Shows
The Security RepoSecurity Automation And Leveraging AI To Deal With Security At Scale - Huxley BarbeeIn this episode of The Security Repo Podcast, we look at security automation and how we can engineer our way to better security overall.
We are joined, once again by Huxley Barbee, who has been a fixture of the security community for over 20 years. Professionally, he was a security consultant working with customers in finance, insurance, manufacturing, and higher education. Currently, he leads the security engineering group at a fintech company. Beyond the day job, he is also active in the security and hacker community. He started attending DEF CON in the late 90s...
2024-09-1839 min
Security BreachSecurity Breach: Predictions That LandedSend us a textA look back at Security Breach guest's most accurate and timely industrial cybersecurity predictions.As we near our 100th episode of Security Beach, I thought it would be a good time to take a look back at some of our guest’s predictions from the previous 12 months. If you want to check out the full episodes from any of these previous guests, you can find them in the show archives, or by clicking through to our website. So, join me as we take a look back at a collection of...
2024-05-0131 min
Phillip Wylie ShowHuxley Barbee: The Dark Side of TechnologyAbout the Guest:
Huxley Barbee is recognized in the cybersecurity field for his extensive experience in security automation and software engineering. With a professional trajectory spanning over decades, Huxley's path began in high school, where his interest in computers and passion for programming were piqued. Throughout his career, he has significantly contributed to various sectors by emphasizing the defensive aspects of cybersecurity, scaling from hands-on firewall configurations to leading consulting practices for major corporations. As an advocate for education and collaboration in the InfoSec community, Huxley is also the organizer of BSides New York City, a renowned cybersecurity conference.
Episode...
2024-04-1742 minThe Security RepoBuilding Conferences and Communities in Cybersecurity with Huxley BarbeeThis week, join us as we sit down with Huxley Barbee, the lead organizer of B-Sides New York City and a security evangelist at RunZero. With over two decades of experience as a software engineer and security consultant, Huxley shares his profound insights and journey through the evolving landscape of cybersecurity.
From his early days attending DefCon in 1999 to spearheading B-Sides conferences that champion technical excellence, community engagement, and accessibility, Huxley's story is one of passion, dedication, and innovation. He offers a fresh perspective on the recent shift of DefCon to the Las Vegas Convention Center and recounts memorable...
2024-03-1442 min
KitecastHuxley Barbee: Cyber Asset Inventory Risk ManagementrunZero provides comprehensive visibility into an organization’s cyber assets and attack surface to empower risk and exposure management. By combining external scanning, internal asset discovery, cloud inventory, and API integrations, runZero maps all devices, software, vulnerabilities, owners, and other security attributes. This integrated view across IT, IoT, OT, mobile, and cloud contextualizes risk and priorities based on asset criticality and location inside or outside the network perimeter.Barbee predicts major new vulnerabilities in 2024 that will catch security teams off guard as they remain overburdened dealing with patching and securing fundamental gaps. Additionally, more supply chain attacks wi...
2024-02-2745 min
Oil and Gas UpstreamHuxley Barbee: (Cyber) Security Evangelist, runZero | Ep 247
Elena talks with Huxley Barbee, Security Evangelist at runZero, a cyber asset attack surface management solution that is the first step in cybersecurity risk management. Huxley discusses why and how cybersecurity for operational technology (OT) and industrial control systems (ICS) including oil and gas upstream is so different from IT, including history, first steps, and different approaches to achieve a comprehensive, accurate, and current asset inventory for upstream sites.
Learn more about Huxley Barbee :
LinkedIn: https://www.linkedin.com/in/jhbarbee/
X: https://twitter.com/huxley_barbee
Access the runZero free...
2024-02-2140 min
ExpedITionersHuxley Barbee: The modern divergence of environments and security methodologies.Show notes:
Today, we’re joined by Huxley Barbee, a security evangelist at RunZero and organizer of Bsides NYC. In this episode, Zach and Huxley talk about the modern divergence of environments and security methodologies.
Topics discussed:
Huxley’s start within the security industry.
Making the industry a better place for newcomers.
Chasm solutions.
Comprehensive security visibility.
Methodologies of collecting data (on the network).
How “network” terminology has evolved.
“Deperimeterization”.
Modern divergence of security environments and efforts of discovery.
The top 3 important components that help round out a security...
2024-01-3034 min
Security Weekly Podcast Network (Audio)OT Security - Huxley Barbee - ASW #259It's no surprise that OT security has fared poorly over the last 30+ years. To many appsec folks, these systems have uncommon programming languages, unfamiliar hardware, and brittle networking stacks. They also tend to have different threat scenarios. Many of these systems are designed, successfully, to maintain availability. But when a port scan can freeze or crash a device, that availability seems like it hasn't put enough consideration into adversarial environments. We chat about the common failures of OT design and discuss a few ways that systems designed today might still be secure 30 years from now. In the...
2023-10-171h 18
Application Security Weekly (Audio)OT Security - Huxley Barbee - ASW #259It's no surprise that OT security has fared poorly over the last 30+ years. To many appsec folks, these systems have uncommon programming languages, unfamiliar hardware, and brittle networking stacks. They also tend to have different threat scenarios. Many of these systems are designed, successfully, to maintain availability. But when a port scan can freeze or crash a device, that availability seems like it hasn't put enough consideration into adversarial environments. We chat about the common failures of OT design and discuss a few ways that systems designed today might still be secure 30 years from now. In the...
2023-10-171h 18
Application Security Weekly (Video)OT Security - Huxley Barbee - ASW #259It's no surprise that OT security has fared poorly over the last 30+ years. To many appsec folks, these systems have uncommon programming languages, unfamiliar hardware, and brittle networking stacks. They also tend to have different threat scenarios. Many of these systems are designed, successfully, to maintain availability. But when a port scan can freeze or crash a device, that availability seems like it hasn't put enough consideration into adversarial environments. We chat about the common failures of OT design and discuss a few ways that systems designed today might still be secure 30 years from now. Segment Resources...
2023-10-1739 min
Tech TransformedNetwork Asset Discovery and the World of Incident ResponseNetwork Asset Discovery is the process of identifying and cataloguing all devices, resources, and services present within a computer network. This is an essential step in maintaining the security, performance, and management of a network - and overlooking the inventory of unknown devices on your network can result in serious problems. In this episode of the EM360 Podcast, Head of Content Matt Harris speaks to Huxley Barbee, Security Evangelist at RunZero, about:Ramifications of a lack of network asset visibilityInvestigating network assets for incident responseCurrent state of asset discovery
2023-09-1313 min
MSP 1337 - Cybersecurity Maturity Journey | Guidance and Best Practices for MSPs and MSSPsDo I know my assets (IoT, IIoT, and OT)?Each day we are bombarded by cybersecurity threats and this episode adds another vector you should be looking at as you address your asset inventory. Are you looking at the asset that controls your thermostat? How about the IP cameras you use to secure your office? These are just some of the many questions as I sit down with Huxley Barbee of Run Zero. It isn't all doom and gloom but the outlook is definitely scary if we don't start taking action to secure the devices that often are ignored or the responsibility and burden is assumed to be...
2023-09-1234 min
The Cybersecurity Defenders Podcast#63 - The SecOps Cloud Platform for ecosystem buildersA hosted panel discussion with industry leaders to explore what advantages the SecOps Cloud Platform confers for ecosystem builders.The panel is moderated by LimaCharlie's Head of Product, Matt Bromiley. The panel participants are:Senior Security Researcher at Thinkst, Casey SmithSecurity Evangelist at RunZero, Huxley BarbeeHead of Tines Labs, John TucknerWhat is the SecOps Cloud Platform?The SecOps Cloud Platform is a construct for delivering the core components needed to secure and monitor any given organization: things like, deploying endpoint capabilities through a single agent regardless...
