Risk Discovery

Simply Cyber

Risky Business

Srsly Risky Biz: The PLA's cyber operations go dark

Risky Business #771 -- Palo Alto's firewall 0days are very, very stupid

Risky Biz News: Remote fix feature for unbootable PCs coming to Windows

Between Two Nerds: Cyber weapons

Risky Biz News: Unpatched zero-day in Palo Alto Networks is in the wild

Risky Biz News: MSS now dominates China's cyber activity

Srsly Risky Biz: How Trump will drive covert operations

Risky Business #770 -- A Russian IR guy discovers extremely cool spookware

Risky Biz News: Most of 2023's top exploited vulnerabilities were initially zero-days

Between Two Nerds: How Telegram creates cybercriminals

Application Security Weekly

AI fixes everything, C++ the actual worst, IAM is hard - ASW #308

Biometric Frontiers: Unlocking The Future Of Engagement - Andras Cser, Enza Iannopollo - ASW #308

Typosquatting NPM, vulnerability analysis, and AI challenges - ASW #307

Modernizing AppSec - Melinda Marks - ASW #307

Total Recall? LLM finds bug in SQLite, C++ safety failures, zero time for zero privs - ASW #306

Bug bounties, vulnerability disclosure, PTaaS, fractional pentesting - Grant McCracken - ASW #306

Protecting Identity of AI Agents & Standardizing Identity Security for SaaS Apps - Shiven Ramji, Arnab Bose - ASW #305

Making TLS More Secure, Lessons from IPv6, LLMs Finding Vulns - ASW #305

JSON Parsing, Email Parsing, CISA's Bad Practices Guide, Abusing Disclosure Policies - ASW #304

The Complexities, Configurations, and Challenges in Cloud Security - Scott Piper - ASW #304

Enterprise Security Weekly

Funding, Trustwave/Cybereason, NVIDIA Morpheus AI SOC, and the job situation is bad - ESW #384

The Top-Down Approach in Cybersecurity and Compliance Isn't Working - What's Next? - Justin Beals - ESW #384

AI and the Autonomous SOC - Separating Hype from Reality - Itai Tevet - ESW #384

$200M for IoT security, 4 acquisitions, fake job openings, vapes are trash - ESW #383

The State of DSPM, One of the Hottest New Cybersecurity Markets in Years - Todd Thiemann - ESW #383

Cybersecurity Budgets: the Journey from Reactive to Proactive - Theresa Lanowitz - ESW #383

Today's Hybrid Work Era: Integrated Approach & Implementing Identity - ESW #382

Funding, AI controls your PC, Cyberstarts stops Sunrise, public cyber goes private - ESW #382

What if securing buildings was as easy as your smartphone? - Blaine Frederick - ESW #382

Era of Bot Battlers & Security Focused Company Culture - ESW #381

Tradecraft Security Weekly

Evilginx2 Man-in-the-Middle Attacks - Tradecraft Security Weekly #29

Black Hat & DEF CON 2018 - Tradecraft Security Weekly #28

PXE Boot Attacks - Tradecraft Security Weekly #27

OSINT & External Recon Pt. 2: Contact Discovery - Tradecraft Security Weekly #26

Phishing 2FA Tokens with CredSniper - Tradecraft Security Weekly #25

Evading Network-Based Detection Mechanisms - Tradecraft Security Weekly #24

HTML5 Storage Exfil via XSS - Tradecraft Security Weekly #23

Linux Privilege Escalation - Tradecraft Security Weekly #22

Leaking Windows Creds Externally Via MS Office - Tradecraft Security Weekly #21

Google Event Injection - Tradecraft Security Weekly #20

SANS Internet Stormcenter Daily

ISC StormCast for Wednesday, November 20th, 2024

ISC StormCast for Tuesday, November 19th, 2024

ISC StormCast for Monday, November 18th, 2024

ISC StormCast for Wednesday, November 13th, 2024

ISC StormCast for Tuesday, November 12th, 2024

ISC StormCast for Monday, November 11th, 2024

ISC StormCast for Friday, November 8th, 2024

ISC StormCast for Thursday, November 7th, 2024

ISC StormCast for Wednesday, November 6th, 2024

ISC StormCast for Tuesday, November 5th, 2024

The CyberWire

When location data becomes a weapon.

Biden vs. Trump: A tale of two cybersecurity strategies.

A new era for CISA under Trump?

Cyber-entrepreneurship in the age of CyberAI. [CSO Perspectives]

Teresa Shea: The challenge of adapting new technologies. [Intelligence] [Career Notes]

Credential harvesters in the cloud. [Research Saturday]

One tap, total access: Pegasus exploits unveiled.

Eavesdropping on America’s eyes and ears.

‘Bitcoin Jesus’ and Sheboygan face problems.

Ransomware as a public health crisis.

Inside the Network

Rick Snyder: How a Founder, VC and Governor is building a safer digital future

Slavik Markovich: Building Descope & Demisto—brewing coffee and connections in the US-Israel tech scene

Doug Merritt: Creating a decacorn in Splunk and identifying trends

Jon Gelsey: Building Auth0, the only PLG company in cybersecurity to achieve a multi-billion dollar exit

Marty Roesch: Scaling Sourcefire and creating a new way to monetize open source security software

Ron Gula: Bootstrapping Tenable to $100M revenue and becoming an influencer

Dmitri Alperovitch: Building CrowdStrike and defending against nation states

Unsupervised Learning

A Conversation with Rob Allen from ThreatLocker

UL NO. 458: Ollama Vulnerabilities, Rating AI Using AI, The Mantis Hack-back Framework

A Conversation with Jason Haddix from Flare

UL NO. 454: The First AI Breaches

How My Projects Fit Together (Substrate, Fabric, Telos, Daemon, and Human 3.0)

Human 3.0—The Skills & Mental Frames Required To Thrive In An AI World

UL NO. 452: The New Hotness: NotebookLM

NotebookLM Podcast: David Deutsch, Understanding, and AI

Venture Capitalists Favor Risk-Takers: The Rise of Self-Made Billionaires and Tech Innovators

AI Comedians by 2026? The Future of Comedy and the Turing Test for Laughter

Paul Security Weekly

Holiday Hack Challenge - PSW #851

No CVE and No Accountability - PSW #851

We're Not Saying "I told you so" - PSW #850

Cybersecurity For Schools - Kayne McGladrey - PSW #850

EDR Is Dead, EDR Is Not Dead - PSW #849

Shadow IT and Security Debt - Dave Lewis - PSW #849

Not The Vulnerabilities You're Looking For - PSW #848

Secure By Default - How do we get there? - Andy Syrewicze - PSW #848

Everything is Overrated - PSW #847

Effective Operational Outcomes - Ken Dunham - PSW #847

Business Security Weekly

Finally, Liability Coverage for CISOs as the Cybersecurity Workforce Peaks - BSW #373

CISO Evolution and Leadership Paradigm as Burnout Rate Hits 93% - BSW #372

How to Combat the CISO Mental Health Crisis - Ram Movva - BSW #372

The Right CISO, with a New Security Leadership Style, to Safeguard Your Business - BSW #371

Planning A Merger Or Acquisition? Ask These Five Cyber Questions First - Craig Davies - BSW #371

Stay Ahead of Identity Threats & Addressing Cybersecurity Disparities - David Bradbury, Erin Baudo Felter - BSW #370

The CISO Mindset, Top Strategies, and Mandating Office Presence Without Purpose - BSW #370

CEO Accountability as CISOs Concerned Over Demands and Measured by Profit/Cost - BSW #369

Aligning Tech Execs on Cyber Resilience - Theresa Lanowitz - BSW #369

CoinSec Podcast

Episode 76: Coinbase Issued Wells Notice, Euler Finance Hack, Bitcoin ATM Hack, and Wallet Vulns

Episode 75 - Lazarus Group Moving ETH, Hacked via Ads, Bitzlato, and HIVE Shutdown

Episode 74: Review of 2022, Last Pass Breach, and Multiple Hacks Against Individuals

Episode 73: SBF Arrest, Lodestar Hack, CoinTracker Leak, and Gemini User Data For Sale

Episode 72: Ankr Hack, FTX Fund Movement, Bo Shen Hack, Infura Privacy Policy Update, and ChatGPT

Episode 71: FTX Collapse, Deribit Hot Wallet Compromise, Skyward Finance Hack, and 50k BTC Seized

Episode 70: Bitkeep Hack, More Hackers Returning Stolen Funds & MEV Bot Hack

Episode 69: ETH Merge, Profanity Vulnerability, Wintermute Hack, Shiba Inu Creds Leak, and Rug Pulls

Episode 68: Velodrome Insider, Acala Network Exploit, CelerNetwork DNS Hijack, Crypto Phishing

Episode 67: Guests from AnChain.AI, Tornado Cash Sanctions, DeBridge Phishing Attack, Curve Hack

Task Force 7

Ep. #216: The First Year of Starting a Cyber Business

Ep. # 215: How To X-Ray Your Software to Protect the Supply Chain

Encore: Ep. 203: Cyber Crime And Our New Remote Workforce

Ep. 214: A View Into Disruptive Technology for Cyber Defenders

Encore: Ep. 212: Communication and Psychology Are The Keys To Success

Ep. 213: The Past, Present, & Future of Vulnerability Management

Encore: Ep. 208: Starting Your Own Cyber Security Company

Encore: Ep. 209: Lesson From A Ransomeware Negotiator

Encore: Ep. 190: When Risk Taking Pays Off

Ep. 212: Communication and Psychology Are The Keys To Success

Jeff Crume

What is Shadow AI? The Dark Horse of Cybersecurity Threats

Cross-Site Scripting: The Sneaky Cloud Threat #crosssitescripting #cloudsecurity #security

The Cloud Computing Boom: A Cybersecurity Wake-Up Call #cybersecurity #cloud #cloudsecurity

Who's Allowed to Do What? RBAC vs. ABAC & The Art of Access Control

Cross-Site Scripting: A 25-Year Threat That Is Still Going Strong

Data Breach Savings Plan: Tips and Tricks #databreach #security #datasecurity

The Weak Link in Security: Understanding A Zero Day Threat #security #datasecurity #cybersecurity

Cyber Security Career Path: Training, Credentials, and More #cybersecurity #security

The Data Breach Price Tag: Who's Paying the Bill? #data #security #datasecurity #databreach

Support Scams: The Hidden Threat to Your Data & Cyber Security After Major World Events!

Darknet Diaries

151: Chris Rock

150: mobman 2

149: Mini-Stories: Vol 3

Security Now

SN 1001: Artificial General Intelligence (AGI) - Gmail Temp Addresses, Russia's Internet Off Switch

SN 1000: One Thousand - Windows Server 2025, Malicious Python Typos

SN 999: AI Vulnerability Discovery - RT's AI TV Hosts, Windows 10 Updates

SN 998: The Endless Journey to IPv6 - AI-Driven Encryption, Session Messenger, IPv6

SN 997: Credential Exchange Protocol - DJI Sues DoD, Quantum Vs. RSA, Lost MS Logs

SN 996: BIMI (up Scotty) - NPD Goes Broke, Firefox Under Attack, .io

SN 995: uBlock Origin & Manifest V3 - DDoS Record, N. Korean Workers, Vitamin D

SN 994: Recall's Re-Rollout - Domain Security, Tor + Tails, VLC Update

SN 993: Kaspersky exits the U.S. - Exploding Pagers, Passkeys in Chrome

SN 992: Password Manager Injection Attacks - Aging Media, Naval Starlink, adam:ONE

The Charles Tendell Show

S3E1 Get That Cybersecurity Job.

What Does A Black Life Look Like?

The George Floyd Conversation

S2E1 - Lord Bezos Got Hacked - The Eoin Keary Interview

Privacy, Invasions and @vetconactual after Defcon 2018

Keep Your Hands To Yourself at @2600 #hopeconf & Making Hacker Kool With Keenan Skelly @KeenanSkelly

Mentoring The Future With Dre Nix Of The Boys & Girls Club

How not to get blackmailed online and School Shooting threat assessments with Dr Amy James

The definition of hacker and @myhackerhouse CEO Jennifer Arcuri

Trusting The Machine's Identity with Jeff Hudson of @venafi

Hack Naked News

Google DeGoogled, Hammerbarn, Blofeld, VMWare, DeepData, SafePay, Josh Marpet and... - SWN #432

