Security Weekly Podcast Network (Video)

Latest Episodes:

C-Level Perspective, Communication Failure, and Leadership Misconceptions - BSW #344 Apr 02, 2024

Show notes

In the leadership and communications section, The Strategic Implications of Cybersecurity: A C-Level Perspective, Leadership Misconceptions That Hinder Your Success , "Mastering Communication: Lessons from Two Years of Learning", and more!

Show Notes: https://securityweekly.com/bsw-344

CISO Soul Searching: Navigating the Evolving Role of the CISO - Harold Rivas - BSW #344 Apr 02, 2024

Show notes

Harold Rivas has held multiple CISO roles. In his current CISO role, he's championing Trellix's overall mission to address the issues CISOs face every day, encouraging information sharing and collaborative discussions among the CISO community to help address challenges and solve real problems together - part of this is through Trellix's Mind of the CISO Initiative and the Trellix CISO Council. In this interview, we do a little CISO soul-searching. Harold will bring insights from the initiative to cover some of the top challenges CISOs face in this ever-evolving role, including:

Earning a seat at the table
Talking the language of business
Addressing the risks and opportunities of business evolution
Reading the tea leaves of the future

and more! If you're a CISO or want to be a CISO, don't miss this episode.

Segment Resources: https://www.trellix.com/blogs/perspectives/introducing-trellixs-mind-of-the-ciso-initiative/ https://www.trellix.com/solutions/mind-of-the-ciso-report/ https://www.trellix.com/solutions/mind-of-the-ciso-behind-the-breach/

Show Notes: https://securityweekly.com/bsw-344

Multi-Layered Defense Platforms and other terms we found in security press releases - ESW #355 Mar 29, 2024

Show notes

This week, in the enterprise security news:

Early stage funding is all the rage
AI startups continue to pop out of stealth
The buyer's market continues with more interesting acquisitions
Purpose-built large language models for security
Benchmarking LLMs for security
GoFetch? More like... Get outta here (I couldn't think of anything clever)
Crowdstrike and NVIDIA team up
Why do people trust AI?
What do Google Sheets and Carlos Sainz Jr. have in common?

All that and more, on this episode of Enterprise Security Weekly!

Show Notes: https://securityweekly.com/esw-355

Electric Sheep, Exchange, Darcula, NuGet, Rockwell, FTX, Aaran Leyland, and More - SWN #373 Mar 29, 2024

Show notes

AI Dreams of Electric Sheep, Exchange, Darcula, NuGet, Rockwell, FTX, Aaran Leyland, and More, on this edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-373

Why cyber hygiene requires curious talent - Clea Ostendorf - ESW #355 Mar 28, 2024

Show notes

Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed another major factor in folks that brought a lot of value to security teams: diversity.

Diversity of people, diversity of background, and diversity of experience. I've seen auto mechanics, biologists, and finance experts bring the most interesting insights and forehead-slapping observations to the table. I think part of the reason diversity is so necessary is that security itself is incredibly broad. It covers everything that technology, processes, and people touch. As such, cybersecurity workers need to have a similarly broad skillsets and background.

Today, we talk to someone that embodies both this non-typical cybersecurity background and sense of curiosity - Clea Ostendorf. We'll discuss:

The importance for organizations to actively seek and welcome curious newcomers in the security field who may not conform to traditional cybersecurity norms.
Strategies for organizations to foster an environment that encourages individuals with curiosity, motivation, and a willingness to challenge conventional norms, thereby promoting innovative thinking in addressing security risks.

Segment Resources:

Evolving Threats from Within - Insights from the 2024 Code42 Data Exposure Report

Show Notes: https://securityweekly.com/esw-355

Crypto, Bluetooth Vulns, Unsafe Locks - PSW #822 Mar 28, 2024

Show notes

The PSW crew discusses some crypto topics, such as post-quantum and GoFetch, new Flipper Zero projects, RFID hacking and hotel locks, BlueDucky, side channel attacks and more!

Show Notes: https://securityweekly.com/psw-822

Are we winning? - Jason Healey - PSW #822 Mar 28, 2024

Show notes

Jason Healey comes on the show to discuss new ideas on whether the new national cybersecurity strategy is working.

Segment Resources:

DEFRAG Hacker Film Festival short documentary (https://youtu.be/NYvHWcQsIRE) on hackers and their favorite films. For educational purposes only, as we don't have the rights to the clips.
YouTube link to Wargames event with Jen Easterly, Matt Devost, Amelia Koran and Kevin Huyck (head of ops for NORAD) (https://youtu.be/iqx6STDYJ7c?si=73WQtSG4RnCGsBcT).
https://www.lawfaremedia.org/article/which-cyber-regulations-fit-which-sectors
https://www.lawfaremedia.org/article/the-national-cybersecurity-strategy-breaking-a-50-year-losing-streak
https://www.lawfaremedia.org/article/twenty-five-years-of-white-house-cyber-policies
https://www.lawfaremedia.org/article/understanding-offenses-systemwide-advantage-cyberspace

Show Notes: https://securityweekly.com/psw-822

Patrick Stewart, Colorama, Strelastealer, CVSS scores, CHUDS, Josh Marpet, and more - SWN #372 Mar 26, 2024

Show notes

Patrick Stewart, Colorama, Strelastealer, CVSS scores, CHUDS, Josh Marpet, and more, on this Edition of the Security Weekly News.

Show Notes: https://securityweekly.com/swn-372

Apps Gone Wild: Re-thinking App and Identity Security for SaaS - Guy Guzner - BSW #343 Mar 26, 2024

Show notes

With hundreds or thousands of SaaS apps to secure with no traditional perimeter, Identity becomes the focal point for SaaS Security in the modern enterprise. Yet with Shadow IT, now recast as Business-Led IT, quickly becoming normal practice, it's more complicated than trying to centralize all identities with an Identity Provider (IdP) for Single Sign-On (SSO). So the question becomes, "How do you enable the business while still providing security oversight and governance?"

This segment is sponsored by Savvy. Visit https://securityweekly.com/savvy to learn more about them!

Show Notes: https://securityweekly.com/bsw-343

CSO Role vs. Changing CISO Role as 60% of Both Roles are Omitted from SEC Filings - BSW #343 Mar 26, 2024

Show notes

In the leadership and communications section, The CISO Role Is Changing. Can CISOs Themselves Keep Up? , Why do 60% of SEC Cybersecurity Filings Omit CSO, CISO Info?, How Co-Leaders Succeed, and more!

Show Notes: https://securityweekly.com/bsw-343