2023-09-0827 min
Security BreachThe Growing Problem of 'Insecure by Design'Send us a text"It just boggles the mind that things that are so important to how our world works are so shockingly unprotected."According to ABI Research, less than five percent of critical industrial infrastructure is monitored for threats. The company also reports that by 2030 industrial environments will house more than 1.2 billion connection points for machines and production systems. So, while it’s impossible to be in all places at all times, this growth in connectivity will place a greater strain on security resources even after prioritizing data and network assets, and fo...
2023-08-0441 min
onSecurityonSecurity - Episode 18: Securing IoT and Operational TechnologyIn an interconnected world, the rapid proliferation of IoT (Internet of Things) devices and the integration of Operational Technology (OT) into critical infrastructure have unlocked tremendous opportunities. However, these technological advancements have also exposed us to unprecedented security risks.
To counter these risks, businesses can quickly and efficiently turn to the practice of maintaining a comprehensive asset inventory. By identifying and cataloging all IoT and OT devices, organizations can better understand their attack surface and implement targeted security measures to safeguard their networks.
Huxley Barbee, CISSP and CISM of RunZero, joins onShore Security CEO Stel...
2023-07-2830 min
Tech & Main PresentsSecurity and the Asset Inventory | Huxley Barbee
Huxley Barbee is a Security Evangelist at runZero (formerly Rumble Network Discovery), a company founded by Metasploit creator HD Moore that helps companies discover unmanaged devices for asset inventory.
Huxley previously worked for Cisco, Sparkpost, and most recently, Datadog – where he formulated the Datadog Cloud Security Platform. During his time there, he established a new security market presence & enabled the global sales force to grow sales by 482%.
Huxley spent over 20 years as a software engineer and security consultant. He attended his first DEF CON in 1999 and holds both CISSP and CISM certifications. On to...
2023-07-1333 minThe Cybersecurity Defenders Podcast#47 - Tips for submitting papers to conferences with Huxley Barbee, organiser at BSidesNYCOn this episode of the Cybersecurity Defenders Podcast, we have a conversation around best practices for submitting papers to conferences with Huxley Barbee, Security Evangelist at runZero & organizer of BSidesNYC.Throughout Huxley's career, he has held key positions at Cisco, Datadog and now runZero. He is passionate about cybersecurity and supporting the community in order to create a better security posture for all. Huxley encourages our listeners to connect with him on various platforms as linked below.LinktreeLinkedInMastadonTwitterSome resources for finding conferences to submit papers to are linked below.Infosec C...
2023-07-0633 min
Cyber Crime JunkiesBlind Spots. Where Danger Lives. Huxley Barbee Interview.Come see what many leaders miss, their blind spots. Behind-scenes talk with HUXLEY BARBEE, CISSP/CISM, who organized top security event at BSidesNYC, is a highly sought after security expert, public speaker and security evangelist at runZero. HE HAS Cloud Security Platforms and automated SecOps and IR playbooks. Topics: importance of asset discovery, understanding what effective asset discovery means, improving security through better asset discovery, importance of asset discovery, why security efforts often fail, critical infrastructure risk in cyber security today, why internet of things is a large security risk, how zero trust can be helped by as...
2023-07-0557 min
Season 8 – Data Protection Gumbo200: The Resilience Roadmap: Exploring Your Assets for a Stronger Tomorrow – runZero
Huxley Barbee, Security Evangelist at runZero shares his valuable insights on various approaches to asset discovery, such as agents, authenticated active scanning, and pulling data from other solutions. We’ll also touch on the pros and cons of passive network monitoring and unauthenticated active scanning for finding unmanaged devices.
2023-06-1322 min
Data Protection Gumbo200: The Resilience Roadmap: Exploring Your Assets for a Stronger Tomorrow - runZeroHuxley Barbee, Security Evangelist at runZero shares his valuable insights on various approaches to asset discovery, such as agents, authenticated active scanning, and pulling data from other solutions. We'll also touch on the pros and cons of passive network monitoring and unauthenticated active scanning for finding unmanaged devices.
2023-06-1322 min
Cyber WorkAsset detection at home | Cyber Work HacksHuxley Barbee, security evangelist at runZero, talks about the nuts and bolts of asset detection on a large scale, specifically around the U.S. federal government’s current directive. Here, we will shrink the playing field and tell newcomers to security how to do your home asset detection!0:00 - Asset detection at home1:18 - What is asset detection?2:44 - Is asset detection difficult?3:39 - Do asset detection on your network4:45 - Asset detection on a school network6:50 - How to put asset detection on your resume9:44 - What to study for as...
2023-06-0811 min
Cyber WorkThe nuts and bolts of asset detection and asset mapping | Guest Huxley BarbeeTech evangelist Huxley Barbee from runZero talks about asset detection, and yes, just asset detection. Learn about the day-to-day work of asset detection and asset mapping. Go beyond the theory and speculation about whether the U.S. federal government will implement it on time, and join Barbee as he walks you through how it’s all done and what you need in order to do it well.0:00 - Asset detection and asset mapping 2:56 - Getting into cybersecurity 4:12 - Shifting roles in cybersecurity to evangelist6:02 - What does a security evangelist do?8:30 - What is...
2023-06-0545 min
Security ConfidentialS11 E1 Having ACCURATE Asset InventoryHuxley Barbee is a Security Evangelist at runZero (formerly Rumble Network Discovery), a company founded by Metasploit creator HD Moore that helps companies discover unmanaged devices for asset inventory. Huxley previously worked for Cisco, Sparkpost, and most recently, Datadog – where he formulated the Datadog Cloud Security Platform. He has spent over 20 years as a software engineer and security consultant. He attended his first DEF CON in 1999 and holds both CISSP and CISM certifications. On top of that, he’s also an organizer of BSidesNYC.
00:00 Introduction
00:15 Our Guest
01:00 Huxleys Origin Story
0...
2023-05-1227 min
The Bid Picture with Bidemi Ologunde217. Huxley Barbee.In this episode, host Bidemi Ologunde spoke with Huxley Barbee, the lead organizer for BSides NYC and a Security Evangelist at runZero, a cyber asset management solution.The discussion covered various topics related to asset-centric investigations, such as the pros and cons of the different methods of conducting cyber asset inventory; operational technology (OT) scanning; and security research-based fingerprinting and incremental fingerprinting. Huxley also delved into vulnerability prioritization technology (VPT) and the utility of Shodan, a popular search engine for identifying and cataloging internet-connected devices and systems...
2023-05-0350 min
Redefining CyberSecurityIt’s Difficult to Secure the Invisible: Reinventing Asset Management for Modern Challenges in IT, IoT, and OT | A RunZero Brand Story with Huxley BarbeeIn this Their Story podcast on ITSPmagazine, Huxley Barbee delves into the world of InfoSec and asset management, discussing the importance of having a full asset inventory and how his company, RunZero, addresses this challenge with a cyber asset management solution.Founders HG Moore and Chris Kirsch identified the need for better tooling as security teams' scopes expanded beyond managing traditional IT devices to securing IoT and OT devices across various environments. RunZero helps organizations understand gaps in security controls coverage, identify potentially vulnerable devices in the face of zero-day threats, and more.Huxley Barbee...
2023-04-2140 min
Redefining CyberSecurityRebooting Cybersecurity: A Revived Conference Takes Center Stage in New York City | ITSPmagazine Event Coverage: BSides NYC 2023 | A Conversation with Lead Organizer, Huxley BarbeeGuest: Huxley Barbee, Security Evangelist at RunZero [@runZeroInc] and lead organizer for BSides NYC [@bsidesnyc]On LinkedIn | https://www.linkedin.com/in/jhbarbee/On Twitter | https://twitter.com/huxley_barbeeOn Mastodon | https://infosec.exchange/@huxley____________________________Hosts: Sean Martin, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining CyberSecurity Podcast [@RedefiningCyber]On ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/sean-martinMarco Ciappelli, Co-Founder at ITSPmagazine [@ITSPmagazine] and Host of Redefining Society PodcastOn ITSPmagazine | https://www.itspmagazine.com/itspmagazine-podcast-radio-hosts/marco-ciappelli...
2023-04-1413 min
The Virtual CISO PodcastEp 115: If Your Asset Management Sucks, Your Security SucksAsset management is a crucial aspect of information security. It refers to the processes and procedures involved in identifying, organizing, tracking, and protecting an organization's assets. The security of these assets is paramount, as you can’t protect what you don’t know about. To learn more about how to Fix Cyber Asset Management, your host John Verry, sits down with Huxley Barbee, Security Evangelist at runZero, to discuss the importance of Asset Management, how it’s a critical component of any organization's security strategy and much more. In this episode, Join us as we discuss the fo...
2023-04-1147 min
That Tech PodPutin's Blackout, The Pentagon's Leaked Emails & All things Cybersecurity With Security Evangelist From runZero Huxley BarbeeToday on That Tech Pod, Laura and Gabi speak with Huxley Barbee. Huxley Barbee is the organizer of the BSides NYC Security Conference and a Security Evangelist at runZero (formerly Rumble Network Discovery), a company founded by Metasploit creator HD Moore that helps companies discover unmanaged devices for asset inventory.Huxley previously worked for Cisco, Sparkpost, and most recently, Datadog – where he formulated the Datadog Cloud Security Platform. During his time there, he established a new security market presence & enabled the global sales force to grow sales by 482%.Huxley spent over 20 years as a software en...
2023-02-2832 min
The Cyber Security Matters PodcastAssets connected to the Internet just keep going up! - Episode 12 - Huxley Barbee, Security Evangelist at runZeroHuxley’s software & systems background sparked a twenty year career in Cyber including Practice Lead of Security Orchestration at Cisco, Security Product marketing at Datadog, and now evangelist & marketer for Series A Cyber asset management solution runZero.
Passionate about the security community, he also runs local event BSides NYC!
Enjoy!
The Cyber Security Matters Podcast was created by neuco, a global talent acquisition company that specialises in the space and technology sectors. To learn more about our sponsors, neuco and neuco Executive Search, follow these links:
neuco & neuc...
2023-01-2532 min
Defense in DepthSecuring Unmanaged AssetsAll links and images for this episode can be found on CISO Series. "When the asset discovery market launched, every single company that offered a solution used the line, "You can't protect what you don't know." Everyone agreed with that. Problem is, "what you don't know" has grown… a lot." Check out this post for the discussion that is the basis of our conversation on this week's episode co-hosted by me, David Spark (@dspark), the producer of CISO Series, and Steve Zalewski. Our sponsored guest is Huxley Ba...
2023-01-1930 min
Down the Security Rabbithole Podcast (DtSR)DtSR Episode 524 - Cybersecurity Starts and Ends with AssetsPrologue This week, we take it back to the basics, that's right, the basics, as we talk to Huxley Barbee about the need to identify and understand the assets on your network and in your various environments. A fascinating conversation with some history, some laughs, and some honest discussion a topic that's absolutely critical to cyber security. If you've not done so, go check out the conversation with Dell Technologies' John Scimone -- a CSO's perspective on fundamentals: https://ftwr.libsyn.com/dtsr-episode-513-cso-perspective-on-security-fundamentals which will give you some additional perspective on this issue. G...
2022-11-0143 min
The Cybersecurity Readiness Podcast SeriesComprehensive Asset DiscoveryComprehensive asset discovery is foundational to robust and proactive cybersecurity governance. The Cybersecurity and Infrastructure Security Agency recently issued a directive (BOD 23-01) requiring federal enterprises (civilian executive branch) to perform automated asset discovery every 7 days. Among other things, the directive also requires federal enterprises to initiate vulnerability enumeration across all discovered assets, including all discovered nomadic/roaming devices (e.g., laptops), every 14 days. Huxley Barbee, Security Evangelist at runZero and former Cybersecurity Practice Lead at Cisco, discusses the various methods of comprehensive asset discovery and provides guidance in selecting an appropriate asset discovery tool.To access...
2022-10-2638 min
Secure Talk PodcastThe Importance of a Comprehensive Network Asset Inventory with Huxley BarbeeHuxley Barbee is the Security Evangelist at runZero.
Huxley explains the importance of running a comprehensive network asset inventory and compares various methods for doing so. He also provides some great tips for new CISOs and for home cyber protection.
https://www.runzero.com/
2022-10-1442 min
The CloudcastEvolutions in Security MonitoringHuxlee Barbee (@huxley_barbee, Head Security Prod Mktg @DataDogHQ) talks about the challenging odds of preventing security attacks, managing configuration mistakes, scaling security through monitoring, and security feedback loops in production. SHOW: 555CLOUD NEWS OF THE WEEK - http://bit.ly/cloudcast-cnotwCHECK OUT OUR NEW PODCAST - "CLOUDCAST BASICS"SHOW SPONSORS:CloudZero - Cloud Cost Intelligence for Engineering TeamsDatadog Monitoring: Modern Monitoring and AnalyticsStart monitoring your infrastructure, applications, logs and security in one place with a free 14 day Datadog trial. Listeners o...
2021-10-0635 min
HAMBURG NIGHTLINEHAMBURG NIGHTLINE #111Welcome to HAMBURG NIGHTLINE Track List: HNL111 "Love Machine II" all TechHouse Num. Artist Title 01 Ben Rau, Jansons - The Player (Original Mix) 02 Scarlett Santana - Got The Flava 03 Dillon Nathaniel - Modern Romance (Original Mix) 04 George Privatti, Guille Placencia - Go Girl (Original Mix) 05 Joeski, Green Velvet - Barbee (Origianl Mix) 06 Andruss, Dmitri Saidi - Everybody Dance Now (Origianl Mix) 07 CamelPhat - Freak feat Cari Golden (Matthias Tanzmann Remix) 08 Huxley - Babyface (Extended Mix) 09 Chapter & Verse - Dreams (Original Mix) 10 Monki, DJ Rae...
2020-06-2500 min
#HeavyBeats By AdamKHeavyBeats 0420 - 4 Decks and a chat with Mathame
#HeavyBeats 0420 – 4 Decks and a chat with Mathame
Welcome to #HeavyBeats showcasing some of the heaviest electronic dance music from around the World. Mixed over 4 decks and presented by @AdamKDJ -
So the World is continuing to change so we must continue to do the right thing and be patient. It will be amazing to share those moments when we get to be together once again. Sadly we now know Tomorrowland 2020 is cancelled so let’s look forward to next year already! To end the mix we also catch up with Mathame from Italy where they have been busy making new m...
2020-04-161h 17
illyus & barrientosI&B Selects Vol. 1Illyus & Barrientos Selects is here. Every so often we will give you a nice mix of tunes we're currently playing out or just feeling. Vol. 1 is right here!
Tracklist
1. Mat.Joe - Dancin, Dancin, Dancin
2. Alex Virgo - Who You Know
3. ATFC & Gene Farris - Spirit of House
4. Huxley & Lazarusman - Power
5. Ruben Mandolini feat. Uness - To The Rhythm
6. Emmanuel Jal - Kuar (Henrik Schwarz Remix)
7. Gene Farris & Cajmere - Candy Store
8. Pepe Bradock - Atom Funk
9. Jacky - Colly Wolly
10. Chocolate Puma - Tonco Tone
11. Sllash & Doppe - Makeba
12. Green Velvet & Russoul - Millie Vanillie
13. Dennis Quin...
2020-04-031h 30