Security Weekly Podcast Network (Video)

Latest Episodes:

The Top Trends Shaping Identity and Access Management in 2025 - Geoff Cairns - ESW #400 Mar 31, 2025

Show notes

In this interview, we feature some research from Geoff Cairns, an analyst at Forrester Research. This is a preview to the talk he'll be giving at Identiverse 2025 in a few months.

We won't have time to cover all the trends, but there are several here that I'm excited to discuss!

Deepfake Detection Difficult
Zero Trust Agentic AI
Phishing resistant MFA adoption
Identity Verification
Machine Identity
Decentralized Identity
Post Quantum
Shared Signals

Segment Resources:

The Top Trends Shaping Identity And Access Management In 2025 - (Forrester subscription required)

Show Notes: https://securityweekly.com/esw-400

Setting up your SIEM for success - Pitfalls to preclude and tips to take - Neil Desai - ESW #400 Mar 30, 2025

Show notes

A successful SIEM deployment depends on a lot more than implementing the SIEM correctly. So many other things in your environment have an impact on your chances of a successful SIEM.

Are the right logs enabled?
Is your EDR working correctly?
Would you notice a sudden increase or decrease in events from critical sources?
What can practitioners do to ensure the success of their SIEM deployment?

This segment is sponsored by Graylog. Visit https://securityweekly.com/graylog to learn more about them!

Show Notes: https://securityweekly.com/esw-400

Mrtentacle, Morphing Meerkat, Tor, VMWare, Waymo, Oracle, Aaran Leyland, and more... - SWN #463 Mar 28, 2025

Show notes

Mrtentacle, Morphing Meerkat, Tor, VMWare, Waymo, Oracle, Aaran Leyland, and More, on this edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-463

SignalGate and How Not To Protect Secrets - PSW #867 Mar 27, 2025

Show notes

How do we handle scope creep for vulnerabilities?, find the bugs before it hits the real world, risk or hype vulnerabilities, RTL-SDR in a browser, using AI to hack AI and protect AI, 73 vulnerabilities of which 0 patches have been issued, Spinning Cats, bypassing WDAC with Teams and JavaScript, Rust will solve all the security problems, did you hear some Signal chats were leaked?, ingress nginx, robot dogs, what happens to your 23andme data?, Oracle's cloud was hacked, despite what Oracle PR says, inside the SCIF, and cvemap to the rescue.

Show Notes: https://securityweekly.com/psw-867

The Pace of Investments Requires Better Risk Management, Boards Challenged, & More - BSW #388 Mar 26, 2025

Show notes

Cybersecurity teams were under increasing strain in 2024. To alleviate this burden, 2025 will see greater reliance on automation to streamline workflows, enhance threat detection, and accelerate incident response. But some of these investments may come with risks.

Greg Sullivan, Founding Partner at CIOSO Global, joins Business Security Weekly to discuss how the pace of investment will require better risk management. Greg will cover topics, including:

The seismic C-level shift in interest will require a top-down approach to cybersecurity.
The focus will shift from external cybersecurity solutions to building in-house resilience.
The critical criteria needed to drive more refined defenses, smarter resource allocation, and wiser cybersecurity investments.

In the leadership and communications segment, Boards Challenged to Embrace Cybersecurity Oversight, Why Cybersecurity Needs More Business-Minded Leaders, How to Build a Cybersecurity Resume that Gets You Hired, and more!

Show Notes: https://securityweekly.com/bsw-388

Curdled Miscreant, VanHelsing, MFA, Room 237, MFA, Velora, 23nMe, Josh Marpet... - SWN #462 Mar 25, 2025

Show notes

Curdled Miscreant, VanHelsing, MFA, Room 237, MFA, Velora, 23nMe, Josh Marpet, and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-462

Finding a Use for GenAI in AppSec - Keith Hoodlet - ASW #323 Mar 25, 2025

Show notes

LLMs are helping devs write code, but is it secure code? How are LLMs helping appsec teams? Keith Hoodlet returns to talk about where he's seen value from genAI, where it fits in with tools like source code analysis and fuzzers, and where its limitations mean we'll be relying on humans for a while. Those limitations don't mean appsec should dismiss LLMs as a tool. It means appsec should understand how things like context windows might limit a tool's security analysis to a few files, leaving a security architecture review to humans.

Segment resources:

Show Notes: https://securityweekly.com/asw-323

Google picks up a Wiz kid, GitHub's malicious actions, Agentic AI is sus - ESW #399 Mar 24, 2025

Show notes

This week, JP Bourget from Blue Cycle is with us to discuss Building the SOC of the Future

Then, Michael Mumcuoglu (Moom-cuoglu) from CardinalOps joins us to talk about improving detection engineering.

In the enterprise security news,

Google bets $32B on a Wiz Kid Cybereason is down a CEO, but $120M richer EPSS version 4 is out Github supply chain attacks all over A brief history of supply chain attacks Why you might want to wait out the Agentic AI trend Zyxel wants you to throw away their (old) products HP printers are quantum resilient (and no one cares) A giant rat is my hero All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-399

We need better detection feedback loops - Michael Mumcuoglu - ESW #399 Mar 24, 2025

Show notes

It feels like forever ago, but in the mid-2010s, we collectively realized, as an industry, that prevention was never going to be enough. Some attacks were always going to make their way through. Then ransomware got popular and really drove this point home. Detection engineering is a tough challenge, however.

Where do we start? Which attacks should we build detections for? How much of the MITRE ATT&CK matrix do we need to cover? How often do these detections need to be reviewed and updated? Wait, are any of our detections even working?

In this interview with Michael Mumcuoglu, we'll discuss where SecOps teams get it wrong. We'll discuss common pitfalls, and strategies for building more resilient and effective detections.

Again, as an industry, we need to understand why ransomware attacks keep going unnoticed, despite attackers using routine techniques and tools that we see over and over and over again.

Show Notes: https://securityweekly.com/esw-399

Building the SOC of the Future - JP Bourget - ESW #399 Mar 23, 2025

Show notes

What does a mature SecOps team look like? There is pressure to do more with less staff, increase efficiency and reduce costs. JP Bourget's experience has led him to believe that the answer isn't a tool upgrade, it's better planning, architecture, and process.

In this interview, we'll discuss some of the common mistakes SecOps teams make, and where to start when building the SOC of the future.

Show Notes: https://securityweekly.com/esw-399

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected