Security Weekly Podcast Network (Video)

Latest Episodes:

Where Generative AI Can Actually Help Security (And Where It Doesn't) - Allie Mellen, Farshad Abasi - ASW #292 Jul 23, 2024

Show notes

Generative AI has produced impressive chatbots and content generation, but however fun or impressive those might be, they don't always translate to value for appsec. Allie brings some realistic expectations to how genAI is used by attackers and can be useful to defenders.

Segment resources:

Show Notes: https://securityweekly.com/asw-292

Killer Robots, Crowdstrike, Southwest, Play, FrostyGoop, Josh Marpet and More - SWN #400 Jul 23, 2024

Show notes

Elon's Killer Robots, Crowdstrike and More Crowdstrike, Southwest, Play, FrostyGoop, Josh Marpet, and more, on this Edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-400

Closing CISO-CEO Communication Gap Requires a Common Business Language - Sumedh Thakar - BSW #357 Jul 23, 2024

Show notes

Back in April, we covered a story on episode #348 titled "CISO-CEO communication gaps continue to undermine cybersecurity". In that article, Sumedh Thakar, the CEO at Qualys, stated "CISOs must translate technical risks into business impact for CEOs." But he didn't say how. So, we invited him on the show to explain. In this episode, Sumedh walks us through real life interactions with his CISO and Board and explains why security needs to be communicated in business terms.

Show Notes: https://securityweekly.com/bsw-357

Analyzing the CrowdStrike Incident and Its Ripple Effects - SWN #399 Jul 19, 2024

Show notes

In this episode of Security Weekly News, Dr. Doug White and Josh Marpet delve into the widespread impact of the recent CrowdStrike and Microsoft technical issue, which disrupted various industries, including airlines, DMVs, and hospitals. They discuss the interconnectedness of modern systems, the reliance on automatic updates, and the critical need for thorough testing and third-party risk management. Emphasizing the importance of understanding and planning for system failures, the hosts highlight the necessity for comprehensive inventories, continuous monitoring, and robust backup plans to ensure business continuity and resilience. Tune in for expert insights into mitigating the significant consequences of system failures.

Show Notes: https://securityweekly.com/swn-399

Rumored Wiz Deal Would be HISTORIC (if it happens), redefining shared responsibility - ESW #368 Jul 19, 2024

Show notes

In this week's enterprise security news,

Google is rumored to be considering acquiring Wiz for $23 BILLION
ThreatConnect acquires Polarity
XBOW and Sola Security are interesting new companies we'll discuss
What does "shared responsibility" actually mean?
Palo Alto probably isn't going to buy your startup
Snowflake-related breaches continue getting worse
MUCH less AI talk than usual
Defragmenting your browser

All that and more, on this episode of Enterprise Security Weekly.

Show Notes: https://securityweekly.com/esw-368

What's wrong with the cybersecurity industry and what we can do about it - Richard Hollis - ESW #368 Jul 19, 2024

Show notes

On this segment, we're going to zoom all the way out to discuss one of my favorite topics: what's fundamentally wrong with this industry? I believe we're at an inflection point: security teams have budget, staff, and more sway at the board level than ever. The cybersecurity market is doing great - growing at an astonishing rate with cyber startups that almost never fail and funding that survives every market downturn.

So why are failures also breaking records? What are we getting wrong? Why are we failing?

These are the questions Richard, Katie, and I will try to answer in this segment.

Segment Resources:

www.riskcrew.com/resources-2/cybersecurity-circle-of-failure/

Show Notes: https://securityweekly.com/esw-368

Book Discussion: Jump-start Your SOC Analyst Career - Jarrett Rodrick, Tyler Wall - ESW #368 Jul 19, 2024

Show notes

Three years after we last discussed this book on episode #221, Jarrett Rodrick returns, joined by co-author Tyler Wall to discuss an update of the book. We talk opportunities and layoffs. Career paths and experience. Degrees, certifications, and home labs. We talk about who cybersecurity is the right field for, and the pros and cons of the industry as a whole.

We also talk myths and reality about a cybersecurity career. Can you really make $100k just a few years in? Is it really an entry level field? Are you better off entering cyber from IT or the military?

Segment Resources:

Show Notes: https://securityweekly.com/esw-368

Vulnerability Chains - PSW #835 Jul 18, 2024

Show notes

Find new flaws in UEFI using STASE, combining vulnerabilities to exploit Sonicwall Devices, remote BMC exploits, Netgear patches, and not a lot of information, 22 minutes before exploited, if the secrets were lost, we'd all be in screwed, Exim has not been replaced by something better and its vulnerable, CISA's red team reports, and attackers use drivers to attack EDR, the saga continues!

Show Notes: https://securityweekly.com/psw-835

3D Printing For Hackers - David Johnson - PSW #835 Jul 18, 2024

Show notes

Thinking about getting a 3D printer or have one and need a good primer? Check out this segment, we live 3D print a Captain Crunch whistle and talk all about 3D printing for hackers!

Segment Resources:

Slides used in this segment: https://files.scmagazine.com/wp-content/uploads/2024/07/3D-Printing-for-Hackers.pdf

Major 3D Printer Websites:

Major 3D File libraries:

Youtube Channels:

Uncle Jessy
CnC Kitchen
The Edge of Tech
Makers Muse

Show Notes: https://securityweekly.com/psw-835

A 2024 Appsec Report, Preparing for the AIxCC, Secure Design and Post-Quantum Crypto - ASW #291 Jul 16, 2024

Show notes

Cloudflare's 2024 appsec report, reasoning about the Cyber Reasoning Systems for the upcoming AIxCC semifinals at DEF CON, lessons in secure design from post-quantum cryptography, and more!

Show Notes: https://securityweekly.com/asw-291

Our TOPPODCAST Picks

Follow Us

Stay Connected

Security Weekly Podcast Network (Video)

Related Podcasts

Links

Stay Connected