Robofly, CRUSHFTP, Github, Palo Alto, MITRE, Fancy Bear, Deepfakes, Aaran Leyland... - SWN #380 | Security Weekly Podcast Network (Audio) Podcast

Preparation: The Less Shiny Side of Incident Response - Joe Gross - ESW #360: It's the most boring part of incident response. Skip it at your peril, however. In this interview, we'll talk to Joe Gross about why preparing for incident response is so important. There's SO MUCH to do, we'll spend some time breaking down the... by Security Weekly Podcast Network (Audio)

117 min listen

Weird Al, Docker, OT, Gitlab, Credit Monitoring, Dropbox, Cisco, AI, Aaran Leyland... - SWN #383: Weird Al, Docker, OT, Gitlab, Credit Monitoring, Dropbox, Cisco, AI, Aaran Leyland, and More, on this edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

35 min listen

Kicking Off With Crypto - PSW #827: The Security Weekly crew discusses some of the latest articles and research in cryptography and some background relevant subtopics including the race against quantum computing, key management, creating your own crypto, selecting the right crypto and... by Security Weekly Podcast Network (Audio)

184 min listen

Why Companies Continue to Struggle with Supply Chain Security - Melinda Marks - ASW #283: Companies deploy tools (usually lots of tools) to address different threats to supply chain security. Melinda Marks shares some of the chaos those companies still face when trying to prioritize investments, measure risk, and scale their solutions to... by Security Weekly Podcast Network (Audio)

80 min listen

AI, Okta, Chrome, Quantum, Kaiser Permanente, FTC, FCC, NCSC, Josh Marpet, and more. - SWN #382: AI, Okta, Chrome, Quantum, Kaiser Permanente, FTC, FCC, NCSC, Josh Marpet, and more, are on this edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

37 min listen

Meet Silver SAML: Golden SAML in the Cloud - Eric Woodruff - BSW #348: A hybrid workforce requires hybrid identity protection. But what are the threats facing a hybrid workforce? As identity becomes the new perimeter, we need to understand the attacks that can allow attackers access to our applications. Eric Woodruff,... by Security Weekly Podcast Network (Audio)

60 min listen

TikTok, Flowmon, Cisco, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland - SWN #381: TikTok, Flowmon, Arcane Door, Brokewell, RuggedCom, Deepfakes, Non-Competes, Aaran Leyland, and More, on this edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

38 min listen

Advising The President On Cyber-Physical Resilience - Philip Venables - PSW #826: On February 27, 2024, PCAST (President’s Council of Advisors on Science and Technology) sent a report to the President with recommendations to bolster the resilience and adaptability of the nation’s cyber-physical infrastructure resources. Phil... by Security Weekly Podcast Network (Audio)

171 min listen

Autonomous - I don't think that word means what you think it means - Adam Shostack, Ely Kahn - ESW #359: A clear pattern with startups getting funding this week are "autonomous" products and features. Automated detection engineering Autonomously map and predict malicious infrastructure ..."helps your workforce resolve their own security issues... by Security Weekly Podcast Network (Audio)

118 min listen

Sustainable Funding of Open Source Tools - Mark Curphey, Simon Bennetts - ASW #282: How can open source projects find a funding model that works for them? What are the implications with different sources of funding? Simon Bennetts talks about his stewardship of Zed Attack Proxy and its journey from OWASP to OpenSSF to an Open Source... by Security Weekly Podcast Network (Audio)

78 min listen

What does DoD’s CMMC Requirement Mean for American Businesses - Edward Tuorinsky, Mike Lyborg - BSW #347: Since 2016, we been hearing about the impending impact of CMMC. But so far, it's only been words. That looks to be changing. Edward Tourinsky, Founder & Managing Principal at DTS, joins Business Security Weekly to discuss the coming impact of CMMC... by Security Weekly Podcast Network (Audio)

65 min listen

Win 95, LastPass, Kubernetes, Sandworm, Bloomtech, Frontier, 911, Aaran Leyland... - SWN #379: Win 95, Cheat Lab, LastPass, Kubernetes, Sandworm, Bloomtech, Frontier, 911, Aaran Leyland, and More, on this edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

35 min listen

From Hackers to Streakers - How Counterintelligence Teams are Protecting the NFL - Joe McMann - ESW #358: Protecting a normal enterprise environment is already difficult. What must it be like protecting a sports team? From the stadium to merch sales to protecting team strategies and even the players - securing an professional sports team and its brand is... by Security Weekly Podcast Network (Audio)

107 min listen

PCI 4.0 - Winn Schwartau - PSW #825: Version 4.0 of the Payment Card Industry Data Security Standard (PCI DSS) puts greater emphasis on application security than did previous versions of the standard. It also adds a new “customized approach” option that allows merchants and other... by Security Weekly Podcast Network (Audio)

128 min listen

Duo, Steganography, Roku, Palo Alto, Putty, Cerebral, IPOs, SanDisk, & Josh Marpet - SWN #378: Duo, Steganography, Roku, Palo Alto, Putty, Cerebral, IPOs, SanDisk, Josh Marpet, and more, on this Edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

34 min listen

Demystifying Security Engineering Career Tracks - Karan Dwivedi - ASW #281: There are as many paths into infosec as there are disciplines within infosec to specialize in. Karan Dwivedi talks about the recent book he and co-author Raaghav Srinivasan wrote about security engineering. There's an appealing future to security... by Security Weekly Podcast Network (Audio)

