Security Weekly Podcast Network (Video)

Latest Episodes:

CISOs Struggling, Culture Hurting, But Cybersecurity Salaries Stay Competitive - BSW #384 Feb 26, 2025

Show notes

This week: CISOs struggling to balance security, business objectives, Signs Your Organization's Culture is Hurting Your Cybersecurity, Servant Leadership: Putting Trust at the Center, and more!

Show Notes: https://securityweekly.com/bsw-384

Cronenbergs, Dangling Twitchbots, Crypto, Kaspersky, SMS, OT, Josh Marpet... - SWN #454 Feb 25, 2025

Show notes

Cronenbergs, Dangling Twitchbots, Crypto, Kaspersky, SMS, OT, Josh Marpet, and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-454

Regex DoS, LLM Backdoors, Secure AI Architectures, Rust Survey - ASW #319 Feb 25, 2025

Show notes

Applying forgivable vs. unforgivable criteria to reDoS vulns, what backdoors in LLMs mean for trust in building software, considering some secure AI architectures to minimize prompt injection impact, developer reactions to Rust, and more!

Show Notes: https://securityweekly.com/asw-319

Developer Environments, Developer Experience, and Security - Dan Moore - ASW #319 Feb 25, 2025

Show notes

Minimizing latency, increasing performance, and reducing compile times are just a part of what makes a development environment better. Throw in useful tests and some useful security tools and you have an even better environment. Dan Moore talks about what motivates some developers to prefer a "local first" approach as we walk through what all of this means for security.

Show Notes: https://securityweekly.com/asw-319

AI Security Concerns: Real Threats or Distractions? Also - unhinged security teams! - ESW #395 Feb 24, 2025

Show notes

In the enterprise security news,

Change Healthcare's HIPAA fine is vanishingly small
How worried should we be about the threat of AI models?
What about the threat of DeepSeek?
And the threat of employees entering sensitive data into GenAI prompts?
The myth of trillion-dollar cybercrime losses are alive and well!
Kagi Privacy Pass gives you the best of both worlds: high quality web searches AND privacy/anonymity
Thanks to the UK for letting everyone know about end-to-end encryption for iCloud!
What is the most UNHINGED thing you've ever seen a security team push on employees?

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-395

Is Shift Left Just Starting to Catch On? And Other AppSec Trends & Insights - Jenn Gile - ESW #395 Feb 24, 2025

Show notes

'Shift Left' feels like a cliché at this point, but it's often difficult to track tech and security movements if you aren't interacting with practitioners on a regular basis. Some areas of tech have a longer tail when it comes to late adopters and laggards, and application security appears to be one of these areas. In this interview, Jenn Gile catches us up on AppSec trends.

Segment Resources:

Show Notes: https://securityweekly.com/esw-395

The Future of Cyber Regulation in the New Administration - Ilona Cohen - ESW #395 Feb 23, 2025

Show notes

In this interview, we're excited to have Ilona Cohen to help us understand what changes this new US administration might bring, in terms of cybersecurity regulation. Ilona's insights come partially from her own experiences working from within the White House. Before she was the Chief Legal Officer of HackerOne, she was a senior lawyer to President Obama and served as General Counsel of the White House Office of Management and Budget (OMB).

In this hyper-partisan environment, it's easy to get hung up on particular events. Do many of us lack cross-administration historical perspective? Probably. Should we be outraged by the disillusion of the CSRB, or was this a fairly ordinary occurrence when a new administration comes in? These are the kinds of questions I'll be posing to Ilona in this conversation.

How the Change Healthcare breach can prompt real cybersecurity change

Show Notes: https://securityweekly.com/esw-395

False Claims Act, Google Cloud PQC, Salt Typhoon, AI in SOC, Ivanti Flaws, ICS, DeFi - SWN #453 Feb 21, 2025

Show notes

On this edition of the Security Weekly News: False Claims Act, Google Cloud PQC, Salt Typhoon, AI in SOC, Ivanti Flaws, ICS, DeFi and more!

Show Notes: https://securityweekly.com/swn-453

Live from ZTW - PSW #862 Feb 20, 2025

Show notes

Our thoughts on Zero Trust World, and just a little bit of news. Of course we covered some firmware and UEFI without Paul!

Show Notes: https://securityweekly.com/psw-862

Say Easy, Do Hard - Data Inventory and Classification, Part 2 - BSW #383 Feb 19, 2025

Show notes

Application, user, and data security are the three core components of every security program, but data is really what attackers want. In order to protect that data, we need to know where it is and what it's used for. Easier said than done. In this Say Easy, Do Hard segment, we tackle data inventory and classification.

In part 2, we discuss the steps involved in data inventory and classification, including:

Data discovery: Identify all data sources across the organization using data mapping tools.
Data profiling: Analyze data attributes to understand its content and characteristics.
Data classification: Assign appropriate sensitivity levels to each data set based on predefined criteria.
Data tagging: Label data assets with their classification level for easy identification.
Data ownership assignment: Determine who is responsible for managing each data set.

Show Notes: https://securityweekly.com/bsw-383

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected