Word Notes

Latest Episodes:

chaos engineering (noun) Dec 19, 2023

Show notes

The resilience discipline of controlled stress test experimentation in continuous integration/continuous delivery environments, CI/CD environments, to uncover systemic weaknesses.

CyberWire Glossary link: https://thecyberwire.com/glossary/chaos-engineering

Audio reference link: Farnam Street, 2009. Richard Feynman Teaches you the Scientific Method [Website]. Farnam Street. URL https://fs.blog/mental-model-scientific-method/

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: remote access Trojan or RAT (noun) Dec 12, 2023

Show notes

From the intrusion kill chain model, a program that provides command and control services for an attack campaign. While the first ever deployed RAT is unknown, one early example is Back Orifice made famous by the notorious hacktivist group called “The Cult of the Dead Cow,” or cDc, Back Orifice was written by the hacker, Sir Dystic AKA Josh Bookbinder and released to the public at DEFCON in 1998.

Learn more about your ad choices. Visit megaphone.fm/adchoices

zero knowledge proof (noun) Dec 05, 2023

Show notes

A mathematical method by which one party (the prover) can prove to another party (the verifier) that something is true, without revealing any information apart from the fact that this specific statement is true.

CyberWire Glossary link: https://thecyberwire.com/glossary/zero-knowledge-proof

Audio reference link: Staff, 2022. Zero Knowledge Proofs [Video]. YouTube. URL https://www.youtube.com/watch?v=5qzNe1hk0oY

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: business email compromise or BEC (noun) Nov 28, 2023

Show notes

A social engineering scam where fraudsters spoof an email message from a trusted company officer that directs a staff member to transfer funds to an account controlled by the criminal.

Learn more about your ad choices. Visit megaphone.fm/adchoices

HIPAA (noun) Nov 21, 2023

Show notes

A U.S. law designed to improve the portability and accountability of health insurance coverage.

CyberWire Glossary link: https://thecyberwire.com/glossary/hipaa

Audio reference link: Dr. Dana Brems, 2021. Doctor reacts to “HIPAA violations” [Video]. YouTube. URL https://www.youtube.com/shorts/Ksk00s8a_IU

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: man trap (noun) Nov 14, 2023

Show notes

A physical security access control device consisting of an enclosed hallway with interlocking doors on each end where both doors can’t be open at the same time. A person presents credentials to the entry doorway. If authorized, the entry door opens and the person walks into the mantrap. The man trap exit door will not open until the entry door closes. The person presents credentials to the exit door. If authorized, the exit door will open. If not, the person is captured in the man trap until security arrives to handle the situation. Physical security leadership installs man traps to separate unrestricted areas from restricted areas, to prevent tailgating by uncleared personnel, and to impede access by unauthorized persons.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Common Vulnerability Scoring System (CVSS) (noun) Nov 07, 2023

Show notes

A qualitative public framework for rating the severity of security vulnerabilities in software.

CyberWire Glossary link: https://thecyberwire.com/glossary/common-vulnerability-scoring-system

Audio reference link: Peter Silva, 2020. What is Common Vulnerability Scoring System (CVSS) [Video]. YouTube. URL https://www.youtube.com/watch?v=rR63F_lfKf0

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: anagram (noun) Oct 31, 2023

Show notes

A word, phrase, or sentence formed from another by rearranging its letters. For example, cracking a columnar transposition cipher by hand involves looking for anagrams.

Learn more about your ad choices. Visit megaphone.fm/adchoices

Encore: zero-day (adjective) Oct 24, 2023

Show notes

A class of software-security-weakness-issues where independent researchers discover a software flaw before the owners of the code discover it. Zero-day, or 0-day in hacker slang, refers to the moment the race starts, on day zero, between network defenders who are trying to fix the flaw before hackers leverage it to cause damage. It is a race because on day zero, there is no known fix to the issue.

Learn more about your ad choices. Visit megaphone.fm/adchoices

extended detection response (XDR) (noun) Oct 17, 2023

Show notes

A unified security incident detection and response platform that connects to multiple tools in the security stack via APIs, collects telemetry from each, and attempts to correlate that telemetry into a coherent threat picture.

CyberWire Glossary link: https://thecyberwire.com/glossary/extended-detection-and-response

Audio reference link: Film Major. 2022. Enemy of the State (1998) Faraday Cage HD Tony Scott; Will Smith, Gene Hackman Jon Voight [Video]. YouTube. URL https://www.youtube.com/watch?v=n3gy4otg-24

Learn more about your ad choices. Visit megaphone.fm/adchoices

Our TOPPODCAST Picks

Follow Us

Stay Connected

Related Podcasts

Links

Stay Connected