Security Weekly Podcast Network (Video)

Latest Episodes:

Holiday Hack Challenge - PSW #851 Nov 14, 2024

Show notes

We kicked things off by talking about the Holiday Hack Challenge, which is like this massive cyber playground that Sans puts out every year for everyone from fifth graders to government spooks. Ed Skoudis broke down how they're changing things this time, with an early release and a phased approach that'll give you more time to play and learn. But the real mind-bender was when Ed spilled the beans on how they build this whole thing using one giant Google sheet - I mean, we're talking hundreds of tabs, color-coded cells, and JSON to create entire virtual worlds. Then we covered the rest of the security news including hacking Mazda's infotainment system and more!

Segment Resources:

https://sans.org/holidayhack

Show Notes: https://securityweekly.com/psw-851

No CVE and No Accountability - PSW #851 Nov 14, 2024

Show notes

Alright, so we dove deep into some pretty wild stuff this week. We started off talking about zip files inside zip files. This is a variation of old-school zip file tricks, and the latest method described here is still causing headaches for antivirus software. Then we geeked out about infrared signals and the Flipper Zero, which brought back memories of the TV-B-Gone. But the real kicker was our discussion on end-of-life software and the whole CVE numbering authority mess. Avanti's refusal to issue a CVE for their end-of-life product sparked a heated debate about cybersecurity accountability and conflicts of interest.

Show Notes: https://securityweekly.com/psw-851

CISO Evolution and Leadership Paradigm as Burnout Rate Hits 93% - BSW #372 Nov 12, 2024

Show notes

In the leadership and communications segment, Managing Cybersecurity Stress: A Deep Dive into the 93% CISO Burnout Rate, How to Win at Cyber by Influencing People, Boost Your Team's Productivity by Hiring Force Multiplier, and more!

Show Notes: https://securityweekly.com/bsw-372

Typosquatting NPM, vulnerability analysis, and AI challenges - ASW #307 Nov 12, 2024

Show notes

This week, in the Application Security News, we spend a lot of time on some recent vulnerabilities. We take this opportunity to talk about how to determine whether or not a vulnerability is worth a critical response.

Can AI fully automate DevSecOps Governance? Adrian has his reservations, but JLK is bullish.

Is it bad that 70% of DevSecOps professionals don't know if code is AI generated or not?

All that and more on this week's news segment.

Show Notes: https://securityweekly.com/asw-307

Struwwelpeter, Krampus, Flutter, Apple, DLink, C++, Josh Marpet and more... - SWN #430 Nov 12, 2024

Show notes

Struwwelpeter, Krampus, Flutter, Apple, DLink, C++, Josh Marpet and more on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-430

Modernizing AppSec - Melinda Marks - ASW #307 Nov 12, 2024

Show notes

In this week's interview, Melinda Marks' joins us to discuss her latest research. Her recent report Modernizing Application Security to Scale for Cloud-Native Development delves into many aspects and trends affecting AppSec as it matures, particularly in cloud-first organizations.

We also discuss the fuzzy line between "cloud-native" AppSec and everything else that refuses to disappear, particularly for organizations that weren't born cloud-native and still have legacy workloads to worry about.

Integrating security into the SDLC and CI/CD pipelines, infrastructure as code (IaC) trends, best of breed vs platform, and other aspects of AppSec get discussed as well!

Show Notes: https://securityweekly.com/asw-307

How to Combat the CISO Mental Health Crisis - Ram Movva - BSW #372 Nov 12, 2024

Show notes

Stress in cybersecurity is an industrywide problem. The CISO role is one of the most stressful in any organization. And the stress levels are at an all time high, leading to a mental health crisis. How should CISOs cope with this stress and improve their mental health?

Ram Movva, CEO & Founder at Securin, joins Business Security Weekly to discuss the CISO challenges leading to this increased stress and how to cope. Ram will discuss how networking, peer groups, and trusted partners can help CISOs deal with stress and improve their overall mental health.

Show Notes: https://securityweekly.com/bsw-372

$200M for IoT security, 4 acquisitions, fake job openings, vapes are trash - ESW #383 Nov 09, 2024

Show notes

In the enterprise security news,

Some big fundings
no less than 4 acquisitions
Silencing the EDR silencers
ghost jobs
overinflated estimates on open cybersecurity jobs
weaponizing Microsoft Copilot
fun projects with disposable vapes

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-383

The State of DSPM, One of the Hottest New Cybersecurity Markets in Years - Todd Thiemann - ESW #383 Nov 08, 2024

Show notes

Is it a product or a feature? Is it DLP 4.0, or something legitimately new? Buy now, or wait for further consolidation?

There are SO many questions about this market. It's undeniably important - data hygiene and governance continues to be a frustrating mess in many organizations, but is this the solution? We'll discuss with Todd to find out.

Show Notes: https://securityweekly.com/esw-383

Robo-Turing, BlueNoroff, Palo Alto, German Law, Fabric, Cisco, Bans, Aaran Leyland... - SWN #429 Nov 08, 2024

Show notes

Robo-Turing, BlueNoroff, Palo Alto, German Law, Fabric, Cisco, Banning Things, Aaran Leyland, and More, on this edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-429