The Cultured Professional Network (TCP) is a news, entertainment, and information hub for content for the cultured professional. From edgy, raw, and uncut podcasts, to whitty, political, and controversial, the TCP network has you covered with daily podcasts for your listening pleasure. Visit www.thetcpnetwork.com for our videos, cooking tutorials, and more!!!
…
continue reading
Boxing's Premier Radio Show is widely known as "The Hardest Hitting Hour in all of Sports Radio". (TCP), a former People's Choice nominee, is raw, uncut coverage of the most beautifully brutal sport known to mankind! (TCP*) is Hosted by former ESPN Radio Host & Boxing Analyst Chris "Bone" Henderson & CEO of Eastwick Boxing Wilson "Willy Da Kidd" Urena. It is produced by Henderson Media & Eastwick Sports. Sponsored by The Grueling Truth Network, Cameron Management Team, Anchor.Fm & Icons of B ...
…
continue reading
Security Conversations covers the business of cybersecurity, from the lens of veteran journalist and storyteller Ryan Naraine. Thoughtful conversations with security practitioners on threat intelligence, zero trust, securing cloud deployments, penetration testing, bug bounties, advancements in offensive research and targeted malware espionage activity. Connect with Ryan on Twitter (Open DMs).
…
continue reading
The Scarlet true crime podcast is a female driven true crime show presented from the unique perspective of life-long crime junkies working in the entertainment industry. In Scarlet, Sonia Meza-Leon and Brittney Sherman unravel stories and evidence from a variety of sources and put their own spin on what happened in a thoughtful, and entertaining presentation. Special thanks to: John McGrew for writing the intro and outro song. Juan Meza-Leon for logo design. Renevee Romero-Villegas for addit ...
…
continue reading
Weekly information security podcast airing Monday mornings hosted by Oscar Minks and Brad Nigh. In a unique focus on protecting personal information, Oscar and Brad discuss information security as an issue that includes cyber security, physical security, as well as administrative controls. Oscar is the CTO of FRSecure and heads technical services and operations at the company. Brad is the Principal Security Consultant and a 20+ year veteran of the industry.
…
continue reading
1
Exploding beepers, critical CUPS flaws, Windows Recall rebuilt for security
1:19:07
1:19:07
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:19:07
Three Buddy Problem - Episode 14: The buddies are back together for a discussion on Juan’s LABScon keynote and mental health realities, Microsoft rewriting the Windows Recall security architecture, a new CVSS 9.9 Linux CUPS flaw, Kaspersky's controversial transition to Ultra AV, and the intelligence operations surrounding exploding pagers in Lebano…
…
continue reading
1
Ep13: The Consolation of Threat Intel (JAG-S LABScon keynote)
31:41
31:41
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
31:41
Three Buddy Problem - Episode 13: This is a special edition of the show, featuring Juan Andres Guerrero-Saade's full keynote day remarks at LABScon2024. In this talk, Juanito addresses the current state of the threat intelligence industry, expressing a need for a difficult conversation about its direction and purpose. He discusses feelings of disen…
…
continue reading
1
Ep12: Security use-cases for AI chain-of-thought reasoning
1:14:20
1:14:20
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:14:20
Three Buddy Problem - Episode 12: Gabriel Bernadett-Shapiro joins the show for an extended conversation on artificial intelligence and cybersecurity. We discuss the hype around OpenAI's new o1 model, AI chain-of-thought reasoning and security use-cases, pervasive chatbots and privacy concerns, and the ongoing debate between open source and closed s…
