Podcasts

On this week’s show Patrick Gray and Adam Boileau discuss the week’s security news, including:

• A look at the DHS Cyber Safety Review Board’s Log4j report
• Joshua Schulte no longer the “alleged” Vault7 leaker
• Chinese APT crews targeted US political journalists before Jan 6
• Ransomware gangs make leak sites searchable
• Why recovering plaintext passwords from Okta is expected behaviour
• US Government seizes North Korean ransomware payment
• Much, much more

This week’s show is brought to you by Trail of Bits. Dan Guido is this week’s sponsor guest and he’ll tell us about work Trail of Bits did for DARPA on investigating blockchain security fundamentals.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

On this week’s show Patrick Gray and guest cohost Dmitri Alperovitch discuss the week’s security news, including:

• Why an American defence contractor acquiring NSO Group would be a nonproliferation win
• A look at Microsoft’s botched macro measures
• iPhone’s Lockdown Mode
• Ukraine goes big on Yubikeys
• Aerojet Rocketdyne pays millions over poor security controls, CISO whistleblower gets bag of cash
• Much, much more

This week’s show is sponsored by Proofpoint. Ryan Kalember, Proofpoint’s Executive Vice President of Cybersecurity Strategy, joins us in this week’s sponsor interview to talk about changes he’s observed in the criminal ecosystem.

Today’s soap box is brought to you by Nucleus Security.

Nucleus makes a platform that ingests vulnerability scan information from all your vuln scanning tech so that you can do things like assign different vulnerabilities to different teams to manage and remediate. Send these ones to infrastructure, send these ones to app teams, send everything up and down this stack to this department etc.

If you want to see Nucleus in action I have recorded a demo and it’s on our YouTube product demos page, I’ve linked through to it in the show notes for this podcast.

Our guest in this episode is Scott Kuffer, co-founder of Nucleus, and the topic is running a vulnerability management program in a very large enterprise.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.

This podcast is a discussion between Patrick Gray and Tom Uren on the big stories affecting people in cyber policy.

It’s based on the latest Seriously Risky Business newsletter, which you can find here.

A short podcast updating listeners on the security news of the last few days, as prepared and presented by Catalin Cimpanu.

You can find the newsletter version of this podcast here.