401 Access Denied

Latest Episodes:

401 Access Denied Podcast Ep. 51 | Privilege Escalation Using HackTricks with Carlos Polop Mar 24, 2022

Show notes

In this episode of 401 Access Denied, we're joined by Carlos Polop, security researcher and creator of Privilege Escalation Awesome Script Suite (PEASS). Seen recently with the Linux "Dirty Pipe" vulnerability exploitation, it's become critical to learn how attackers exploit privilege escalation flaws. Carlos shares how pen testers can use LinPEAS and WinPEAS to expose vulnerabilities in CTF environments. Additionally, learn how you can contribute to his research in the penetration testing community.

Check out Carlos' book: https://book.hacktricks.xyz/

Follow Carlos on GitHub & submit pull requests: https://github.com/carlospolop

Join Carlos' Discord community: https://discord.gg/hRep4RUj7f

Follow Carlos on Twitter: https://twitter.com/carlospolopm

Connect with Delinea:

401 Access Denied Podcast Ep. 50 | The State of Global Information Wars with Dan Lohrmann Mar 22, 2022

Show notes

As cybersecurity teams seek to enhance their defenses in the wake of worldwide ransomware attacks and the spread of wiper malware in Ukraine, what predictions can we make about the evolution of global information wars? Acclaimed security leader and Field CISO at Presidio, Dan Lohrmann, discusses emerging trends in cyber insurance, cyber incident reporting, and incident response planning. Learn more about the potential impact of the Shields Up advisory published by the U.S. Cybersecurity and Infrastructure Security Agency (CISA). Amidst growing risk and uncertainty, hear Dan's advice on how you can develop best practices for training and preparing your security team.

Connect with Dan!

~ LinkedIn

~ Twitter

Check out Dan's Book:

~Cyber Mayday and the Day After

Read Dan's Blog Post on Cyber Insurance:

~Where Next for Government in the Cyber Insurance Market?

Read More on Cybersecurity and the Invasion of Ukraine:

~What the Newly Signed US Cyber-Incident Law Means for Security

~‘For the first time in history anyone can join a war’: Volunteers join Russia-Ukraine cyber fight

Follow us on Social!!

Analyzing Cyberattacks in Ukraine with Secureworks | The Cybrary Podcast Ep. 80 Mar 16, 2022

Show notes

During unprecedented times when cyber and kinetic military actions coalesce, what can we learn about the evolving nature of warfare? Mike McLellan and Rafe Pilling join us from the Counter Threat Unit at Secureworks to discuss the latest cyberattacks in Ukraine. What is distinctive about these emergent types of wiper malware, and how can we better discern the objectives of threat actors? Get advice from the security research experts about how your organization can enhance defenses and incident response planning in the face of new threats.

Read more about this subject in our blog post:

~Cyberwarfare: Evolution and Impact on the Russia-Ukraine Conflict

Check out Cybrary Now!!!

~Cybrary

Follow Cybrary on Social!!

401 Access Denied Podcast Ep. 49 | Getting Smart About Security Awareness Training with Paula Januszkiewicz Mar 09, 2022

Show notes

In just the first half of 2021, the financial industry saw a 1,318% in ransomware attacks. How can knowledge of ransomware gangs' encryption strategies help employees at every level of an organization to develop stronger incident response plans? Paula Januszkiewicz, acclaimed security leader, pen tester, and CQURE CEO, offers practical guidance on inclusive approaches to security awareness training. As the threat landscape evolves alongside new technological innovations, questions emerge about how we need to rethink password protection, privilege access, and at-home security. Enjoy this thought-provoking conversation about the value of curiosity and teamwork in forward-thinking security strategy development.

Connect with Paula!

~ LinkedIn

~ Twitter

Follow us on Social!!

Adventures in Red Teaming with Matt Mullins | The Cybrary Podcast Ep. 79 Mar 02, 2022

Show notes

Come on over to the dark side with Matt Mullins, the red teamer and penetration tester who is here to help you think like an adversary. Cybrary Course Manager Jenn Barnabee talks with Matt about his Cybrary courses that teach you how to exploit and mitigate the latest critical vulnerabilities, including Log4j, HiveNightmare, and more. Considering a path forward in offensive security? Then you'll love hearing about how Matt's career aspirations evolved from Buddhism studies to the "Help Desk Farm" to penetration testing. From zen to ZAP, he has a lot to share about taking risks and learning new tools!

Enroll now in Matt's Cybrary courses!

~CVE Series: Log4j (CVE-2021-44228)

~CVE Series: HiveNightmare (CVE-2021-36934)

~CVE Series: InstallerFileTakeOver (CVE-2021-41379)

~CVE Series: MSHTML Vulnerability (CVE-2021-40444)

~Cybrary's MITRE ATT&CK TTP Course: SSH Authorized Keys

Check out Cybrary Now!!!

~Cybrary

Follow Cybrary on Social!!

401 Access Denied Podcast Ep. 48 | IoT Hacking with Beau Woods and Paulino Calderon Feb 23, 2022

Show notes

How can we improve the security of life-saving medical, communications, and transportation devices? What hands-on skills do we need in order to design more trustworthy hardware? In this episode of 401 Access Denied, InfoSec veterans Beau Woods and Paulino Calderon discuss key tips from their informative book, "Practical IoT Hacking: The Definitive Guide to Attacking the Internet of Things." If you enjoy working with your hands and breaking things, then you'll want to hear Beau and Paulino's tips for how to kick off a dynamic, fulfilling career in IoT security. Learn more about why accessibility and collaboration are essential to improving the way that humans interact with, trust, and benefit from technological devices.

Check out Beau and Paulino's book!

~"Practical IoT Hacking"

Connect with Beau and Paulino on social media

Join the IoT Village Discord server

~IoT Village

~#practical-iot-hacking Channel

Follow us on Social!!

Mitigating Polkit CVE-2021-4034 with CyDefe | The Cybrary Podcast Ep. 78 Feb 16, 2022

Show notes

Ready to defend your organization against the widespread PolicyKit vulnerability that experts are comparing to the Log4j flaw? In this episode of the Cybrary Podcast, Raymond Evans, CEO of CyDefe Labs, discusses his latest Cybrary course on Polkit CVE-2021-4034. By exploiting this flaw, just how easy is it to gain root access on a target system? What can we learn from this vulnerability about the value of penetration testers and open-source software? Find out in this podcast and in Ray's course!

Enroll now in Ray's newest course!

~CVE Series: Polkit (CVE-2021-4034)

Learn more about Cybrary's partnership with CyDefe:

~https://www.cybrary.it/catalog/vendor/cydefe/

Follow CyDefe Labs on Social Media!

~Twitter

Check out Cybrary Now!!!

~Cybrary

Follow Cybrary on Social!!

401 Access Denied Podcast Ep. 47 | Cybersecurity Conference Survival Tips with Chris Roberts Feb 09, 2022

Show notes

Whether you’re new to cybersecurity or a longtime security professional, one of your best opportunities to network is at conferences. In this fun-filled episode of 401 Access Denied, seasoned conference-goers, Joe Carson and HillBilly Hit Squad’s vCISO (aka “Chief Geek”), Chris Roberts, share their insights on how to make the most of networking events. What clothes should you pack? How can you best plan your daily schedule so that you maximize productivity and have time to socialize? And, most importantly, where in the world can you find the best whiskey? Cheers to a new year filled with engaging, informative cybersecurity events!

Connect with Chris on social media!

~LinkedIn

~Twitter

Follow us on Social!!

Leaping into Quantum Security with Aegiq | The Cybrary Podcast Ep. 77 Feb 02, 2022

Show notes

The next revolution in quantum computing and technologies is happening now, but how exactly will these growing innovations affect our lives? Dr. Maksym Sich, CEO of the groundbreaking quantum photonics startup, Aegiq, discusses how quantum will impact our medical, communications, and financial industries. Addressing the myth that quantum computing will break all our encryption keys, Maksym elaborates on quantum communications, post-quantum cryptography, and efforts to develop sustainable solutions with security by design. Be ahead of the curve in knowing how we will want to upgrade our systems to improve efficiency, data privacy, and more!

Learn more about Maksym's startup, Aegiq:

~Company Website

For more information on Quantum Computing:

~Quantum Manifesto

~Quantum Technologies - Blackett Review

~Quantum Comms Hub, "What does QKD mean for the Economy?"

~Report from the QED-C, "Guide to a Quantum Safe Organization"

~Downloadable Report from the QED-C

Check out Cybrary Now!!!

~Cybrary

Follow Cybrary on Social!!

401 Access Denied Podcast Ep. 46 | Fighting Cybercrime & Tracking Malware Trends with Shyam Sundar Ramaswami Jan 26, 2022

Show notes

Everyone is talking about malware these days, but what new developments and trends are we seeing in malware attacks? This week’s featured guest is Shyam Sundar Ramaswami—Senior Research Scientist at Cisco by day, and the Batman of Hacking by night. So how does cybersecurity’s Bruce Wayne propose that we strengthen our incident response plans against emerging malware threats? What’s really happening when we click that inconspicuous link in the “Delivery Address Confirmation Needed” email? Find out the answers to these questions from the ethical hacker hero who’s here to help you save the world from cyberattacks!

Read Shyam's Book!

~"It's Your Digital Life" - https://www.routledge.com/Its-Your-Digital-Life/Govindarajulu-Ramaswami-Vasudevan/p/book/9780367700041

Check out Shyam’s TED Talks

~Can a Couch Potato Save the Digital World? | Shyam Sundar Ramaswami | TEDxIIITBangalore - https://youtu.be/VEDF8bQPOeY

~Cyber Security - The Responsibility | Shyam Sundar Ramaswami | TEDxBITSathy - https://youtu.be/D4wJMjDhUBw

Follow Shyam on social media!

~Twitter

~LinkedIn

Follow us on Social!!

~Cybrary Twitter

~Thycotic Twitter

~Instagram