Pen Testing, Part 1 w/ Dmitry Zagadsky - SCW #56 | Security Weekly Podcast Network (Video) Podcast

Black Hole - SCW #56: The penetration testing mythology as it applies to information security is all screwed up. If nothing else, we're going to attempt to define a penetration test, focus on the goals, and what should be in a report. You better believe there is going to... by Security Weekly Podcast Network (Audio)

91 min listen

Compliance and “The Crowd”, Part 2 - Casey Ellis - SCW #88: Crowdsourcing and multi-sourcing focus on risk identification and reduction, and they seem to be effective... but my auditor doesn't understand what it is yet - Will it meet the requirements of security compliance standards? Jeff and Casey will dig... by Security Weekly Podcast Network (Video)

49 min listen

Compliance and “The Crowd”, Part 1 - Casey Ellis - SCW #88: Crowdsourcing and multi-sourcing focus on risk identification and reduction, and they seem to be effective... but my auditor doesn't understand what it is yet - Will it meet the requirements of security compliance standards? Jeff and Casey will dig... by Security Weekly Podcast Network (Video)

36 min listen

Pen Testing, Part 2 w/ Dmitry Zagadsky - SCW #56: We'll continue our discussion of penetration testing. In this segment, we'll talk about the right reasons to have a penetration test performed, the impact (for better or worse) of the PCI requirement for annual penetration testing, and how to get the... by Security Weekly Podcast Network (Video)

45 min listen

Has the traditional CISO model outlived its usefulness? - Nathan Case - ESW #325: The traditional concept of the CISO may literally be 'too much', according to Nathan Case. It's based on systems of control and unrealistic assumptions that don't survive contact with real life. In this conversation, we'll discuss what the top... by Security Weekly Podcast Network (Video)

48 min listen

Has the traditional CISO model outlived its usefulness? - Nathan Case - ESW #325: The traditional concept of the CISO may literally be 'too much', according to Nathan Case. It's based on systems of control and unrealistic assumptions that don't survive contact with real life. In this conversation, we'll discuss what the top... by Enterprise Security Weekly (Video)

48 min listen

Enjoying My Blissful Ignorance of Cyber Vulnerabilities: All links and images for this episode can be found on CISO Series () What keeps me up at night? Nothing! That's because I hold onto cybersecurity myths because it makes me believe I don't have a security problem. This episode is hosted by... by CISO Series Podcast

36 min listen

Security Awareness Culture Change, Part 2 - Kelley Bray, Stephanie Pratt - SCW #69: We continue the discussion about the importance of effective security awareness programs and what that would actually look like. We'll also examine how to move beyond "bare minimum" check-box mentality about meeting security awareness training... by Security Weekly Podcast Network (Video)

38 min listen

PCI Workloads in the Cloud - Matt Springfield - SCW #33: Taking a deeper look into moving PCI related resources into cloud platforms. Public cloud, private cloud, do's, don'ts and can'ts! We will explore key considerations and impacts to security compliance and responsibilities related to cloud. ... by Security Weekly Podcast Network (Video)

34 min listen

Little Bugs - SCW #88: This week, we welcome Casey Ellis, Founder/Chair/CTO at Bugcrowd, to talk about Compliance and “The Crowd”! Crowdsourcing and multi-sourcing focus on risk identification and reduction, and they seem to be effective... but my auditor doesn't... by Security Weekly Podcast Network (Audio)

85 min listen

Security Awareness Culture Change, Part 1 - Kelley Bray, Stephanie Pratt - SCW #69: Today we are going to take a look at security awareness training programs in organizations. We are joined to day by Kelley Bray and Stephanie Pratt who will help facilitate the discussion. We'll start with the history and evolution of security... by Security Weekly Podcast Network (Video)

34 min listen

Life’s Certainties: Death, Taxes, and Violating Security Policies: All links and images for this episode can be found on People violate cybersecurity policies at a rate of one out of every 20 job tasks. It's just a matter of time before all your employees are in violation. This week’s episode is hosted by... by CISO Series Podcast

33 min listen

Peeling the Onion - SCW #60: This week, we welcome Wendy Nather, Head of Advisory CISOs at Duo Security at Cisco, to discuss The Security Poverty Line! Securing an organization means more than just spending money. For those that fall below the "security poverty line," many other... by Security Weekly Podcast Network (Audio)

86 min listen

The State Of Penetration Testing Panel - PSW #677: Join us for a lively discussion surrounding the topic of penetration testing. Sure, we've called out differences between vulnerability scanning and penetration testing. Moving past this particular issue, we'll explore how to effectively use... by Security Weekly Podcast Network (Video)

60 min listen

Getting Over Our "Security ≠ Compliance" Obsession: Links and images for this episode can be found on CISO Series () We repeat "Security ≠ Compliance" so often it's become our mantra. Does anyone pay attention to it anymore? We're unpacking our compulsion to keep saying it on the latest episode of... by CISO Series Podcast

31 min listen

Who Are the Perfect Targets for Ransomware?: All images and links for this episode can be found on CISO Series () If you've got lots of critical data, a massive insurance policy, and poor security infrastructure, you might be a perfect candidate to be hit with ransomware. This week and this week... by CISO Series Podcast

35 min listen

Aidan Holland, Kelly Shortridge - ESW #339: Today, we discuss the state of attack surface across the Internet. We've known for decades now that putting an insecure service on the public Internet is a recipe for disaster, often within minutes. How has this knowledge changed the publicly... by Security Weekly Podcast Network (Audio)

160 min listen

ASW #228 - Adrian Sanabria: Most of the myths and lies in InfoSec take hold because they seem correct or sound logical. Similar cognitive biases make it possible for even the most preposterous conspiracy theories to become commonly accepted in some groups. This is a talk about... by Security Weekly Podcast Network (Audio)

79 min listen

“Bad” Security Practices That Really Aren’t All that Bad: All links and images for this episode can be found on If they can find flaws, security professionals are quick to label it as bad security behavior. But often, what is marked as "bad" may have problems, but when looked at from a reducing risk... by CISO Series Podcast

36 min listen

We Put the FUN in InFunSec: All links and images for this episode can be found on CISO Series () We're cranking up the entertainment value on the latest episode of CISO/Security Vendor Relationship Podcast. This episode was recorded in person in San Francisco. It is hosted by... by CISO Series Podcast

32 min listen

What to Expect When You’re Expecting a Network Breach: All links and images for this episode can be found on CISO Series Are you expecting a little intrusion into your network any day now? You better be prepared. Are there some vulnerabilities you should have managed, but didn't? Don't worry, first time... by CISO Series Podcast

34 min listen

Zoom, Kubernetes, and Hacking - PSW #646: A little about Zoom vulnerabilities and data leaks and Cisco Webex vulnerabilities. We talk about security Kubernetes and how the same security principals apply, vulnerabilities in ICS systems and how hackers can help improve society. Oh, and smart... by Security Weekly Podcast Network (Video)

68 min listen

All Aboard the 5G Paranoia Train: The direct link to this episode ( We're getting excited and stressed out about the impending 5G network that appears will control our lives and all our cities. Will it be as exciting, productive, and lacking of security protocols as we expect? We... by CISO Series Podcast

31 min listen

When Things Go Sour - SCW #69: Today we are going to take a look at security awareness training programs in organizations. We are joined to day by Kelley Bray and Stephanie Pratt who will help facilitate the discussion. We'll start with the history and evolution of security... by Security Weekly Podcast Network (Audio)

71 min listen

CISO Reporting Structure, 5 CISO Traps, and Communicating Cybersecurity Best Practice - BSW #293: In the leadership and communications section, Who Does Your CISO Report To?, 5 CISO Traps to Avoid and Truths to Embrace, How to effectively communicate cybersecurity best practices to staff, and more! Visit for all the latest episodes! Show... by Security Weekly Podcast Network (Video)

34 min listen

InfoSec Fatigue: All links and images for this episode can be found on CISO Series () Have we reached peak InfoSec fatigue? Revolving CISOs and endless cyber recruitment OR the fact that we're spending more money to reduce even greater risk. Is it all leaving our... by Defense in Depth

28 min listen

Authentication vs. Authorization: Why Privileged Access Matters - Joseph Carson - ESW #225: Authentication and authorization might sound similar, but they are two distinct security processes. Joe Carson, Chief Security Scientist at Thycotic, joins us to discuss why privileges, not identities, are one of the biggest challenges for identity... by Security Weekly Podcast Network (Video)

30 min listen

Authentication vs. Authorization: Why Privileged Access Matters - Joseph Carson - ESW #225: Authentication and authorization might sound similar, but they are two distinct security processes. Joe Carson, Chief Security Scientist at Thycotic, joins us to discuss why privileges, not identities, are one of the biggest challenges for identity... by Enterprise Security Weekly (Video)

30 min listen

Multi-Layered Defense Platforms and other terms we found in security press releases - ESW #355: This week, in the enterprise security news: Early stage funding is all the rage AI startups continue to pop out of stealth The buyer's market continues with more interesting acquisitions Purpose-built large language models for security Benchmarking... by Enterprise Security Weekly (Video)

56 min listen

Multi-Layered Defense Platforms and other terms we found in security press releases - ESW #355: This week, in the enterprise security news: Early stage funding is all the rage AI startups continue to pop out of stealth The buyer's market continues with more interesting acquisitions Purpose-built large language models for security Benchmarking... by Security Weekly Podcast Network (Video)

56 min listen

Discover this podcast and so much more

Pen Testing, Part 1 w/ Dmitry Zagadsky - SCW #56

Pen Testing, Part 1 w/ Dmitry Zagadsky - SCW #56

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Video)

Related podcast episodes