On Aug. 8, 2024 Robert Herrera (@robHerrera_) and Alex Plaskett (@alexjplaskett) presented a talk at Black Hat USA in Las Vegas describing a number of vulnerabilities in Sonos devices, including how to use the device for eavesdropping. Read more about how their findings might affect other AV devices, and how a Software Bill of Materials (SBOM) can help, here:
Recent Sonos Security Vulnerabilities Reinforce the Need for AV ‘Software Bill of Materials’
The NCC Group figured out how to turn Sonos devices into covert listening devices, performing hidden recordings by the microphones in the devices. Luckily, a patch has been issued, but what about other vulnerable devices that use the same software? This is where a Software Bill of Materials can help
Like
Be the first to like this
CIS Manager, Cronos LLC
► WHAT I DO:
Results-driven professional with extensive, real-world experience in Audio Visual (AV), Information Technology (IT), and Cybersecurity. Proficient in leading cross-functional teams, implementing robust security measures, and optimizing technology infrastructure. Adept at leveraging advanced certifications, including Avixa CTS-D, CompTIA Security+, a certificate from Harvard, a Bachelor of Science in Computer Engineering and Master of Science in Cybersecurity from Georgia Tech. Committed to staying at the forefront of industry trends and technologies, and leading by example.
► MY LEADERSHIP STYLE:
• Manages issues and solutions with poise and confidence.
• Leads and demonstrates the ability to gain support at all levels of the organization.
• Maintains a strong sense of urgency to get things done thoroughly, not quickly, and delegates responsibility to others in a personable way.
• Plans for the big picture while adapting to shifting gears to achieve goals, using strong foresight and organizational skills.
►WHAT SETS ME APART FROM THE REST:
• Audiovisual + IT + Cybersecurity + Architectural + Marketing experience
• Seasoned engineer / architect with broad and in-depth technical, analytical, and conceptual skills
• Proven track record of effectively communicating with business leadership and other vendors
• Strong interpersonal and collaborative skills to drive security messages to teams
• Extensive knowledge of subcontracting, construction projects, labor estimates, privacy, control system protocols, and integrated audiovisual systems
▶ RELEVANT EXPERIENCE:
🔹 Cybersecurity:
• Developed and executed cybersecurity strategies to safeguard critical systems and mitigate potential threats.
• Conducted vulnerability assessments and advanced hunting techniques to identify and address security vulnerabilities.
• Collaborated with cross-functional teams to ensure compliance with industry regulations and best practices.
🔹 AV and IT:
• Successfully managed and supported AV and IT operations, overseeing the implementation and maintenance of technology solutions in military facilities, and audio visual integrators nationwide.
• Led the design and deployment of integrated AV systems, enhancing collaboration and communication across the organization.
• Implemented cybersecurity protocols to protect sensitive data and mitigate security risks.
#GeorgiaTech #Harvard #RiskManagement #SecOps #SecurityOperationsCenter #CloudSecurity #DFIR #SecurityAuditing #Cybersecurity #Confidentiality #Integrity #Availability #IncidentResponse #InfoSec #NetworkSecurity #DataPrivacy #ThreatIntelligence
Please sign in
If you are a registered user on AVIXA Xchange, please sign in