Security Weekly Podcast Network (Video)

Latest Episodes:

HTTP RFCs Have Evolved, Breaking Into Cloud, Scaling AppSec at Netflix, & Confluence - Keith Hoodlet - ASW Vault Jan 01, 2024

Show notes

HTTP RFCs have evolved: A Cloudflare view of HTTP usage trends, Career Advice and Professional Development, Active Exploitation of Confluence CVE-2022-26134

Show Notes: https://securityweekly.com/vault-asw-7

Doug and Russ together again, one night only. - SWN Vault Dec 29, 2023

Show notes

Doug and Russ return to the stage to talk about Living with AI in the coming years and some of the impacts. Russ is always interested in modern problems and AI is probably going to be one.

Show Notes: https://securityweekly.com/vault-swn-8

MegatronAL on Kicking in the Door to Cybersecurity - Angela Marafino - ESW Vault Dec 28, 2023

Show notes

I once told my college advisor that I wanted to double major in computer science and jazz performance. She laughed at me. Instead, I jumped into a career in IT and played jazz - without a degree in either. Turns out, that was fine - the industry valued experience and results over academic achievement. Today's guest has two degrees, one in fine arts, one in pre-law, and that's also fine. If there's anything I've learned in InfoSec, it's the mind that matters most, less so the degrees or certs on your wall. Angela Marafino gets cybersecurity and understands what makes it tick. Using this knowledge, she has built a personal brand, network, and career in an impressively short time. She is simultaneously mentor and mentee. Today, we'll explore Angela's path into the industry as well as some of her views on challenges, like imposter syndrome.

https://hbr.org/2021/02/stop-telling-women-they-have-imposter-syndrome

https://www.itspmagazine.com/focal-point-podcast

https://twitter.com/hackerbookclub1

Show Notes: https://securityweekly.com/vault-esw-6

Interview with Dr. Whitfield Diffie - PSW Vault Dec 27, 2023

Show notes

Dr. Diffie is a pioneer of public-key cryptography and was VP of Information Security and Cryptography at ICANN. He is author of "Privacy on the Line: The Politics of Wiretapping and Encryption".

Show Notes: https://securityweekly.com/vault-psw-6

Crypto Identity - SWN Vault Dec 26, 2023

Show notes

Doug and Russ talk about digital fingerprints, hashing, digital DNA, and passwords.

Show Notes: https://securityweekly.com/vault-swn-7

Security Maturity: From Hostage Negotiator to Business Leader - Sandy Dunn - BSW Vault Dec 25, 2023

Show notes

Throughout her career, Sandy Dunn has continued to mature and refine her skills. In the early days, she describes her job as a "hostage negotiator", constantly negotiating between the business teams and the security team. But as you mature, so does your approach to security. Now, Sandy talks about simplifying "knowledge management" to make it easy to understand security and becoming a "business listener" to make the right decisions.

Show Notes: https://securityweekly.com/vault-bsw-6

OWASP SAMM - Software Assurance Maturity Model - Sebastian Deleersnyder - ASW Vault Dec 25, 2023

Show notes

We will provide a short introduction to OWASP SAMM, which is a flagship OWASP project allowing organizations to bootstrap and iteratively improve their secure software practice in a measurable way. Seba will explain the SAMM model, consisting of 15 security practices. Every security practice contains a set of activities, structured into 3 maturity levels. The activities on a lower maturity level are typically easier to execute and require less formalization than the ones on a higher maturity level. A the end we will cover how you can engage with the SAMM community and provide an overview of what happened at our latest SAMM User Day which happened on May 27th.

Segment Resources:

-https://www.youtube.com/channel/UCEZDbvQrj5APg5cEET49A_g

Show Notes: https://securityweekly.com/vault-asw-6

Ransomware prevention, ransomware stats, SSH vulns, and $1 Chevy Tahoes! - ESW #344 Dec 22, 2023

Show notes

This week, in the security market, we talk about next NEXT gen anti-virus, how Okta can (apparently) do no wrong, and a VC firm imploding.

Then we discuss how smartphones and speakers are allegedly being used to spy on us, and the future of privacy and consumer tech products.

The latest SSH vuln is much less concerning than media outlets and academic researchers would have you believe. The Citrixbleed vuln, however is about as bad as vulns can get, and has led to one of the biggest US consumer breaches in a while, with Comcast/XFinity losing all customer records.

The SEC backpedals (again!) on requiring breached companies to provide details about how they got breached.

And finally, we have some fun with some squirrel stories that you should absolutely check out by going to our show notes, here: https://securityweekly.com/esw344

Show Notes: https://securityweekly.com/esw-344

Deepfakes, China, Strangest Scams, NordVPN, Russia, Aaran Leyland & More - SWN #351 Dec 22, 2023

Show notes

Join us for our last live episode of the year as we navigate the 2023 cybersecurity landscape, covering global initiatives, deepfake concerns in the UK, NordVPN's cyber insurance expansion, China's major cyber attack on US infrastructure, successful ransomware takedowns, and the year's most bizarre scams according to Which Consumer Magazine. It's a rapid-fire exploration of the top stories shaping the digital defense narrative.

Show Notes: https://securityweekly.com/swn-351

Creating a certification path for SASE products and services - Pascal Menezes - ESW #344 Dec 22, 2023

Show notes

Understanding how CyberRatings, NaaS, and SASE combine to make network security easier to buy and deploy. MEF is an industry association, providing standards, certifications, and facilitating community discussions. MEF has teamed up with CyberRatings.org to establish a certification program for SASE services, making it easier for buyers to understand what's included in SASE-related products and services.

Segment Resources:

https://www.mef.net/news/16-leading-technology-and-service-providers-launch-industrys-first-sase-product-and-services-certification/

Show Notes: https://securityweekly.com/esw-344

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected