x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Bites

Welcome to Hello InfoSec, your ultimate hub for all things cybersecurity! Dive into our thrilling podcast series, InfoSec Bites, where we unleash deep dives into Information Security, jaw-dropping Major Security Incidents, cutting-edge Cloud Information Security, crucial Privacy topics, revolutionary Artificial Intelligence, mind-bending Quantum Computing, and so much more! Get ready to geek out with expert insights and stay ahead of the curve—hit that like button, subscribe now, and turn on

technology

All Episodes

00:38:30

Zero Trust: Digital Survival Guide in a Treacherous...

InfoSec Bites ·

2025/09/06

In this podcast, discussing Zero Trust, a cybersecurity framework that operates on the principle of "never trust, always verify." It highlights how this model assumes all users and devices are potential threats until their legitimacy is continuously validated, moving away from older perimeter-based security. The discussion outlines key principles such as least privilege access, continuous monitoring, and robust identity verification, while also exploring the tools and techniques used to implement

en

00:46:33

Confidentiality Integrity Availability(CIA Triad):...

InfoSec Bites ·

2025/09/06

This podcast offers an extensive and often humorous exploration of the CIA Triad, a foundational concept in information security comprising Confidentiality, Integrity, and Availability. It explains each principle in detail, using sarcastic and satirical examples to illustrate common security failures and their consequences. The podcast outlines various tools and strategies for upholding each aspect of the Triad, such as encryption and access controls for confidentiality, hashing and digital

en

00:40:38

Authentication Authorisation & Accounting: Digital...

InfoSec Bites ·

2025/09/06

This podcast explains the three core pillars of digital security: Authentication, Authorisation, and Accounting (AAA). Authentication involves verifying a user's identity through methods like passwords, physical tokens, or biometrics, with a focus on the increased security of multi-factor authentication. Following this, Authorisation determines a user's permissions and access levels to specific resources, highlighting different control models such as role-based or attribute-based access. Finally,

en

01:11:06

Trusted Platform Module(TPM): Invisible Hardware...

InfoSec Bites ·

2025/09/06

In this podcast we offer a comprehensive overview of the Trusted Platform Module (TPM), a specialised hardware chip crucial for modern computer security. We explain what a TPM is, detailing its internal components like cryptographic engines, unique keys, and Platform Configuration Registers (PCRs), which enable secure operations. It also describe how TPMs function, from generating and storing keys to verifying system integrity during boot-up, underpinning features like secure boot and full-disk

en

00:56:34

Quantum Computing: A Deep Dive, from spooky action to...

InfoSec Bites ·

2025/09/06

This podcast collectively offers a comprehensive overview of quantum computing, explaining its fundamental principles and future implications. They clarify how quantum bits (qubits), utilising superposition and entanglement, enable quantum computers to tackle problems beyond the reach of traditional machines, such as drug discovery and optimisation. We also highlight the dual nature of quantum computing for cybersecurity, noting its potential to both break existing encryption with algorithms like

en

00:36:47

The Harvest Now, Decrypt Later Threat and Quantum...

InfoSec Bites ·

2025/09/06

In this podcast we discuss the "Harvest Now, Decrypt Later" (HNDL) threat, a critical and immediate cyber security risk where adversaries, primarily nation-states and sophisticated cybercrime groups, are actively stockpiling encrypted data today, anticipating future decryption by quantum computers. This data, particularly long-lived sensitive information like medical records, intellectual property, and government secrets, will become vulnerable when cryptographically relevant quantum computers

en

00:56:53

Governance Risk & Compliance(GRC): Study Guide

InfoSec Bites ·

2025/09/06

This podcast about "Risk and Information Systems Control ," provides a comprehensive overview of risk management and information system controls, primarily designed as a study aid. It explores key concepts such as identifying threats and vulnerabilities, developing risk scenarios, and understanding information security goals like confidentiality, integrity, and availability. The guide details various risk management frameworks and methodologies, including the NIST Risk Management Framework and

en

00:22:37

OWASP Top 10 A01 -Broken Access Control: A...

InfoSec Bites ·

2025/09/06

In this guide we examine Broken Access Control, identified by OWASP as the number one security risk in 2021, due to its widespread occurrence and severe impact. It details how applications fail to adequately restrict user actions or access, enabling attackers to view private data or perform unauthorised tasks. It explains various types of access control (such as Role-Based Access Control) and common vulnerabilities, including Insecure Direct Object References (IDOR) and missing function-level access

en

00:41:19

2025's Top Cyber Incident

InfoSec Bites ·

2025/09/06

In this podcast we outline four major cybersecurity incidents from 2025, highlighting the diverse and evolving threat landscape. It details attacks ranging from sophisticated social engineering campaigns like the attempted infiltration of SentinelOne by PurpleHaze, to large-scale ransomware breaches such as the Coinbase password leak. We also discuss critical software vulnerabilities exemplified by CitrixBleed 2 and the phishing-led heist against UK retailers. For each incident, it explains the

