Shows
InfoSec.WatchInfoSec.Watch Podcast — Episode 121: Cisco email gateway RCEs, Windows zero-days, and control-plane failureThis week on the InfoSec.Watch Podcast, we break down a series of high-impact threats targeting the systems organizations rely on most—email gateways, Windows endpoints, and operational infrastructure that does not fail gracefully.The episode opens with an urgent look at Cisco AsyncOS (CVE-2025-20393), an actively exploited, unauthenticated remote-code-execution flaw affecting Cisco Secure Email Gateway and Secure Email and Web Manager deployments. The hosts explain why email gateways must be treated as Tier-Zero assets, outline post-patch hunting requirements, and discuss the real-world risk of persistence on perimeter infrastructure.Next, th...
2026-01-1908 minInfoSec.WatchInfoSec.Watch Podcast — Episode 120: Control planes are attack planesWelcome back to the InfoSec.Watch Podcast, your weekly briefing on the security threats that matter.In Episode 120, we break down a clear and recurring theme across this week’s incidents: control planes have become prime attack planes.We start with active exploitation of a critical flaw in HPE OneView, underscoring why management-plane software must be treated as Tier Zero infrastructure. From there, we examine unpatchable risk posed by actively exploited, end-of-life D-Link DSL gateways, and a critical unauthenticated RCE (CVS...
2026-01-1310 minInfoSec.WatchInfoSec.Watch Podcast — Episode 119: WatchGuard VPN RCE, MongoDB MongoBleed, and WebRAT GitHub trapsIn this week’s episode of the InfoSec.Watch Podcast, hosts Grant Lawson and Sloane Parker break down the security stories that defenders can’t afford to ignore.The episode opens with urgent patching guidance for an actively exploited WatchGuard IKEv2 VPN remote code execution flaw, followed by analysis of “MongoBleed” (CVE-2025-14847)—a memory disclosure vulnerability in MongoDB now seeing real-world exploitation. Grant and Sloane walk through not just why these issues matter, but what defenders should be doing after patching, including log review, threat hunting, and harden...
2026-01-0510 minInfoSec.WatchInfoSec.Watch Podcast — Episode 118: Perimeter zero-days, email gateway attacks, and weaponized GitHub PoCsIn this week’s InfoSec.Watch Podcast, we break down a series of critical security developments shaping the threat landscape. The episode opens with urgent guidance on two actively exploited, unauthenticated remote-code-execution vulnerabilities—one affecting WatchGuard Firebox appliances and the other impacting HPE OneView across multiple versions. The hosts outline the immediate actions every defender must take, from emergency patching to post-patch hunting and access-control validation.The Vulnerability Spotlight shifts to escalating attacks on email security gateways, a high-leverage target where compromise grants adversaries deep visibility and control across an organization’s communications. Grant and Sloane detail how at...
2025-12-3008 minInfoSec.WatchInfoSec.Watch Podcast — Episode 117: Choke Points Under Fire: Email Gateways, WebKit Zero-Days, and DPRK's $2B Crypto HeistIn this week's InfoSec.Watch Podcast, we dive into the latest high-impact threats targeting enterprise security choke points.Key stories include:A sophisticated campaign against Cisco Secure Email appliances, with essential guidance on hardening management interfaces and proactive threat hunting.Chainalysis' alarming report on North Korea-linked actors stealing a record $2.02 billion in cryptocurrency in 2025 through fewer, more targeted attacks.Ongoing disruption of municipal services, underscoring the urgent need for OT/IT segmentation and manual failover planning.The Vulnerability Spotlight focuses on two actively exploited Apple WebKit zero-days (now added to CISA's KEV catalog), emphasizing rapid...
2025-12-2209 minInfoSec.WatchInfoSec.Watch Podcast — Episode 116: React2Shell mass exploitation, Apple & Microsoft zero-days, and the BRICKSTORM hypervisor breachThis week’s episode dives into a packed slate of high-impact cybersecurity threats shaking the industry. We break down React2Shell (CVE-2025-55182) — a rapidly evolving remote code execution flaw driving mass scanning across the internet and prompting CISA to issue an urgent KEV directive. They also unpack Apple’s emergency WebKit zero-day patches and Microsoft’s latest actively exploited kernel and security-bypass vulnerabilities from December Patch Tuesday.The team explores BRICKSTORM, a stealthy backdoor campaign targeting VMware vSphere hypervisors through fileless techniques and persistent access to virtualization control planes — a growing focus for state...
2025-12-1808 minInfoSec.WatchInfoSec.Watch Podcast — React2Shell Supply Chain Risk, Android Zero-Days, and BRICKSTORM Hardware SabotageIn this week’s episode of InfoSec.Watch Weekly, Grant Lawson and Sloane Parker take listeners on a guided tour of the entire modern attack surface — from developer laptops to mobile devices to the physical circuit boards inside IoT hardware. Three major security stories illustrate how deeply interconnected and exposed the stack has become.We begin with React2Shell, a newly surfaced command-injection vulnerability in the widely used react-dev-utils package. Grant and Sloane break down how an attacker can hijack a developer’s workstation simply by manipulating the BROWSER environment variable — turning a harmless npm star...
2025-12-0908 minInfoSec.WatchInfoSec.Watch Podcast — Episode 114: Identity zero-days, analytics leaks, and emergency-alert outages expose your weakest vendor linksIn this week’s InfoSec.Watch episode, hosts Grant Lawson and Sloane Parker analyze the top cybersecurity stories: an actively exploited Oracle IdM zero-day added to CISA’s Known Exploited Vulnerabilities catalog, OpenAI cutting off Mixpanel after a data breach, and ransomware disrupting the CodeRED emergency alert system. Additional coverage includes FortiWeb WAF vulnerabilities, SonicWall SSL VPN exploitation by Akira ransomware, Windows kernel privilege-escalation flaws, and the escalating risks posed by third-party vendor ecosystems. Stay ahead by subscribing at https://www.infosec.watchThanks for listening to InfoSec.Watch! Subscribe to our newsletter for in-depth analysis: https://infos...
2025-12-0107 minInfoSec.WatchInfoSec.Watch Podcast — Episode 113: China-linked AI agents, logistics ransomware, and Germany’s NIS2 law are reshaping your 2025 risk map.In this episode of the InfoSec.Watch Podcast, we unpack one of the most consequential weeks of cybersecurity developments in 2025. This episode covers a rare convergence of AI-augmented state-backed espionage, logistics and retail supply-chain ransomware, and Europe’s accelerating drive toward digital sovereignty—and this episode takes you step-by-step through every story, every insight, and every actionable takeaway.Whether you're a CISO, a threat intelligence analyst, a red teamer, SOC lead, architect, or anyone responsible for defending modern infrastructure, this episode will help you make sense of a rapidly shif...
2025-11-2508 minInfoSec.WatchInfoSec.Watch Podcast — Episode 112: Windows Kernel 0-Day, FortiWeb RCE, Akira Targets NutanixHere’s what we cover in Episode 112:Actively Exploited Windows Kernel 0-Day: A privilege-escalation flaw in the Windows kernel is now being abused in real attacks. We cover what’s known, how attackers are chaining it, and the immediate mitigations security teams should prioritize.FortiWeb Critical Vulnerability Added to CISA’s KEV Catalog: A newly disclosed remote code execution vulnerability in Fortinet FortiWeb has officially landed in the Known Exploited Vulnerabilities list. We explain exploitation paths, affected versions, and patch timelines.Akira Ransomware Expands to Nutanix Virtualized Environments: Akira operat...
2025-11-1808 min
UNSECURITY: Information Security PodcastUnsecurity Episode 233: HERoic Hacks - Women in InfoSec w/ Tonya BarnesIn this special Edition of Unsecurity, Key Account Manager Tonya Barnes speaks on the creation of HERoic Hacks, the infosec conference that empowers women in the field. About HERoic Hacks: Envisioned by Tonya, and supported by FRSecure, HERoic Hacks addresses the gap in representation by providing networking opportunities, expert speakers, and award recognition with notable infosec organizations and leaders! This year's HERoic Hacks will feature keynote speaker Connie Hiber, Director of Technology Governance at GreatClips! Interested in Sponsoring or Attending? 20% of sponsorship fees will support women-led organizations WiCys...
2025-01-2732 minUNSECURITY: Information Security PodcastUnsecurity Episode 228: Recon InfoSec with Andrew CookThis week, Unsecurity hosts are joined by CTO of Recon InfoSec, Andrew Cook. They discuss Andrew's journey into the InfoSec field and Recon InfoSec's approach and value. Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com. About FRSecure https://frsecure.com/ FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security programs.
2024-11-2134 minUNSECURITY: Information Security PodcastUnsecurity Episode 226: Infosec Buy In with Victoria FogartyIn this episode of the Unsecurity Podcast, Associate Penetration Tester Victoria Fogarty joins Megan and Brad to walk through how to buy in for InfoSec programs with an executive team. Don't forget:The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com. About FRSecure https://frsecure.com/ FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solutions and training to assist clients in improving the measurable fundamentals of their information security...
2024-10-2441 min
Cyber WorkBreaking down CEH exam questions with an Infosec expertInfosec and Cyber Work Hacks are here to help you pass the CEH, or Certified Ethical Hacker exam. For today’s Hack, Akyl Phillips, Infosec bootcamp instructor in charge of the CEH/Pentest+ dual-cert bootcamp, walks us through four sample CEH questions, explaining the logic behind each answer and discounting the wrong ones with explanations, allowing you to reach the right answer in a logical and stress-free way. This episode is a real eye-opener for aspiring red teamers, so keep it here for this Cyber Work Hack! 0:00 - Mastering the CEH exam2:42 - Types of CEH exa...
2024-06-2015 min
Cyber WorkInside a CEH boot camp: Advice from an Infosec instructorInfosec and the Cyber Work Hacks podcast are here to help you pass the Certified Ethical Hacker (CEH) exam! So for today’s hack, we’re talking about bootcamps. The CEH exam, no matter how you slice it, is an exam that is the definition of the phrase, “It’s a marathon, not a sprint.” With 125 questions and four hours to answer them, there’s as much of a mental game at work here that’s much more than rote memorization of terms and tools. That’s why I wanted to get an insider’s look from Infosec boot camp instructor Ak...
2024-06-0612 min
InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 6/9/2023The post Talkin’ About Infosec News – 6/9/2023 appeared first on Black Hills Information Security, Inc..
2023-06-0857 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 5/26/2023The post Talkin’ About Infosec News – 5/26/2023 appeared first on Black Hills Information Security, Inc..
2023-05-261h 04InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 5/17/2023The post Talkin’ About Infosec News – 5/17/2023 appeared first on Black Hills Information Security, Inc..
2023-05-1759 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 5/11/2023The post Talkin’ About Infosec News – 5/11/2023 appeared first on Black Hills Information Security, Inc..
2023-05-1154 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 5/5/2023The post Talkin’ About Infosec News – 5/5/2023 appeared first on Black Hills Information Security, Inc..
2023-05-061h 01InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/18/2023The post Talkin’ About Infosec News – 4/18/2023 appeared first on Black Hills Information Security, Inc..
2023-04-1959 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/11/2023The post Talkin’ About Infosec News – 4/11/2023 appeared first on Black Hills Information Security, Inc..
2023-04-1156 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/5/2023The post Talkin’ About Infosec News – 4/5/2023 appeared first on Black Hills Information Security, Inc..
2023-04-051h 01InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/3/2023The post Talkin’ About Infosec News – 4/3/2023 appeared first on Black Hills Information Security, Inc..
2023-04-031h 02InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 3/16/202300:00 – PreShow Banter™ — Tossing Money at Problems00:58 – BHIS – Talkin’ Bout [infosec] News 2023-03-1301:41 – Story # 1: Silicon Valley Bank collapse: Treasury, Fed, and FDIC announce […]
The post Talkin’ About Infosec News – 3/16/2023 appeared first on Black Hills Information Security, Inc..
2023-03-161h 00InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 3/8/2023 (v2)THIS IS A TEST
The post Talkin’ About Infosec News – 3/8/2023 (v2) appeared first on Black Hills Information Security, Inc..
2023-03-081h 07InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 3/8/202300:00 – PreShow Banter™ — Lil NAS06:52 – BHIS – Talkin’ Bout [infosec] News 2023-03-0608:13 – Story # 1: LastPass says employee’s home computer was hacked and corporate vault takenhttps://arstechnica.com/information-technology/2023/02/lastpass-hackers-infected-employees-home-computer-and-stole-corporate-vault/28:32 […]
The post Talkin’ About Infosec News – 3/8/2023 appeared first on Black Hills Information Security, Inc..
2023-03-081h 07InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 3/3/2023Story # 1: A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Lifehttps://www.wsj.com/articles/apple-iphone-security-theft-passcode-data-privacya-basic-iphone-feature-helps-criminals-steal-your-digital-life-cbf14b1a Story # 1b: Apple’s iPhone Passcode Problem: Thieves Can Ruin Your Entire Digital Life in Minutes […]
The post Talkin’ About Infosec News – 3/3/2023 appeared first on Black Hills Information Security, Inc..
2023-03-0358 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 2/22/202300:00 – PreShow Banter™ — Pop Tart Pizza04:15 – BHIS – Talkin’ Bout [infosec] News 2023-02-2005:39 – Story # 1: Employee data from a major cybersecurity firm posted for sale […]
The post Talkin’ About Infosec News – 2/22/2023 appeared first on Black Hills Information Security, Inc..
2023-02-221h 06InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 2/17/202300:00 – PreShow Banter™ — Scalping Valentine’s Day Reservations04:13 – BHIS – Talkin’ Bout [infosec] News 2023-06-2305:52 – Story # 1: 5 Chinese companies and a research institute blacklisted by […]
The post Talkin’ About Infosec News – 2/17/2023 appeared first on Black Hills Information Security, Inc..
2023-02-171h 03InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 2/13/202300:00 – PreShow Banter™ — We’ve got nothing to say03:07 – BHIS – Talkin’ Bout [infosec] News 2023-06-2305:56 – Story # 1: Cybercrime job ads on the dark web pay […]
The post Talkin’ About Infosec News – 2/13/2023 appeared first on Black Hills Information Security, Inc..
2023-02-131h 01InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 2/3/202300:00 – PreShow Banter™ — Woke Up Like This03:20 – BHIS – Talkin’ Bout [infosec] News 2023-01-3005:04 – Story # 1: GoTo says hackers stole customers’ backups and encryption keyhttps://www.bleepingcomputer.com/news/security/goto-says-hackers-stole-customers-backups-and-encryption-key/09:48 […]
The post Talkin’ About Infosec News – 2/3/2023 appeared first on Black Hills Information Security, Inc..
2023-02-031h 00InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 1/25/202300:00 – PreShow Banter™ — Wade’s Googly Eyes00:41 – BHIS – Talkin’ Bout [infosec] News 2023-01-2301:26 – Story # 1: BIG TECH LAYOFFS. LAYOFFS! DOOM! RECESSION!
The post Talkin’ About Infosec News – 1/25/2023 appeared first on Black Hills Information Security, Inc..
2023-01-251h 05InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 1/17/202300:00 – PreShow Banter™ — Ralph’s Guide to Satellite Bands 04:33 – BHIS – Talkin’ Bout [infosec] News 2023-01-16 05:25 – Story # 1: Microsoft’s new AI can simulate anyone’s […]
The post Talkin’ About Infosec News – 1/17/2023 appeared first on Black Hills Information Security, Inc..
2023-01-1758 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 1/12/202300:00 – PreShow Banter™ — Twitch Airways International00:59 – BHIS – Talkin’ Bout [infosec] News 2023-01-1003:56 – Story # 1: How ChatGPT could become a hacker’s friendhttps://betanews.com/2023/01/05/how-chatgpt-could-become-a-hackers-friend/14:05 – Story # […]
The post Talkin’ About Infosec News – 1/12/2023 appeared first on Black Hills Information Security, Inc..
2023-01-1252 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 1/3/202300:00 – PreShow Banter™ — Seven People00:51 – BHIS – Talkin’ Bout [infosec] News 2023-01-0201:37 – Story # 1: LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolenhttps://www.theverge.com/2022/12/28/23529547/lastpass-vault-breach-disclosure-encryption-cybersecurity-rebuttal32:22 – […]
The post Talkin’ About Infosec News – 1/3/2023 appeared first on Black Hills Information Security, Inc..
2023-01-0354 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 12/15/202200:00 – PreShow Banter™ — Scissors Vs Paper00:15 – BHIS – Talkin’ Bout [infosec] News 2022-12-1202:12 – Story # 1: Rackspace confirms ransomware attack behind days-long email meltdownhttps://www.theregister.com/2022/12/06/rackspace_confirms_ransomware/07:56 – Story […]
The post Talkin’ About Infosec News – 12/15/2022 appeared first on Black Hills Information Security, Inc..
2022-12-1552 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 12/6/202200:00 – PreShow Banter™ — Florida Bobsledding Team01:29 – PreShow Banter™ — Open AI Phishing Campaign05:17 – BHIS – Talkin’ Bout [infosec] News 2022-12-0507:53 – Story # 1: There are […]
The post Talkin’ About Infosec News – 12/6/2022 appeared first on Black Hills Information Security, Inc..
2022-12-061h 03InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 11/30/202200:00 – PreShow Banter™ — Inflatable Turkey00:15 – BHIS – Talkin’ Bout [infosec] News 2022-11-2802:34 – Story # 1: Musk recruits engineers for “Twitter 2.0”https://arstechnica.com/tech-policy/2022/11/musk-recruits-engineers-for-twitter-2-0-after-mass-layoffs-and-resignations/06:28 – Story # 2: Security […]
The post Talkin’ About Infosec News – 11/30/2022 appeared first on Black Hills Information Security, Inc..
2022-12-011h 01
Humans of InfoSecEpisode 75: Carving Your Own Path in InfoSec With Henning ChristiansenDon’t have a “typical security background?” Neither did Henning Christiansen, who is now the CISO at Ottobock. Before starting in InfoSec, he tried out roles in finance, development and auditing. Until one day, he began to nurture his interest in InfoSec, which led him to roles in Bombardier Transportation, Axel Springer, and now Ottobock. With decades of experience, this is what Henning would share with anyone trying to find their footing within the industry: “Try to make sure that you find your way without really giving up on yourself, giving up on your character, giving up on what you are.”
2022-11-1724 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 11/16/202200:00 – BHIS – Talkin’ Bout [infosec] News 2022-11-1402:26 – Story # 1: Hackers Dump Australian Health Records Online After Insurer Refuses to Pay Ransom– https://gizmodo.com/hackers-health-info-online-medibank-pay-onion-dark-web-184976074210:04 – Story # 2: TransUnion […]
The post Talkin’ About Infosec News – 11/16/2022 appeared first on Black Hills Information Security, Inc..
2022-11-1657 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 11/11/202200:00 – PreShow Banter™ — A is for All Team00:33 – BHIS – Talkin’ Bout [infosec] News 2022-11-0703:56 – Story # 1: Musk to cut half of Twitter jobs and […]
The post Talkin’ About Infosec News – 11/11/2022 appeared first on Black Hills Information Security, Inc..
2022-11-1154 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 11/1/202200:00 – PreShow Banter™ — Spook Show00:58 – BHIS – Talkin’ Bout [infosec] News 2022-10-3104:00 – Story # 1: OpenSSL warns of critical security vulnerability with upcoming patch– https://www.zdnet.com/article/openssl-warns-of-critical-security-vulnerability-with-upcoming-patch/04:42 – Story […]
The post Talkin’ About Infosec News – 11/1/2022 appeared first on Black Hills Information Security, Inc..
2022-11-0145 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 10/17/202200:00 – PreShow Banter™ — Best WWHF Ever!00:31 – BHIS – Talkin’ Bout [infosec] News 2022-10-1704:55 – Story # 1: The Verge: Cybersecurity Week 2022– https://www.theverge.com/23365380/cybersecurity-week-series-phishing-encryption-device-security07:02 – Story # 2: Google […]
The post Talkin’ About Infosec News – 10/17/2022 appeared first on Black Hills Information Security, Inc..
2022-10-201h 00
Humans of InfoSecEpisode 73: The Impact of Communications in InfoSec & PrivacyZenobia Godschalk — SVP of Communications at Hedera Hashgraph, and Founder and CEO of ZAG Communications — shares how a passion for PR, tech, and privacy has shaped her career. From handling comms around cloud computing, to investor relations in InfoSec, and now spearheading awareness around distributed ledger technology, she shares helpful tips on how to build a flexible career in the world of tech, how to talk about security breaches, and what online identities could look like in the future.
2022-10-2023 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 10/5/202202:28 – Story # 1: American Airlines Breach Exposes Customer and Staff Information– https://www.infosecurity-magazine.com/news/american-airlines-breach-customer/18:59 – Story # 2: London police arrest, charge teen hacking suspect but won’t confirm GTA 6, Uber […]
The post Talkin’ About Infosec News – 10/5/2022 appeared first on Black Hills Information Security, Inc..
2022-10-0558 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 9/22/2022The post Talkin’ About Infosec News – 9/22/2022 appeared first on Black Hills Information Security, Inc..
2022-09-2251 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 9/13/2022The post Talkin’ About Infosec News – 9/13/2022 appeared first on Black Hills Information Security, Inc..
2022-09-1355 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 9/9/2022The post Talkin’ About Infosec News – 9/9/2022 appeared first on Black Hills Information Security, Inc..
2022-09-091h 01InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 8/26/2022ORIGINALLY AIRED ON AUGUST 22, 2022 00:00 – PreShow Banter™ — Ralph’s Birthday00:53 – BHIS – Talkin’ Bout [infosec] News 2022-08-2203:27 – Story # 1: PC store told it can’t […]
The post Talkin’ About Infosec News – 8/26/2022 appeared first on Black Hills Information Security, Inc..
2022-08-261h 02InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 8/18/2022ORIGINALLY AIRED ON AUGUST 15, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Sneaking Candy03:32 – BHIS – Talkin’ Bout [infosec] News 2022-08-1507:06 – Story # 1: […]
The post Talkin’ About Infosec News – 8/18/2022 appeared first on Black Hills Information Security, Inc..
2022-08-181h 00InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 7/25/2022ORIGINALLY AIRED ON JULY 25, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-07-25 03:59 – Story # 1: DOJ seized ransoms paid by […]
The post Talkin’ About Infosec News – 7/25/2022 appeared first on Black Hills Information Security, Inc..
2022-08-021h 03InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 7/18/2022ORIGINALLY AIRED ON JULY 18, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Talkin’ Bout Audio 07:23 – BHIS – Talkin’ Bout [infosec] News 2022-07-18 09:28 – […]
The post Talkin’ About Infosec News – 7/18/2022 appeared first on Black Hills Information Security, Inc..
2022-07-201h 06InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 7/11/2022ORIGINALLY AIRED ON JULY 11, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Cons, China, and Florida Man, oh my! 07:03 – Story # 1: North Korean […]
The post Talkin’ About Infosec News – 7/11/2022 appeared first on Black Hills Information Security, Inc..
2022-07-151h 00InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 6/27/2022ORIGINALLY AIRED ON JUNE 27, 2022 Articles discussed in this episode: 02:13 – Story # 1: The #1 Period Tracker on the App Store Will Hand Over Data Without a […]
The post Talkin’ About Infosec News – 6/27/2022 appeared first on Black Hills Information Security, Inc..
2022-06-3059 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 6/20/2022ORIGINALLY AIRED ON JUNE 20, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-06-20 01:31 – Story # 1: Internal TikTok Meetings Shows That […]
The post Talkin’ About Infosec News – 6/20/2022 appeared first on Black Hills Information Security, Inc..
2022-06-2446 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 6/13/2022ORIGINALLY AIRED ON JUNE 13, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-06-13 02:26 – Story # 1: Roblox Game Pass store used […]
The post Talkin’ About Infosec News – 6/13/2022 appeared first on Black Hills Information Security, Inc..
2022-06-221h 00InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 6/6/2022ORIGINALLY AIRED ON JUNE 6, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Boat Facts 01:38 – BHIS – Talkin’ Bout [infosec] News 2022-06-06 03:51 – Story […]
The post Talkin’ About Infosec News – 6/6/2022 appeared first on Black Hills Information Security, Inc..
2022-06-2157 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 5/23/2022ORIGINALLY AIRED ON MAY 23, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-05-23 02:38 – Story # 1 – National bank trolls hackers […]
The post Talkin’ About Infosec News – 5/23/2022 appeared first on Black Hills Information Security, Inc..
2022-06-2056 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 5/16/2022ORIGINALLY AIRED ON MAY 16, 2022 Articles discussed in this episode: 00:56 – Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors – https://threatpost.com/microsofts-may-patch-tuesday-updates-cause-windows-ad-authentication-errors/179631/ 08:56 – Update rings for […]
The post Talkin’ About Infosec News – 5/16/2022 appeared first on Black Hills Information Security, Inc..
2022-06-0756 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 5/9/2022ORIGINALLY AIRED ON MAY 9, 2022 Articles discussed in this episode: 00:00 – Bud Patches Reporting 02:27 – BHIS – Talkin’ Bout [infosec] News 2022-05-09 03:47 – Story # 1 […]
The post Talkin’ About Infosec News – 5/9/2022 appeared first on Black Hills Information Security, Inc..
2022-05-3152 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/25/2022ORIGINALLY AIRED ON APRIL 25, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Broken Twitter Finger 01:38 – ISO – Talkin’ Bout [infosec] News 2022-04-26 03:08 – […]
The post Talkin’ About Infosec News – 4/25/2022 appeared first on Black Hills Information Security, Inc..
2022-05-2555 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/25/2022ORIGINALLY AIRED ON APRIL 18, 2022 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2022-04-18 02:05 – Current Activity | CISA | https://www.cisa.gov/uscert/ncas/current-activity 02:58 – […]
The post Talkin’ About Infosec News – 4/25/2022 appeared first on Black Hills Information Security, Inc..
2022-04-2556 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/12/2022ORIGINALLY AIRED ON APRIL 11, 2022 Articles discussed in this episode: The US Navy had cybersecurity wrong. Expect change. – https://www.c4isrnet.com/digital-show-dailies/navy-league/2022/04/05/us-navy-had-cybersecurity-wrong-expect-change/ Hackers have found a clever new way to steal […]
The post Talkin’ About Infosec News – 4/12/2022 appeared first on Black Hills Information Security, Inc..
2022-04-121h 02InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 4/6/2022ORIGINALLY AIRED ON APRIL 4, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Blame it on the Intern 06:24 – Spring Time for Java – https://www.darkreading.com/application-security/zero-day-vulnerability-discovered-in-java-spring-framework 09:10 […]
The post Talkin’ About Infosec News – 4/6/2022 appeared first on Black Hills Information Security, Inc..
2022-04-0656 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 3/31/2022ORIGINALLY AIRED ON MARCH 28, 2022 Articles discussed in this episode: 01:42 – Suspected Okta hackers arrested by British police – https://www.reuters.com/world/uk/british-police-say-seven-people-arrested-after-okta-hack-2022-03-24/ 11:16 – A Closer Look at the LAPSUS$ […]
The post Talkin’ About Infosec News – 3/31/2022 appeared first on Black Hills Information Security, Inc..
2022-03-3159 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 3/30/2022ORIGINALLY AIRED ON MARCH 22, 2022 Articles discussed in this episode: 00:00 – BHIS – 2022-03-22 Special Newscast –Okta and Microsoft — Everything’s not burning down 10:27 – https://github.com/SigmaHQ/sigma/tree/master/rules/cloud/okta 13:29 […]
The post Talkin’ About Infosec News – 3/30/2022 appeared first on Black Hills Information Security, Inc..
2022-03-3049 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 3/4/2022ORIGINALLY AIRED ON FEBRUARY 28, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Off-Brand Trickx 00:43 – BHIS – Talkin’ Bout [infosec] News 2022-02-28 02:40 – BHIS […]
The post Talkin’ About Infosec News – 3/4/2022 appeared first on Black Hills Information Security, Inc..
2022-03-0456 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 2/11/2022ORIGINALLY AIRED ON FEBRUARY 7, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — I’m a Rocket Mail 01:21 – BHIS – Talkin’ Bout [infosec] News 2022-02-07 02:18 […]
The post Talkin’ About Infosec News – 2/11/2022 appeared first on Black Hills Information Security, Inc..
2022-02-1151 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 2/4/2022ORIGINALLY AIRED ON JANUARY 31, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Legions of the Undead 01:26 – BHIS – Talkin’ Bout [infosec] News 2022-01-31 04:06 […]
The post Talkin’ About Infosec News – 2/4/2022 appeared first on Black Hills Information Security, Inc..
2022-02-041h 01InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 1/27/2022ORIGINALLY AIRED ON JANUARY 24, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — The Monkey Dance 00:25 – BHIS – Talkin’ Bout [infosec] News 2022-01-24 01:49 – […]
The post Talkin’ About Infosec News – 1/27/2022 appeared first on Black Hills Information Security, Inc..
2022-01-2751 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 1/21/2022ORIGINALLY AIRED ON JANUARY 17, 2022 Articles discussed in this episode: 0:00:00 – PreShow Banter™ — Whose Ears Are Buring? 0:01:06 – BHIS – Talkin’ Bout [infosec] News 2022-01-17 0:02:27 […]
The post Talkin’ About Infosec News – 1/21/2022 appeared first on Black Hills Information Security, Inc..
2022-01-211h 04InfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 1/7/2022ORIGINALLY AIRED ON JANUARY 4, 2022 Articles discussed in this episode: 00:00 – PreShow Banter™ — Who’s Job Is It Anyway? 00:20 – BHIS – Talkin’ Bout [infosec] News 2022-01-04 […]
The post Talkin’ About Infosec News – 1/7/2022 appeared first on Black Hills Information Security, Inc..
2022-01-0750 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 12/22/2021ORIGINALLY AIRED ON DECEMBER 20, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — Getting Nerdy With It 04:18 – BHIS – Talkin’ Bout [infosec] News 2021-12-20 – […]
The post Talkin’ About Infosec News – 12/22/2021 appeared first on Black Hills Information Security, Inc..
2021-12-2257 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 12/09/2021ORIGINALLY AIRED ON DECEMBER 6, 2021 Articles discussed in this episode: 00:18 – BHIS – Talkin’ Bout [infosec] News 2021-12-06 02:57 – Story # 1: Apple AirTag Car Thefts – […]
The post Talkin’ About Infosec News – 12/09/2021 appeared first on Black Hills Information Security, Inc..
2021-12-0958 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 11/17/2021ORIGINALLY AIRED ON NOVEMBER 15, 2021 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2021-11-15 02:22 – Story # 1: Robinhood data breach – https://www.bleepingcomputer.com/news/security/robinhood-discloses-data-breach-impacting-7-million-customers/ 07:27 […]
The post Talkin’ About Infosec News – 11/17/2021 appeared first on Black Hills Information Security, Inc..
2021-11-1757 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 11/12/2021ORIGINALLY AIRED ON November 08, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — God’s Waiting Room 03:08 – BHIS – Talkin’ Bout [infosec] News 2021-11-08 04:50 – […]
The post Talkin’ About Infosec News – 11/12/2021 appeared first on Black Hills Information Security, Inc..
2021-11-1243 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 9/17/2021ORIGINALLY AIRED ON SEPTEMBER 13, 2021 Articles discussed in this episode: 00:00 – BHIS – Talkin’ Bout [infosec] News 2021-09-13 02:59 – Story # 1: https://cyberworkx.in/2021/08/31/authentication-bypass-vulnerability-in-exchange-server/ 04:43 – Story # […]
The post Talkin’ About Infosec News – 9/17/2021 appeared first on Black Hills Information Security, Inc..
2021-09-1745 minInfoSec 101 Archives - Black Hills Information Security, Inc.Talkin’ About Infosec News – 8/25/2021ORIGINALLY AIRED ON AUGUST 23, 2021 Articles discussed in this episode: 00:00 – PreShow Banter™ — A Case of the Mondays 04:14 – Talkin’ Bout [InfoSec] News 2021-08-23 05:24 – […]
The post Talkin’ About Infosec News – 8/25/2021 appeared first on Black Hills Information Security, Inc..
2021-08-2556 minUNSECURITY: Information Security PodcastUNSECURITY Episode 116: CIS Controls Version 8 Public Call, The Root of InfoSec Problems, CISSPEpisode 116 of the UNSECURITY Podcast can really be broken into two parts. First. Evan and Brad discuss the CIS Controls Version 8 Public Call (running through 2/8/2021) and the changes that are expected made. Second, Evan posed a question about the root of all problems in the infosec industry on LinkedIn and has gotten an overwhelming response. Brad and Evan also chat about some of the responses. Finally, the guys provide an update on their free CISSP training course.Give this episode a listen/watch, then send us your questions, comments, and feedback to unsecurity@protonmail.com!
2021-01-271h 09Cyber WorkAsk us anything: Security awareness, behavior and culture (part 2) | Infosec Inspire 2020The final episode in our two-week long daily series includes four guests from the past two podcasts: David Hansen, Senior Analyst, Corporate IT Security & Compliance for Brookfield Renewable; Dan Teitsma, Information Security Specialist/Program Manager for Amway; Donna Gomez, Security Risk & Compliance Analyst for Johnson County Government in the State of Kansas; and Tomm Larson, Cyber Security Awareness Lead at Idaho National Laboratory. Our guests, along with moderator Tyler Schultz, answered questions that were sent in live during our virtual Infosec Inspire conference in September, including topics like the changes in awareness strategies in the face of mass work-from-home...
2020-11-2129 minCyber WorkCollaboration and cultural relevance: Taking security awareness global | Infosec Inspire 2020The old saying goes, it takes a village to raise a child. In the case of Brookfield Renewable’s Senior Analyst David Hansen and Amway’s Information Security Specialist Dan Teitsma, their village is global. It takes a collaborative network of peers to plan and manage a worldwide security awareness and training program. If that sounds daunting, let Dan and David walk you through their blueprints for getting buy-in from stakeholders and designing feedback loops that allow them to tailor their programs to be culturally relevant and appropriate to employees.For twelve days in November, Cyber Work will...
2020-11-2027 minCyber WorkInfluencing security mindsets and culture | Infosec Inspire 2020Communication, creativity and empathy are crucial in shifting from what we call a “have-to” security mindset (i.e., “I have to take this precaution because IT said so”) to a “want-to” mindset, which suggests employee buy-in to a company’s security policy beyond simply ticking off a to-do box or watching a training video. In today’s episode, Donna Gomez, Security Risk and Compliance Analyst for Johnson County Government in the State of Kansas, and Tomm Larson, Cyber Security Awareness Lead at Idaho National Laboratory, share security awareness and training strategies for putting learner experiences first, engaging employees and building your te...
2020-11-1931 minCyber WorkAsk us anything: Security awareness, behavior and culture (part 1) | Infosec Inspire 2020In today’s episode, two guests from our September Infosec Inspire event answer all questions related to security awareness. Keynote speaker Jinan Budge, Principal Security and Risk Analyst at Forrester, and Bruce Hallas of the “Rethinking the Human Factor” podcast took questions from our virtual audience, including where to focus your time and budget in educating your staff at times other than Security Awareness Month, picking employees to be security champions, and maturing your organization’s security culture. For twelve days in November, Cyber Work will be releasing a new episode every single day. In these dozen episodes...
2020-11-1833 minCyber WorkWhy we need to rethink the human factor | Infosec Inspire 2020Back in October, Cyber Work featured Bruce Hallas, author, speaker and host of the “Rethinking the Human Factor” podcast, to talk about his security awareness journey and strategies. In today’s episode, taken from the Infosec Inspire virtual conference, Bruce joins host Kristin Zurovich to talk about the ways that companies can move their security awareness strategies from a “have to” mindset, as in “I have to remember to do this because IT will yell at me if I don’t” to a “want to” mindset, in which security becomes not just a check-mark on a to-do list, but something that every...
2020-11-1730 minCyber WorkStorytelling in cybersecurity: The impact of a great story | Infosec Inspire 2020Steve Jobs once said, "The most powerful person in the world is the storyteller. The storyteller sets the vision, values and agenda of an entire generation that is to come." But it’s not just the C-suite who has this power – everyone has access to the powers of storytelling to enhance security awareness. Today’s episode features Sarah Moffatt, a talent development expert, leader, coach and speaker. Her passion in life is working to empower and excite people about the practice of security, and if you stick around for today’s episode, you’ll find out how!For twelve...
2020-11-1632 minCyber WorkAsk us anything: Developing security talent and teams (part 2) | Infosec Inspire 2020In the last two episodes, we talked about the importance of upskilling in employee engagement and retention and building stronger security teams by training for career progression, not just immediate tasks. Today, the guests of those two episodes, Jessica Amato of Raytheon Technologies, Romy Ricafort of Comcast Business, Katie Boswell of KPMG Cyber and Jason Jury of Booz Allen Hamilton answer some questions related to those discussions. They explore finding and recruiting new and novice cyber talent, methods of making diversity a robust part of your hiring strategy, best practices for the always scary process of moving between different...
2020-11-1432 minCyber WorkBuilding stronger teams: Career path development strategies | Infosec Inspire 2020On today’s episode, we discuss the strategies organizations can use to build stronger cybersecurity teams. Katie Boswell, Director of KPMG Cyber, and Jason Jury, Lead Associate at Booz Allen Hamilton, take you behind the scenes of KPMG's Cyber Academy and Booz Allen Hamilton's Cyber Core programs to share inspiration and strategies for building security talent internally and providing staff with progressive career path opportunities.For twelve days in November, Cyber Work will be releasing a new episode every single day. In these dozen episodes, we’ll discuss career strategies, hiring best practices, team development, security awareness esse...
2020-11-1332 minCyber WorkUpskilling to deepen employee engagement and retention | Infosec Inspire 2020Today we dive into a hot topic in the cybersecurity world: how to upskill, engage and retain your cybersecurity workforce. Jessica Amato, Operations Manager at Raytheon Technologies, and Romy Ricafort, Senior Director Sales Engineering at Comcast Business, know first-hand the powerful role an investment in skills development can have in engaging their employees. They’ve designed security training programs around empowering their staff with an emphasis on career progression, not just short-term problem solving. They’re here to share the strategies that have helped Raytheon and Comcast develop and strengthen employees!For twelve days in November, Cyber Work...
2020-11-1232 minCyber WorkAsk us anything: Developing security talent and teams (part 1) | Infosec Inspire 2020In the last two episodes, we talked about flipping the talent funnel and using the NICE Cybersecurity Workforce Framework to customize your company’s security training. Today, the guests of those two episodes, Danielle Santos, program manager at the National Initiative for Cybersecurity Education, Leo Van Duyn, Cybersecurity & Technology Workforce Development Strategy at JPMorgan Chase, and Karl Sharman, Head of Cyber Solutions & Consultancies at Stott & May, answer some questions related to those discussions. Danielle, Leo, and Karl discuss mentoring as a method to upskill less experienced members of your team, the unseen training costs of employee churn and a lo...
2020-11-1132 minCyber WorkClose your skills gap: Putting the NICE Workforce Framework for Cybersecurity to work | Infosec Inspire 2020We continue our twelve straight days of episodes with a discussion around the NICE Workforce Framework for Cybersecurity featuring Danielle Santos, program manager at NICE, Leo Van Duyn, Cybersecurity & Technology Workforce Development Strategy at JPMorgan Chase, and Infosec moderator Megan Sawle. Danielle and Leo explain how to provide targeted, role-based training based on knowledge, skills and competencies and guide you step-by-step through creating custom role profiles to match your organization’s specific cybersecurity needs.For twelve days in November, Cyber Work will be releasing a new episode every single day. In these dozen episodes, we’ll discuss care...
2020-11-1032 minCyber WorkFlip the funnel: Fixing the cybersecurity talent pipeline challenge | Infosec Inspire 2020For the next twelve days, Cyber Work will be releasing a new episode every single day. In these dozen episodes, we’ll discuss career strategies, hiring best practices, team development, security awareness essentials, the importance of storytelling in cybersecurity, and answer some questions from real cybersecurity professionals and newcomers. In our first episode, entitled “Flip the funnel: Fixing the cybersecurity talent pipeline challenge,” former Cyber Work Podcast guest Karl Sharman, Head of Cyber Solutions & Consultancies for Stott & May, and Infosec’s Director of Research & Product Marketing Megan Sawle drill down into the notion of the skills gap. Karl and...
2020-11-0928 minInfoSec 101 Archives - Black Hills Information Security, Inc.Webcast: Infosec Mentoring | How to Find and Be a Mentor & Mentee
They say it “takes a village” to help raise a child… well, it also takes a village to help raise an infosec professional. With so many technologies, techniques, and tools […]
The post Webcast: Infosec Mentoring | How to Find and Be a Mentor & Mentee appeared first on Black Hills Information Security, Inc..
2020-10-191h 26UNSECURITY: Information Security PodcastUNSECURITY Episode 69: InfoSec Responsibilities in the Home, RSA Recap, NewsEvan is back in the saddle after a week at RSA, and wraps up the conversation with Brad bout infosec roles and responsibilities—this time in the home. Give episode 69 a listen and let us know what you think at unsecurity@protonmail.com.
2020-03-021h 03