Shows
Professionally Evil PerspectiveUK Says it's "Zero Cool" to Use Weak Default PasswordsToday on The Professionally Evil Perspective, Nathan and Aaron discuss the UK's move to prohibit easily guessable default passwords. UK becomes first country to outlaw easily guessable default passwords Executive order on improving the nations cybersecurity Cute Cybersecurity Logos UK's device security law kicks in EnergyStar Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@hotdogggitty @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team...
2024-06-0319 min
Professionally Evil PerspectiveLegends & Losers: The Cost of a Gaming Tournament HakToday on The Professionally Evil Perspective, Nathan and Aaron discuss the Apex Legends hack that occured during a global esports tournament with a 5 million dollar prize pool. Esports League Postponed After Players Hacked Midgame BSides Oklahoma Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@hotdogggitty @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so...
2024-04-3022 min
Professionally Evil PerspectiveCandy Cam: Vending Machine Facial RecognitionToday on The Professionally Evil Perspective, Nathan and Aaron discuss the risk of vending machines using facial recognition software for targeted marketing. Facial Recognition Software Discovered in College Campus Vending Machines Ode to Reeses Peanut Butter Cups Flowers By Irene Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@hotdogggitty @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for...
2024-04-1827 min
And Security For AllEncore Employee Exploitation: To Test or Not to Test?On this episode of And Security For All, guest host Jonathan Kimmitt, CISO at Alias CyberSecurity, and his guests Julio Tirado, Executive VP- Director of Internal Audit at SpiritBank, and Nathan Sweaney, Principal Security Consultant at Secure Ideas, for a discussion on extortion testing critical positions. What are the ethical considerations in testing the susceptibility of an employee to extortion?
2023-12-2955 min
Professionally Evil PerspectiveTik Tok: Swipe Right for RiskToday on The Professionally Evil Perspective, Kevin and Nathan assess the risk of Tik Tok and how they themselves use it. Majority of Americans Say TikTok is a Threat the US National Security US senators unveil bipartisan bill empowering Biden to ban TikTok and other services Jack the Whipper RESTRICT Act Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our...
2023-08-2124 min
Professionally Evil PerspectiveTake This Breach And Cover ItToday on The Professionally Evil Perspective, Kevin and Nathan discuss the challenging and vital role of CISO's and how the successes or failures of an organization's security program falls on them. The Reformed Analyst Joe Sullivan Uber CISO Sentenced SEC Sends Wells Notice to SolarWinds Executives Lawyers Behaving Badly Podcast Serious Trouble Podcast Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas
2023-07-3122 min
Professionally Evil PerspectiveClose Encounters of the Nerd KindToday on The Professionally Evil Perspective, Kevin and Nathan discuss a whistleblower's claims that information about covert programs possessing intact crafts of non-human origin has been illegally withheld from Congress. INTELLIGENCE OFFICIALS SAY U.S. HAS RETRIEVED CRAFT OF NON-HUMAN ORIGIN The X-Files Close Encounters of the Third Kind Trailer Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack...
2023-07-1024 min
Professionally Evil PerspectiveByte-Size ExpertiseToday on The Professionally Evil Perspective, Kevin and Nathan discuss the SEC's proposed rules on public company cybersecurity, including the expertise of its board. Cybersecurity Risks and Privacy Rules Add Pressure on Boards NYDFS Proposes Amendments to Cybersecurity Regulation Public Company Cybersecurity; Proposed Rules Fact Sheet Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil...
2023-06-2619 min
Professionally Evil PerspectiveThe SSL Struggle JuggleToday on The Professionally Evil Perspective, Kevin and Nathan discuss SSL vulnerabilities and their challenges. The Silent Gaze of Braco The Art of Manliness Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd...
2023-06-1218 min
Professionally Evil PerspectiveWhat's AI Got To Do, Got To Do With It?Today on The Professionally Evil Perspective, Kevin and Nathan discuss the regulation of AI growth and development. OpenAI's Sam Altman Urges A.I. Regulation in Senate Hearing We Have No Moat, and Neither Does OpenAI Dark Web ChatGPT Unleashed: Meet DarkBERT Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs...
2023-05-2523 min
Professionally Evil PerspectiveSlashdot Roulette: Rants That MatterToday on The Professionally Evil Perspective, Kevin and Nathan throw it back to Slashdot. Get ready to be entertained by some rants about security stories plucked from the OG user-generated content and community-driven news website. Slashdot.org: News For Nerds, Stuff That Matters Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for...
2023-05-0729 min
Professionally Evil PerspectiveArtificially Intelligent or Naturally Dumb?Today on The Professionally Evil Perspective, Kevin and Nathan discuss AI and some of its caveats. Pause Giant AI Experiments: An Open Letter ChatGPT cooks up fake sexual harassment scandal Life of Dolly Professionally Evil Perspective: The Evolution of OWASP Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real...
2023-04-2822 min
Professionally Evil PerspectiveTake That to the BankToday on The Professionally Evil Perspective, Kevin and Nathan discuss the collapse of Silicon Valley Bank, the poor communication and decision-making that led to it, and Secure Ideas recent brush with banking mishaps.. Twitter Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have...
2023-03-2833 min
Professionally Evil PerspectiveThe Evolution of OWASPToday on The Professionally Evil Perspective, Kevin and Nathan discuss the open letter to OWASP, the organization's future aspirations, and sustainability. OWASP needs to evolve OWASP Budget Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or...
2023-03-1336 min
Professionally Evil PerspectiveWho Let The Genie Out Of The Roomba?Today on The Professionally Evil Perspective, Kevin and Nathan discuss sensitive photos taken by a robot vacuum and then leaked online . Roomba photos recorded bathroom photos leaked from test units. Click here to see if you are old. Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our t...
2023-02-2721 min
Professionally Evil PerspectiveMy Cousin AIToday on The Professionally Evil Perspective, Kevin and Nathan discuss donotpay.com and AI lawyers. DoNotPay.com The Robot Lawyer Was a Super Dumb Idea Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management...
2023-02-1322 min
Professionally Evil PerspectiveA lawyer walks into Radio City Music Hall...Today on The Professionally Evil Perspective, Kevin and Nathan discuss the removal of an attorney attending a show with her daughter at Radio City Music Hall in December. The attorney was employed by a law firm involved in a persoanl injury claim against the operator of Radio City Music Hall. The attorney was recognized through a facial recognition system. facial-recognition-bars-lawyer-rockettes-show Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas
2023-01-1723 min
Professionally Evil PerspectiveRainy Days for DrizlyToday on The Professionally Evil Perspective, Kevin and Nathan discuss the FTC actions on the Drizly breach and the responsibility of CEO's when security fails. Press Release: https://www.ftc.gov/news-events/news/press-releases/2022/10/ftc-takes-action-against-drizly-its-ceo-james-cory-rellas-security-failures-exposed-data-25-million Actual Ruling: https://www.ftc.gov/system/files/ftc_gov/pdf/202-3185-Drizly-Decision-and-Order.pdf Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally...
2022-12-0423 min
Professionally Evil PerspectiveAre you there God? It's THE Kevin JohnsonToday on The Professionally Evil Perspective, join Kevin and Nathan for discussion and questions surrounding identity and it's validation. Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas or find us on Mastadon: @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!
2022-11-1124 min
Professionally Evil PerspectiveThe Ethical Hacker LabelToday on The Professionally Evil Perspective, Kevin and Nathan discuss the term "Ethical Hacker" and what it implies. Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!
2022-10-2425 min
Professionally Evil PerspectiveReputational HarmToday on The Professionally Evil Perspective, Kevin and Nathan discuss the risk of reputational damage and the long-term impact of a security breach. Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!
2022-10-1220 min
Professionally Evil PerspectiveHey Kevin...how do I get into Infosec??Today on The Professionally Evil Perspective, Kevin and Nathan talk about different paths into Infosec. Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas Join our Professionally Evil Slack Team at www.professionallyevil.com Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you!
2022-09-1218 min
Professionally Evil PerspectiveLocked out of the right to repairToday on The Professionally Evil Perspective, Kevin and Nathan discuss the concept of "right to repair", or once you purchase something, should you be allowed to do whatever you want with it, and to it? And a controversy in Denver over a program that caused over 22,000 Xcel Energy customers to lose control of thier thermostats during an "energy emergency". Thousands of Xcel customers locked out of thermostats during energy emergency Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com or reach out on Twitter: @sweaney@darth_kevin @secureideas
2022-09-0528 min
Professionally Evil PerspectiveCFAA Policy Changes US Prosecutors Won't Charge White Hat Hackers Under New Policy @JeffStone500 Got suggestions, complaints, or feedback? Tell us at podcast@secureideas.com Or reach out on Twitter: Nathan Sweaney Kevin Johnson Secure Ideas Join our Professionally Evil Slack Team: Professionally Evil Slack Team Our real jobs pay for our time to do this, so if you have opportunities around penetration testing or risk management, we'd love the chance to work with you...