en

00:45:27

The Explainer: AWS WAF, Shield and Firewall Manager

InfoSec Bites ·

2025/09/06

In this podcast we provide a comprehensive overview of AWS WAF, a web application firewall that helps protect web applications from common web exploits. It explains how to set up and configure WAF accounts, including user creation and tool downloads, and details the creation and management of protection packs, web ACLs, and rules, including different rule actions like allow, block, count, CAPTCHA, and challenge. The text further explores intelligent threat mitigation features like AWS WAF Fraud

en

01:10:22

Essential Eight Cybersecurity Maturity Model

InfoSec Bites ·

2025/09/06

In this podcast we collectively outline the Australian Signals Directorate's (ASD) Essential Eight cybersecurity mitigation strategies, designed to protect organisations from various cyber threats. The Essential Eight maturity model details four levels, from zero to three, indicating increasing sophistication in mitigating cyber attacks and targeting. The Essential Eight assessment process guide provides instructions for evaluating an organisation's adherence to these maturity levels, including

en

00:17:10

Browser: The New Cybersecurity Battleground

InfoSec Bites ·

2025/09/06

In this episode we are discussing a fundamental shift in cybersecurity from "How the Browser Became the Main Cyber Battleground", where attackers increasingly target web browsers rather than traditional local network endpoints. This change is driven by the "SaaS-ification" of enterprise IT, meaning core business systems are now accessed online via browsers, making user identities and their associated credentials the primary target. The discussion highlights phishing as the most impactful weapon for

en

01:08:16

Quantum AI: Future Computing and Its Impacts

InfoSec Bites ·

2025/09/06

In this podcast lets discuss the intersection of quantum computing and artificial intelligence, exploring their individual capabilities and combined impact, particularly on cybersecurity and data protection. This podcast highlights the fundamental differences between classical and quantum AI, with quantum systems utilising qubits for parallel processing, offering significant speed advantages for specific problems. A major theme is the threat quantum computers pose to current cryptographic methods,

en

00:59:05

Quantum Threat to Cryptography

InfoSec Bites ·

2025/09/06

This podcast collectively explore the profound impact of quantum computing on information security, examining both threats and solutions. They consistently highlight Shor's and Grover's algorithms as significant dangers to current public-key and symmetric cryptography, respectively. We also universally present Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) as crucial countermeasures, with a particular focus on NIST's PQC standardisation efforts. Across the summaries,

en

00:26:48

OWASP Top 10 (2021) Comprehensive Guide

InfoSec Bites ·

2025/09/06

The OWASP Top 10 (2021) Comprehensive Guide provides a detailed overview of the ten most critical web application security risks, identifying prevalent and impactful vulnerabilities. It outlines various categories such as Broken Access Control, Cryptographic Failures, and Injection, explaining their technical details, common attack scenarios, and real-world case studies. The guide offers practical prevention techniques, including code examples and recommended tools, to help developers and

en

00:37:59

Information Security Manual(ISM): Principles and...

InfoSec Bites ·

2025/09/06

This podcast present two distinct perspectives on success and security. The first source, an Information Security Manual (ISM), outlines a comprehensive cybersecurity framework for organisations, detailing guidelines and principles across five key functions: govern, identify, protect, detect, and respond. It emphasizes risk management, the importance of evaluated products, secure IT equipment maintenance, and personnel security training, with specific controls for various data classifications (e.g.,

en

00:22:16

MITRE ATT&CK Matrices: Decoding a Cyberattack's Playbook

InfoSec Bites ·

2025/09/06

This Podcast offers a comprehensive overview of the MITRE ATT&CK framework, a standardised model for understanding cyber adversary behaviours. It details four distinct matrices: Enterprise, Mobile, Industrial Control Systems (ICS), and Cloud, each tailored to specific technological environments. For each matrix, the document explains various tactics—the objectives of an attack—and their associated techniques—the methods used to achieve those objectives. Real-world examples are integrated

en

00:51:03

Post-Quantum Cryptography(PQC): Preparing for the...

InfoSec Bites ·

2025/09/06

Post-Quantum Cryptography (PQC), highlighting its critical role in safeguarding digital security against the imminent threat of quantum computers. They explain that PQC involves developing new algorithms resistant to quantum attacks, which could otherwise break current encryption methods like RSA and ECC, primarily through Shor's algorithm. The video detail the NIST standardisation process, which has identified key PQC algorithms such as lattice-based ML-KEM and ML-DSA, and hash-based SLH-DSA, with

en

00:44:49

AI's role in Cyber Security

InfoSec Bites ·

2025/09/06

The provided text summarises Nimeshkumar Patel's 2025 book, "Securing the Future: Harnessing AI in Cybersecurity," which explores the crucial role of Artificial Intelligence in combating evolving cyber threats. The book details AI's applications in areas such as advanced threat detection, automated incident response, identity management, and vulnerability management, showcasing how these technologies enhance security. It also addresses the significant ethical and legal

en

139 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs