The Pyramid of Threats

FromSecurity This Week

Start listening View podcast show

The Pyramid of Threats

FromSecurity This Week

ratings:

Length:

44 minutes

Released:

Aug 20, 2021

Format:

Podcast episode

Description

Patrick talks about the Pyramid of Threats, a mental model to categorize threats according to their popularity (biggest at the base). The higher you go up the pyramid, the harder it is to defend yourself against the threats.

Released:

Aug 20, 2021

Format:

Podcast episode

Titles in the series (100)

Enterprise security topics are discussed through the lens of current events, which catapult us into a discussion about hacking methods, security measures, and outcomes. Your hosts are Carl Franklin, Patrick Hynds, and Duane LaFlotte

Skip carousel

The Need for Speed: 17-year-old Uber Hacker Brags Online and gets Nabbed PDQ. by Security This Week
29 min listen
The Pyramid of Threats: Patrick talks about the Pyramid of Threats, a mental model to categorize threats according to their popularity (biggest at the base). The higher you go up the pyramid, the harder it is to defend yourself against the threats. by Security This Week
44 min listen
Introducing Security This Week: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
OK, Facebook!: One good thing about last week's Facebook outage is that our kids now know what DNS is. by Security This Week
29 min listen
It's the Little Things: Our pilot episode, in which we lay the groundwork for what to expect from this podcast. by Security This Week
42 min listen
World War Hack!: Nation-states are ramping up the cyberwar by Security This Week
49 min listen
VPNs and Cruise Missiles: Carl and Patrick (no Duane this week) talk about the Colonial Pipeline ransomware hack, and Pat's thoughts on how to shut down ransomware. by Security This Week
42 min listen
Not a good week for Microsoft: Several attacks against Microsoft properties this week. They can't catch a break! by Security This Week
48 min listen
Cash for Hacks: Disgruntled employee participates in a ransomware attack against their own company! Also, what's a public/private key pair? by Security This Week
48 min listen
This Week in Ransomware: Phishing is when a bad actor sends you an email that looks like it came from Microsoft, Amazon, Google, or some other legit company that you probably use. They give you a link to click on for some reason, and with a single click, your entire hard... by Security This Week
47 min listen
Pull up your Breaches!: You will be a breach victim sooner or later. If you don't take measures to mitigate risk, and you get breached, you could be sued. by Security This Week
38 min listen
Redemption: Microsoft and Apple go on a Patch Rampage! by Security This Week
45 min listen
Trick or Treat!: This week there have been some tricks, but you'll get a treat at the end! by Security This Week
52 min listen
Rowhammer Time!: What happens when the digital world collides with the physical world? by Security This Week
45 min listen
UK Government Porn Site: The Dirty Dangers of DNS! by Security This Week
41 min listen
The Neverending Side Story: The three amigos can't seem to stop going on tangents when discussing ransomware and other hacks. by Security This Week
39 min listen
We were just trying to help by Security This Week
38 min listen
Skim This!: Nefarious individuals can steal your credit card right underneath your nose! by Security This Week
49 min listen
Beware Sharp Edges!: Ransomware is the overwhelming theme for this show. As for the sharp edges, you'll have to listen to get that reference. by Security This Week
40 min listen
Don't look a grift horse in the mouth!: If you have an Android phone and get apps from the Google Play store, you might have been robbed. by Security This Week
38 min listen
Not Really the Last Pass: Enable 2 Factor Authentication on your LastPass account! by Security This Week
30 min listen
Living in a Zero-Trust World: A US government mandate requires authentication systems to start adopting zero-trust policies. Are you ready? by Security This Week
35 min listen
Happy Christmahaunukwanzadan!: More Log4j developments, more career advice for criminals, and more reasons to not click on email links. by Security This Week
34 min listen
Beware Thy Neighbor!: Sometimes your neighbors impinge on your rights. The same thing happens in multi-tenant systems. All will be explained. by Security This Week
37 min listen
From Russia, with Love: Looks like Russia is hacking Ukraine. Who knew? by Security This Week
38 min listen
The Internet is Burning!: No, really. You NEED to listen to this episode before you do anything else. by Security This Week
39 min listen
Is Cheating at Gaming a Gateway Drug?: If you want to see the next generation of hackers, consider monitoring the gaming cheats industry by Security This Week
43 min listen
Apple Lockdown Mode is Coming!: Apple announced that a new security feature known as Lockdown Mode will roll out with iOS 16, iPadOS 16, and macOS Ventura to protect high-risk individuals against targeted spyware attacks. by Security This Week
44 min listen
Hackers Get Involved!: As Russia wages war on Ukraine, we see stories emerging of hacking groups on both sides joining the cyberwar. by Security This Week
43 min listen
Watch out for the Dirty Pipe!: As the kinetic war (and cyberwar) between Ukraine and Russia marches on, a new Linux exploit wreaks havoc on all Linux (and therefore Android) systems. Patch it! by Security This Week
45 min listen

More Episodes from Security This Week

Skip carousel

WiFi Hacked Again!: New WiFi Flaw Leaves All Devices Vulnerable to ‘SSID Confusion’ Attacks by Security This Week
33 min listen
Is Your Software USDA Approved?: The US Government Is Asking Big Tech to Promise Better Cybersecurity by Security This Week
44 min listen
Is DropBox Done?: An SEC security breach filing has us wondering! by Security This Week
37 min listen
AI Attacks!: GPT-4 Can Exploit Most Vulns Just by Reading Threat Advisories by Security This Week
43 min listen
The Last Pass for LastPass?: Hackers targeted LastPass employee in failed deep fake CEO call. by Security This Week
51 min listen
Hey Microsoft, is your House Clean?: Microsoft employees exposed internal passwords in security lapse by Security This Week
27 min listen
State Hackers Blow up Red Hat Linux from the Inside!: Red Hat warns of backdoor in XZ tools used by most Linux distros by Security This Week
34 min listen
Dyslexic Vampire Sends Rouge iMessages!: New Darcula phishing service targets iPhone users via iMessage by Security This Week
28 min listen
They can hear what you're typing!: New acoustic attack determines keystrokes from typing patterns by Security This Week
36 min listen
TikTok. Time's a Wastin!: House passes bill that would ban TikTok if its Chinese owners don't sell the popular app. by Security This Week
38 min listen
Repo Man Confused. Film at 11.: Over 100,000 Infected Repos Found on GitHub! by Security This Week
31 min listen
Is C# Dead?: White House urges devs to switch to memory-safe programming languages by Security This Week
42 min listen
Is Your AI Writing Rubber Checks?: Air Canada must honor refund policy invented by airline’s chatbot by Security This Week
30 min listen
Hey Canada, Where's My Car?: Canada to ban the Flipper Zero to stop surge in car thefts by Security This Week
36 min listen
Spoutible Exposes Sensitive User Data!: At least the API was thorough! by Security This Week
38 min listen
The Mother of All Breaches!: Mother of all breaches reveals 26 billion records! by Security This Week
46 min listen
Is Bitcoin no longer anonymous?: How a 27-year-old busted the myth of Bitcoin’s anonymity by Security This Week
39 min listen
Kerberos Bug Fixed! Film at 11!: Microsoft fixes critical flaws in Windows Kerberos, Hyper-V by Security This Week
35 min listen
PornHub Complaining Again: PornHub blocks North Carolina, Montana over new age verification laws by Security This Week
33 min listen
Ultimate Job Interview Fail!: Blockchain dev's wallet emptied in "job interview" using npm package by Security This Week
41 min listen
Yes, Virginia, They ARE Listening to You: Marketing Company Claims That It Actually Is Listening to Your Phone and Smart Speakers to Target Ads by Security This Week
36 min listen
WordPress... WTF!: 50K WordPress sites exposed to RCE attacks by critical bug in backup plugin by Security This Week
34 min listen
Got LogoFAIL? You're Screwed!: LogoFAIL exploit bypasses hardware and software security measures and is nearly impossible to detect or remove by Security This Week
39 min listen
Is Your iPhone Exploiting You?: Last week there was a scare about the NameDrop feature in iOS 17. What's the real story? by Security This Week
29 min listen
What's wrong with Password123?: The guys check out a list of the top 200 most common passwords used all over the world. by Security This Week
38 min listen
Apparently Crime Pays!: Fraudsters make $50,000 a day by spoofing crypto researchers by Security This Week
50 min listen
OpenAI Goes Down. Film at 11: OpenAI confirms DDoS attacks behind ongoing ChatGPT outages by Security This Week
37 min listen
Who's That Knocking at Your Windows?: Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover by Security This Week
32 min listen
Revenge of the Windows Phone!: Windows Phone gets revenge on YouTube from the grave by helping users bypass its ad-blocker-blocker by Security This Week
34 min listen
Elmer Fudd Shoots Linux!: 'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover by Security This Week
40 min listen

Discover this podcast and so much more

The Pyramid of Threats

The Pyramid of Threats

Description

Titles in the series (100)

More Episodes from Security This Week