Security Weekly Podcast Network (Video)

Dan Kuykendall is the Senior Director of Application Security Products at Rapid7 where he directs the strategic vision, research and product development for the company's application security solutions. Full Show Notes: https://wiki.securityweekly.com/ASW_Episode21 Follow us on Twitter: https://www.twitter.com/securityweekly

Tron Foundation acquired BitTorrent, PayPal acquired Simility, Panaseer raised $10M Series A, and Agari raised $40M Series E. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode90 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Struggling with unplanned work and finding the time to make change? Worry no more, my friends... I'll share the strategy I introduce to the team I work with. Then Paul and I break down the big exits, huge funding rounds, and innovation trends you need to know about. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode90 Visit http://securityweekly.com/category/ssw for all the latest episodes!

In the Security News this week, shutting down the Internet to prevent cheating, Yubico claims a bug bounty and upsets researchers, patching MRI scanners, getting your money back after being scammed, and a couple is caught selling golden tickets to heaven. Full Show Notes: https://wiki.securityweekly.com/Episode565 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Jason Wood delivers this technical segment on NMAP. Everyone loves using Nmap and the Nmap Scripting Engine. We don't always write NSE scripts though. Writing scripts for can be a bit intimidating at first, but they aren't too bad to get started on. In this tech segment, we will talk a bit about LUA, writing NSE scripts, and then write a couple of simple scripts to interact with Wordpress. Full Show Notes: https://wiki.securityweekly.com/Episode565 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Founder of Microsoft Azure Sphere, Galen Hunt is a Distinguished Engineer at Microsoft. Azure Sphere provides an end-to-end solution that enables any device manufacturer to create highly-secured devices; devices possessing all 7 Properties of Highly-Secured Devices. He is part of the launch team for Microsoft Research New Experiences and Technologies organization (MSR NExT). Full Show Notes: https://wiki.securityweekly.com/Episode565 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

IPFIX stands for Internet Protocol Flow Information Export. It was created due to a need for common, universal standard of export for Internet Protocol flow information from routers, probes, and other devices that are used by meditation systems, accounting/billing systems, and network management systems to facilitate services such as measurement, accounting, and billing. Full Show Notes: https://wiki.securityweekly.com/ES_Episode96 Visit http://securityweekly.com/esw for all the latest episodes!

ForeScout deepens visibility into OT networks with industrial system integrations, Trend Micro extends container security for DevOps, Sophos adds AI to improve Its email security solution, Fortinet optimizes web application firewall with new machine learning capabilities, and more on this episode of Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode96 Visit http://securityweekly.com/esw for all the latest episodes!

In the news, Microsoft Windows remote kernel crash vulnerability, another flaw hits Tapplock smart locks, cops aren't confident iPhone hackers found a workaround to Apple's new security feature Spain's La Giga app caught using fans' phone mics and GPS to detect illegal Futebol broadcasts, & more on this episode of Application Security Weekly!Full Show Notes: https://wiki.securityweekly.com/ASW_Episode20 Follow us on Twitter: https://www.twitter.comsecurityweekly

Ron started his cybersecurity career as a network penetration tester for the NSA. at BBN, he developed network honeypots to lure hackers and he ran US Internetworking's team of penetration testers and incident responders.Full Show Notes: https://wiki.securityweekly.com/ASW_Episode20 Follow us on Twitter: https://www.twitter.comsecurityweekly

In Tracking Security Innovation, Splunk acquired VictorOps for $120M, Claroty raised $60 in Series B, "MIT's Mind-Blowing Solutions to the 9 Hardest Startup Problems", "Two Techniques for Helping Employees Change Ingrained Habits", and more! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode89 Visit http://securityweekly.com/category/ssw for all the latest episodes!

In the Security News this week, Smart lock can be hacked in seconds, librarian sues Equifax over 2017 data breach wins $600, Neighbors of Cold War Air Force deserter knew him as 'Tim'. In the random and potentially interesting stories, a defecating Pennsylvania driver and researchers studied 160 million memes. Full Show Notes: https://wiki.securityweekly.com/Episode564 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Sandra (Sandy) Dunn has over 24 years in the software and hardware industry. Initially starting out in software and hardware sales she worked with NASA, JPL, Secret Service, IRS, and other Federal Agencies to determine their server, PC, and notebook sales. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode89 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Keith will be talking through some of the tools, techniques, and procedures he uses to perform recon, identify targets of interest, and report findings faster and easier. Full Show Notes: https://wiki.securityweekly.com/Episode564 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

As the Vice President of Trust & Security, Jason works with clients and security researchers to create high value, sustainable, and impactful bug bounty programs. Full Show Notes: https://wiki.securityweekly.com/Episode564 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the Enterprise News, Riverbed announced the latest release of Riverbed SteelCentral, Tufin advances automation capabilities with Tufin Orchestration Suite R18-1, ServiceNow announces new conversational bot, Splunk agrees to acquire VictorOps, and more on this episode of Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode95 Visit http://securityweekly.com/esw for all the latest episodes!

In Tracking Security Innovation, Fortinet acquires Bradford Networks, Qualys acquires Second Front Systems, CounterTack acquires GoSecure, Panorays raised $5 million in an unattributed round, OneLogin raised $22.5 million Series C, and more! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode88 Visit http://securityweekly.com/category/sswfor all the latest episodes!

Peter Chestna is the Director of Developer Engagement Veracode. He comes on the show to talk about the article he wrote called "The 3 Ways of DevSecOps". Full Show Notes: https://wiki.securityweekly.com/ASW_Episode19 Follow us on Twitter: https://www.twitter.comsecurityweekly

Application news, DevOps food for thought, learning & tools from BitHubLab, and bugs, breaches, and more! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode19 Follow us on Twitter: https://www.twitter.comsecurityweekly

Dr. Laurence J. Peter's paradox, do senior executives have the wisdom and discipline to get enough sleep, the changing face of B2B Marketing, and the questions the best mentors ask. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode88 Visit http://securityweekly.com/category/sswfor all the latest episodes!

Masha Sedova is an industry-recognized people-security expert, speaker and trainer focused on engaging people to be key elements of secure organizations. She is the co-founder of Elevate Security delivering the first human-centric security platform that leverages behavioral-science to transform employees into security superhumans. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode88 Visit http://securityweekly.com/category/sswfor all the latest episodes!

John Kinsella is a co-founder and head of product for Layered Insight, a container security startup based in San Francisco, California. His 20-year background includes security and network consulting, software development, and datacenter operations. Full Show Notes: https://wiki.securityweekly.com/Episode563 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the Security News this week, Google Chrome has a critical vulnerability, Flash has another zero-day exploit, Colorado passes "most stringent" breach notification law, hackers hack a plane from the ground. Full Show Notes: https://wiki.securityweekly.com/Episode563 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Jake Reynolds is the Technology Alliances Engineer at LogRhythm, where he is responsible for supporting the development and management of the company's integrations with third-party technology providers. Full Show Notes: https://wiki.securityweekly.com/Episode563 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the news, Infoblox research finds explosion of personal and IoT devices, Qualys announces letter of intent to acquire second front systems, Fortinet acquires Bradford Networks, Tenable extends cloud application security scanning capabilities, and more on this episode of Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode94 Visit http://securityweekly.com/esw for all the latest episodes!

In Tracking Security Innovation, Microsoft to acquire GitHub for $7.5B, Thoma Bravo acquired LogRhythm for undisclosed, KnowBe4 acquired exploqii for undisclosed, Signifyd raised $100M Series D, Cyberbit raised $30M in an equity round, and more! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode87 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Paul and John welcome Adrian Sanabria, Director of Research for Savage Security; Dave Kennedy, Founder of TrustedSec, Binary Defense, and DerbyCon; and Security Weekly's very own Jeff Man! Paul and John have a group discussion with Adrian, Jeff, and Dave on Penetration Testing! Full Show Notes: https://wiki.securityweekly.com/ES_Episode94 Visit http://securityweekly.com/esw for all the latest episodes!

In the news, how other companies are responding to GDPR, Oracle plans to drop Java Serialization Port, Microsoft acquires GitHub, the percentage of open source code in proprietary apps is rising, & more on this episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode18 Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Jonathan Pritchard is a business consultant specializing in the psychology of communication, negotiation, influence, and sales. Previously he spent 15 years traveling the world as a mentalist, and currently he works with companies like Disney, Universal, State Farm Insurance, and more helping them engage their audiences. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode87 Visit http://securityweekly.com/category/ssw for all the latest episodes!

This week, Keith and Paul discuss what the difference is between Agile, CI/CD, and DevOps! Agile is focused on processed, highlighting change, all while accelerating delivery. CI/CD focuses on software-defined life cycles, highlighting tools, all that emphasize automation. DevOps focuses on culture, highlighting roles that emphasize responsiveness. Full Show Notes: https://wiki.securityweekly.com/ASW_Episode18 Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Dozens of vulnerabilities discovered in DoD's enterprise travel system, what Apple hiding with iOS 11.4, Git repository vulnerability leds to remote code execution attacks, and feeling for Kaspersky. Full Show Notes: https://wiki.securityweekly.com/Episode562 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Christian Hamer is the Chief Information Security Officer at Harvard University. Christian leads the University's information security program, which includes oversight of the University-wide information security policy. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode87 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Chris is a full time husband, father of four, and pen tester; he's a part time Army officer, an aspiring SANS instructor, and the back-up church bass player. Lee Ford spent 2yrs in Information security as the DCOE Assnt Team Chief. Was the lead Project Officer for the stand up of the MA Cyber Battalion. Full Show Notes: https://wiki.securityweekly.com/Episode562 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Ronnie Flathers is an experienced pentester and security consultant who is equally addicted to both netsec and appsec and splits his time appropriately. He currently is the AppSec Pentest Lead at Uptake. Ronnie joins Paul and the crew this week for an interview! Full Show Notes: https://wiki.securityweekly.com/Episode562 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the news, Malwarebytes completes deal to acquire Binisoft, Lastline tackles advanced malware threats, Duo Security names Veteran marketing Leader, Neville Letzerich as Chief Marketing Officer, InAuth launches enhanced secure Two-Factor Auth solution, and more on this episode of Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode93 Visit http://securityweekly.com/esw for all the latest episodes!

Eric Bednash is the CEO and co-founder of RackTop Systems. Jonathan Halstuch is the Chief Technology Officer and co-founder of RackTop Systems. Eric and Jonathan joins Paul and John this week for an interview! Full Show Notes: https://wiki.securityweekly.com/ES_Episode93 Visit http://securityweekly.com/esw for all the latest episodes!

In the news, what will GDPR's impact be on U.S. consumer privacy, DOJ Sinkholes VPNfilter control servers found in U.S., the most important characteristics of a successful DevOps engineer, FBI seizes domain Russia allegedly used to infect 500,000 consumer routers, Florida man tasered after walking naked through neighborhood carrying cooking oil, and more on this episode of Paul's Security Weekly! Full Show Notes: https://wiki.securityweekly.com/Episode561 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Sven Morgenroth is a security researcher at Netsparker. He found filter bypasses for Chrome's XSS auditor and several web application firewalls. He likes to exploit vulnerabilities in creative ways and has hacked his smart TV without even leaving his bed. Sven writes about web application security and documents his research on the Netsparker blog. Why it's dangerous to put sensitive information to your javascript files. Way developers hide secret variables. Full Show Notes: https://wiki.securityweekly.com/Episode561 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Steven M. Bellovin is the Percy K. and Vidal L. W. Hudson Professor of Computer Science at Columbia University, member of the Cybersecurity and Privacy Center of the university's Data Science Institute, and an affiliate faculty member at Columbia Law School. He does research on security and privacy and on related public policy issues. Steven joins Paul and the crew this week for an interview! Full Show Notes: https://wiki.securityweekly.com/Episode561 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the news,Blueliv boosts its cyber-threat intelligence platform, Skybox partners with Exclusive Networks, Global Scheduling and Automation Software Market 2018 IBM, BMC Software, CA Technologies, VMware Cherry Grrl, McAfee developing security solutions for digital wallets, and more on this episode of Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode92 Visit http://securityweekly.com/esw for all the latest episodes!

John gives a Technical Segment this week entitled "Building A Purple Team". He talks about different MITRE Tools. Full Show Notes: https://wiki.securityweekly.com/ES_Episode92 Visit http://securityweekly.com/esw for all the latest episodes!

In the news, the entire Nest ecosystem of smart home devices goes offline, how Alphabet plans to keep hackers away from this year's election, the Node.js Ecosystem is chaotic and insecure, open-source vulnerabilities plague enterprise codebase systems, & more on this episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode1 Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In Tracking Security Innovation, Capital One acquired Confyrm, TransUnion acquired Iovation, Auth0 raised $55M Series D, Tanium raised $175M in equity, Cisco forming New Venture Fund, and more! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode86 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Terry Mason is the Head of Information Risk & Technology Governance at a global multi-strategy hedge fund with 15+ years of experience in information security, technology governance, technology infrastructure, and project management. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode86 Visit http://securityweekly.com/category/ssw for all the latest episodes!

James is the creator and founder of the Lonestar Application Security Conference which is the largest annual security conference in Austin, TX. He also runs DevOps Days Austin and is on the global DevOps Days board. He also holds several security certifications including CISSP and GWAPT. He joins Keith and Paul this week for an interview! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode1 Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Corey Thuen is a founder of Gravwell and has spent over a decade in ICS (OT), IT, and IoT security. Kristopher Watts is a founder of Gravwell and has spent over a decade in large scale Emulytics, virtualization, ICS, and embedded security. Full Show Notes: https://wiki.securityweekly.com/BSWEpisode86 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Google Project Zero call Windows 10 Edge Defense ACG flawed, Wapiti Web Application vulnerability scanner 3.0.1 packet storm, CIA's "Vault 7" Mega-Leak, and Trump eliminates national cyber-coordinator! Full Show Notes: https://wiki.securityweekly.com/Episode560 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Sometimes you just need a router handy when traveling. This allows you to connect multiple devices, use a VPN for all of them, and allow you to connect to a network via Wifi, Ethernet or USB 4G modem/Tether. All this for just $32 and a little configuration time! Learn how in this technical segment. Full Show Notes: https://wiki.securityweekly.com/Episode560 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

This week we interview Matthew Silva, an Undergraduate student attending Roger Williams University, and is the President and Founder of the Cybersecurity and Intel Club! Full Show Notes: https://wiki.securityweekly.com/Episode560 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

ServiceNow introduces virtual agent, Red Hat to integrate CoreOS with OpenShift, Thycotic announces IBM Security, and Gurucul Fraud Analytics Solution monitors users. Full Show Notes: https://wiki.securityweekly.com/ES_Episode91 Visit http://securityweekly.com/esw for all the latest episodes!