Full PDF here
	February	Wrote an article for Forbes on the Product vs Skill pendulum Featured on Forbes Effective tips for creating and sustaining strong cybersecurity teams Featured on Forbes in an article about securing smart home and IoT devices
	January	Webinar on combining FAIR with NIST-CSF with the FAIR Institute Featured on the Security and Compliance Weekly and discussed Quantifiable Risk Metrics. Part 1, Part 2
2019	September	Recognized by the FAIR Institute as the 2019 Business Innovator during FAIRCon. Featured on the FAIR Institute blog in prep for FAIRCON 2019
	August	Featured as the first commercial success story on from NIST on combining NIST-CSF and FAIR
	July	"Providers Must Go Beyond Frameworks for Strong Risk Management" on Health IT Security
	May	Presented Unholy Concoction of Risk Management Practices - FAIR/CSF/MSSP at SIRACon 2019
	March	Featured on Forbes: Trust-Building For Security
	February	Featured on Forbes: Why You Should Go Beyond The Typical Penetration Test
	January	Featured on Forbes: Two Frameworks For Securiting A Decentralized Enterprise
2017	July	Keynoted CyberWeek in Tel Aviv, speaking about securing the Cloud [Video]
2016	July	Featured on Vice's Cyberwar in an episode focusing on China as a subject matter expert.
	June	Keynote for BSidesClevalend ShowMeCon in St. Louis, Missoury - Social Media Risk Metrics Area41 in Zurich, Switzerland - Social Media Risk Metrics
	April	InfoSecWorld at Orlando, FL - Actionable Threat Intelligence Featured on CSO Online - Two perspectives on social media for security leaders
	March	RSA Conference - Social Media Risk Metrics.
	February	Zoncon - Amazon's Security Conference. Keynote speaker.
2015	December	BSidesDC - Actionable Threat Intelligence
	October	Hacked Opinion - The legalities of hacking on CSO Online PACE University Cybersecurity Symposium on Threat Intelligence
	September	DerbyCon - Social Media Risk Metrics
	August	Commentary on the Hacking Team breach - CSO Online BSidesLV Actionable Threat Intelligence
	June	You Shot The Sheriff 9 Sau Paulo, Brazil - Actionable Threat Intelligence CSA Nordic Summit 2015 - Olso, Norway. Actionable Threat Intelligence CSO Online coverage on actionable threat intelligence CircleCityCon 2015 - Indianapolis, Indiana. Actionable Threat Intelligence video.
	May	IT Hot Topics 2015 - Greensboro, North Carolina - Actionable Threat Intelligence
	March	ISTS SPARSA at Rochester Institute of Technology (RIT) - Keynoting the event, and participating in the Red Team
	January	A few notes on the proposed cybersecurity bill on CSO Online Commentary on the @CENTCOM twitter and YouTube account hacking on DarkReading, SecurityWeek as well as eWeek and SC Magazine Commentary on SC Magazine about the pro-ISIS hacking of local news stations
2014	December	Chosen as one of SC Magazine's top experts through the years Quoted on NBC's Today on the Sony hack Commentary on the Sony breach on TechNewsWorld
	November	Commentary on the iWorm patch on CIO Magazine Commentary on the Regin malware on eSecurity Planet as well as SearchSecurity FeedbackFriday commentary on SecurityWeek Magazine
	September	Derbycon - conducting Red Team Training with Chris Nickerson. Additionally speaking on Painting a Company Red and Blue
	May	Featured on Narrative.ly's article as part of a series "The spies among us": Attack of the Superhackers
	March	Panelist on Fox Business' "Money with Melissa Francis on NSA surveillance and President Obama's meeting with tech CEOs. Panelist on Fox Business' "Money with Melissa Francis" on power grid security.
	February	Featured on Fox Business' "Money with Melissa Francis" on Chip-and-PIN (EMV) security.
2013	November	Featured on CNN Money's "How Corporate America fights hackers".
	September	Seeing red in your future? and Red Team Training at Derbycon. "Cyber" security - all good, no need to worry? at SecurityZone. Interview with ComputerWorld.
	July	Red Team Testing Training at BlackHat USA 2013
	March	ZonCon at Amazon's HQ in Seattle: SexyDefense in the forest
	January	NCSC Symposium SexyDefense, and Red Team Training Alt-S at The Hague, Netherlands
2012	December	SecurityZone 2012 in Cali, Colombia: SexyDefense
	October	Hashdays: SexyDefense
	September	DerbyCon Training, and speaking on SexyDefense (video) Brucon Red-Team Testing class with Chris Nickerson
	July	BlackHat USA Briefings 2012 presented SexyDefense - Maximizing the home-field advantage BSidesLV presenting SexyDefense V3.co.uk: Black Hat: Businesses at risk from over-reliance on automated tools, researchers warn (pfd). SC Magazine: Black Hat: Security pros must evolve their defensive strategy. MIT Technology Review: Hey, Hackers: Defense Is Sexy, Too (PDF). NakedSecuity (Sophos' blog): Black Hat - SexyDefense, maximizing the home-field advantage.
	May	YSTS (You Shot The Sheriff) conference, Sao Paolo, Brasil. Sexy Defense
	April	Source Boston - presented a talk: "Sexy Defense" Also at Source Boston - Red Team Testing training. DarkReading article on the SexyDefense talk. (PDF) InfoWorld article covering Sexy Defense. (PDF) Midsize Insider SexyDefense coverage. Fierce CIO SexyDefense coverage. IRANIAN CYBER THREAT TO THE U.S. HOMELAND Quoted as a source for a congressional hearing.
	March	HackCon, Oslo, Norway. Advanced Data exfiltration
	January	Calcalist article on the recent hacking events in Israel [Print version] Channel 1 news article on the recent hacking events in Israel
2011	November	Govcert.NL Symposium - Adavnced data exfiltration - the way Q would have done it Source Barcelona - presenting a talk on advanced data exfiltration
	October	HashDays - "Pushing in, and pulling out slowly without anyone paying attention", and management sessions speaker.
	September	Brucon presented a talk on advanced data exfiltration, APT and red-team testing (Video)
	August	BSides Las-Vegas presented 2 talks on VoIP botnets and Advanced Data Exfiltration DefCon 19 Participated in the DCG & Hackerspaces panel and talked about VoIP botnets and data exfiltration Dark Reading coverage of the Advanced Data Exfiltration talk (local cache) Galatz Radio interview on Cyber Security threats, and international diplomacy
	June	Security BSides Vienna / NinjaCon 11 23rd Annual FIRST Conference National greek news article on Athcon (Greek) Athcon 2011 security conference
	May	People's Daily Online article. (English version of Chinese news) cached PenTest Magazine article on how to avoid meaningless pentests
	April	SOURCE Boston security conference Featured article on the Pentest Magazine
	March	DC9723 Introduction to the Penetration Testing Execution Standard
	February	ISDPodcast interview covering Security-Art's annual report, FAIR and the pentest standard (cached mp3) TheMarker coverage of our annual report (print edition) Featured on CyberwarfareZone
	January	Sophos' Naked Security blog guest post
2010	December	BerlinSides hacker conference CSA-IL Conference - Intro to the technology showcase.
	November	DeepSec conference in Viena. International Conference on Cyber Terrorism hosted by the ICT at IDC Israel.
	October	CSFI Stuxnet report published with my contribution (also on the CSFI page) NATO's CCD-COE (Cooperative Cyber Defence Center Of Excellence) strategy setting workshop. Subject matter expert for creating NATO's cyber strategy for 2011. BlueHat v.10.
	September	Brucon 2010 and the video (please use a mirror!) SOURCE Barcelona and a brief interview
	August	EuroTrashSecurity podcast (Microtrash 10) mp3 FIRST 2010 Interview (mp3)
	July	DefCon 18 (updated with Video and the slide deck) InfoSec Daily podcast
	June	22nd FIRST Conference
	May	CSO Forum Magazine ISDPodcast interview (cached mp3) AthCon (Athens, Greece) ph-neutral
	April	El Pais (Spanish) local pdf copy Global Security Mag (French) BlackHat EU 2010 Presentation slides and whitepaper
	March	Exotic Liability podcast
2009	November	ExcaliburCon (WuXi, China)
	September	HackerHalted conference (EC Council @Miami)
	July	DefCon 17 (updated with video)
	April	The IET (Video interview) Calcalist (Hebrew)
	March	MiddleGround (e-Crime congress UK publication)
	February	ChannelWeb What to buy for Business ITRManager (French) VNUNet BitCity (Italian) Fan.tv (Dutch) PubliNews (French) 01 Informatique (French)
	January	What to buy for business ComputerWeekly The Web2.0 Attack Vector - white paper IET
2008	December	BCS Calcalist (Hebrew)
	October	BlueHat Security Conference at Microsoft HQ in Redmond, WA The Register Calcalist (Hebrew) De Beveiligingsupdate (Dutch - podcast in english at 23:10 minutes) IT World WebWorld (Dutch) TheMarker (Hebrew) TechWorld (Dutch) ComputerWeekly InfoSecurity.nl (Dutch)
	April	BlackHat talk
	May	San Francisco Chronicle (Different spokesperson named for the company)
	February	SC Magazine
2007	December	SC Magazine
	October	InformationWeek SearchSecurity
	September	Fox News
	August	PodTech Mag Securs (French) DefCon 15 talk
2004	February	Storage Magazine
2004	April	NetworkWorld