…
continue reading
1
Ep11: Cyberwarfare takes an ominous turn
1:15:13
1:15:13
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:15:13
Three Buddy Problem - Episode 11: Russia's notorious GRU Unit 29155 (previously tied to assassinations, poisonings and coup attempts) now blamed for destructive cyberattacks for sabotage; FBI and DOJ take down 'Doppelganger' network spreading Russian propaganda; CISA's budget, staff, advisories and YARA rules; Influence Operations 2.0; prolific Chi…
…
continue reading
1
Unsecurity Episode 224: Key Takeaways from Blackhat, Bitsloth Exploits, Windows TCP IP Flaw
33:58
33:58
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
33:58
In this episode of the Unsecurity Podcast, Brad and Megan recap Blackhat. They also discuss a zero-click exploit involving a Windows TCP IP flaw and backdoor Bitsloth exploits. Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com. About …
…
continue reading
1
Ep10: Volt Typhoon zero-day, Russia's APT29 reusing spyware exploits, Pavel Durov's arrest
1:18:37
1:18:37
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:18:37
Three Buddy Problem - Episode 10: Top stories this week -- Volt Typhoon zero-day exploitation of Versa Director servers, Chinese APT building botnets with EOL routers, the gap in security solutions for network devices and appliances, Russia's APT29 (Midnight Blizzard) caught reusing exploits from NSO Group and Intellexa, Microsoft’s upcoming Window…
…
continue reading
1
Ep9: The blurring lines between nation-state APTs and the ransomware epidemic
1:06:16
1:06:16
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:06:16
Three Buddy Problem - Episode 9: On this episode, we look at the hacking scene in Taiwan, the sad state of visibility into big malware campaigns, the absence of APTs linked to the prolific MIVD Dutch intelligence agency, the blurring lines between big ransomware heists and nation-state actors caught using ransomware as a tool for sabotage and misat…
…
continue reading
1
Ep8: Microsoft's zero-days and a wormable Windows TCP/IP flaw known to China
1:17:45
1:17:45
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:17:45
Three Buddy Problem - Episode 8: This week’s show digs into Microsoft’s in-the-wild zero-day woes, Patch Tuesday and the absence of IOCs, a wormable Windows TCP/IP flaw that the Chinese government knew about for months, Iran’s aggressive hacking US election targets, CrowdStrike v Qihoo360 and major problems with APT naming conventions. Hosts: Costi…
…
continue reading
1
Unsecurity Episode 223: Introducing a New Host and Breaking Down the Crowdstrike Saga
33:58
33:58
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
33:58
In this episode of the Unsecurity Podcast, Brad and Oscar are joined by a new host, FRSecure's Megan Larkins! Together, they discuss the recent CrowdStrike outage and its illustration of the importance of understanding your application inventory and dependencies—and the need for proper application allow listing and conditional access policies to pr…
…
continue reading
1
Ep7: Crowd2K and the kernel, PKFail supply chain failures, Paris trains sabotage and Russian Olympic attacks
1:10:03
1:10:03
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:10:03
Three Buddy Problem - Episode 7: In this episode, we try to close the book on the CrowdStrike Windows BSOD story, Microsoft VP David Weston’s technical documentation and issues around kernel access and OS resilience. We also discuss Binarly’s PKFail research, secure boot bypasses, Dan Geer and tech monoculture, software vendor liability issues and …
…
continue reading
1
Ep6: After CrowdStrike chaos, should Microsoft kick EDR agents out of Windows kernel?
1:16:37
1:16:37
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:16:37
Three Buddy Problem - Episode 6: As the dust settles on the CrowdStrike incident that blue-screened 8.5 million Windows computers worldwide, we dig into CrowdStrike’s preliminary incident report, the lack of transparency in the update process and the need for more robust testing and validation. We also discuss Microsoft's responsibility to avoid in…
…
continue reading
1
Ep5: CrowdStrike's faulty update shuts down global networks
59:51
59:51
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
59:51
Three Buddy Problem - Episode 5: Hot off the press, we dive into the news of the CrowdStrike software update that caused blue screens on computers worldwide, the resulting chaos and potential connections to the Microsoft 365 outage, the fragility of modern computing and the risks of new software paradigms. We also discuss the AT&T mega-breach and t…
…
continue reading
1
Ep4: The AT&T mega-breach, iPhone mercenary spyware, Microsoft zero-days
1:11:39
1:11:39
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:11:39
Three Buddy Problem - Episode 4: The boys delve into the massive AT&T call logs breach, the Snowflake incidents and the notion of shared-fate/shared responsibilities; news on fresh Apple notifications about mercenary spyware on iPhones and the effectiveness of notifications for different types of controversial targets. Plus, thoughts on Microsoft's…
…
continue reading
1
Ep3: Dave Aitel joins debate on nation-state hacking responsibilities
1:04:29
1:04:29
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:04:29
The 'Three Buddy Problem' Podcast Episode 3: Former NSA computer scientist Dave Aitel (Immunity Inc., Cordyceps Systems) joins Juan Andres Guerrero-Saade for a frank discussion on the OpenSSH unauthenticated remote code execution vulnerability and the challenges around patching and exploitation, the CISA 'secure-by-design' pledge and its impact on …
…
continue reading
1
Ep2: A deep-dive on disrupting and exposing nation-state malware ops
1:08:42
1:08:42
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:08:42
The 'Three Buddy Problem' Podcast Episode 2: Ryan Naraine, Costin Raiu and Juan Andres Guerrero-Saade go all-in on the discussion around Google Project Zero disrupting counter-terrorism malware operations. A deep dive on disruption vs exposure, the effects of US government sanctions on private mercenary hacking companies, hypocricy and the tricky r…
…
continue reading
1
The Impact of an 'Always On' Mentality on Mental Health w/ Michael Kennedy
32:13
32:13
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
32:13
In this episode of the Unsecurity Podcast, the guys sit down with Michael Kennedy of Ostra to discuss burnout and share their personal experiences and strategies for preventing and managing work-related stress. Please send any questions, comments, or feedback to unsecurity@protonmail.com. About FRSecure https://frsecure.com/ FRSecure is a mission-d…
…
continue reading
1
Ep1: The Microsoft Recall debacle, Brad Smith and the CSRB, Apple Private Cloud Compute
46:55
46:55
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
46:55
Welcome to Episode 1 of a brand new cybersecurity podcast discussing the biggest news stories of the week. Ryan Naraine hosts a fast-moving conversation with Juan Andres Guerrero-Saade (LABScon) and Costin Raiu (Art of Noh) on the Microsoft Recall debacle, the dark patterns emerging as big-tech embraces AI, Brad Smith's testimony and the lingering …
…
continue reading
1
CISSP Certification and Becoming a Security Consultant w/ Brian Kelley
38:38
38:38
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
38:38
In this episode of the Unsecurity Podcast, Brad, and Oscar discuss the CISSP Mentorship Program with Brian Kelley now that this year's course has officially wrapped up, and touch on challenges and roadblocks for security professionals in the job market. 00:00 Intro 01:56 Ransomware and Security Best Practices 06:32 CISSP Mentorship Program and Lear…
…
continue reading
1
Incident Response Stories w/ Mike (Pinky) Thompson
39:07
39:07
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
39:07
In this episode of the Unsecurity Podcast, Brad, Oscar, and Pinky discuss recent news stories about IP and central manager flaws, as well as a vulnerability enrichment project by CISA. They also share an interesting incident response story involving internal domains and proxy auto-configuration files. Please send any questions, comments, or feedbac…
…
continue reading
1
Meet the Mentors - Ryan Cloutier
30:35
30:35
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
30:35
In this episode of the Unsecurity Podcast, Brad interviews guest Ryan Cloutier as part of our Meet the Mentors series. They discuss the importance of the CISSP Mentor Program and the value of different perspectives in teaching. They also discuss the release of an exploit code for the Palo Alto Networks Zero Day vulnerability and the ethics of publi…
…
continue reading
1
Cris Neckar on the early days of securing Chrome, chasing browser exploits
54:36
54:36
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
54:36
Episode sponsors: Binarly, the supply chain security experts (https://binarly.io) XZ.fail backdoor detector (https://xz.fail) Cris Neckar is a veteran security researcher now working as a partner at Two Bear Capital. In this episode, he reminisces on the early days of hacking at Neohapsis, his time on the Google Chrome security team, shenanigans at…
…
continue reading
1
Costin Raiu joins the XZ Utils backdoor investigation
51:33
51:33
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
51:33
Episode sponsors: Binarly, the supply chain security experts (https://binarly.io) XZ.fail backdoor detector (https://xz.fail) Malware paleontologist Costin Raiu returns for an emergency episode on the XZ Utils software supply chain backdoor. We dig into the timeline of the attack, the characteristics of the backdoor, affected Linux distributions, a…
…
continue reading
1
Meet the Mentors - Ron Woerner
34:13
34:13
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
34:13
Episode 218 of the Unsecurity Podcast is now live! This time, Brad is joined by Ron Woerner for another episode of our "Meet the Mentors" series introducing the 2024 CISSP Mentor Program instructors! Links & information: Find Ron on LinkedIn https://www.linkedin.com/in/ronwoerner/ Please send any questions, comments, or feedback to unsecurity@proto…
…
continue reading
1
Meet the Mentors - Chris Foulon
33:15
33:15
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
33:15
Episode 217 of the Unsecurity Podcast is now live! This time, Brad is joined by Chris Foulon for the first episode in our "Meet the Mentors" series, introducing our 2024 CISSP Mentor Program instructors! Links & information: Chris's Podcast (Breaking Into Cybersecurity) https://podcasts.apple.com/us/podcast/breaking-into-cybersecurity/id1463136698 …
…
continue reading
1
Vulnerability Scanning V.S. Penetration Testing w/ Matt Dowd
35:12
35:12
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
35:12
Episode 216 of the Unsecurity Podcast is now live! This time, Oscar and Brad are joined by FRSecure's Matt Dowd to discuss the difference between vulnerability scanning and penetration testing. Links & information Cisco Critical Vulnerabilities https://www.securityweek.com/cisco-patches-critical-vulnerabilities-in-enterprise-communication-devices/ …
…
continue reading
1
ISACA Home Network Webinar Series w/ Dave Tuckman
32:13
32:13
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
32:13
Episode 215 of the Unsecurity Podcast is now live! This time, Brad is joined by FRSecure's Dave Tuckman to discuss an upcoming webinar series about securing home networks with ISACA and select FRSecure staff leading the sessions. Links & information ISACA home network webinar series: Session 1: 2/12 - Household Computer Safety, Using The Internet S…
…
continue reading
1
Breachmas Report w/ Mike (Pinky) Thompson
37:05
37:05
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
37:05
Episode 214 of the Unsecurity Podcast is now live! This time, Brad and Oscar sit down with FRSecure's Mike (Pinky) Thompson for a Breachmas report and some news from around the industry. News links Mandiant's X (Twitter) Account Hacked https://thehackernews.com/2024/01/mandiants-x-account-was-hacked-using.html CISCO Patch https://www.securityweek.c…
…
continue reading
1
Katie Moussouris on building a different cybersecurity businesses
29:50
29:50
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
29:50
Episode sponsors: Binarly, the supply chain security experts (https://binarly.io) FwHunt (https://fwhunt.run) Katie Moussouris founded Luta Security in 2016 and bootstrapped it into a profitable business with a culture of equity and healthy boundaries. She is a pioneer in the world of bug bounties and vulnerability disclosure and serves in multiple…
…
continue reading
1
Costin Raiu: The GReAT exit interview
1:32:13
1:32:13
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
1:32:13
Episode sponsors: Binarly, the supply chain security experts (https://binarly.io) FwHunt (https://fwhunt.run) Costin Raiu has spent a lifetime in anti-malware research, working on some of the biggest nation-state APT cases in history, including Stuxnet, Duqu, Equation Group, Red October, Turla and Lazarus. In this exit interview, Costin digs into w…
…
continue reading
1
Danny Adamitis on an 'unkillable' router botnet used by Chinese .gov hackers
34:07
34:07
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
34:07
Episode sponsors: Binarly, the supply chain security experts (https://binarly.io) FwHunt (https://fwhunt.run) Danny Adamitis is a principal information security engineer at Black Lotus Labs, the threat research division within Lumen Technologies. On this episode of the show, we discuss his team's recent discovery of an impossible-to-kill botnet pac…
…
continue reading
1
Managing FRSecure's Culture w/ Amy MacElroy
33:32
33:32
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
33:32
Episode 213 of the Unsecurity Podcast is now live! This time, Brad and Oscar sit down with FRSecure's Amy MacElroy to discuss company culture and how she helps maintain it in her role as head of HR. Vulnerabilities Apache Struts https://www.securityweek.com/recent-apache-struts-2-vulnerability-in-attacker-crosshairs/ Microsoft Patch Tuesday https:/…
…
continue reading
1
Allison Miller talks about CISO life, protecting identities at scale
38:12
38:12
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
38:12
Episode sponsors: Binarly, the supply chain security experts (https://binarly.io) FwHunt (https://fwhunt.run) Allison Miller is founder and CEO of Cartomancy Labs and former CISO and VP of Trust at Reddit. She has spent the past 20 years scaling teams and technology at Bank of America, Google, Electronic Arts, PayPal/eBay, and Visa International. I…
…
continue reading
1
Rob Ragan on the excitement of AI solving security problems
51:16
51:16
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
51:16
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Rob Ragan, principal architect and security strategist at Bishop Fox, joins the show to share insights on scaling pen testing, the emergence of bug bounty programs, the value of attack surface management, and the role of AI in cybersecurity. We dig into the importance of pro…
…
continue reading
1
Business Impact Analysis Starter Kit, CMMC
32:48
32:48
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
32:48
Episode 212 of the Unsecurity Podcast is now live! This time, Brad and Oscar sit down with FRSecure's Shawn Pollard to discuss our new free BIA starter kit, CMMC, and more. Water facilities report falling to hackers in separate breaches https://arstechnica.com/security/2023/11/2-municipal-water-facilities-report-falling-to-hackers-in-separate-breac…
…
continue reading
1
Seth Spergel on venture capital bets in cybersecurity
28:56
28:56
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
28:56
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Seth Spergel is managing partner at Merlin Ventures, where he is responsible for identifying cutting-edge companies for Merlin to partner with and invest in. In this episode, Seth talks about helping startups target US federal markets, the current state of deal sizes and val…
…
continue reading
1
R&D and Defense Evasion w/ Eric Hanson and Seth Bowling
35:13
35:13
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
35:13
Episode 211 of the Unsecurity Podcast is now live! This time, Brad and Oscar sit down with FRSecure's Eric Hanson and Seth Bowling to discuss R&D and defensive evasion. Blackcat report company they breached to SEC https://www.bleepingcomputer.com/news/security/ransomware-gang-files-sec-complaint-over-victims-undisclosed-breach/ About FRSecure: http…
…
continue reading
1
Dan Lorenc on fixing the 'crappy' CVE ecosystem
41:45
41:45
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
41:45
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Dan Lorenc is CEO and co-founder of Chainguard, a company that raised $116 million in less than two years to tackle open source supply chain security problems. In this episode, Dan joins Ryan to chat about the demands of building a "growth mode" startup, massive funding roun…
…
continue reading
1
Cisco Talos researcher Nick Biasini on chasing APTs, mercenary hackers
31:27
31:27
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
31:27
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Nick Biasini has been working in information security for nearly two decades. In his current role as head of outreach for Cisco Talos Intelligence Group, he leads a team of threat researchers tasked with tracking nation-state APTs, mercenary hacker groups and ransomware cybe…
…
continue reading
1
Proofpoint 2023 Voice of the CISO w/ Megan Larkins
41:19
41:19
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
41:19
Episode 210 of the Unsecurity Podcast is now live! This time, Brad is joined by Megan Larkins to discuss her role as FRSecure's security consulting manager, as well as Proofpoint's 2023 Voice of the CISO report. Proofpoint's 2023 Voice of the CISO https://www.proofpoint.com/us/resources/white-papers/voice-of-the-ciso-report Give this episode a list…
…
continue reading
1
Allison Nixon on disturbing elements in cybercriminal ecosystem
48:39
48:39
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
48:39
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Allison Nixon is Chief Researcher at Unit 221B and a trailblazer in the world of cybercrime research. In this episode, we deep-drive into the shadowy dynamics of underground criminal communities, high-profile ransomware attacks, teenage hacking groups breaking into big compa…
…
continue reading
Episode 209 of the Unsecurity Podcast is now live! This time, Oscar and Brad welcome Evan back to the show to catch up on all his latest endeavors. Give this episode a listen and send any questions, comments, or feedback to unsecurity@protonmail.com.The InfoSec Mission által
…
continue reading
1
Catching Up - DEFCON, Annual InfoSec Report, CISSP Mentor Program
31:39
31:39
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
31:39
Episode 208 of the Unsecurity Podcast is now live! This time, Oscar returns to the show and the guys get a chance to catch up on all the latest. Give this episode a listen and send any questions, comments, or feedback to unsecurity@protonmail.comThe InfoSec Mission által
…
continue reading
1
Dakota Cary on China's weaponization of software vulnerabilities
55:48
55:48
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
55:48
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Dakota Cary is a nonresident fellow at the Atlantic Council’s Global China Hub, conducting research on China’s efforts to develop its hacking capabilities, artificial-intelligence and cybersecurity research at Chinese universities, the People’s Liberation Army’s efforts to a…
…
continue reading
1
Abhishek Arya on Google's AI cybersecurity experiments
33:27
33:27
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
33:27
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Abhishek Arya is director of engineering at Google, overseeing open source and supply chain security efforts that include OSS-Fuzz, SLSA, GUAC and OSV DB. In this episode, Arya talks about some early success experimenting with AI and LLMs on fuzzing and vulnerability managem…
…
continue reading
1
Defcon 2023 Recap, Huntin' Ground, CloudNordic
31:58
31:58
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
31:58
Episode 207 of the Unsecurity Podcast is now live! This week, Brad and Pinky discuss Defcon 2023, Huntin' Ground, and the recent CloudNordic ransom case. CloudNordic says it can't, and won't, pay the ransom demand (article): https://www.theregister.com/2023/08/23/ransomware_wipes_cloudnordic/ Send any questions, comments, or feedback to unsecurity@…
…
continue reading
1
Dr Sergey Bratus on the 'citizen science' of hacking
40:02
40:02
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
40:02
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Dr Sergey Bratus is a Research Associate Professor of Computer Science at Dartmouth College and a program manager at DARPA. In this episode, he discusses his pioneering work on securing parsers and patching long-forgotten devices. He also puts the AI hype into context and sh…
…
continue reading
1
DARPA's Perri Adams on CTF hacking, new $20M AI Cyber Challenge
26:47
26:47
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
26:47
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) DARPA program manager Perri Adams joins the conversation to chat about her love for CTF hacking competitions, the hunt for leapfrog security technologies in DARPA’s Information Innovation Office (I2O), and the goal of the new AI Cyber Challenge (AIxCC) offering $20 million i…
…
continue reading
1
Ryan Hurst on tech innovation and unsolved problems in security
42:24
42:24
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
42:24
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Peculiar Ventures chief executive Ryan Hurst joins the show to talk about a career that spanned 20 years at Microsoft and Google, his work building the plumbing for encryption on the web, unsolved problems in BGP security, the hype and promise of AI, and Microsoft's ongoing …
…
continue reading
1
Jason Chan on Microsoft's security problems, layoffs and startups
27:07
27:07
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
27:07
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) Bessemer Venture Partner's Jason Chan returns to the show for a frank discussion on the state of cyber, including thoughts on Microsoft's prominent security failures, the meaning of layoffs hitting security teams, the excitement around AI, and the long road ahead. The former…
…
continue reading
1
GitHub security chief Mike Hanley on secure coding, AI and SBOMs
40:29
40:29
Lejátszás később
Lejátszás később
Listák
Tetszik
Kedvelt
40:29
Episode sponsors: Binarly (https://binarly.io) FwHunt (https://fwhunt.run) GitHub security chief Mike Hanley joins the show to discuss merging the CSO and SVP/Engineering roles, securing data and code in an organization under constant attack, the thrilling promise of AI to the future of secure code, the dangers of equating SBOMs to supply chain sec…
…
continue reading