Security Weekly Podcast Network (Video)

Latest Episodes:

Say Easy, Do Hard - Job Search Strategies for CISOs - Part 2 - Merlin Namuth, Brad Rager - BSW #359 Aug 06, 2024

Show notes

Inspired by my co-host Jason Albuquerque, this quarter's Say Easy, Do Hard segment is Job Search Strategies for CISOs. In part 2, Jason proposes we blow it all up, while Ben recommends a certification board for CISOs. We have no shortage of suggestions for how to fix the CISO hiring problem.

Show Notes: https://securityweekly.com/bsw-359

Say Easy, Do Hard - Job Search Strategies for CISOs - Part 1 - Merlin Namuth, Brad Rager - BSW #359 Aug 05, 2024

Show notes

Inspired by my co-host Jason Albuquerque, this quarter's Say Easy, Do Hard segment is Job Search Strategies for CISOs. In part 1, we discuss the challenges facing the CISO role and it's hiring. As CISOs leave the role, the position is not necessarily being refilled. How will this impact future CISO hiring?

Show Notes: https://securityweekly.com/bsw-359

Funding, Cato, Code42, DoS Robots, and Blackhat Prep - ESW #370 Aug 03, 2024

Show notes

This week, in the enterprise security news,

over half a billion in funding, as everyone gets their pre-Blackhat announcements out!
Mimecast picks up Code42
Will Cato Networks IPO?
Canarytokens update
We still have some crowdstrike fallout to discuss
CISO responses to SEC rules
Making things secure without security tools
tips for going SOCLess
denial of service robots

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-370

10 Security Researcher Qualities Marketers Should Adopt - Dani Woolf - ESW #370 Aug 02, 2024

Show notes

There's plenty of content out there detailing how vendors fall short:

scummy, aggressive sales tactics
overuse of jargon and buzzwords
sneaky sales tactics
dumping on competitors
products that fall far short of claims
ambulance chasing

So what should they doing? In this episode, we chat with Dani Wolff, about how marketers can adopt the skills and mindsets of security researchers to improve GTM strategies, without resorting to awful tactics. Drawing from extensive experience in qualitative interviews and collaborations with enterprise security executives and researchers, Dani will uncover how the innate curiosity and analytical prowess of researchers can dismantle unhealthy habits within vendor organizations.

We'll also discuss Dani's various projects, including the WTF Did I Just Read podcast, CyberNest, and CyberSynapse. Dani will explain how these are all designed to address the gap between vendors and buyers in the cybersecurity industry.

Show Notes: https://securityweekly.com/esw-370

Taco Bell AI, Azure, Scams, AI Emails, IBM, Crowdstrike, Aaran Leyland, and More... - SWN #403 Aug 02, 2024

Show notes

Taco Bell AI, Azure, Scams, AI Emails, IBM, Crowdstrike, I try to be more succinct, Aaran Leyland, and More on the Security Weekly News.

Show Notes: https://securityweekly.com/swn-403

Cybersecurity's Love Affair with Distractions - Fred Wilmot - ESW #370 Aug 02, 2024

Show notes

Remember 20 years ago? When we were certain SIEMs would grant our cybersecurity teams superpowers? Or 10 years ago, when we were sure that NGAV would put an end to malware as we knew it? Or 15 years ago, when we were sure that application control would put an end to malware as we knew it? Or 18 years ago, when NAC would put an end to unauthorized network access?

Why do we keep thinking that the next vendor offering is going to solve all our problems? In this interview, we talk with Fred Wilmot about the hard work of building effective processes and resilient architectures that will actually yield reductions in risk and detection/response capabilities that actually work.

We'll discuss shifts in thinking that can move us past the latest distractions, and keep security teams focused on work that moves the needle. Fred may also mention his past transgressions against the industry and what he's doing to "wipe out the red from his ledger".

Show Notes: https://securityweekly.com/esw-370

It's Always DNS - PSW #837 Aug 01, 2024

Show notes

Hacking traffic lights (for real this time), the Docker API strikes again, access Github deleted data, using EDR to elevate privileges on Windows, computers I need in my life, failed experiments and Raspberry PI access points, sitting ducks and TuDoor - its always DNS times 2, null sessions and a blast from the past, chaining UEFI vulnerabilities, pirates exposed, revoking SSL certificates, and using AI to analyze your brain: Multimodal Automated Interpretability Agent!

Show Notes: https://securityweekly.com/psw-837

PK Fail - John Loucaides - PSW #837 Aug 01, 2024

Show notes

John is one of the foremost experts in UEFI and joins us to talk about PK Fail! What happens when a vendor in the supply chain accidentally loses a key? It's one of the things that keeps me up at night. Well, now my nightmare scenario has come true as a key has been leaked. Learn how and why and what you can do about it in this segment!

Show Notes: https://securityweekly.com/psw-837

Forever mouse, RPC, WhatsApp, NIST, PKFail, 0Auth, Josh Marpet, and More... - SWN #402 Jul 30, 2024

Show notes

Forever Mouse, RPC, WhatsApp, NIST, PKFail, 0Auth, Josh Marpet, and More, on this Edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-402

A CISO's Perspective on AI, Appsec, and Changing Behaviors - Paul Davis - ASW #293 Jul 30, 2024

Show notes

Modern appsec isn't modern because security tools got shifted in one direction or another, or because teams are finding and fixing more vulns. It's modern because appsec is meeting developer needs and supporting the business. Paul Davis talks about how AI is (and isn't) changing appsec, the KPIs that reflect outcomes rather than being busy, and the importance of communication for security teams.

This segment is sponsored by JFrog. Visit https://securityweekly.com/jfrog to learn more about them!

Show Notes: https://securityweekly.com/asw-293

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected