Security Weekly Podcast Network (Video)

Latest Episodes:

Consolidating C-Suite Tech Roles as Security Budgets and Workforce Growth Flatline - BSW #364 Sep 17, 2024

Show notes

In the leadership and communications segment, Why Companies Should Consolidate Tech Roles in the C-Suite, End of an era: Security budget growth slows down, Global cybersecurity workforce growth flatlines, stalling at 5.5M pros, and more!

Show Notes: https://securityweekly.com/bsw-364

Solving the Cybersecurity Data Problem - Padraic O'Reilly - BSW #364 Sep 16, 2024

Show notes

Cybersecurity is complex. We have threats, vulnerabilities, incidents, controls, risks, etc. But how do they all connect together to drive a cyber risk program? As an industry, we've struggled for 20+ years trying to boil this ocean. Maybe we've been going about it the wrong way.

Padraic O'Reilly, Founder and Chief Innovation Officer at CyberSaint, joins Business Security Weekly to discuss how AI can help us solve the cybersecurity data problem. Starting with simple mappings from risks to controls, CyberSaint is flipping the cyber risk management problem on it's head. Instead of working from the bottom up, CyberSaint is tackling the problem from the top down. Padraic will discuss how CyberSaint is using AI, practical AI, to address the complexities of cybersecurity data, including:

the use of Watsonx to generate their new KnightVision report
how to use graphical node networks to model cybersecurity data
the future of AI models to prioritize recommendations from all the data

This segment is sponsored by CyberSaint . Visit https://securityweekly.com/cybersaint to learn more about them!

Show Notes: https://securityweekly.com/bsw-364

Cybersecurity at the speed of Formula One - Darren Guccione, Harry Wilson - ESW #375 Sep 14, 2024

Show notes

Ever wondered what it's like to be responsible for the cybersecurity of a sports team? How about when that sports team is one of the world's most successful Formula One teams? I can't describe how excited we are to share this interview. This interview is basically two huge F1 nerds who happen to also be cybersecurity veterans asking everything they've always wanted to know about what it takes to secure an F1 team.

For the folks out there that aren't familiar with this sport, Formula One is arguably the fastest, most watched, and most international automotive racing sport today. In the 2024 season, the racing series will feature ten teams traveling to 24 race tracks located in 21 different countries. Also, did you know that only two countries get more than one race? Italy gets to host two Grand Prix, and the United States gets to host three.

A HUGE thanks to Keeper Security and Darren Guccione for making this interview possible. This isn't a sponsored interview, but it was Keeper's PR team that pitched the idea for this interview to us, and as F1 fans, we're super grateful they did!

Segment Resources:

Keeper Press Release on the Partnership
Williams Press Release on the Partnership
Some more details from Keeper on why they chose to sponsor automotive racing

Show Notes: https://securityweekly.com/esw-375

Oktane 2024 and the Current State of Identity Security - Harish Peri - ESW #375 Sep 13, 2024

Show notes

We are a month away from Oktane -- the biggest identity event of the year. Okta is bringing thousands of identity industry thought leaders, IT and security executives, and other tech leaders together on October 15-17 to discuss the changing landscape for security and identity, how organizations are putting identity first, new Okta products, and more. Harish Peri, Senior Vice President of Product Marketing, joins Enterprise Security Weekly to discuss what people should expect from Oktane this year, the conversations that will take place at the event and why it's important for security professionals to attend/tune in.

This segment is sponsored by Oktane. Visit https://securityweekly.com/oktane2024 and use discount code OKTNSC24 to pay only $100 for your full conference pass!

Show Notes: https://securityweekly.com/esw-375

Li-On, Lazarus, Whatsup, Scattered Spider, Hadooken, Dead People, Aaran Leyland... - SWN #413 Sep 13, 2024

Show notes

Through the Fire and Li-On Flames, Lazarus, Whatsup, Scattered Spider, Hadooken, Dead People, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-413

Cybersecurity has too many distractions and can the White House fix BGP? - ESW #375 Sep 13, 2024

Show notes

This week, in the enterprise security news,

Cribl, Zafran, and US states raise funding
Cisco, Check Point, Salesforce, and Absolute Software acquire cybersecurity startups
AI Security products are picking up steam
You probably shouldn't be too worried about Yubikey cloning
Instead, you should be more worried about malicious npm packages!
The White House wants to fix BGP
SolarWinds has shady stuff in its source code, AGAIN
The challenge of bringing security to small business
Scams are getting quicker and more effective
how not to run a phishing test
and AI assistants rickroll paying customers!

Show Notes: https://securityweekly.com/esw-375

Wifi Vulns, Yubikeys, and Firmware - PSW #842 Sep 12, 2024

Show notes

Don't tell the FCC there is a new Flipper firmware release, unpatchable?, argv[0] and sneaking past defenses, protect your registries, someone solved my UART RX problem, PKFail update, legal threats against security researchers documented, EDR bypass whack-a-mole continues, emulating PIs, VScode moonlights as a spy, Want to clone a YubiKey? All you need is $11,000, some fancy gear, and awkwardly close proximity to your victim, and Telegram's encryption: it's kinda like putting a 'Keep Out' sign but leaving the door unlocked.

Show Notes: https://securityweekly.com/psw-842

Recent Cyber Security Laws & Regulations - Lee Kim - PSW #842 Sep 12, 2024

Show notes

Lee comes on the show to discuss:

EU CRA - https://en.wikipedia.org/wiki/CyberResilienceAct - its impact on bringing products to market and the challenges of enforcing such laws that require products to be "Secure"
Recent legislation on disputes for federal agency fines - Chevron deference rule - supreme court decision, uncertainty, more or less clarity - proven in the first court case? opens to more litigation -https://www.nrdc.org/stories/what-happens-if-supreme-court-ends-chevron-deference
Breach disclosure laws - mandatory disclosure rules from the SEC - https://www.sec.gov/newsroom/press-releases/2024-31
Defcon cease and desist - "Copyright Act, the Defend Trade Secret Acts, the Computer Fraud and Abuse Act, and the Digital Millennium Copyright Act" - https://securityledger.com/2024/08/a-digital-lock-maker-tried-to-squash-a-def-con-talk-it-happened-anyway-heres-why/

Show Notes: https://securityweekly.com/psw-842

AI Trucks, Solid Concrete, Sonicwall, Progress, Rust, Apple, and more... - SWN #412 Sep 10, 2024

Show notes

AI Trucks, Solid Concrete, Sonicwall, Progress, Rust, Apple, and more, on this Edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-412

Paying Down Tech Debt, Rust in Firmware, EUCLEAK, Deploying SSO - ASW #298 Sep 10, 2024

Show notes

Considerations in paying down tech debt, make Rust work on bare metal, ECDSA side-channel in Yubikeys, trade-offs in deploying SSO quickly, and more!

Show Notes: https://securityweekly.com/asw-298

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected