Stephen Lacey and Andrew Leyland are your guide to Marvel's First Family, The Fantastic Four. Starting at the very beginning of the Marvel Age of Comics, they cover every issue of The Fantastic Four, every spinoff title (Strange Tales, Marvel Two-In-One, FF, and more), every guest appearance and every cameo, all in order of publication.
…
continue reading
After 33 years behind the Newstalk ZB microphone, Leighton can’t give it up completely. There were so many requests to continue his opinionated commentary that the prospect of podcasting was born. So, without restriction, Leighton continues to serve up on everything you want to hear about and some things you don’t. Stand by to be enlightened, educated and enraged!
…
continue reading
This feed includes all episodes of Paul's Security Weekly, Enterprise Security Weekly, Business Security Weekly, Application Security Weekly, and Security Weekly News! Your one-stop shop for all things Security Weekly!
…
continue reading
This feed includes all episodes of Paul's Security Weekly, Enterprise Security Weekly, Business Security Weekly, Application Security Weekly, and Security Weekly News! Your one-stop shop for all things Security Weekly!
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Leighton Smith Podcast #250 - August 7th 2024 - Andrew Hollis and Bryan Leyland
1:24:17
1:24:17
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:24:17
Over the last few years, three men (two New Zealanders and a South African) have researched the “science” of global warming. They are not “climate scientists”, rather they are laymen. Unrestricted by career threats, they published “CLIMATE ACTUALLY, AND SOME TAKEAWAYS’. They are now about to release volume two. Further details are in the interview …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
SaaS Security Beyond Just Misconfiguration & Expert Insights on Cybersecurity Ethics - Ed Skoudis, Maor Bin - ESW #374
32:57
32:57
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
32:57
In this interview, Maor Bin, CEO and Co-Founder of Adaptive Shield, discusses the evolving landscape of SaaS Security. He highlights the challenges posed by the security gap resulting from the rapid adoption of SaaS applications and why SaaS security is beyond just misconfiguration management. Segment Resources: https://www.adaptive-shield.com/land…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Interview with ThreatLocker: Is Application Allowlisting Making a Comeback? - Danny Jenkins - ESW #374
33:59
33:59
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
33:59
I often say that it isn't the concepts or ideas in cybersecurity that are bad, but the implementations of them. Sometimes the market timing is just wrong and the industry isn't ready for a particular technology (e.g. enterprise browsers). Other times, the technology just isn't ready yet (e.g. SIEMs needed better database technology and faster stora…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Building AI BOMs - Helen Oakley - PSW #841
3:01:47
3:01:47
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
3:01:47
Larry and Helen walk us through the AI supply chain landscape. Learn what goes into building and using AI models and the dangers that could lurk within. Segment Resources: Community efforts on AIBOM topic: https://github.com/aibom-squad This week: I want all the firmware, its not just TP-Link, CVEs for malware, BLE and your health, faking your own …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin', Aaran Leyland... - SWN #411
34:05
34:05
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
34:05
Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin', Aaran Leyland, and More on the Security Weekly News. Show Notes: https://securityweekly.com/swn-411
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin', Aaran Leyland... - SWN #411
34:03
34:03
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
34:03
Daleks, AVTECH, Palo Alto, VMWARE, Travel, California AI Dreamin', Aaran Leyland, and More on the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-411
…
continue reading
![Artwork](/static/images/128pixel.png)
1
What asset management (ITAM) looks like outside cybersecurity - Danny Jenkins, Ed Skoudis, Jeremy Boerger, Maor Bin - ESW #374
1:44:09
1:44:09
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:44:09
The top priority on the CIS Critical Security Controls list has never changed: inventory and control of enterprise assets. Yet it remains one of the most challenging controls to implement, much less master. The refrain, "you can't secure what you don't know about" is as old as information security itself. Complicating this task is the fact that imp…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
What asset management (ITAM) looks like outside cybersecurity - Jeremy Boerger - ESW #374
37:29
37:29
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
37:29
The top priority on the CIS Critical Security Controls list has never changed: inventory and control of enterprise assets. Yet it remains one of the most challenging controls to implement, much less master. The refrain, "you can't secure what you don't know about" is as old as information security itself. Complicating this task is the fact that imp…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
I want ALL The Firmware - PSW #841
2:00:25
2:00:25
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
2:00:25
This week: I want all the firmware, its not just TP-Link, CVEs for malware, BLE and your health, faking your own death, serial ports, stealthy Linux malware, call this number, finding all the Wordpress plugin vulnerabilities! Show Notes: https://securityweekly.com/psw-841
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Building AI BOMs - Helen Oakley - PSW #841
1:01:39
1:01:39
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:01:39
Larry and Helen walk us through the AI supply chain landscape. Learn what goes into building and using AI models and the dangers that could lurk within. Segment Resources: Community efforts on AIBOM topic: https://github.com/aibom-squad Show Notes: https://securityweekly.com/psw-841
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Leighton Smith Podcast #253 - August 28th 2024 - Jill Ovens and Behnam Ben Taleblu
1:44:07
1:44:07
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:44:07
“Without an anchor in biological reality, laws based on ’sex’ become meaningless and justice cannot be served.” So wrote evolutionary biologist Colin Wright. Jill Ovens, National Secretary and Co-Leader of the Women’s Rights Party, responds to the ruling of an Australian Judge that sex is changeable in a case involving ‘gender identity’. And common…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Apache HTTPD Vulns, Hacking IoT Speakers, Use Cases for WASM, Slack AI Leak - ASW #297
27:08
27:08
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
27:08
Research by Orange Tsai into Apache HTTPD's architecture reveals several vulns, NCC Group shows techniques for hacking IoT devices with Sonos speakers, finding use cases for WebAssembly, Slack's AI leaks data, DARPA wants a future of Rust, and more! Show Notes: https://securityweekly.com/asw-297
…
continue reading
![Artwork](/static/images/128pixel.png)
1
MGs, Free Speech, sedexp, Cthulhu, SeaTac, GrimResource, ServiceBridge, Josh Marpet.. - SWN #410
35:04
35:04
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
35:04
MGs, Free Speech, sedexp, Cthulhu, SeaTac, GrimResource, ServiceBridge, the FBI, Josh Marpet, and more, on this Edition of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-410
…
continue reading
![Artwork](/static/images/128pixel.png)
1
MGs, Free Speech, sedexp, Cthulhu, SeaTac, GrimResource, ServiceBridge, Josh Marpet.. - SWN #410
35:14
35:14
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
35:14
MGs, Free Speech, sedexp, Cthulhu, SeaTac, GrimResource, ServiceBridge, the FBI, Josh Marpet, and more, on this Edition of the Security Weekly News. Show Notes: https://securityweekly.com/swn-410
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297
1:04:28
1:04:28
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:04:28
IoT devices are notorious for weak designs, insecure implementations, and a lifecycle that mostly ignores patching. We look at external factors that might lead to change, like the FCC's cybersecurity labeling for IoT. We explore the constraints that often influence poor security on these devices, whether those constraints are as consequential given…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Changing the Course of IoT's Future from Its Insecure Past - Paddy Harrington - ASW #297
37:21
37:21
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
37:21
IoT devices are notorious for weak designs, insecure implementations, and a lifecycle that mostly ignores patching. We look at external factors that might lead to change, like the FCC's cybersecurity labeling for IoT. We explore the constraints that often influence poor security on these devices, whether those constraints are as consequential given…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
CEOs need to be bold, but can CISOs keep up? - BSW #362
31:45
31:45
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
31:45
This week we talk a lot about the CISO's relationship with the business and the challenges of being aligned and keeping up. We also talk about budget priorities, the challenge of doing security in small businesses, and the ever-present challenge of burnout. Finally, we discuss what servant leadership actually means. On this last topic, Ben makes a …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Changing Risk Landscape: CISO Liability - Darren Shou - BSW #362
35:52
35:52
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
35:52
How are personal liability and indemnification impacting the CISO role? Darren Shou, Chief Strategy Officer from RSA Conference, describes the current landscape of CISO liability and the challenges facing CISOs today. He discusses the implications of the SEC's recent actions, including the charges against SolarWinds' CISO, and the growing trend of …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Changing Risk Landscape: CISO Liability - Darren Shou - BSW #362
1:07:35
1:07:35
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:07:35
How are personal liability and indemnification impacting the CISO role? Darren Shou, Chief Strategy Officer from RSA Conference, describes the current landscape of CISO liability and the challenges facing CISOs today. He discusses the implications of the SEC's recent actions, including the charges against SolarWinds' CISO, and the growing trend of …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Let’s Get Real About Where AI can Help SecOps & AI, Automation & Low-Code - Mike Lyborg, Brandon Potter - ESW #373
32:22
32:22
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
32:22
Swimlane and GenAI Join Swimlane CISO, Mike Lyborg and Security Weekly’s Mandy Logan as they cut through the AI peanut butter! While Generative AI is the not-so-new hot topic, it's also not the first time the cybersecurity industry has embraced emerging technology that can mimic human actions. Security automation and its ability to take action on b…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Faking your own death, Fake Reviews, Solar Winds, Recall, Winux, Kubernetes, and More - SWN #409
31:03
31:03
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
31:03
Faking your death, Fake Reviews, Solar Winds, AWS, Recall, Winux, Kubernetes, and More on the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-409
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Faking your own death, Fake Reviews, Solar Winds, Recall, Winux, Kubernetes, and More - SWN #409
31:12
31:12
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
31:12
Faking your death, Fake Reviews, Solar Winds, AWS, Recall, Winux, Kubernetes, and More on the Security Weekly News. Show Notes: https://securityweekly.com/swn-409
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The end of the road for some cyber startups & making detection actually work! - Vivek Bhandari, Vivek Ramachandran, Mike Lyborg, Brandon Potter - ESW #373
2:26:35
2:26:35
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
2:26:35
This week, in the enterprise security news, A funding that looks like an acquisition And two for-sure acquisitions Rumors that there are funding problems for early stage cyber startups, and we’ll see a lot more acquisitions before the end of the year Speaking of rumors, Crowdstrike did NOT like last week’s Action1 acquisition rumor! Shortening dete…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Vulnerabilities, Vulnerabilities Everywhere - PSW #840
1:56:39
1:56:39
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:56:39
This week: YAVD: Yet Another Vulnerable Driver, why bring your own when one already exists, backdoors in MIFARE Classic, wireless hacking tips, AMD sinkclose vulnerability will keep running, you down with SLDP yea you know me, Phrack!, IoTGoats, Pixel vulnerabilities, leaking variables, a DEF CON talk that was not cancelled, Telnet is still a thing…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The end of the road for some cyber startups & making detection actually work! - ESW #373
1:17:58
1:17:58
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:17:58
This week, in the enterprise security news, A funding that looks like an acquisition And two for-sure acquisitions Rumors that there are funding problems for early stage cyber startups, and we’ll see a lot more acquisitions before the end of the year Speaking of rumors, Crowdstrike did NOT like last week’s Action1 acquisition rumor! Shortening dete…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
How do we patch the right things? - Josh Bressers - PSW #840
2:58:57
2:58:57
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
2:58:57
Every week here on the show we talk about vulnerabilities and exploits. Typically we recommend that organizations remediate these vulnerabilities in some way. But how? And more importantly, which ones? Some tools we have to help us are actually not all that helpful at time, such as: Mitre Att&ck - Don't get me wrong, this is a great project and Ada…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
How do we patch the right things? - PSW #840
1:02:37
1:02:37
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:02:37
Every week here on the show we talk about vulnerabilities and exploits. Typically we recommend that organizations remediate these vulnerabilities in some way. But how? And more importantly, which ones? Some tools we have to help us are actually not all that helpful at time, such as: Mitre Att&ck - Don't get me wrong, this is a great project and Ada…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Secure Web Gateways Have Failed Us & Using AI to Prevent the Next CrowdStrike Outage - Vivek Ramachandran, Vivek Bhandari - ESW #373
36:38
36:38
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
36:38
SquareX With employees spending most of their working hours on the browser, web attacks are one of the biggest attack vectors today. Yet, both enterprises and security vendors today aren’t focused on securing the browser – a huge risk given that attackers can easily bypass Secure Web Gateways, SASE and SSE solutions. This segment will demonstrate t…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Leighton Smith Podcast #252 - August 21th 2024 - Dr Stephen Rainbow
1:32:23
1:32:23
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
1:32:23
Last Friday Justice Minister Paul Goldsmith announced the new Chief of the Human Rights Commission. As always, there will be disagreement over the appointment. Dr Stephen Rainbow brings broad experience to the task before him. Controversy is no stranger. After an hour of discussion, you’ll have a good idea of Rainbow’s stance on some critical issue…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Navigating the Path to Maturity & AI is helping combat cyber threats - Shimon Modi, Boaz Barzel - ASW #296
39:21
39:21
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
39:21
As development cycles shorten and more responsibilities shift to developers, application security (AppSec) is rapidly evolving. Organizations are increasingly building mature programs that automate and enhance AppSec, moving beyond manual processes. In this discussion, we explore how organizations are adapting their AppSec practices, highlighting t…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Dangerous books, Microsoft plus, NPD, Solar Winds, Jenkins, and more... - SWN #408
27:57
27:57
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
27:57
Dangerous books, Microsoft Plus, NPD, Solar Winds, Jenkins, and more, on this Edition of the Security Weekly News. Show Notes: https://securityweekly.com/swn-408
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Fallout and Lessons Learned from the CrowdStrike Fiasco - Allie Mellen, Jeff Pollard - ASW #296
42:38
42:38
Прослушать позже
Прослушать позже
Списки
Нравится
Нравится
42:38
This week, Jeff Pollard and Allie Mellen join us to discuss the fallout and lessons learned from the CrowdStrike fiasco. They explore the reasons behind running in the kernel, the challenges of software quality, and the distinction between a security incident and an IT incident. They also touch on the need to reduce the attack surface and the impor…
…
continue reading