Granny Bots, Microsoft, Shrinklocker, SlugResin, BlueSky, Aaran Leyland, and More... - SWN #431

Struwwelpeter, Krampus, Flutter, Apple, DLink, C++, Josh Marpet and more... - SWN #430

Robo-Turing, BlueNoroff, Palo Alto, German Law, Fabric, Cisco, Bans, Aaran Leyland... - SWN #429

Tariffs, Pygmy Goat, Schneider, SQLite, Deepfakes, Military AI, Josh Marpet... - SWN #428

Recall, Russia, Win 10, Phish n Ships, Midnight Blizzard, Rob Allen, and More... - SWN #427

Halloween, TikTok, Telcos, Win 11, Five Eyes, AWS, France, ChatGPT, and more... - SWN #426

Tourists, Fortis, apps, TLP, AWS, Google, Chatbots, Aaran Leyland, and More... - SWN #425

Doom Brain, E2EE, OT, Adload, Cisco, VMware, internet archive, Josh Marpet ... - SWN #424

Stealing, Kubernetes, Passkeys, SolarWinds, Intel, Sextortion, and... - SWN #423

Secure Digital Life

Mock Interview, Q&A - Secure Digital Life #114

Producing A Podcast - Secure Digital Life #113

Game Consoles - Secure Digital Life #112

Mistakes In Your Career Search , RWU - Secure Digital Life #111

Preparing & Dealing with Ransomware - Secure Digital Life #110

The Lair of the White Worm - Secure Digital Life #109

Spy Cameras - Secure Digital Life #108

Getting Started: Dark Web - Secure Digital Life #107

When The Lights Go Out - Secure Digital Life #106

HateStream: Social Media - Secure Digital Life #105

Tag Cyber

Automated and Secretless Workload IAM Platform

Vulnerability Scanning Using Predictive AI

Increase the Effectiveness of Your Cybersecurity Platform Selection Strategy

Why Working with Large Consulting Firms on Cyber Projects Might Include Some Unknown Pitfalls

Develop and Improve Your Personal Instincts on Dealing with Corporate Boards Regarding Cyber

Learn How the SEC's New Focus on Cybersecurity Can Affect Your Career as a CISO

Cyber Incident Response Discussion with BreachRx

Secure Microsoft Copilot with Varonis

Buying Safe Software with Charlie Jones of ReversingLabs

Early Warning Solutions with David Chartier, CEO of Arctic Security

Defensive Security Podcast

Defensive Security Podcast Episode 285

Defensive Security Podcast Episode 284

Defensive Security Podcast Episode 283

Defensive Security Podcast Episode 282

Defensive Security Podcast Episode 281

Defensive Security Podcast Episode 280

Defensive Security Podcast Episode 279

Defensive Security Podcast Episode 278

Defensive Security Podcast Episode 277

Defensive Security Podcast Episode 276

Data Security and Privacy with the Privacy Professor

The History, Mystery, and Rise of AI at CornCon!

Need More Privacy? Write the Privacy Law We All Need!

A Romance Scammer Took All My Dying Mother's Money

GDPR Compliance Stats Everyone, Everywhere, Needs to Know!

Individuals & Businesses: Mitigate! Those! Risks!

IoT Stalking, IoT Jewelry, JuiceJacking, AI, CheckWashing & More!

AI Challenges & Risks: Security, Privacy, Bias & Ethics

“Romance Scammers Have Used My Photos Since 2016”

Dobbs Leak, Airtags, Spam, Spoofed Email, & Data Privacy Day!

A Cybersecurity Expert’s Real Life Identity Theft Experience

Defense in Depth

The Argument For More Cybersecurity Startups

How Are New SEC Rules Impacting CISOs?

Managing the Risk of GenAI Tools

Defending Against What Criminals Know About You

Will We Ever Go Back From Work From Home?

The Lurking Dangers of Neglected Security Tools

When You Just Can't Take It Anymore in Cyber

Is It Possible to Inject Integrity Into AI?

Are Phishing Tests Helping or Hurting Our Security Program?

Who Is Responsible for Securing SaaS Tools?