63 min listen

From Idea to Success: How to Operationalize a Startup from Zero to Exit - Seth Spergel - BSW #346: Startup founders dream of success, but it's much harder than it looks. As a former founder, I know the challenges of cultivating an idea, establishing product market fit, growing revenue, and finding the right exit. Trust me, it doesn't always end... by Security Weekly Podcast Network (Audio)

56 min listen

Combadges, SISENSE, Microsoft, CISA, Lastpass, Palo Alto, Broadband, Aaran and More - SWN #377: Combadges, SISENSE, Microsoft, Malware Next-Gen, Lastpass, Palo Alto, Broadband, Aaran Leyland, and More, on this edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

31 min listen

Understanding KillNet and Recent Waves of DDoS Attacks - Michael Smith - ESW #357: In the days when Mirai emerged and took down DynDNS, along with what seemed like half the Internet, DDoS was as active a topic in the headlines as it was behind the scenes (). We don't hear about DDoS attacks as much anymore. What happened? Well, they... by Security Weekly Podcast Network (Audio)

102 min listen

Digging Into Supply Chain Security - James McMurry - PSW #824: Jim joins the Security Weekly crew to discuss all things supply chain! Given the recent events with XZ we still have many topics to explore, especially when it comes to practical advice surrounding supply chain threats. Ahoi new VM attacks ahead!... by Security Weekly Podcast Network (Audio)

180 min listen

Dronepocalypse, Microsoft, DLINK, Home Depot, Phishing, NIST, VenomRat, Josh Marpet - SWN #376: Dronepocalypse, Privacy, Microsoft, DLINK, Home Depot, Phishing, NIST, VenomRat, Josh Marpet, and more, are on this edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

36 min listen

Lessons That The XZ Utils Backdoor Spells Out - Farshad Abasi - ASW #280: We look into the supply chain saga of the XZ Utils backdoor. It's a wild story of a carefully planned long con to add malicious code to a commonly used package that many SSH connections rely on. It hits themes from social engineering and abuse of... by Security Weekly Podcast Network (Audio)

60 min listen

Understanding the Cybersecurity Ecosystem - Ross Haleliuk - BSW #345: In this discussion, we focus on vendor/tool challenges in infosec, from a security leader's perspective. To quote our guest, Ross, "running a security program is often confused with shopping". You can't buy an effective security program any more than... by Security Weekly Podcast Network (Audio)

61 min listen

SEXi, Powerhost, Acuity, Layerslider, JSOutProx, Byakugan, Josh Marpet, and More - SWN #375: SEXi, AI Dreams, Powerhost, Acuity, Layerslider, JSOutProx, Byakugan, Josh Marpet, and More, on this edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

33 min listen

Getting Vulnerability Management Back on the Rails - Patrick Garrity - ESW #356: NVD checked out, then they came back? Maybe? Should the xz backdoor be treated as a vulnerability? Is scan-driven vulnerability management obsolete when it comes to alerting on emerging threats? What were some of the takeaways from the first-ever... by Security Weekly Podcast Network (Audio)

117 min listen

XZ - Backdoors and The Fragile Supply Chain - PSW #823: As most of you have probably heard there was a scary supply chain attack against the open source compression software called "xz". The security weekly hosts will break down all the details and provide valuable insights. pfSense switches... by Security Weekly Podcast Network (Audio)

172 min listen

Lena, XZ, WallEscape, AT&T, OWASP, Google, Microsoft, AI, Josh Marpet, and More - SWN #374: Lena, XZ, WallEscape, AT&T, OWASP, Google, Microsoft, AI, Josh Marpet, and more, on this Edition of the Security Weekly News. Visit for all the latest episodes! Show Notes: by Security Weekly Podcast Network (Audio)

33 min listen

Infosec Myths, Mistakes, and Misconceptions - Adrian Sanabria - ASW #279: Sometimes infosec problems can be summarized succinctly, like "patching is hard". Sometimes a succinct summary sounds convincing, but is based on old data, irrelevant data, or made up data. Adrian Sanabria walks through some of the archeological work... by Security Weekly Podcast Network (Audio)

61 min listen

CISO Soul Searching: Navigating the Evolving Role of the CISO - Harold Rivas - BSW #344: Harold Rivas has held multiple CISO roles. In his current CISO role, he's championing Trellix's overall mission to address the issues CISOs face every day, encouraging information sharing and collaborative discussions among the CISO community to help... by Security Weekly Podcast Network (Audio)

57 min listen

Why cyber hygiene requires curious talent - Clea Ostendorf - ESW #355: Many years ago, I fielded a survey focused on the culture of cybersecurity. One of the questions asked what initially drew folks to cybersecurity as a career. The most common response was a deep sense of curiosity. Throughout my career, I noticed... by Security Weekly Podcast Network (Audio)

106 min listen

Discover this podcast and so much more

Robofly, CRUSHFTP, Github, Palo Alto, MITRE, Fancy Bear, Deepfakes, Aaran Leyland... - SWN #380

Robofly, CRUSHFTP, Github, Palo Alto, MITRE, Fancy Bear, Deepfakes, Aaran Leyland... - SWN #380

Description

Titles in the series (100)

More Episodes from Security Weekly Podcast Network (Audio)

Related podcast episodes