Attack Intelligence, Collective Defense, & Trends to Watch - Michael Ehrlich - ESW #274 | Enterprise Security Weekly (Video) Podcast

Attack Intelligence, Collective Defense, & Trends to Watch - Michael Ehrlich - ESW #274: Attack intelligence delivers customers actionable, relevant, and timely information. Learn why Collective Defense is an integral aspect of attack intelligence and hear about the cyber trends you need to watch. Segment Resources: Visit ... by Security Weekly Podcast Network (Video)

33 min listen

Meet Silver SAML: Golden SAML in the Cloud - Eric Woodruff - BSW #348: A hybrid workforce requires hybrid identity protection. But what are the threats facing a hybrid workforce? As identity becomes the new perimeter, we need to understand the attacks that can allow attackers access to our applications. Eric Woodruff,... by Security Weekly Podcast Network (Audio)

60 min listen

Stopping Business Logic Attacks: Why a WAF is no Longer Enough - Karl Triebes - ASW #255: The majority of attacks are now automated, with a growing number of attacks targeting business logic via APIs, which is unique to every organization. This shift makes traditional signature-based defenses insufficient to stop targeted business logic... by Security Weekly Podcast Network (Audio)

76 min listen

A New Paradigm: Immutable Security - Om Moolchandani - ESW #192: Learn about a new paradigm dubbed immutable security. What is immutable security? Why has it become more important than before? Infrastructure is being build and deployed with code, hence we can use this to our advantage and build security in from the... by Security Weekly Podcast Network (Video)

26 min listen

A New Paradigm: Immutable Security - Om Moolchandani - ESW #192: Learn about a new paradigm dubbed immutable security. What is immutable security? Why has it become more important than before? Infrastructure is being built and deployed with code, hence we can use this to our advantage and build security in from the... by Enterprise Security Weekly (Video)

26 min listen

HTTP Security Headers In Action - Sven Morgenroth - PSW #652: HTTP security headers are an easy and effective way to harden your application against all kinds of client side attacks. We'll discuss which security headers there are, what functions they have and how to use them properly. Security Header... by Security Weekly Podcast Network (Video)

62 min listen

Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW #240: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Security Weekly Podcast Network (Video)

40 min listen

Close the Security Theater: Enter Resilience - Kelly Shortridge - ASW #240: What does software resilience mean? Why is status quo application security unfit for the modern era of software? How can we move from security theater to security chaos engineering? This segment answers these questions and more. Segment Resources:... by Application Security Weekly (Video)

40 min listen

You've Got Appsec, But Do You Have ArchSec? - Merritt Baer - ASW #250: Mature shops should be looking to a security architecture process to help scale their systems and embrace security by design. We talk about what it means to create a security architecture process, why it's not just another security review, and why it... by Security Weekly Podcast Network (Audio)

75 min listen

Meet Silver SAML: Golden SAML in the Cloud - Eric Woodruff - BSW #348: A hybrid workforce requires hybrid identity protection. But what are the threats facing a hybrid workforce? As identity becomes the new perimeter, we need to understand the attacks that can allow attackers access to our applications. Eric Woodruff,... by Security Weekly Podcast Network (Video)

28 min listen

SolarWinds, FireEye, Microsoft, Oh My! - Sean Metcalf, Tyler Robinson - ESW #212: The current ransomware, breaches, and nation state attacks have defenders feeling overwhelmed and under resourced. Can defensive teams really have defended against this type of supply chain attack and what can every security team do for best practices... by Enterprise Security Weekly (Video)

34 min listen

SolarWinds, FireEye, Microsoft, Oh My! - Sean Metcalf, Tyler Robinson - ESW #212: The current ransomware, breaches, and nation state attacks have defenders feeling overwhelmed and under resourced. Can defensive teams really have defended against this type of supply chain attack and what can every security team do for best practices... by Security Weekly Podcast Network (Video)

34 min listen

Social Engineering Attacks Through Vishing & Phishing - Whitney Maxwell - ESW #202: Learn about some of the latest techniques attackers are using when phishing and vishing, including how to protect your users! This segment is sponsored by Rapid7. Visit to learn more about them! Visit for all the latest episodes! Show... by Security Weekly Podcast Network (Video)

32 min listen

Social Engineering Attacks Through Vishing & Phishing - Whitney Maxwell - ESW #202: Learn about some of the latest techniques attackers are using when phishing and vishing, including how to protect your users! This segment is sponsored by Rapid7. Visit to learn more about them! Visit for all the latest episodes! Show... by Enterprise Security Weekly (Video)

32 min listen

Securing The Enterprise Software Supply Chain - Harry Sverdlove - PSW #678: SolarWinds is just the latest example of how the enterprise software supply chain, when compromised, can be used successfully by attackers. These coordinated and well-managed attacks prey on trust, so how can we trust our enterprise software? ... by Security Weekly Podcast Network (Video)

58 min listen

How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205: Pressured by the speed of innovation, organizations are struggling to achieve the continuous web application security they need in the face of mounting threats and compliance requirements. What does it take in order for your AppSec program to be both... by Security Weekly Podcast Network (Video)

37 min listen

How to Build a Successful Continuous Application Security Program - Ferruh Mavituna - ASW #205: Pressured by the speed of innovation, organizations are struggling to achieve the continuous web application security they need in the face of mounting threats and compliance requirements. What does it take in order for your AppSec program to be both... by Application Security Weekly (Video)

37 min listen

Cracks in the Foundation: Understanding the New Endpoint Challenge - John Loucaides - BSW #187: Cyber adversaries have mastered the art of staying one step ahead of our controls. As endpoint protections grow stronger, attackers have adapted by going further down the stack - targeting firmware, hardware and device-level vulnerabilities.... by Security Weekly Podcast Network (Video)

39 min listen

Why Learning Offensive Security Makes You A Better Defender - Catherine Ullman - ESW #268: Defensive and Offensive skills have never been mutually exclusive, but the value in training across disciplines has often been overlooked. Catherine joins us today to explain why familiarity with offensive skills, tools, and the attacker's mindset is... by Enterprise Security Weekly (Video)

34 min listen

Why Learning Offensive Security Makes You A Better Defender - Catherine Ullman - ESW #268: Defensive and Offensive skills have never been mutually exclusive, but the value in training across disciplines has often been overlooked. Catherine joins us today to explain why familiarity with offensive skills, tools, and the attacker's mindset is... by Security Weekly Podcast Network (Video)

34 min listen

Social Engineering Deep Dive, Part 1 - Perry Carpenter - SCW #90: Tune in for this discussion on social engineering and its merits on being recognized as a legitimate component of cyber security. We'll also dive into the whole notion of motive and intent as it pertains to deliberately misrepresenting yourself, or... by Security Weekly Podcast Network (Video)

36 min listen

Social Engineering Deep Dive, Part 2 - Perry Carpenter - SCW #90: Tune in for this discussion on social engineering and its merits on being recognized as a legitimate component of cyber security. We'll also dive into the whole notion of motive and intent as it pertains to deliberately misrepresenting yourself, or... by Security Weekly Podcast Network (Video)

46 min listen

Things Every Developer Should Know About Security - Chris Romeo - ASW #124: Developers are at the center of properly securing applications. A large number of security issues bury developers. We must understand the things every developer must know about security in order to help them. We must practice developer empathy,... by Security Weekly Podcast Network (Video)

36 min listen

Things Every Developer Should Know About Security - Chris Romeo - ASW #124: Developers are at the center of properly securing applications. A large number of security issues bury developers. We must understand the things every developer must know about security in order to help them. We must practice developer empathy,... by Application Security Weekly (Video)

36 min listen

Protecting Identity Services - Tony Cole - BSW #240: Identity Services such as Active Directory is an area that is almost always utilized by the attacker after the initial endpoint is compromised. This is an area lacking critical focus by defenders for a myriad of reasons. Discussion will entail how... by Security Weekly Podcast Network (Video)

27 min listen

The Missing Link for Protecting Against Ransomware - Tim Williams - ESW #179: Tim Williams, Founder and CEO of Index Engines, joins us to discuss the cyber security software market and how it's focused on preventing ransomware attacks. How do you know if that line of defense fails? How do you prove that negative? Visit ... by Enterprise Security Weekly (Video)

18 min listen

ASW #188 - Farshad Abasi: Cybersecurity is a large and often complex domain, traditionally focused on the infrastructure and general information security, with little or no attention to Application Security. Security providers usually tack-on AppSec services to their existing... by Security Weekly Podcast Network (Audio)

76 min listen

The Missing Link for Protecting Against Ransomware - Tim Williams - ESW #179: Tim Williams, Founder and CEO of Index Engines, joins us to discuss the cyber security software market and how it's focused on preventing ransomware attacks. How do you know if that line of defense fails? How do you prove that negative? Visit ... by Security Weekly Podcast Network (Video)

18 min listen

This Is Fascinating - SCW #90: Tune in for this discussion on social engineering and its merits on being recognized as a legitimate component of cyber security. We'll also dive into the whole notion of motive and intent as it pertains to deliberately misrepresenting yourself, or... by Security Weekly Podcast Network (Audio)

82 min listen

Web Asset Discovery in Application Security - Tolga Kayas - ESW #242: Large organizations develop hundreds of new web applications every year. Some of those deployments are lost in time, and others go wild with high severity vulnerabilities. Forgotten and outdated web applications are a common culprit of successful hack... by Security Weekly Podcast Network (Video)

30 min listen

Discover this podcast and so much more

Attack Intelligence, Collective Defense, & Trends to Watch - Michael Ehrlich - ESW #274

Attack Intelligence, Collective Defense, & Trends to Watch - Michael Ehrlich - ESW #274

Description

Titles in the series (100)

More Episodes from Enterprise Security Weekly (Video)

Related podcast episodes