Security Weekly Podcast Network (Video)

This week, Paul and Keith discuss the last of the top ten most critical web application security risks! They discuss security misconfiguration, insecure deserialization, insufficient logging and monitoring, and more on this episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode02 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the news, BIND comes apart thanks to ancient denial of service vuln, Brickerbot taking out your IoT one device at a time, Intel fix causes reboots and slowdowns, WiFi alliance announces WPA3 and updates to WPA2, hackers exploiting three Microsoft Office flaws to spread Zyklon malware,and more on this episode of Paul's Security Weekly! Full Show Notes: https://wiki.securityweekly.com/Episode544 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the Application Security News, Paul and Keith discuss Google Chromecast and Google Chrome, ballistic missile alerts, Intel AMT security issues, and the stress of remote working! All that and more, on this episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode02 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Rebekah Brown has spent more than a decade working in intelligence and information security. Today, Rebekah leads the threat intelligence programs at Rapid7, where her responsibilities include programs, architecture, management, analysis, and operations. This week she joins Paul and team for an interview! Full Show Notes: https://wiki.securityweekly.com/Episode544 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

With over 30 years of experience as both an educator and IT professional, Adam holds numerous Professional IT Certifications. He joins Paul and team this week for an interview on Paul's Security Weekly! Full Show Notes: https://wiki.securityweekly.com/Episode544 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the news, privileged account management into the hybrid cloud, VIVOTEK and Trend Micro announce strategic partnership, Moneris partners with Kount to expand fraud protection services for Canadian online businesses, AlgoSec delivers complete end-to-end visibility and security management across the entire hybrid environment, and more enterprise security news! Full Show Notes: https://wiki.securityweekly.com/ES_Episode76 Visit http://securityweekly.com/esw for all the latest episodes!

As a security specialist, Clayton has helped clients improve security programs across the world. A thorough understanding of business drivers coupled with the ability to diagnose risk has allowed Clayton to help companies avoid being a headline. Full Show Notes: https://wiki.securityweekly.com/ES_Episode76 Visit http://securityweekly.com/esw for all the latest episodes!

In the Security News, Paul and Michael discuss SolarWinds acquiring LOGGLY (undisclosed), Verizon acquires Niddel, Cyxtera Technologies acquires Immunity (undisclosed), and Arctic Wolf raised $16M in Equity! All that and more on this episode of Business Security Weekly! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode69 Visit http://securityweekly.com/category/ssw for all the latest episodes!

This week, Paul and Michael talk about how to be more productive without burning out, what it takes to become a great product manager, what cybersecurity chiefs can learn from Warren Buffett, and the importance of explaining "Why" before "What" when you need help! All that and more, on this week's episode of Business Security Weekly! Full Show Notes: https://wiki.securityweekly.com/BSWEpisode69 Visit http://securityweekly.com/category/ssw for all the latest episodes!

This week, Paul reports on malicious Google Chrome extensions affecting 500K users, configuration errors in Intel workstations being labeled a security hole, VMware releases security updates for Workstation, Fusion, and Oracle still silent on Meltdown! Jason Wood joins us for the expert commentary on testing detection tools, and more on this episode of Hack Naked News! →Full Show Notes: https://wiki.securityweekly.com/HNNEpisode157 →Visit our website: https://www.securityweekly.com →Follow us on Twitter: https://www.twitter.com/securityweekly →Like us on Facebook: https://www.facebook.com/secweekly

In the news, prosecutors say Mac Spyware stole millions of user images over 13 years, Skype finally getting end-to-end encryption, Apple set to patch yet another macOS password security flaw, 147 security vulnerabilities reported in ICS mobile applications, we discuss,and more on this episode of Paul's Security Weekly! Full Show Notes: https://wiki.securityweekly.com/Episdoe543 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

This week, Paul and Keith discuss the ten most critical web application security risks! They discuss broken authentication, sensible data exposure, XML external entities (XXE), broken access control, security configuration, and more on this episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode01 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Jake Williams is the founder of Rendition Infosec and is a Senior Instructor at the SANS Institute. MalwareJake clears last weeks news story with the latest news on Meltdown and Spectre. He joins us this week for an interview! Full Show Notes: https://wiki.securityweekly.com/Episdoe54 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

In the Application Security News, Paul and Keith discuss how malicious NPM packages could harvest credit card numbers and passwords from your site, NVIDIA updates video drivers to help address CPU memory security, multiple vulnerabilities in PHP could allow for arbitrary code execution, and Oracle WebLogic vulnerabilities being exploited by Bitcoin miners! All that and more, on this episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode01 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Diana Kelley is the Cybersecurity Field CTO at Microsoft and a cybersecurity thought leader, practitioner, executive advisor, speaker, author and co-founder of SecurityCurve. Ed Moyle is currently Director of Thought Leadership and Research for ISACA. Prior to joining ISACA, Ed was Senior Security Strategist with Savvis and a founding partner of the analyst firm Security Curve. Diana and Ed join us this week for an interview on Paul's Security Weekly! Full Show Notes: https://wiki.securityweekly.com/Episdoe54 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Matt Alderman talks about container security with Paul! They analyze Docker, static analysis tools, and image build processes! Full Show Notes: https://wiki.securityweekly.com/ES_Episode75 Visit http://securityweekly.com/esw for all the latest episodes!

CASB Bitglass, WhiteHat, and Twistlock - Enterprise Security Weekly #75 In the news, CASB Bitglass announces zero-day cloud app indexing with machine learning, WhiteHat combats code vulnerabilities with Sentinel Source for Microservices, Twistlock 2.3 advances container security with serverless support, and more enterprise security news! Full Show Notes: https://wiki.securityweekly.com/ES_Episode75 Visit http://securityweekly.com/esw for all the latest episodes!

This week, Matt Alderman joins Paul to interview Marci McCarthy, CEO and President of T.E.N. & CEO and Chairman of ISE®! Marci has over 20 years of business management and entrepreneurial experience, specializing in executive-level searches, as well as high-demand security industry skill-sets and specializations across all industry verticals. Full Show Notes: https://wiki.securityweekly.com/ES_Episode75 Visit http://securityweekly.com/esw for all the latest episodes!

In our article discussion and security news, we talk about how managers are insane for brainstorming in groups, the real reasons companies are so focused on the short term, how to break bad business habits, ten design practices to deliver business value, and Barracuda Networks acquires PhishLine! All that and more on this episode of Startup Security Weekly! Full Show Notes: https://wiki.securityweekly.com/SSWEpisode68 Visit http://securityweekly.com/category/ssw for all the latest episodes!

In the Application Security News, Paul and Keith talk about impatient employers designing their own courses, measurable CPU differences in AWS from Intel CPU vulnerabilities, the CEO of Intel selling a gigantic amount of stock, and Starbucks Wi-Fi mines Monero via CoinHive! All that and more, on the first episode of Application Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ASW_Episode00 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

10 things in cybersecurity that you might have missed in 2017, a flaw in major browsers, a critical flaw in phpMyAdmin, beware of a VMWare VDP remote root issue, how to protect your home router, Meltdown and Spectre explain how chip hacks work, and Intel is in the security Hot Seat over a serious CPU design flaw! Full Show Notes: https://wiki.securityweekly.com/Episode542 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Paul and Keith host the first show of Application Security Weekly! Today, they discuss the brief history of application security, software, and software security! With application security on the rise, hackers and attackers over time have evolved into organized groups from individuals, that construct acts of maliciousness for financial or political gains. Full Show Notes: https://wiki.securityweekly.com/ASW_Episode00 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

John will be talking about the new mimikatz event log clearing feature. Full Show Notes: https://wiki.securityweekly.com/Episode542 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Marcello Salvati is a senior security consultant at Coalfire Labs by day and by night a tool developer who discovered a novel technique to turn tea, sushi and dank memes into somewhat functioning code. Full Show Notes: https://wiki.securityweekly.com/Episode542 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Bam Azizi is the CTO and co-founder of WiActs Inc., a cybersecurity startup and the company behind NoPassword.com. Prior to joining NoPassword, he was working on his PhD at Technical University of Munich, and also held a research associate position at John Hopkins University. Bam joins us for an interview on this week's episode of Startup Security Weekly! Full Show Notes; https://wiki.securityweekly.com/SSWEpisode68 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Our topic segment today will discuss Patching Intel Vulnerabilities In The Enterprise. All that and more on Enterprise Security Weekly! Full Show Notes: https://wiki.securityweekly.com/ES_Episode74 Visit http://securityweekly.com/esw for all the latest episodes!

Doctors make the best rappers, 3 innovative security companies, DevOps will be a thing, integrate products swimmingly, AI and Machine Learning in the hands of bad actors, and serverless security capabilities. Full Show Notes: https://wiki.securityweekly.com/ES_Episode74 Visit http://securityweekly.com/esw for all the latest episodes!

Rick brings nearly 20 years of experience working in both technical and business aspects of Cybersecurity and startups. He began his career in cybersecurity as a network security analyst working at NSA. Rich brings more than two decades of security and leadership experience. Full Show Notes: https://wiki.securityweekly.com/SSWEpisode67 Visit http://securityweekly.com/category/ssw for all the latest episodes!

In the news, we discuss Uber paying hacker to keep quiet, flaw in Intel processors, banking apps found vulnerable to MITM attacks, Apple patching all other High Sierra security holes,and more on this episode of Paul's Security Weekly! Full Show Notes: https://wiki.securityweekly.com/Episode541 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Kevin Finisterre is a principal of the security consultancy Digitalmunition, he enjoys testing the limits and is constantly dedicated to thinking outside the box. Kevin's primary focus has always been on the dissemination of information relating to the identification and exploitation of software vulnerabilities on various hardware and software platforms. Full Show Notes: https://wiki.securityweekly.com/Episode541 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Bob Hillery join us on Security Weekly and is an experienced consultant in Information Systems Security Management. He is a founder and Chief Research Officer with InGuardians, Inc. and has an extensive background in computer networks gained through the Navy and R&D labs. Full Show Notes: https://wiki.securityweekly.com/Episode541 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Many roads lead to Active Directory insecurity, such as e-mail phishing, letting go of your foothold, and all of that can be done without getting caught. These problems can be solved with Endpoint Detection, correlating your network, endpoint, log events, and being encrypted. Paul and John discuss their theories on Active Directories and what to do to save you from being hacked! Full Show Notes: https://wiki.securityweekly.com/ES_Episode73

It's the most hackable time of the year! In the news, Paul and John discuss Flexera reimaging open source vulnerability detection, dispelling cybersecurity myths, Amazon to acquire cybersecurity startup Sqrrl, and more on Enterprise Security news! Full Show Notes: https://wiki.securityweekly.com/ES_Episode73

Paul and Michael talk about headphones, Accenture, and the startup companies that influence the security industry. Full Show Notes: https://wiki.securityweekly.com/SSWEpisode66 Visit http://securityweekly.com/category/ssw for all the latest episodes!

In the news, the best way to manage risk, creating defining moments for your customers, Upstream raised $9 million, ShieldX, Menlo, Atos offers to buy Gemalto, and the implosion of early-stage VC funding that no one is talking about. All that and more, here on Startup Security Weekly! Full Show Notes: https://wiki.securityweekly.com/SSWEpisode66 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Michael reports on a suspected North Korea Ransomware attack, Kaspersky federal software ban, compelled passwords, and 1 in 3 IT professionals looking for new jobs! Jason Wood of Paladin Security joins us for the expert commentary on Bitcoin, and more on this episode of Hack Naked News! Full Show Notes: https://wiki.securityweekly.com/HNNEpisode154 Visit http://hacknaked.tv to get all the latest episodes!

In the news, we talk about pentesting, On-Demand webcasts, net neutrality, Vegemite, and more on this episode of Paul's Security Weekly! Full Show Notes: https://wiki.securityweekly.com/Episode540 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Ed Skoudis has taught cyber incident response and advanced penetration testing techniques to more than 12,000 cybersecurity professionals. He is a SANS Faculty Fellow and the lead for the SANS Penetration Testing Curriculum. In the interview, Ed talks with the team about the Holiday Hack Challenge and what's going on recently in his cybersecurity life! Full Show Notes: https://wiki.securityweekly.com/Episode540 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Joe Gray is a native of East Tennessee. He joined the U.S. Navy directly out of High School and served for 7 years as a Submarine Navigation Electronics Technician. He is also the owner of the Advanced Persistent Security Podcast! Visit Joe's website and blog: https://advancedpersistentsecurity.net/ Full Show Notes: https://wiki.securityweekly.com/Episode540 Subscribe to our YouTube channel: https://www.youtube.com/securityweekly Visit our website: http://securityweekly.com Follow us on Twitter: https://www.twitter.comsecurityweekly

Jeff Schilling, CSO of Armor transitioned after a 24-year career in the Army. Career experiences in running a multi-million dollar PnL, Jeff joins us to talk about Cloud based security, incident response. and how he transitioned from the Army into Security! Full Show Notes: https://wiki.securityweekly.com/ES_Episode72 Visit http://securityweekly.com/esw for all the latest episodes!

LogRhythm named leader in Gartner magic quadrant, new report from CA Veracode, Fortinet launches Operational Technology Security platform, things to focus on in 2018, and more enterprise security news! Full Show Notes: https://wiki.securityweekly.com/ES_Episode72 Visit http://securityweekly.com/esw for all the latest episodes!

Driving cultural change, the 'Seed Stage' is now the 'Seed Gradient', Prevoty raised $13M Series B, Okta reports earnings, Riskonnect acquired Aruvio, and more! Full Show Notes: https://wiki.securityweekly.com/SSWEpisode65 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Todd O'Boyle is a co-founder and CTO at StrongArm, an Allied Minds company. He also served as principal investigator for a project developing methods to improve how operators respond to adversaries. Full Show Notes: https://wiki.securityweekly.com/SSWEpisode65 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Paul reports on Google patches, vulnerability in two keyless entry locks, Mozilla security updates, and 1.4 billion plain-text leaked passwords found online! Jason Wood of Paladin Security joins us for the expert commentary, and more on this episode of Hack Naked News! Full Show Notes: https://wiki.securityweekly.com/HNNEpisode153 Visit http://hacknaked.tv to get all the latest episodes!

In the news, a new Windows evasion technique, naked rowers, undetectable malware, social engineering from your shed and banking apps vulnerable to MITM attacks. →Full Show Notes: https://wiki.securityweekly.com/Episode539 →Visit our website: https://www.securityweekly.com →Follow us on Twitter: https://www.twitter.com/securityweekly →Like us on Facebook: https://www.facebook.com/secweekly

Former Head of Israeli Air Force CERT & Forensics Team, Senior Security Researcher at Javelin Networks. Eyal Neemany talks about bypassing two-factor authentication on Active Directory. →Full Show Notes: https://wiki.securityweekly.com/Episode539 →Visit our website: https://www.securityweekly.com →Follow us on Twitter: https://www.twitter.com/securityweekly →Like us on Facebook: https://www.facebook.com/secweekly

Lisa leads Global Security Research and Development at Accenture Labs. In this role, she curates and manages a portfolio of cyber research, including threat intelligence, advanced cyber hunting, orchestration for resilient cyber architectures, edge analytics, analytics and machine learning, active defense and security of the Industrial Internet of Things. →Full Show Notes: https://wiki.securityweekly.com/Episode539 →Visit our website: https://www.securityweekly.com →Follow us on Twitter: https://www.twitter.com/securityweekly →Like us on Facebook: https://www.facebook.com/secweekly

Winning arguments, turning insight into execution, avoiding the "Yes" dilemma, and updates from Bitdefender, McAfee, Barracuda Networks, Pwnie Express, ReversingLabs, and more! Full Show Notes: https://wiki.securityweekly.com/SSWEpisode64 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Zach Schlumpf is the Recruiting Coordinator for IOActive. An Army Veteran, former Red Teamer, and Seattle Locksport volunteer, Zach joins us to discuss recruiting, social engineering, and the balance between technical and soft skills! Full Show Notes: https://wiki.securityweekly.com/SSWEpisode64 Visit http://securityweekly.com/category/ssw for all the latest episodes!

Paul reports on a flaw found in Dirty COW patch, Apache Software security updates, more hacks in 2018, and a MailSploit e-mail spoofing flaw! Jason Wood joins us to give expert commentary on a Federal Data Breach Legislation, and more on this episode of Hack Naked News! Full Show Notes: https://wiki.securityweekly.com/HNNEpisode152 Visit http://hacknaked.tv to get all the latest episodes!