x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified - CCSP Audio Course

The Certified Cloud Security Professional (CCSP) Audio Course is your comprehensive, audio-first companion for mastering the (ISC)² CCSP certification—the global standard for cloud security expertise. Designed for professionals who learn best on the go, this Audio Course transforms the official exam domains into structured, accessible, and engaging lessons you can absorb anywhere. Each episode dives deep into the essential knowledge areas—covering cloud concepts, architecture, design, data security,

education courses

All Episodes

26:38

Episode 61 — Secrets in Code: Management and...

Certified - CCSP Audio Course ·

2025/09/08

Embedding secrets directly in code is one of the most common and dangerous mistakes developers make. In this episode, we examine why hardcoding credentials, API keys, or tokens creates significant risks, including source code leaks, insider misuse, and automated discovery by attackers scanning repositories. We highlight the dangers of secrets being exposed in version control systems and explain why simply “hiding” them in configuration files is not enough. The secure approach is to

en

24:07

Episode 60 — Identity for Apps: OAuth 2.0, OIDC and...

Certified - CCSP Audio Course ·

2025/09/08

Application identity is critical to securing interactions between services, users, and cloud providers. This episode covers OAuth 2.0 as the leading framework for delegated authorization, OpenID Connect as an identity layer, and the mechanics of token issuance and validation. We explain how scopes, claims, and Proof Key for Code Exchange (PKCE) strengthen application identity and protect against attacks like token interception.The exam may test your knowledge of when to use specific flows,

en

23:47

Episode 59 — API Security: Authentication,...

Certified - CCSP Audio Course ·

2025/09/08

APIs are the glue of modern cloud applications, and their security is a top priority. In this episode, we explore how authentication and authorization work for APIs, highlighting practices such as OAuth 2.0, API gateways, and fine-grained permissions. We also explain why rate limiting and throttling are essential to preventing abuse and denial-of-service conditions.On the CCSP exam, API security often appears in scenario questions where misconfigured endpoints or over-privileged tokens lead

en

23:52

Episode 58 — Threat Modeling for Apps: Microservices...

Certified - CCSP Audio Course ·

2025/09/08

Applications today are increasingly built on microservices and APIs, and each component introduces potential vulnerabilities. This episode focuses on threat modeling at the application level, showing how to identify and address risks across distributed architectures. Techniques like STRIDE and data flow diagrams can be adapted to cloud environments to uncover trust boundary violations and insecure dependencies.The exam may test your ability to apply threat modeling in practical scenarios,

en

26:15

Episode 57 — Secure SDLC: Requirements, Design and...

Certified - CCSP Audio Course ·

2025/09/08

The Secure Software Development Lifecycle (SDLC) provides the structure for building applications that remain resilient under attack. In this episode, we explore how secure requirements, design practices, and verification steps are applied in cloud contexts. You’ll learn how early integration of security principles prevents costly flaws and how design reviews can address risks introduced by APIs, microservices, and serverless components.We also emphasize how verification differs in cloud

en

26:23

Episode 56 — Domain 4 Overview: Cloud Application...

Certified - CCSP Audio Course ·

2025/09/08

Domain 4 shifts focus to application security, addressing how cloud-hosted and cloud-native applications are designed, built, and secured. This episode introduces the scope of the domain, including secure development practices, API protections, testing methodologies, and runtime defenses. Cloud application security is especially dynamic, as applications evolve quickly and rely heavily on microservices and third-party code.The CCSP exam expects candidates to understand how application

en

25:36

Episode 55 — Edge & Hybrid: Securing Cloud Gateways...

Certified - CCSP Audio Course ·

2025/09/08

Cloud adoption rarely happens in isolation—most organizations operate hybrid models that bridge on-premises infrastructure with cloud services. In this episode, we explore the role of edge gateways, VPNs, and dedicated links in connecting these environments. These connections provide flexibility and continuity but also expand the attack surface, requiring strong controls such as encryption, segmentation, and robust identity management.We also examine how hybrid scenarios appear on the CCSP

en

25:55

Episode 54 — Backup & Recovery: Snapshots,...

Certified - CCSP Audio Course ·

2025/09/08

Backup and recovery strategies have evolved dramatically in the cloud, where snapshots, replication, and disaster recovery services are built into most platforms. This episode explores these options in depth, showing how snapshots can provide point-in-time recovery, while replication across regions supports continuity during major outages. Disaster recovery planning in the cloud focuses not only on tools but also on aligning recovery objectives with business requirements, such as Recovery

en

28:09

Episode 53 — Resilience Engineering: Auto-Scaling,...

Certified - CCSP Audio Course ·

2025/09/08

Resilience is more than availability; it is about designing systems that anticipate failure and adapt automatically. In this episode, we cover resilience engineering concepts such as auto-scaling, self-healing systems, and the practice of chaos engineering, where deliberate failures are introduced to test robustness. These approaches are especially powerful in cloud environments, where elasticity and automation make resilience a realistic and affordable goal.The exam may ask you to identify

en

29:03

Episode 52 — Vulnerability Management: Scanning...

Certified - CCSP Audio Course ·

2025/09/08

Vulnerability management remains a cornerstone of security, but in the cloud, it requires specialized tools and approaches. This episode examines how vulnerability scanning applies to cloud-native hosts, including virtual machines, containers, and managed services. We discuss how traditional methods of scanning must be adapted to ephemeral resources that may spin up and down rapidly. You’ll learn why continuous scanning, integration with CI/CD pipelines, and prioritization of high-risk

en

30:17

Episode 51 — Logging Foundations: Control Plane and...

Certified - CCSP Audio Course ·

2025/09/08

Logging is one of the most critical enablers of visibility in the cloud, yet it is often misunderstood or underutilized. In this episode, we begin by distinguishing between control plane logs, which capture administrative and management actions, and data plane logs, which reflect the actual use of cloud services and resources. Both layers are indispensable for monitoring and forensic readiness, and cloud providers typically offer native logging services to capture these events. By exploring

en

30:59

Episode 50 — Software Supply Chain: Provenance, SBOMs...

Certified - CCSP Audio Course ·

2025/09/08

Supply chain security has become one of the most urgent issues in cloud and IT. This episode explores how software provenance, Software Bills of Materials (SBOMs), and code-signing ensure integrity in what organizations deploy. We discuss high-profile supply chain compromises to illustrate why this topic has global attention.The exam may frame supply chain questions around verifying authenticity, ensuring patch provenance, or validating the integrity of third-party components. Understanding

en

31:09

Episode 49 — Infrastructure as Code: Secure Templates...

Certified - CCSP Audio Course ·

2025/09/08

Infrastructure as Code (IaC) makes cloud environments reproducible and scalable, but insecure templates can replicate vulnerabilities at speed. This episode explains how to secure IaC through validated templates, automated scans, and embedded guardrails. IaC represents both opportunity and risk, making it a high-value topic for the exam.We discuss how organizations enforce governance by treating templates as controlled artifacts subject to review and testing. On the CCSP exam, questions may

en

35:27

Episode 48 — Secrets Management: Vaulting and...

Certified - CCSP Audio Course ·

2025/09/08

Secrets such as passwords, tokens, and keys are among the most sensitive assets in cloud infrastructure. This episode examines best practices for managing secrets, including vaulting solutions, automated rotation, and strict access controls. We explain why embedding secrets in code or scripts is a critical vulnerability and how to avoid it.We also highlight how secrets management integrates with DevOps pipelines, showing how automation can ensure credentials are short-lived and tightly

en

32:31

Episode 47 — Identity Integration: Federated Access...

Certified - CCSP Audio Course ·

2025/09/08

Identity is the new perimeter in cloud, and integrating it correctly is critical. This episode explores federated identity, single sign-on, and the use of identity providers to manage access to cloud control planes. We highlight why strong authentication, minimal privileges, and centralized oversight are essential for reducing risk.The CCSP exam often tests identity integration through questions about federation protocols, trust relationships, and delegation of authority. By understanding

en

34:57

Episode 46 — Network Controls: Segmentation,...

Certified - CCSP Audio Course ·

2025/09/08

Cloud networks are virtual, but the principles of segmentation remain as important as ever. In this episode, we cover traditional controls such as firewalls alongside modern practices like microsegmentation, which allow for granular isolation between workloads. These techniques reduce the blast radius of an attack and limit lateral movement inside the environment.We also explain how cloud providers implement network controls differently from on-premises models, emphasizing the importance of

en

34:53

Episode 45 — Serverless Platforms: Event Models and...

Certified - CCSP Audio Course ·

2025/09/08

Serverless computing abstracts away servers, but it does not remove security responsibilities. In this episode, we explain how serverless platforms work through event-driven models and highlight the unique risks they present, including event injection, dependency vulnerabilities, and monitoring gaps. Security for serverless is about rethinking controls—focusing on permissions, code integrity, and event validation rather than patching infrastructure.We also discuss how serverless reshapes

en

35:20

Episode 44 — Container Platforms: Orchestrator and...

Certified - CCSP Audio Course ·

2025/09/08

Containers have transformed application delivery by making software portable and efficient, but they introduce unique risks. This episode explores container platforms in depth, focusing on orchestrators like Kubernetes and the hardening measures needed to secure both containers and the platforms that run them. Misconfigurations, excessive privileges, and unpatched images are common threats that must be addressed systematically.We also examine the layered nature of container security, from

en

35:26

Episode 43 — Compute Workloads: Baselines, Patching...

Certified - CCSP Audio Course ·

2025/09/08

When deploying workloads in the cloud, consistency and control are vital. This episode examines the use of security baselines, patch management, and golden images as techniques for building strong compute environments. Baselines define the minimum acceptable configuration, while golden images allow organizations to replicate secure states at scale. Together, these practices reduce variability and eliminate gaps that attackers often exploit.We also highlight the risks of “drift,” where

en

37:56

Episode 42 — Virtualization Stack: Hypervisors, VM...

Certified - CCSP Audio Course ·

2025/09/08

Virtualization is the foundation of cloud computing, and understanding its stack is essential for both exam readiness and real-world practice. In this episode, we explore how hypervisors create isolated environments, the differences between Type 1 and Type 2 designs, and why isolation is the cornerstone of multi-tenant cloud platforms. Virtual machines rely on these layers to ensure that workloads do not interfere with one another, and any flaw in this isolation can lead to severe

en

100 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College