Security Weekly Podcast Network (Video)

Latest Episodes:

Vulns in Markdown Parsers, Census II & Open Source Security, iCloud Private Relay - ASW #187 Mar 08, 2022

Show notes

In the AppSec News: Finding vulns in markdown parsers, Census II and widespread open source dependencies, inside iCloud Private Relay, and cloud pentesting tools!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw187

Deep Visibility & Understanding the Underlying Data Layer - Lebin Cheng - ASW #187 Mar 07, 2022

Show notes

As the volume of API traffic increases, it becomes a greater threat to an organization's sensitive data. Motivated attackers will increasingly target APIs as the pathway to the underlying infrastructure and database. Imperva API Security is a new product that delivers rapid API discovery and data classification -- helping an organization truly protect all paths to the data, without slowing down the application development lifecycle.

This segment is sponsored by Imperva. Visit https://securityweekly.com/imperva to learn more about them!

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw187

Defense for Healthcare, Scope Security, Balbix, & DevOps Wizardry - ESW #263 Mar 05, 2022

Show notes

Finally, in the Enterprise Security News, BlueVoyant raises a $250M Series D to become security's newest unicorn (baby unicorn, awww), Balbix raises a $70M Series C, Scope Security announces a $20M Series A to specifically focus on monitoring and defense for healthcare, Palo Alto introduces a new product aiming to disrupt the SIEM market, Third Party Risk Management vendors come together to forge the one ring of standards to rule all of cyber (less forge, more rubber stamp though), Signal Science founder, former Etsy CISO, and honorary level 80 DevOps wizard Zane Lackey is now a general partner at Andreesen Horowitz (A16Z), All that and more, on this episode of Enterprise Security Weekly!

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw263

The Unique Challenges of Companies Born in the Cloud - Rich Mogull - PSW #730 Mar 05, 2022

Show notes

Rich joins us to discuss the differences in managing security policies between on-premises network environments and the cloud and the impacts that has on companies that are 100% cloud-based. He'll also be discussing the additional considerations that these organizations need to consider if they are considering SASE and SD-WAN to expand network access for their users.

This segment is sponsored by FireMon. Visit https://securityweekly.com/firemon to learn more about them!

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw730

Exposing Malware in Linux-Based Multi-Cloud Environments - Chad Skipper, Karen Worstell - ESW #263 Mar 04, 2022

Show notes

90% of cloud runs on Linux, but current countermeasures are focused on addressing Windows-based threats, leaving multi-cloud deployments vulnerable to attacks. So, is it any wonder that malware is propagating in multi-cloud environments under the radar?

Segment Resources:

https://via.vmw.com/exposingmalware

This segment is sponsored by VMware. Visit https://securityweekly.com/vmware to learn more about them!

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw263

Mock Interviews - Hack the Hiring Process - Alissa Torres - PSW #730 Mar 04, 2022

Show notes

If you are amongst the legions transitioning into a cybersecurity career, mock interviews serve as critical preparation for your job hunt. Alissa has delivered over 50 of these practice sessions over the last 4 months. Get some pointers from her on how to stand out from the crowd of entry-level applicants.

Segment Resources:

Alissa's class with Antisyphon InfoSec Training **Advanced Endpoint Investigations**

- https://www.antisyphontraining.com/advanced-endpoint-investigations-w-alissa-torres/

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw730

Ukraine, Russia, Cyber-Warfare, Sanctions, Conti Split, & Blocking Software Updates - PSW #730 Mar 04, 2022

Show notes

In the Security News for this week: Was it Russia?, Blocking software updates, crowd-sourced attacks, protecting FPGAs, moving Linux to modern C, Nvidia hit, the split of cyber criminals, Namecheap banning, Anonymous declares war, the Alan framework, and leaving your Docker port exposed, & more!

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw730

Putting the Zero Back Into Zero-Trust - Sharon Goldberg - ESW #263 Mar 04, 2022

Show notes

We'll cover the cutting-edge recommendations in the US federal governments January 2022 memo on their "transition to zero trust". Then we'll talk about what the standard definition of "zero-trust" means in our industry, and why it doesn't mean "trust zero things". Finally, we'll chat about architectures that can get us closer to actually trusting zero things.

Segment Resources:

Analysis of the federal government's zero trust memo: https://www.bastionzero.com/blog/i-read-the-federal-governments-zero-trust-memo-so-you-dont-have-to

https://www.bastionzero.com/blog/bashing-vpns-for-fun-and-profit

Zero trust security models

https://docs.bastionzero.com/product-docs/home/security-model

Visit https://www.securityweekly.com/esw for all the latest episodes!

Show Notes: https://securityweekly.com/esw263

Answer This Question, Partner Across Teams, & Future of Cyber Insurance - BSW #252 Mar 02, 2022

Show notes

In the leadership and communications section, Answer this question to assess your leadership, Partner Across Teams to Create a Cybersecurity Culture, The Future of Cyber Insurance, and more!

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw252

Latest Ransomware Trends in 2022 - Fleming Shi - BSW #252 Mar 01, 2022

Show notes

Ransomware developments we saw over the past year—along with a look ahead at what to expect in 2022.

This segment is sponsored by Barracuda Networks. Visit https://securityweekly.com/barracuda to learn more about them!

Visit https://www.securityweekly.com/bsw for all the latest episodes!

Show Notes: https://securityweekly.com/bsw252