TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    Technology

    Redefining CyberSecurity

    Redefining CyberSecurity Podcast
    Hosted by Sean Martin, CISSP

    Have you ever thought that we are selling cybersecurity insincerely, buying it indiscriminately, and deploying it ineffectively?

    For cybersecurity to be genuinely effective, we must make it consumable and usable. We must also bring transparency and honesty to the conversations surrounding the methods, services, and technologies upon which businesses rely. If we are going to protect what matters and bring value to our companies, our communities, and our society, in a secure and safe way, we must begin by operationalizing security.

    Executives are recognizing the importance of their investments in information security and the value it can have on business growth, brand value, partner trust, and customer loyalty.

    Together with executives, lines of business owners, and practitioners, we are Redefining CyberSecurity.

    Advertise

    Copyright: ITSPmagazine is an imsmartin publication © Copyright 2015-2023 imsmartin, LLC, All Rights Reserved

    • Apple Podcasts
    • Google Play
    • Spotify

    Latest Episodes:
    Open Threat Hunting Framework: Enabling Orgs To Build, Operationalize, And Scale Threat | A Conversation With John Dwyer | Black Hat 2022 And DEF CON 30 Las Vegas Event Coverage | Redefining CyberSecurity Podcast With Sean Martin And Marco Ciappelli Jul 28, 2022
    Show notes

    Threat hunting is all the rage. But what the heck is it? "Ask 10 InfoSec professionals to define threat hunting, and you'll get 11 different answers," writes John Dwyer in his Black Hat session abstract. Will we get to hear the 12th definition in this episode?

    About the session, "The Open Threat Hunting Framework: Enabling Organizations to Build, Operationalize, and Scale Threat Hunting"

    "Ask 10 infosec professionals to define threat hunting and you'll get 11 different answers." Threat hunting is one of those interesting components of cybersecurity where everyone knows they should be doing it but not everyone can fully articulate what threat hunting is.
    In our roles as threat hunters, we're lucky enough to be witness to, and evaluate, the hunt programs of Fortune 100 companies, state and national governments, and partners and MSPs. This experience has shown us that one person's definition of threat hunting does not necessarily equal another's.
    If you do an Internet search for "how to build a threat hunting program" there are plenty of results and some include great insights into what makes a threat hunting program effective. However, while resources do exist, they're often tied to a specific vendor or a particular product and the best way to hunt using it. There's useful information, but you're left trying to find a way to make the proposed processes and techniques work for your environment and not the one driven by the vendor.
    "If you don't like the road you're walking, start paving another one." It's with that in mind that we're releasing a threat hunting framework that can help organizations start a threat hunting program as well as improve threat hunting operations for existing programs that's free and not tied to any particular technology.
    This framework will enable organizations to take control of building a threat hunting program by providing a clear path to operationalizing threat hunting as well as a well-defined threat hunting process to ensure threat hunters are set up for success.
    We've responded to far too many incidents that could have been prevented with solid threat hunting operations and we hope this project can help prevent future incidents.

    Be sure to catch all of our conversations from Black Hat and DEF CON 2022 at https://www.itspm.ag/bhdc22

    ____________________________

    Guest
    John Dwyer
    Head of Research at IBM X-Force [@IBM | @XForceIR | @IBMSecurity]
    On LinkedIn | https://www.linkedin.com/in/john-dwyer-xforce/
    On Twitter | https://twitter.com/TactiKoolSec
    ____________________________

    This Episode’s Sponsors

    CrowdSec | https://itspm.ag/crowdsec-b1vp
    Edgescan | https://itspm.ag/itspegweb
    Pentera | https://itspm.ag/pentera-tyuw

    ____________________________

    Resources

    Session | The Open Threat Hunting Framework: Enabling Organizations to Build, Operationalize, and Scale Threat Hunting: https://www.blackhat.com/us-22/briefings/schedule/#the-open-threat-hunting-framework-enabling-organizations-to-build-operationalize-and-scale-threat-hunting-26702

    ____________________________

    For more Black Hat and DEF CON Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

    Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
    👉 https://itspm.ag/bhdc22sp

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity-podcast

    Are you interested in sponsoring an ITSPmagazine Channel?
    👉 https://www.itspmagazine.com/sponsor-the-itspmagazine-podcast-network


    A Keynote Conversation With Chris Krebs: Black Hat At 25: Where Do We Go From Here? | Black Hat 2022 And DEF CON 30 Las Vegas Event Coverage | Redefining CyberSecurity Podcast With Sean Martin And Marco Ciappelli Jul 25, 2022
    Show notes

    During his keynote at Black Hat 2022, former CISA Director, Chris Krebs, will reflect on 25 years of the information security community, discussing today’s risks and trends and what they mean for tomorrow’s network defenders. We get a sneak peek into some of these items during this Chats on the Road to Las Vegas.

    Chris Krebs is a Founding Partner of Krebs Stamos Group, founded in 2020 alongside Alex Stamos. He was the first director of U.S. Cybersecurity and Infrastructure Security Agency (CISA), leading the nation’s civilian cyber defense and business resilience and risk management efforts. He will give his talk “Black at 25: Where Do We Go from Here?” on Wednesday, Aug. 10 at 9 a.m.

    About the keynote, "Black Hat at 25: Where Do We Go from Here?"
    For twenty-five years, the InfoSec community and industry have been gathering here in the desert. For twenty-five years, we have chipped away at underlying insecurities in the technologies we use every day with new vulnerability research and adversary insights. For twenty-five years we’ve seen vendors and software firms roll out new products and protections. With the last twenty-five years as prologue and as we look forward to the next twenty-five years, we have to ask ourselves: are we on the right track?
    We certainly aren’t set up for success, given society’s insatiable and almost pathological need to connect everything. We’re constantly serving up more attack surface to the bad guys and always cleaning up after business decisions that we know will drive bad security outcomes. All the while factors out of our hands – namely global market realities and shifting geopolitical dynamics – wreck nearly overnight carefully orchestrated business plans and national strategies. The last few years of geopolitical chaos and autocratic retrenchment might look like the good ol’ days by the end of the 2020s.
    This talk will work through today’s risk trends and what they mean for tomorrow’s network defenders, suggesting along the way the needed shifts in both mindset and action to successfully deliver better outcomes while recognizing that we’re going to be forever operating in a contested information environment. To rip off a Mitch Hedberg joke (RIP), maybe over the next twenty-five years we can build a safer, more resilient technological future where systems and infrastructure behave more like escalators: when they break, they turn into stairs.

    Be sure to catch all of our conversations from Black Hat and DEF CON 2022 at https://www.itspm.ag/bhdc22

    ____________________________

    Guest
    Chris Krebs
    Founding Partner, Krebs Stamos Group [@KrebsStamos]
    On LinkedIn | https://www.linkedin.com/in/christopherckrebs/
    On Twitter | https://twitter.com/C_C_Krebs
    ____________________________

    This Episode’s Sponsors

    CrowdSec | https://itspm.ag/crowdsec-b1vp
    Edgescan | https://itspm.ag/itspegweb
    Pentera | https://itspm.ag/pentera-tyuw

    ____________________________

    Resources

    Keynote | Black Hat at 25: Where Do We Go from Here?
    https://www.blackhat.com/us-22/briefings/schedule/index.html#keynote-chris-krebs-28699

    ____________________________

    For more Black Hat and DEF CON Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

    Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
    👉 https://itspm.ag/bhdc22sp

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity-podcast

    Are you interested in sponsoring an ITSPmagazine Channel?
    👉 https://www.itspmagazine.com/podcast-series-sponsorships


    Let's Repeat the Future and See How that Works Out for Us | Home Network Security has Become Top-of-Mind for Cyber Executives | A Their Story Conversation from RSA Conference 2023 | A BlackCloak Story With Chris Pierson and Daniel Floyd Jul 21, 2022
    Show notes

    In this episode, ...

    Note: This story contains promotional content. Learn more.

    Guests:

    Chris Pierson, Founder and CEO of BlackCloak [@BlackCloakCyber]

    On Linkedin | https://www.linkedin.com/in/drchristopherpierson/

    On Twitter | https://twitter.com/drchrispierson

    Daniel Floyd, CISO of BlackCloak [@BlackCloakCyber]

    On Linkedin | https://www.linkedin.com/in/daniel-n-floyd/

    Resources
    Learn more about BlackCloak and their offering: https://itspm.ag/itspbcweb

    Connect with BlackCloak during RSA Conference:

    Are you interested in telling your story?
    https://www.itspmagazine.com/telling-your-story


    Why The World Needs A Global CSIRT: Introducing CSIRT.global | A Conversation With Eward Driehuis And Lennaert Oudshoorn | Redefining CyberSecurity Podcast With Sean Martin Jul 21, 2022
    Show notes

    Vulnerabilities are discovered every day. Once found, they make their way into any number of databases that can be used to help organizations take action to put a patch in place... if one is available. But what about the case where the weakness is actively exposed or being exploited? This is where CSIRT.global comes in.

    Born from the work being done at the Dutch International for Vulnerability Disclosure (DIVD), a team of volunteers have decided to take things to the next level, helping organizations take action when action matters most ... when a vulnerability exists, when that vulnerability is being exploited in the wild, and when an organization is prone to (or is under) attack. That's when the email is sent from CSITR.global to the affected organization, letting them know what the team uncovered.

    "We don't send marketing emails. We don't send emails promoting conferences. When a company gets an email from us, it really means something.” ~Eward

    There's a lot going on in this process, from scanning the entire global Internet for every system exposed, identifying vulnerabilities on those systems, and mapping the proof of concept to those two results to determine whether or not an organization is vulnerable or is showing signs of having been compromised. The next piece of the puzzle is figuring out who or what is behind the IP address that was scanned and flagged. This isn't always easy given how IP addresses are assigned and looked up. The next piece of the puzzle is even harder, in that CSIRT.global needs to find a way to contact the affected entity that lives behind the IP address ... which department or person should receive the info and what is their email address? Good luck finding that in a pinch. And, to top it all off, the receiving party needs to trust that the email they received from CSIRT.gloal is both legitimate and must be taken seriously. The process is rooted in information and built on trust - which is one of the main reasons they sought and receive support from the Dutch government.

    It's this full circle scenario that delivers the real value provided by this group. It can scale to a global nature, but requires the help of the global community. Listen in to hear more about how this works, how to get involved, and how this non-profit organization is redefining cybersecurity.

    ____________________________

    Guests
    Eward Driehuis
    Founder at 3Eyes Security and Chairman at CSIRT.global
    On LinkedIn | https://www.linkedin.com/in/ewarddriehuis/
    On Twitter | https://twitter.com/e3huis

    Lennaert Oudshoorn
    CSIRT Coordinator And Webmaster at Dutch Institute for Vulnerability Disclosure (DIVD) [@DIVDnl]
    On Twitter | https://twitter.com/lennaert89
    On LinkedIn | https://www.linkedin.com/in/lennaertoudshoorn/

    ____________________________

    This Episode’s Sponsors

    Asgardeo by WSO2: https://itspm.ag/asgardeo-by-wso2-u8vc

    HITRUST: https://itspm.ag/itsphitweb

    ____________________________

    Resources

    CSIRT.global: https://csirt.global/ & https://www.divd.nl/

    DIVD: https://www.divd.nl/ and on LinkedIn: https://www.linkedin.com/company/divd-nl/

    May Contain Hackers (MCH2022) Hacker Conference: https://mch2022.org/#/

    ____________________________

    To see and hear more Redefining Security content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity

    Are you interested in sponsoring an ITSPmagazine Channel?
    👉 https://www.itspmagazine.com/podcast-series-sponsorships


    Application And API Security: Sometimes We See The Risk — Sometimes It's Hidden Inside An API | A Live Stream Panel With Kristy Westphal And Giora Engel | Redefining CyberSecurity Podcast With Sean Martin Jul 19, 2022
    Show notes

    In this conversation, we explore the overall process for creating a culture where applications are secured from the beginning on through to monitoring and response:

    • Which teams are involved
    • How do secure products get defined from the beginning (PRDs, architecture, design, planning, etc.)
    • How do they communicate/collaborate (tools/techniques)
    • Tips and tricks to streamline processes, reduce human workload (aka automation)
    • How to define and demonstrate success

    ____________________________

    Guests
    Kristy Westphal
    VP Security Operations at HealthEquity and Adjunct Professor at Arizona State University [@ASU]
    On LinkedIn | https://www.linkedin.com/in/kmwestphal

    Giora Engel
    CEO & Co-Founder at Neosec [@neosec_com]
    On LinkedIn | https://www.linkedin.com/in/giorae/

    ____________________________

    This Episode’s Sponsors

    HITRUST: https://itspm.ag/itsphitweb

    Imperva: https://itspm.ag/imperva277117988

    Asgardeo by WSO2: https://itspm.ag/asgardeo-by-wso2-u8vc

    ____________________________

    Resources

    OWASP API Security Project: https://owasp.org/www-project-api-security/

    OWASP Top 10: https://owasp.org/www-project-top-ten/

    White Paper | Scorched Earth: Hacking Banks And Cryptocurrency Exchanges Through Their APIs: https://knightgroup.app.box.com/s/mlmoa5vtw1ktqo8vcwcqtbex70mtvpo0

    API Security Fundamentals 2022: https://www.neosec.com/api-security

    ____________________________

    Catch the on-demand live stream video and podcast here: https://www.itspmagazine.com/live-panels/application-and-api-security-sometimes-we-see-the-risk-sometimes-its-hidden-inside-an-api-redefining-cybersecurity-with-sean-martin

    To see and hear more Redefining Security content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity

    Are you interested in sponsoring an ITSPmagazine Channel?
    👉 https://www.itspmagazine.com/podcast-series-sponsorships


    Our Traditional Conversation With Black Hat GM, Steve Wylie, To Kick Off Our Las Vegas Hacker Summer Camp 2022 Coverage | Las Vegas Black Hat 2022 And DEF CON 30 Coverage | Redefining CyberSecurity Podcast With Sean Martin And Marco Ciappelli Jul 18, 2022
    Show notes

    Tradition arrives again as we hit the road to Las Vegas to cover the biggest and most important hacker conference in the world: Black Hat. Celebrating its 25th (silver) anniversary, there is a lot to celebrate and absorb from this year's hybrid conference in Las Vegas and online. Join us as we connect with Black Hat General Manager, Steve Wylie, to get the latest on what everyone can expect this year.

    Be sure to catch all of our conversations from Black Hat and DEF CON 2022 at https://www.itspm.ag/bhdc22

    ____________________________

    Guest
    Steve Wylie
    Vice President, Cybersecurity Market at Informa Tech [@InformaTechHQ] and General Manager at Black Hat [@BlackHatEvents]
    On LinkedIn | https://www.linkedin.com/in/swylie650/
    On Twitter | https://twitter.com/swylie650
    ____________________________

    This Episode’s Sponsors

    CrowdSec | https://itspm.ag/crowdsec-b1vp
    Edgescan | https://itspm.ag/itspegweb
    Pentera | https://itspm.ag/pentera-tyuw

    ____________________________

    Resources

    ____________________________

    For more Black Hat and DEF CON Event Coverage podcast and video episodes visit: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

    Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
    👉 https://itspm.ag/bhdc22sp

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity-podcast

    Are you interested in sponsoring an ITSPmagazine Channel?
    👉 https://www.itspmagazine.com/podcast-series-sponsorships


    From Enrolling In College To Gambling, Traveling, And Shopping, Evasive Bad Bots Are A Major Source Of Online Fraud | The Bad Bot Report 2022 | Part 2 | An Imperva Brand Story With Ryan Windham Jul 18, 2022
    Show notes

    As we continue this 2nd part of the conversation, we immediately kick things off with Gremlins and quickly move into real-world scenarios where bad bots wreak havoc by enabling high-speed abuse, misuse, and attacks on websites, mobile apps, and APIs.

    Businesses cannot overlook the impact of malicious bot activity as it is contributing to more account compromise, higher infrastructure and support costs, customer churn, skewed marketing analytics, and degraded online services.

    The implications of account takeover (ATO) are also extensive, where successful attacks can lock customers out of their account, while fraudsters gain access to sensitive information that can be stolen and abused. For businesses, ATO contributes to revenue loss, risk of non-compliance with data privacy regulations, and tarnished reputations.

    How can organizations — actually, the people in them that keep the business running — distinguish between real, authentic traffic versus something that's being driven by a bot? That's exactly what we talk about.

    We hope you enjoy this Part 2 of 2 conversations as we explore and uncover the consequences of bad bots for our business and society.

    About the 2022 Imperva Bad Bot Report
    Leveraging data from its global network, Imperva Threat Research investigates the rising volume of automated attacks occurring daily, evading detection while wreaking havoc and committing online fraud. The 9th annual Imperva Bad Bot Report is based on data collected from the Imperva global network throughout 2021. The data is composed of hundreds of billions of blocked bad bot requests, anonymized over thousands of domains. The goal of this report is to provide meaningful information and guidance about the nature and impact of these automated threats.

    Bot attacks are often the first indicator of fraudulent activity online, whether it’s validating stolen user credentials and credit card information to later be sold on the dark web, or scraping proprietary data to gain a competitive advantage. Often bots are used to surveil applications and APIs in an attempt to discover vulnerabilities or weak security. Online fraud from automated bot attacks is not only a threat to the business, but it is first and foremost a risk to customers. Bad bot attacks might cause customers to be unable to access their accounts or have sensitive information stolen from them due to successful account takeover fraud.

    Bad bots mask themselves and attempt to interact with applications in the same way a legitimate user would, making them harder to detect and block. They enable high-speed abuse, misuse, and attacks on your websites, mobile apps, and APIs. They allow bot operators, attackers, unsavory competitors, and fraudsters to perform a wide array of malicious activities.

    Such activities include web scraping, competitive data mining, personal and financial data harvesting, brute-force login, digital ad fraud, denial of service, denial of inventory, spam, transaction fraud, and more.

    Note: This story contains promotional content. Learn more.

    Guest
    Ryan Windham
    VP of Application Security at Imperva [@Imperva]
    On Linkedin | https://www.linkedin.com/in/rwindham/

    Resources
    Learn more about Imperva and their offering: https://itspm.ag/imperva277117988

    Imperva Bad Bot Report 2022: https://itspm.ag/impervwurd

    Want the Bad Bot 101 Story? Check out the Imperva 2021 Bad Bot Report Podcast Series here: https://www.itspmagazine.com/their-stories/the-good-the-bad-and-the-ugly-the-bad-bot-report-2021-an-imperva-story

    Be sure to listen to Part 2 of this conversation here: https://itspmagazine.com/their-stories/how-bots-fake-human-behavior-to-conduct-online-fraud-the-bad-bot-report-2022-part-1-an-imperva-story-with-ryan-windham

    To see and hear more Redefining CyberSecurity content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity-podcast

    Are you interested in telling your story?
    https://www.itspmagazine.com/telling-your-story


    From Technology To Buzzwords To Marketing; From Conversations To Friendships To Mergers And Acquisitions | Key Learnings From RSA Conference 2022 | Redefining CyberSecurity With Eward Driehuis Jun 30, 2022
    Show notes

    We pack a lot into this conversation, looking at what to learn, how to learn, and who to learn from, getting a fantastic overview of the conference from many angles and positions.

    *Threat intelligence*
    *Development processes*
    *Cyber security M&A market*
    *Sales*
    *Marketing messaging*
    *Cyber law*
    *Standards*

    Tune in to this conversation as we wrap up our coverage of RSA Conference 2022. Be sure to listen to all of the conversation we had before, during, and after the event.

    Be sure to catch all of our conversations from Black Hat and DEF CON 2022 as well.

    ____________________________

    Guest
    Eward Driehuis
    Founder at 3Eyes Security and Chairman at CSIRT.global
    On LinkedIn | https://www.linkedin.com/in/ewarddriehuis/
    On Twitter | https://twitter.com/e3huis
    ____________________________

    This Episode’s Sponsors

    HITRUST: 👉 https://itspm.ag/itsphitweb

    CrowdSec: 👉 https://itspm.ag/crowdsec-b1vp

    Blue Lava: 👉 https://itspm.ag/blue-lava-w2qs

    BlackCloak 👉 https://itspm.ag/itspbcweb

    AppViewX 👉 https://itspm.ag/appviewx-cbye

    Checkmarx 👉 https://itspm.ag/checkmarx-i9o5

    ____________________________

    Resources

    LinkedIn post summing up the discussion points: https://www.linkedin.com/posts/ewarddriehuis_this-is-going-to-be-a-long-post-on-my-lessons-activity-6941702693895725056-H1YA

    Learn more about RSA Conference 2022: https://itspm.ag/rsac-b8ef76

    ____________________________

    For more RSAC Conference Coverage podcast and video episodes visit: https://www.itspmagazine.com/rsa-conference-usa-2022-rsac-san-francisco-usa-cybersecurity-event-coverage

    Be sure to catch all of the conversations for the Black Hat and DEF CON conferences in Las Vegas: https://www.itspmagazine.com/black-hat-2022-and-def-con-hacker-summer-camp-las-vegas-usa-cybersecurity-event-and-conference-coverage

    To see and hear more Redefining Security content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity

    Are you interested in sponsoring an ITSPmagazine Channel?
    👉 https://www.itspmagazine.com/podcast-series-sponsorships

    Are you interested in telling your story in connection with Black Hat and DEF CON by sponsoring our coverage?
    👉 https://itspm.ag/bhdc22sp


    The Real-World Value Of Telling Stories And The Role Of Visual Art In Ethical Hacking Videos | A Conversation With YouTuber SecAura | Redefining CyberSecurity Podcast With Sean Martin Jun 30, 2022
    Show notes

    SecAura is an amateur YouTuber whose post I came across caught my attention. SecAura creates free educational videos for ethical hacking and does so while going the extra mile to hand-craft many of the animations used in the videos. All of this is done outside of the 9-5 job SecAura has as a penetration tester. Realizing that the technical subjects needed diagrams and that these elements were a core part of the videos being created, SecAura decided to hand-craft the animations for each of the subjects being prepared, teaching himself all that was required to do so while constantly trying to improve with each video released.

    SecAura aims to have every video released be at the top of its game in terms of teaching someone who knows very little about a subject and getting them to a great foundational and applicable position just from watching his videos. He also hopes to extend the community and help to create the next generation of cybersecurity professionals by providing them with real, practical skills, backed by the theory!

    About SecAura [from Twitter]
    By day I work as a pentester, and in the evening, I compete in CTFs/cyber things. I have always loved teaching, and wanted to give back to the cyber community the best I can, so I made my YouTube Channel.

    It was a treat speaking with SecAura, learning about the creativity, passion, and production that goes into the making each of these videos, and how they can be used by those looking to enter the field of information security, preparing for a job interview, looking to grow their skills as they aspire to take on new roles or perhaps even get promoted at their job.

    So many uses cases — lots of great content — all from a super cool human.

    ____________________________

    Guest
    SecAura
    Ethical Hacking Content Creator
    On Twitter | https://twitter.com/secaura_
    On LinkedIn | https://www.linkedin.com/in/sec-aura-57736422a/
    On YouTube | https://www.youtube.com/channel/UCx89Lz24SEPZpExl6OfQ0Gg

    ____________________________

    This Episode’s Sponsors

    Asgardeo by WSO2: https://itspm.ag/asgardeo-by-wso2-u8vc

    Imperva: https://itspm.ag/imperva277117988

    ____________________________

    Resources

    More information about SecAura: https://twitter.com/secaura_/status/1518241710412808192

    The new SQLi video discussed during the conversation: UNLEASH THE POWER OF SQL INJECTION | A beginners guide: https://www.youtube.com/watch?v=_Y4MpvB6o7s

    VIDEO: Web Fundamentals for Cyber Security | HTTP for Hackers | 0x01 (Animated): https://www.youtube.com/watch?v=ro-5AjgoPc4

    ____________________________

    To see and hear more Redefining Security content on ITSPmagazine, visit:
    https://www.itspmagazine.com/redefining-cybersecurity

    Are you interested in sponsoring an ITSPmagazine Channel?
    👉 https://www.itspmagazine.com/podcast-series-sponsorships


    From Enrolling In College To Gambling, Traveling, And Shopping, Evasive Bad Bots Are A Major Source Of Online Fraud | The Bad Bot Report 2022 | Part 1 | An Imperva Brand Story With Ryan Windham Jun 27, 2022
    Show notes

    A new year and a new Bad Bot Report from Imperva. How is it looking? Well, this year, we see an increase in the sophistication level of bad bots compared to last year, with advanced bad bots accounting for 25.9% of all bad bot traffic in 2021, compared to 16.7% in 2020. In addition, evasive bad bots are on the rise, no industry is immune, and Account Takeover attacks are more prevalent than ever.

    The good news is that not all bots are Superbad — they go from Simple to Moderate, Advanced, and, Evasive — and we are getting better at finding them.

    During our conversation this year, we take a quick look back in time to last year's report to see what some of the changes are. Sadly, the team at Imperva is seeing more of the advanced bots we discussed during this conversation. Unfortunately, their ability to emulate human behavior makes them much more difficult to detect.

    What's driving a lot of this rise in bad bots? More and more services are moving online.

    We hope you enjoy this Part 1 of 2 conversations as we explore and uncover the consequences of bad bots for our business and society.

    About the 2022 Imperva Bad Bot Report
    Leveraging data from its global network, Imperva Threat Research investigates the rising volume of automated attacks occurring daily, evading detection while wreaking havoc and committing online fraud. The 9th annual Imperva Bad Bot Report is based on data collected from the Imperva global network throughout 2021. The data is composed of hundreds of billions of blocked bad bot requests, anonymized over thousands of domains. The goal of this report is to provide meaningful information and guidance about the nature and impact of these automated threats.

    Bot attacks are often the first indicator of fraudulent activity online, whether it’s validating stolen user credentials and credit card information to later be sold on the dark web, or scraping proprietary data to gain a competitive advantage. Often bots are used to surveil applications and APIs in an attempt to discover vulnerabilities or weak security. Online fraud from automated bot attacks is not only a threat to the business, but it is first and foremost a risk to customers. Bad bot attacks might cause customers to be unable to access their accounts or have sensitive information stolen from them due to successful account takeover fraud.

    Bad bots mask themselves and attempt to interact with applications in the same way a legitimate user would, making them harder to detect and block. They enable high-speed abuse, misuse, and attacks on your websites, mobile apps, and APIs. They allow bot operators, attackers, unsavory competitors, and fraudsters to perform a wide array of malicious activities.

    Such activities include web scraping, competitive data mining, personal and financial data harvesting, brute-force login, digital ad fraud, denial of service, denial of inventory, spam, transaction fraud, and more.

    Note: This story contains promotional content. Learn more.

    Guest
    Ryan Windham
    VP of Application Security at Imperva [@Imperva]
    On Linkedin | https://www.linkedin.com/in/rwindham/

    Resources
    Learn more about Imperva and their offering: https://itspm.ag/imperva277117988

    Imperva Bad Bot Report 2022: https://itspm.ag/impervwurd

    Want the Bad Bot 101 Story? Check out the Imperva 2021 Bad Bot Report Podcast Series here: https://www.itspmagazine.com/their-stories/the-good-the-bad-and-the-ugly-the-bad-bot-report-2021-an-imperva-story

    Be sure to listen to Part 2 of this conversation here: https://itspmagazine.com/their-stories/how-bots-fake-human-behavior-to-conduct-online-fraud-the-bad-bot-report-2022-part-1-an-imperva-story-with-ryan-windham

    Are you interested in telling your story?
    https://www.itspmagazine.com/telling-your-story


    Previous 1 54 55 56 57 58 61 Next

    Related Podcasts

    Reply All

    1

    Reply All Games & Hobbies
    Inside VR & AR

    2

    Inside VR & AR Gadgets
    Note to Self

    3

    Note to Self News
    BrainStuff

    4

    BrainStuff Natural Sciences
    This Week in Tech (Audio)

    5

    This Week in Tech (Audio) News
    Hands-On Tech (Audio)

    6

    Hands-On Tech (Audio) Technology
    footer-logo

    Contact Us

    Toll Free: 844-670-7747

    Links

    • Home
    • Top Charts
    • Networks
    • Apps
    • Independents Podcasts
    • Podcast Advertising
    • Podcast News
    • Contact Us
    • About Us
    • Analytics & Insights

    Stay Connected

      Privacy, Terms of Use & Our Code of Ethics Protecting Content Creators Copyrights