Defensive Security Podcast Episode 275

Links: https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf https://www.theregister.com/2024/08/05/crowdstrike_is_not_at_all/ https://www.theverge.com/2024/8/6/24214371/microsoft-delta-letter-crowdstrike-response-comments https://www.linkedin.com/posts/alexstamos_why-crowdstrikes-baffling-bsod-disaster-activity-7224046054076243969-1An8?utm_source=combined_share_message&utm_medium=ios_app https://www.linkedin.com/posts/choff_why-crowdstrikes-baffling-bsod-disaster-activity-7224078879445958658-ymuc?utm_source=combined_share_message&utm_medium=member_ios https://www.securityweek.com/thousands-of-devices-wiped-remotely-following-mobile-guardian-hack/ https://www.bleepingcomputer.com/news/security/stackexchange-abused-to-spread-malicious-pypi-packages-as-answers/ https://www.bleepingcomputer.com/news/security/hunters-international-ransomware-gang-targets-it-workers-with-new-sharprhino-malware/ Transcript: Jerry: Today is Wednesday, August 7th, 2024. And this is episode 275 of the Defensive Security Podcast. My name is Jerry Bell and joining me tonight as always is Mr. Andrew Kalat. Andrew: Good evening, Jerry. How are you? Good, sir. Jerry: I am amazing. … Continue reading Defensive Security Podcast Episode 275

August 8, 2024
Read More >>

Defensive Security Podcast Episode 274

https://www.bleepingcomputer.com/news/security/over-3-000-github-accounts-used-by-malware-distribution-service/ https://blog.knowbe4.com/how-a-north-korean-fake-it-worker-tried-to-infiltrate-us https://arstechnica.com/security/2024/07/secure-boot-is-completely-compromised-on-200-models-from-5-big-device-makers/ https://www.darkreading.com/cybersecurity-operations/crowdstrike-outage-losses-estimated-staggering-54b  https://cdn.prod.website-files.com/64b69422439318309c9f1e44/66a24d5478783782964c1f6f_CrowdStrikes%20Impact%20on%20the%20Fortune%20500_%202024%20_Parametrix%20Analysis.pdf https://www.darkreading.com/vulnerabilities-threats/unexpected-lessons-learned-from-the-crowdstrike-event Summary: Episode 274: Malware on GitHub, North Korean Developer Scam & Secure Boot Failures In this episode of the Defensive Security Podcast, hosts Jerry Bell and Andrew Kalat discuss several notable security stories and issues. They start with a malware distribution service that leverages compromised GitHub accounts and WordPress … Continue reading Defensive Security Podcast Episode 274

August 2, 2024
Read More >>

Defensive Security Podcast Episode 273

The Joe Sullivan Verdict – Unfair? – Which Part? (cybertheory.io) Fujitsu Details Non-Ransomware Cyberattack (webpronews.com) 5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy (thehackernews.com) Sizable Chunk of SEC Charges Vs. SolarWinds Dismissed (darkreading.com) CrowdStrike CEO apologizes for crashing IT systems around the world, details fix | CSO Online Summary: Cybersecurity Updates: Uber’s … Continue reading Defensive Security Podcast Episode 273

July 24, 2024
Read More >>

Defensive Security Podcast Episode 272

On episode 272 of the Defensive Security Podcast, hosts Jerry Bell and Andrew Kalat discuss a variety of pressing cybersecurity topics. These include the responsibilities of CISOs in avoiding legal repercussions following data breaches, highlighted by the case of Uber’s former CISO, Joe Sullivan. The hosts also delve into the impact of the recent U.S. Supreme Court decision overturning the Chevron deference doctrine on cybersecurity regulations, the risk of dynamic loading of JavaScript libraries, and the wide-reaching implications of the OpenSSH regression vulnerability. Throughout, practical advice and insightful commentary are provided on maintaining security in an ever-evolving threat landscape.

00:00 Introduction and Episode Overview
01:08 CISO’s Guide to Avoiding Jail After a Breach
03:29 Challenges and Complexities of the CISO Role
13:35 US Supreme Court Ruling and Its Impact on Cyber Regulation
20:51 Polyfill.io Issue: A Modern Supply Chain Attack?
28:54 Understanding Polyfill Confusion and Risks
29:23 Maintaining Open Source Software Health
30:04 The Need for Open Source Health Ratings
30:41 Challenges with Third-Party Code and Security
34:08 Vendor Questionnaires and False Urgency
39:50 The Regression Vulnerability in OpenSSH
41:18 Cloud Security Best Practices
48:29 Final Thoughts and Recommendations
49:52 Conclusion and Farewell

July 11, 2024
Read More >>

NIDS Knowledge Podcast

NIDS Knowledge is a weekly broadcast of the National Institute for Deterrence Studies (NIDS) where we want to strengthen national security, preserve peace, and help you Think Deterrence! The show informs the public on key deterrence topics and develops critical thinking using ~9 minute lessons from the team of experts in NIDS. ALL NIDS KNOWLEDGE […]

NIDS Knowledge Podcast was originally published on Global Security Review.

January 25, 2024
Read More >>

NIDS View Podcast

The NIDS View is meant to give listeners inside access to the thoughts and ideas of the member-practitioners of NIDS. Each episode focusses on a current topic and have a cordial, exciting and sometimes funny discussion. Each episode is a stand-alone …

January 25, 2024
Read More >>

Sponsor a Coffee with the Council Podcast

 
The PCI Security Standards Council is now offering sponsorship opportunities for its award-winning podcast series, Coffee with the Council. Established in 2022, Coffee with the Council produces monthly episodes which seek to engage the…

January 24, 2024
Read More >>