x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CompTIA Security+ Audio Course

Dr. Jason Edwards

Certified - Security+ 701 is your completely free audio companion for mastering the CompTIA Security+ SY0-701 certification exam. Developed by BareMetalCyber.com, this immersive Audio Course transforms every domain of the official exam objectives into clear, practical, and exam-ready lessons you can learn anywhere—whether commuting, exercising, or studying at home. Each episode delivers focused explanations, real-world examples, and proven study strategies designed to build confidence and help you

technology courses

All Episodes

7:00

Monitoring and Least Privilege (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Monitoring and the principle of least privilege are two complementary pillars of proactive cybersecurity, enabling both visibility and access limitation. In this episode, we discuss how effective monitoring—using tools like SIEMs, endpoint detection platforms, and behavioral analytics—gives defenders real-time and historical insight into system behavior, user activity, and threat trends. We pair this with a deep dive into the least privilege model, where users and systems are granted only

en

7:04

Patching and Encryption (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Patching and encryption are two of the most basic yet essential components of any security strategy—one protects against known vulnerabilities, the other safeguards data from unauthorized access. In this episode, we cover why timely and systematic patching is critical, explaining how attackers often exploit known vulnerabilities with publicly available tools within hours—or even minutes—of disclosure. We highlight the risks of unpatched systems in both operating systems and applications,

en

6:40

Application Allow Lists and Isolation (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Controlling what software is allowed to run—and isolating it when needed—is a fundamental principle of endpoint security. In this episode, we examine application allow lists, which explicitly define which executables, scripts, and libraries are permitted to run in a given environment. This contrasts with traditional antivirus, which blocks only known threats—allow lists stop anything that’s not pre-approved, providing a much tighter security model. We also explore isolation techniques like

en

6:07

Segmentation and Access Control (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Network segmentation and access control are two of the most powerful tools for limiting the scope and impact of an attack, especially once a threat actor gains initial access. In this episode, we explore how breaking a network into smaller, controlled zones using VLANs, firewalls, or microsegmentation techniques can contain intrusions and prevent lateral movement. We also delve into access control models that enforce least privilege—ensuring that users, devices, and services only have the

en

7:25

General Indicators of Malicious Activity (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Not every security breach begins with a smoking gun—many start with subtle shifts in system behavior that point to something being off. This episode explores general indicators of malicious activity, such as unusual account lockouts, concurrent session usage, blocked or inaccessible content, spikes in resource consumption, and impossible travel—where a user logs in from geographically distant locations in implausible timeframes. We also discuss signs like the absence of expected logs,

en

6:02

Password Attack Indicators (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Password attacks are among the most common initial access vectors, and recognizing their early indicators is key to stopping intrusions before they escalate. In this episode, we focus on signs of brute-force attempts, credential stuffing, and password spraying—where attackers test a small set of passwords across many accounts to avoid lockouts. Indicators include repeated failed login attempts, unusual login times or geographies, multiple accounts locking out simultaneously, and automated

en

6:50

Cryptographic Attack Indicators (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Even strong encryption systems can be undermined by poor implementation, weak configurations, or direct cryptographic attacks—and recognizing the signs is vital. In this episode, we cover indicators of cryptographic compromise, including protocol downgrade attacks, hash collisions, weak cipher suites, and the use of deprecated algorithms like MD5 or SHA-1. Attackers may force systems to negotiate older, insecure protocols (e.g., SSL 2.0) or exploit hash collisions to forge digital

en

7:23

Application-Level Attack Indicators (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Applications are often targeted because they represent the gateway to sensitive data and services, and attackers leave behind subtle but detectable signs when they exploit them. In this episode, we look at indicators of common application-level attacks like SQL injection, buffer overflows, directory traversal, and privilege escalation. These attacks often generate unusual patterns in server logs—such as malformed inputs, repeated error messages, unauthorized file access attempts, or

en

7:59

Network-Based Indicators (Part 2) (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Continuing our focus on network-based threats, this episode explores wireless-specific attacks and credential replay tactics that compromise network integrity and user accounts. Wireless threats often begin with rogue access points or man-in-the-middle (MitM) setups, where attackers impersonate legitimate Wi-Fi networks to intercept traffic, steal credentials, or inject malicious payloads. Credential replay involves capturing valid authentication data—often through phishing or MitM

en

7:23

Network-Based Indicators (Part 1) (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

The network is often where the first signs of an attack emerge—if you know what to look for. In this episode, we examine key indicators of network-based threats, starting with Distributed Denial-of-Service (DDoS) attacks and how to distinguish between legitimate traffic surges and malicious floods. We also explore DNS-related anomalies, including poisoned caches, unexpected redirects, or abnormal query patterns that suggest DNS tunneling or spoofing. These issues can disrupt business

en

7:17

Physical Security Attacks and Indicators (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

While cybersecurity often focuses on virtual threats, physical attacks on facilities, hardware, and access points remain a serious and sometimes overlooked risk. In this episode, we explore how physical breaches—like forced entry, badge cloning, hardware theft, or environmental sabotage—can compromise both data and infrastructure. Indicators of such attacks include damaged locks, tampered surveillance equipment, missing hardware, or anomalous badge activity, especially outside of business

en

7:59

Indicators of Malware Attacks (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Malware comes in many forms—ransomware, spyware, trojans, worms—and each leaves behind unique indicators that can help defenders detect infections early and respond effectively. In this episode, we break down these indicators of compromise (IOCs), including system slowdowns, strange processes, unauthorized file changes, blocked access to security tools, or outbound traffic to suspicious IP addresses. We also explore the subtle signs of keyloggers and rootkits, which aim to remain hidden

en

6:44

Understanding Zero-Day Vulnerabilities (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Zero-day vulnerabilities are software flaws that are unknown to the vendor and, critically, to defenders—giving attackers a window of opportunity to exploit systems with no available patch or signature-based detection. In this episode, we explore what makes zero-days so dangerous, how they are discovered and weaponized, and the typical lifecycle from discovery to disclosure (or exploitation). Zero-days are often used by nation-state actors or advanced persistent threats (APTs) to quietly

en

6:54

Misconfiguration and Mobile Device Vulnerabilities...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Misconfiguration is one of the most common and preventable causes of security breaches, and mobile devices amplify this risk due to their ubiquity and inconsistent management. In this episode, we examine how open ports, default credentials, permissive access policies, or misaligned firewall rules can leave cloud environments, web servers, and enterprise applications exposed. We also look at mobile-specific risks including jailbroken devices, sideloaded apps, unencrypted storage, and

en

7:37

Supply Chain and Cryptographic Vulnerabilities...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Modern cybersecurity is deeply interconnected, and vulnerabilities in your vendors, partners, or third-party software can easily become vulnerabilities in your own environment. In this episode, we explore supply chain attacks—like trojanized software updates, compromised developer tools, or backdoors inserted at the firmware level—that undermine trust and introduce malicious code before it even reaches your network. We also discuss cryptographic weaknesses such as outdated algorithms,

en

7:21

Virtualization and Cloud-Specific Vulnerabilities...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Virtualization and cloud computing introduce powerful efficiencies—but they also open up new categories of vulnerabilities that traditional security models often fail to address. In this episode, we examine risks like virtual machine (VM) escape, where an attacker breaks out of an isolated VM and interacts directly with the host or other VMs, as well as resource reuse issues that can lead to unintended data exposure between tenants. We also explore how misconfigured cloud environments—such

en

7:22

Hardware and Firmware Vulnerabilities (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Cybersecurity doesn’t stop at software—hardware and firmware vulnerabilities can offer attackers deep, long-term access to systems in ways that are difficult to detect and even harder to fix. In this episode, we explore how outdated firmware, hardcoded credentials, unsigned updates, and direct memory access (DMA) features can be exploited to bypass software-level protections. We also discuss the risks associated with end-of-life or legacy hardware that no longer receives updates, as well as

en

7:43

Operating System and Web-Based Vulnerabilities...

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Operating systems and web applications form the backbone of IT infrastructure, and when left unpatched or misconfigured, they present rich targets for exploitation. In this episode, we look at vulnerabilities like privilege escalation, insecure services, and poor access controls in operating systems, along with web-based flaws such as SQL injection and cross-site scripting (XSS). These weaknesses can allow attackers to manipulate databases, hijack sessions, exfiltrate data, or take control

en

8:21

Application-Level Vulnerabilities (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

Applications serve as the user-facing layer of most digital environments, and they are frequently targeted by attackers exploiting poor coding practices and flawed design. In this episode, we dive into critical application-level vulnerabilities including memory injection, buffer overflows, and race conditions like time-of-check/time-of-use (TOC/TOU) flaws. These vulnerabilities often allow attackers to manipulate system behavior, gain unauthorized access, or crash services entirely. We also

en

7:57

Human Vectors and Social Engineering (Part 2) (Domain 2)

Certified: The CompTIA Security+ Audio Course ·

2025/06/15

While basic social engineering relies on message-based deception, more advanced techniques target identity, credibility, and digital presence through impersonation, pretexting, and domain spoofing. In this episode, we examine how attackers craft elaborate backstories or scenarios to manipulate users into granting access, exposing data, or clicking on malicious content. Business Email Compromise (BEC) attacks impersonate executives or vendors to request fraudulent wire transfers, while

en

222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs