Security Weekly Podcast Network (Video)

Latest Episodes:

MDR and Self Sabotage - Jason Lassourreille - ESW #331 Sep 14, 2023

Show notes

Discussing ways to ensure client success with MDR and discuss the ways organizations hurt MDR efficacy with overly broad global exclusions, poor deployment practices, and poor policy hygiene.

This segment is sponsored by Sophos. Visit https://securityweekly.com/sophos to learn more about them!

Show Notes: https://securityweekly.com/esw-331

Cisco 0-Day, Chrome Vulnerability, MGM Shut Down, & More! - PSW #798 Sep 14, 2023

Show notes

Lots in the Security News this week. Stay tuned!

Show Notes: https://securityweekly.com/psw-798

Ransomware Infection Vectors - Ryan Chapman - PSW #798 Sep 14, 2023

Show notes

Ryan has his finger on the pulse of ransomware and response. We discuss how the initial infections are occurring, how they've changed over time, and where they are going in the future!

Segment Resources:

For folks to see my recent presentations: for528.com/playlist

For folks to see the recordings of our recent Ransomware Summit: for528.com/summit23

For folks to watch my recent (free) ransomware workshop: for528.com/workshop23

Materials: for528.com/workshop

Show Notes: https://securityweekly.com/psw-798

Microsoft Dumps a Key, Grafana Logs a Key, URL Parsers Disagree, Old Bug in Ubuntu - ASW #254 Sep 12, 2023

Show notes

A key compromised from a crash dump (and the many, many lessons that followed), more examples of mishandling secrets, URL parsing mismatches show path traversal works well in Rust, an old Linux kernel bug shows how brittle code can be (even when it's heavily audited), an example of keeping OSS projects alive, a quick note on BLASTPASS, and a look at privacy in cars, and more!

Show Notes: https://securityweekly.com/asw-254

Mopria, Cisco, Seimens , Word, DarkGate, AP Stylebook, More News, and Jason Wood - SWN #324 Sep 12, 2023

Show notes

Mopria, Cisco, Seimens and Schneider, Word, AP Stylebook, DarkGate, GitHub, Chrome, More News, and Jason Wood on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-324

Building a Scanner and a Community with Zed Attack Proxy - Simon Bennetts - ASW #254 Sep 12, 2023

Show notes

Zed Attack Proxy is an essential tool for web app pentesting. The project just recently moved from OWASP to the Secure Software Project. Hear about the challenges of running an OSS security project, why Simon got involved in the first place, and why successful projects are about more than just code.

Segment Resources:

Show Notes: https://securityweekly.com/asw-254

The Secrets of Top Performing CISOs as the Board Expands Cybersecurity Risk Oversight - BSW #319 Sep 12, 2023

Show notes

In the leadership and communications section, The importance of CISOs is not recognised by senior leadership, The secret habits of top-performing CISOs, Get *Free* copies of two of our favorite leadership books, and more!

Show Notes: https://securityweekly.com/bsw-319

Identity is the Perimeter - Jeff Reich - BSW #319 Sep 11, 2023

Show notes

Managing identities continues to add complexity for granting access to enterprise resources. Between the increasing number and expanding types of identities, including carbon-based, silicon-based, and artificial identities, and the evolution of cloud computing and remote work, managing the perimeter is now an identity problem. What risks do each of these identity types pose and how do you mitigate them?

Jeff Reich, Executive Director at Identity Defined Security Alliance (IDSA), joins us to discuss the challenges of digital identities, how to discover risk with digital identities, and how best to mitigate those risks.

Segment Resources:

IDSA's 2023 Trends in Security Digital Identities: https://www.idsalliance.org/white-paper/2023-trends-in-securing-digital-identities/

Securing Your Remote Workforce Through Identity-Centric Security: https://www.idsalliance.org/white-paper/securing-your-remote-workforce-through-identity-centric-security/

Show Notes: https://securityweekly.com/bsw-319

The one in which Doug interviews Chat GPT - SWN Vault Sep 08, 2023

Show notes

Doug talks with Chat GPT in an interview format just to see what having a conversation with the AI is like. It even gets around to asking Chat GPT the famous six questions from Paul's Security Weekly.

Visit https://www.securityweekly.com/swn for all the latest episodes!

Show Notes: https://securityweekly.com/vault-swn-4

Why Data Privacy is Being Overhauled in 2023 - Dan Frechtling - ESW Vault Sep 07, 2023

Show notes

Check out this interview from the ESW Vault, hand picked by main host Adrian Sanabria! This segment was originally published on November 18, 2022. This segment will focus on (1) Why Did Sephora Get Fined $1.2M and Why Are They on Probation? (2) Why Data Privacy is Being Overhauled in 2023 (and How You Can Be Ready)

Segment Resources:

Show Notes: https://securityweekly.com/vault-esw-4