Root Causes: A PKI and Security Podcast

Latest Episodes:

Root Causes 367: Did an IoT Toothbrush Botnet Perform DDoS Attacks? Mar 07, 2024

Show notes

A story circulated earlier this year about a botnet composed of millions of IoT toothbrushes, which later was debunked. We tell you the whole tale.

Root Causes 366: What Is eIDAS? Mar 04, 2024

Show notes

eIDAS 2.0 has been making headlines recently with its proposed expansion to the European digital identity ecosystem. But what is eIDAS? What does it do, and why does it exist? In this episode we give you the basics.

Root Causes 365: What Is Subdomain Hijacking? Feb 26, 2024

Show notes

In this episode we explain subdomain hijacking, including dangling subdomains and how they can constitute vulnerabilities.

Root Causes 364: Video Conference Deepfake Enables $25 Million Theft Feb 22, 2024

Show notes

Deepfakes continue to show themselves as part of the standard criminal toolkit. A recent deepfake spear phish enabled a $25 million Business Email Compromise (BEC). We explain what happened.

Root Causes 363: Defending Yourself Against Use of Stolen Privileges Feb 18, 2024

Show notes

CloudFlare recently published details of an attack it suffered as a downstream effect of a November 2023 breach against Okta and what it did to nullify its success. We discuss the steps enterprises can take to protect themselves against malicious use of stolen access credentials.

Root Causes 362: When You're Attacked by a State Actor Feb 12, 2024

Show notes

In this episode we share the details of a recent nation state actor attack on Microsoft and some of the lessons learned.

Root Causes 361: The Premise of on Premise Feb 09, 2024

Show notes

In this episode we examine commonly held belief that on-premise systems give system administrators greater levels of control and that that is better for security or other reasons. We explore the pros and cons of extra control, to what degree it is a benefit, and if it's worth it.

Root Causes 360: Joe Biden Deepfake Plays in New Hampshire Primary Feb 06, 2024

Show notes

A deepfake of Joe Biden's voice made an appearance in robocalls leading up to the New Hampshire primary. We discuss this latest development and its implications.

Root Causes 359: 90-day SSL Won't Affect Organization Validation Periods Feb 02, 2024

Show notes

With maximum 90-day term coming for public SSL certificates and DCV reuse also moving to 90 days, we explain why we do not expect a similar reduction in the reuse period for organization validation.

Root Causes 358: Security Questionnaire Sins Jan 30, 2024

Show notes

In this episode we present a catalog of "security questionnaire sins," which are avoidable problems and errors that frequently occur in the security questionnaires enterprises send to vendors. Categories include difficulty of access, poor technical implementation, poor policies, and poor questions.

Our TOPPODCAST Picks

Follow Us

Stay Connected

Root Causes: A PKI and Security Podcast

Related Podcasts

Links

Stay Connected