Loading...

PODCAST

CISSP Cyber Training Podcast - CISSP Training Program

Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

Join Shon Gerber on his weekly CISSP Cyber Training podcast, where his extensive 23-year background in cybersecurity shines through. With a rich history spanning corporate sectors, government roles, and academic positions, Shon imparts the essential insights and advice necessary to conquer the CISSP exam. His expertise is not just theoretical; as a CISSP credential holder since 2009, Shon translates his deep understanding into actionable training. Each episode is packed with invaluable security

education courses

All Episodes

28:26

CCT 353: AI Agent Governance Essentials - CISSP...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/28

Send us Fan Mail AI agents are landing in production faster than most security teams can track them, and the scariest part is how normal they can look. When an autonomous agent runs the same workflow 10,000 times, your SIEM and EDR may see “nothing to worry about” even while the agent quietly drifts outside its intended scope. That is the core AI governance problem we tackle, through the lens of CISSP thinking and real security leadership. We walk through what is driving the mess: board-leve...

en

40:19

CCT 352: Data Security Controls and Compliance...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/25

Send us Fan Mail Your security program can be airtight and still get wrecked by someone else’s breach. We open with a Wired-style reality check: third-party app ecosystems and data brokers collecting location analytics at massive scale, then getting hacked or resold in ways your users never expected. If your organisation issues mobile devices, this is where security awareness, MDM controls, and clear “don’t allow tracking unless required” guidance stops being a nice-to-have and starts becomin...

en

24:28

CCT351: BitLocker Bypass Reality Check (YellowKey)...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/21

Send us Fan Mail BitLocker feels like a safety net until you see how a single bypass can change the whole risk picture. Today we react to the Yellow Key vulnerability (noted in the news and referenced as CVE 2645585) and use it as a practical CISSP training moment: a public proof of concept is available, a vendor patch is not, and the attack hinges on physical access. That mix forces you to think clearly about what “high risk” actually means, why “critical” is not always the right label, and ...

en

44:49

CCT 350: Investigation Types Made Simple - CISSP...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/18

Send us Fan Mail Default passwords are the kind of problem everyone “knows” about and yet they still open doors for attackers every day. We start with a quick reality check on router security and why factory settings, legacy gear, and unmanaged IoT and OT devices can turn a simple misconfiguration into redirect attacks, man-in-the-middle exposure, DDoS headaches, or silent monitoring. If you’re studying for the CISSP or defending a real network, you’ll walk away with a clearer sense of what t...

en

28:20

CCT 349: FOXCONN Hack and Domain 7 CISSP Questions

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/14

Send us Fan Mail Eight terabytes of stolen schematics is not just a scary number, it is a reminder that cyber risk becomes business risk fast. We start with the Wired report on the Foxconn ransomware attack and unpack what a claim like that could mean in the real world: intellectual property exposure, supply chain disruption, customer impact, and the uncomfortable truth that recovery is only one part of the story when data walks out the door. From there, we switch into CISSP Domain 7 Securit...

en

28:20

The Practical Realities of Geopolitical Cyber Risk -...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/13

Send us Fan Mail Next Peak: https://nextpeak.net/services/icr/ A regional conflict can spike your cyber risk even if your offices never move and your headcount never changes. That is the uncomfortable reality behind geopolitical cyber risk, and it is why I brought on Helen Lee, Director of Intelligence Cyber Research at NextPeak, to break down how global flashpoints turn into real security problems for businesses of every size. If your security program only reacts to today’s alert...

en

34:00

ClaudeBleed - The Hidden Risk In AI Browser...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/11

Send us Fan Mail Your browser just became a security boundary you can’t afford to ignore. We start with ClaudeBleed, a vulnerability in the Claude AI Chrome extension that shows how an AI browser agent can be hijacked by another malicious extension, even one with zero special permissions. When an agent can act “as you” inside a trusted environment, the risk jumps from theory to real outcomes like silent email sending, data loss through Google Drive, or code theft from private repos. We walk ...

en

28:05

AI Poisoning the Quiet Enterprise Threats and CISSP...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/07

Send us Fan Mail Quiet failures are the ones that scare me most, and enterprise AI creates a brand-new way for them to spread. If a chatbot becomes the “trusted employee” everyone relies on, a slow drip of bad documents, outdated procedures, or deliberately manipulated data can poison decisions for months without a single red flag. We break down what that looks like in real organizations, why it differs from the Hollywood version of a hack, and how the business impact shows up as confident mi...

en

26:53

CCT 346: CISSP Domain 7 - Testing Disaster Recovery...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/05/04

Send us Fan Mail MFA feels like the finish line until you watch a company wire tens of millions of dollars to an attacker without a single password being stolen. We dig into why business email compromise (BEC) still works even in “secure” environments, because the real target is the decision point: trust, timing, urgency, and authority. When attackers can spoof executives or use deepfake voice and video, the authentication layer often never gets challenged in a meaningful way. We break...

en

22:51

CCT 345: Practice CISSP Questions - Domain 8.4 (Replay)

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/30

Send us Fan Mail A single compromised identity can turn your whole environment into a hallway of unlocked doors and cross-domain attacks are built to exploit exactly that. We start with a timely real-world breach theme and use it to explain how adversaries move between endpoints, cloud platforms, and third-party connections by abusing identity and privileged access, not just by running noisy malware. If your organization relies on a patchwork of identity tools, limited visibility, and “normal...

en

36:07

CCT 344: Trigona RaaS - CISSP 3.7 Crypto - Board...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/27

Send us Fan Mail Ransomware actors are getting quieter, faster, and more custom and that should change how you study for the CISSP and how you defend your environment. We start with a quick personal update on a new CISSP Sprint: an eight-week live cohort built to give you structure, accountability, and weekly sessions so you can realistically target exam day without paying boot camp prices. Seats are limited, with an early bird option, because the whole point is real feedback and momentum.&nb...

en

31:21

CCT 343: Microsoft Defender - CISSP EOL-EOS (Part 2)...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/23

Send us Fan Mail Three Microsoft Defender zero-days are reportedly being exploited, and that is the kind of headline that tests whether our security program is real or just optimistic. I break down what we know, including BlueHammer (CVE-2026-33825) landing in Patch Tuesday while Red Sun and Undefend were described as still unpatched at the time, and the practical response: update fast, verify coverage, and keep your eyes on threat intel so local privilege escalation does not become a bigger ...

en

38:29

CCT 342: US Govt and Mythos - CISSP EOL-EOS - Board...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/20

Send us Fan Mail The next wave of AI in cybersecurity is not a theory project, it’s an operational deadline. I open with a timely look at reporting that the White House wants federal agencies to get access to Anthropic’s Claude Mythos, and why that scramble matters for every security team. If Mythos can help uncover vulnerabilities and accelerate exploit development, the same capability that strengthens defense can also supercharge attackers. We talk about why the government wants guardrails,...

en

31:17

CCT 341: Deepfake Nudify (Wired) - CISSP Exam...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/16

Send us Fan Mail AI didn’t just make deepfakes easier. It made targeted sexual abuse scalable. I open with a Wired-reported reality that’s hitting schools worldwide: AI tools that can generate fake nude images from ordinary photos, spread through bots and subscription services, and leave students and families dealing with humiliation, harassment, and real trauma. If you’re a cybersecurity professional, this is a moment where your skills can protect your community, not just your company. I wa...

en

41:01

CCT 340: Anthropic Mythos - Risk Management Concepts...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/13

Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get access to my FREE CISSP Self-Study Essentials Videos: https://www.cisspcybertraining.com/offers/KzBKKouv An AI model that can uncover thousands of zero-days and potentially chain multiple vulnerabilities into an automated exploit is not just a scary headline, it’s a stress test for every risk program on ...

en

27:23

CCT 339: Infrastructure Insider - Cyber Career...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/09

Send us Fan Mail Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get access to my FREE CISSP Self-Study Essentials Videos: https://www.cisspcybertraining.com/offers/KzBKKouv A single disgruntled admin can do more damage with “normal” IT tools than many attackers can with malware, and that reality changes how we should think about both security and careers. I start with ...

en

23:55

CCT 338: LinkedIn Monitoring - Support for Patch and...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/06

Send us Fan Mail LinkedIn might be doing more in your browser than you think. We start with a report dubbing it “BrowserGate” a claim that LinkedIn quietly checks for installed Chrome extensions using hidden JavaScript, raising real questions about privacy, browser fingerprinting, and what platforms should disclose to users when collecting device level signals tied to real identities and jobs. From there, we shift into a core CISSP topic that shows up everywhere in real security work: ...

en

32:44

CCT 337: UK Manufacture Attacks - CISSP Deep Dive...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/04/02

Send us Fan Mail A ransomware headline is easy to ignore until you realize it can shut down a factory line, break supplier networks, and trigger contract penalties that dwarf the original IT cleanup. We start with a real-world manufacturing case study from the UK where cyber incidents are becoming routine, then zoom in on why revenue hits are so brutal in an industry that often runs on tight margins. The Jaguar Land Rover disruption adds a sobering lesson: a single breach can ripple outward i...

en

25:57

CCT 336 - Cyber Niche's and Submitting CPEs

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/30

Send us Fan Mail Passing the CISSP is a huge win, but the part that quietly ends careers is what comes after: keeping the certification active. I walk you through how to submit ISC2 CPEs in a way that is accurate, defensible, and easy to repeat, so you never wake up to a renewal deadline panic. We talk real numbers too: 120 CPE credits per three-year cycle, a minimum of 40 each year, and the $125 annual maintenance fee that can sneak up on you if you are not watching your dashboard. Before w...

en

21:25

CCT 337: Indian CCTV and CISSP Question Deep Dive...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/26

Send us Fan Mail A cheap camera on a pole can become a surveillance pipeline, and that’s not a movie plot, it’s a real security problem. I start with a news-driven look at alleged CCTV espionage tied to critical infrastructure and why CISSP Domain 3 isn’t just theory. If you don’t know what devices are installed at your sites, what they record, and where that data goes, you can lose control of your environment long before an attacker ever touches your firewall. From there, I pivot into a foc...

en

377 results

Similar Podcasts

Les dents et dodo

BFMTV

Daily Facts

Amalia Dupray and Montgomery Jones.

Education Futures

Svenia Busson & Laurent Jolie

Out In The Hall

NHSA

Reading Teachers Lounge

Shannon Betts and Mary Saghafi