2022-05-2326 min
RSPA Trusted AdvisorRSPA Trusted Advisor Ep. 55: Security Trends & What to Expect in 2022In Episode 55 of “The Trusted Advisor,” the RSPA’s Jim Roddy sits down with Mark Shelhart, the Director of Digital Forensics and Incident Response at Foregenix, and RSPA Security Advisor Nathan Sweaney to discuss security trends in the retail IT channel and what VARs and ISVs should expect in 2022.
“The Trusted Advisor,” powered by the Retail Solutions Providers Association (RSPA), is an award-winning content series designed specifically for point of sale resellers and software developers. Our goal is to educate you on the topics of leadership, management, hiring, sales, and other small business best practices. For more in...
2021-09-1533 min
The Audit PodcastEp 60: War stories from a hacker w/Nathan Sweaney (Principal Security Consultant at Secure Ideas)This week we have Nathan Sweaney sharing some of his war stories as a pen tester! Nathan also talks about how pen testers work with auditors, what being a pen tester actually means, and what auditors who don't have security resources should do. Check out the Secure Ideas website for even more security info. Nathan also shares some of his favorite tools to stay secure including LastPass and Authy. Also, be sure to follow us on our new social media accounts on LinkedIn, Instagram, and TikTok. Also...
2021-08-1043 minRSPA Trusted AdvisorRSPA Trusted Advisor “Quick Take” Ep. 50: Security Advisor Nathan Sweaney on Zero Trust and Other Security TrendsIn Episode 50 of “The Trusted Advisor,” RSPA Security Advisor Nathan Sweaney previews the security education track for RetailNOW 2021. Sweaney and the RSPA’s Jim Roddy discuss balancing business needs with security preferences, which threats and technologies will remain relevant after COVID, and why POS solution providers should investigate the Zero Trust security model.
Scheduled for July 25-27 at the Gaylord Opryland in Nashville, RetailNOW 2021 will feature 20+ education sessions across six tracks: VAR & ISV Executive Education, Sales & Marketing, Customer Service, Security, Next Gen Technologies, and Cannabis. For more information on RetailNOW or to register for “Where The Indus...
2021-06-2233 min
GameTime ExcellenceEpisode 22 With Julio Tirado and Nathan Sweaney On Cyber SecurityNathan Sweaney
Nathan's a security consultant for Secure Ideas where he specializes in shattering assumptions and bypassing controls. He recently won the prestigious Smartest Dad award at his kids' school. You can find him easily online because privacy is an illusion.
Julio Tirado
Julio is the Director of Internal Audit at SpiritBank in which he evaluates the processes for managing risks and legal/regulatory compliance in areas such as cybersecurity, financial reporting/accounting, branch operations and other components of banking. Julio enjoys spending time with his son gaming and jamming o...
2021-02-111h 24
Shared Security PodcastTargeted Attacks Part 2 – Pretexting and Attack DevelopmentIn our September monthly episode we continue our three part series on targeted attacks. In this episode we discuss the pretext and how attackers develop and launch their attacks with special guests Nathan Sweaney, Senior Security Consultant at Secure Ideas and Kevin Johnson, CEO of Secure Ideas.
** Links mentioned on the show **
GoPhish – Open Source Phishing Framework
https://getgophish.com/
Follow Nathan on Twitter
https://twitter.com/sweaney
Follow and connect with Secure Ideas
https://secureideas.com/
** Watch this episode on YouTube **
https://yo...
2020-09-2949 min
Shared SecurityTargeted Attacks Part 2 - Pretexting and Attack DevelopmentIn our September monthly episode we continue our three part series on targeted attacks. In this episode we discuss the pretext and how attackers develop and launch their attacks with special guests Nathan Sweaney, Senior Security Consultant at Secure Ideas and Kevin Johnson, CEO of Secure Ideas. Show notes: https://sharedsecurity.net/2020/09/29/targeted-attacks-part-2-pretexting-and-attack-development/
2020-09-2949 min