x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: SANS GIAC GSEC Audio Course

The **GSEC Audio Course** from **BareMetalCyber.com** is your complete, audio-first companion for mastering the **GIAC Security Essentials (GSEC)** certification. Designed for cybersecurity professionals and motivated learners, this course transforms the full range of exam objectives into clear, structured lessons you can absorb anywhere. Each episode focuses on practical understanding—explaining how core security concepts like networks, encryption, access control, risk management, and incident

technology courses

All Episodes

8:33

Episode 81 — Virtualization and Container Security...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Virtualization and containers have revolutionized how systems are deployed, but they’ve also redefined the attack surface. This episode explains how hypervisors, virtual machines, and containers abstract physical hardware to maximize efficiency and flexibility. You’ll learn how these technologies differ in design—why virtualization emulates hardware while containers share the host operating system—and what that means for isolation and performance. We discuss security implications such as

en

9:45

Episode 80 — Cloud Security III: Logging, Keys, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Visibility, key management, and workload upkeep form the operational backbone of secure cloud environments. This episode explains how enabling platform-native logs—like CloudTrail, Activity Logs, and Audit Logs—provides accountability across services. You’ll learn why centralized aggregation, consistent schema, and synchronized timestamps are crucial for effective monitoring. The conversation then shifts to key management, covering rotation, separation of duties, and hardware security

en

10:01

Episode 79 — Cloud Security II: IAM, Network, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Identity, network, and storage security define the heart of cloud defense, and this episode dives deep into each. You’ll learn how cloud IAM policies enforce least privilege, how conditions and roles replace static user permissions, and why misconfigured identities remain the top cause of breaches. We then explore virtual networking—how VPCs, subnets, and security groups replace traditional firewalls, and how routing and private endpoints define connectivity boundaries. The discussion also

en

9:39

Episode 78 — Cloud Security I: Shared Responsibility...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

The cloud redefines where control ends and trust begins, and this episode introduces the shared responsibility model that governs it. You’ll learn how responsibilities divide between cloud service providers and customers depending on the service type—Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), or Software-as-a-Service (SaaS). The conversation clarifies that while providers secure the infrastructure, customers must secure configurations, data, and identities

en

9:36

Episode 77 — Secure Baselines: Hardening Guides and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Every secure environment starts with a baseline, and this episode explains how hardening guides and benchmarks create consistency across systems. You’ll learn how standards like CIS Benchmarks, DISA STIGs, and vendor templates define minimum security expectations for operating systems, applications, and network devices. The discussion clarifies how baseline configurations enforce password policies, disable unnecessary services, and standardize permissions before deployment. These measures

en

10:18

Episode 76 — Change and Configuration Management...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Stability and security both depend on disciplined change, and this episode explores how organizations govern that process through Change and Configuration Management. You’ll learn how change control frameworks balance agility with accountability—requiring documented requests, risk assessments, approvals, and rollback plans before any modification goes live. The discussion highlights how configuration management tools maintain consistency across systems, enforcing baselines that prevent

en

9:07

Episode 75 — Business Continuity and Disaster...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

When incidents scale beyond a single system, organizations rely on Business Continuity (BC) and Disaster Recovery (DR) planning to stay afloat. This episode explains how BC ensures critical operations continue under disruption, while DR focuses on restoring technology after failure. You’ll learn how Business Impact Analysis (BIA) identifies essential processes, dependencies, and tolerances that shape recovery priorities. The discussion also covers the importance of risk assessments and

en

9:36

Episode 74 — Backup Fundamentals: 3-2-1,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Backups are the ultimate recovery safety net, but only if they’re designed correctly. This episode explains the 3-2-1 backup rule—three copies of data, on two media types, with one stored off-site—and why it remains the industry standard. You’ll learn how full, differential, and incremental backups differ, and how scheduling aligns with business Recovery Point Objectives (RPOs) and Recovery Time Objectives (RTOs). The conversation highlights how encryption, labeling, and retention policies

en

9:29

Episode 73 — Remediation Planning and Verification Loops

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Finding vulnerabilities is only half the equation—fixing them effectively is what truly reduces risk. This episode walks through how remediation planning turns scan results into structured action. You’ll learn how to prioritize fixes based on severity, exploitability, and business impact, and how to coordinate between security, IT, and development teams for timely resolution. We explain how tracking systems and workflow automation tools help ensure accountability, and how communication must

en

9:35

Episode 72 — Pen Testing Basics: Rules, Methods, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Penetration testing turns theory into simulation, offering a controlled way to measure defensive strength. This episode explains how pen testing differs from vulnerability scanning by focusing on exploitation, proof of concept, and contextual risk. You’ll learn the phases of a standard engagement—planning, reconnaissance, exploitation, and reporting—and why each requires formal scope and authorization. The discussion also examines legal and ethical boundaries, emphasizing why written

en

10:25

Episode 71 — Vulnerability Management II: Scanners,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Once assets are identified, the next challenge is analyzing their weaknesses efficiently and accurately. This episode explores how vulnerability scanners operate—probing systems for missing patches, misconfigurations, and outdated software versions. You’ll learn how different types of scans (authenticated, unauthenticated, network, and web application) reveal unique insights, and how to interpret risk ratings like CVSS scores without treating them as absolute truth. The discussion also

en

9:52

Episode 70 — Vulnerability Management I: Asset...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

You can’t protect what you don’t know you have, and this episode begins the journey into vulnerability management by focusing on discovery and scoping. You’ll learn how accurate asset inventory forms the backbone of every scanning and patching program, mapping systems, software, and dependencies across environments. We explain the difference between technical and business assets, and why visibility into ownership, criticality, and exposure defines effective prioritization. The discussion

en

8:45

Episode 69 — Phishing and Social Engineering...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Technology can fail, but awareness turns people into active defenders. This episode focuses on phishing and social engineering—the most persistent causes of compromise. You’ll learn how attackers exploit trust, authority, and urgency to manipulate users into revealing credentials or executing malicious actions. The conversation explains different forms of phishing, from mass campaigns to highly targeted spear phishing and business email compromise, illustrating how simple deception often

en

10:14

Episode 68 — Ransomware: Controls, Backups, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Ransomware has transformed from nuisance to national security issue, and this episode explores how to counter it systematically. You’ll learn how attackers deploy encryption to deny access, how double-extortion tactics raise stakes, and why paying ransom rarely ensures recovery. The discussion then transitions to preventive controls—patching, privilege separation, and continuous monitoring—that reduce exposure. We explain how segmentation, offline backups, and immutability break the

en

8:42

Episode 67 — Malware II: Prevention, Detection, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Once you know what malware is, the next step is learning how to stop it. This episode explores preventive measures such as least privilege, patch management, and application control—each serving as a layer that breaks the infection chain. We discuss why endpoint protection, email filtering, and web reputation systems must work together, and how user education remains a surprisingly powerful defense. The episode also explains the role of behavioral analytics and machine learning in detecting

en

9:07

Episode 66 — Malware I: Types, Vectors, and Evasion

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Malware is a constant in cybersecurity, and this episode breaks down its many forms, how it spreads, and how it hides. You’ll learn the defining characteristics of viruses, worms, trojans, rootkits, and fileless malware, along with how each exploits different weaknesses in operating systems and users. We explore infection vectors ranging from malicious attachments to drive-by downloads and compromised supply chains, illustrating how attackers chain small errors into major breaches. The

en

8:16

Episode 65 — API Security Fundamentals: Keys, Tokens,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

APIs are the unseen infrastructure of digital communication, and this episode examines how to secure them without slowing innovation. You’ll learn how authentication and authorization apply in the API world through mechanisms like API keys, OAuth tokens, and signed requests. We explain how these controls establish identity between systems, prevent misuse, and support fine-grained access. The discussion also highlights common pitfalls—such as embedding secrets in code, overbroad scopes, or

en

8:21

Episode 64 — Common Web Risks: Injection, XSS, and CSRF

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Web applications remain one of the most common attack surfaces, and this episode dives into three of the most critical risks—Injection, Cross-Site Scripting (XSS), and Cross-Site Request Forgery (CSRF). You’ll learn how each attack manipulates trust between a client and server, and how poor input validation or session management enables them. The discussion clarifies the mechanics behind SQL and command injection, explaining how unvalidated parameters can expose databases or execute

en

9:28

Episode 63 — Web Communication Security II: Headers...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

The smallest details in web configuration often have the biggest impact on security, and this episode explains how HTTP headers and strict transport policies shape browser behavior. You’ll learn about critical headers like Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, and Referrer-Policy, all of which defend against common injection and clickjacking attacks. The discussion explores how browsers interpret these directives, translating simple configuration lines into

en

10:14

Episode 62 — Web Communication Security I: HTTPS,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Web traffic security is at the core of modern cyber defense, and this episode unpacks how HTTPS, cookies, and sessions protect—or sometimes expose—data in transit. You’ll learn how HTTPS builds on TLS to ensure encryption, authentication, and integrity, and how browser indicators help users verify secure connections. The discussion explores how cookies maintain state in the otherwise stateless HTTP protocol, explaining attributes like Secure, HttpOnly, and SameSite that guard against theft

en

101 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs