Loading...

PODCAST

CISSP Cyber Training Podcast - CISSP Training Program

Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

Join Shon Gerber on his weekly CISSP Cyber Training podcast, where his extensive 23-year background in cybersecurity shines through. With a rich history spanning corporate sectors, government roles, and academic positions, Shon imparts the essential insights and advice necessary to conquer the CISSP exam. His expertise is not just theoretical; as a CISSP credential holder since 2009, Shon translates his deep understanding into actionable training. Each episode is packed with invaluable security

education courses

All Episodes

29:25

CCT 334: CISA and Stryker Attack and AI GRC...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/23

Send us Fan Mail The fastest way to lose control of your security program is to ignore the systems that control everything else. I start with a timely CISA warning: attackers went after an endpoint management system, the kind of “one system that touches many” platform that can turn a single compromise into enterprise-wide fallout. We talk through practical hardening moves like multi-factor authentication, limiting where admins can log in from, and adding extra checks for high-impact access, b...

en

30:33

CCT 333: Patch Or Get Hacked (iPhones) - CISSP...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/19

Send us Fan Mail A “just visiting a website” iPhone hack is the kind of story that snaps you out of autopilot, and that’s where we start. Dark Sword shows how sophisticated mobile malware can ride on compromised sites and silently pull sensitive data from iOS devices. The fix is refreshingly practical: patch quickly, encourage the people around you to patch, and treat update discipline as real cybersecurity risk management, not a minor inconvenience. Then I shift into CISSP Domain 2 Asset Se...

en

34:18

A Winning CISO/CSO and AI Changing Cyber Forever...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/16

Send a text AI is not a future cybersecurity problem. It is a right now career problem, and it is also a massive opportunity if you prepare the right way. I walk through how AI is changing cybersecurity forever, from AI-generated phishing and malware to brand new attack surfaces like prompt injection and LLM attacks. At the same time, I explain why modern defense stacks are getting smarter fast, with AI baked into SIEM, EDR, XDR, threat intelligence, and cloud security posture tools. We also...

en

27:29

CCT 331: AI And Cyber Insurance Risk & CISSP Deep...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/12

Send a text AI is starting to change cybersecurity budgets in a surprising place: cyber insurance premiums. We dig into why insurers now care about how you use AI, how “more automation” can still mean “more risk,” and what it looks like when AI expands your attack surface through new APIs, sensitive data exposure, and code that ships with hidden security flaws. If you’re a security leader, risk manager, or CISSP candidate, this is the kind of real-world pressure that turns governance from a b...

en

33:14

CCT 330: SOC Preparation for Agentic AI Plus Five...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/09

Send a text The ground under cybersecurity careers is shifting, and the fastest movers are pairing CISSP with modern, high-leverage skills that command premium pay. We dig into a practical roadmap: first, how to prepare your SOC for agentic AI with four concrete moves—reskill analysts to supervise and validate models, establish new roles for AI governance and orchestration, redesign playbooks around automation and escalation, and enforce tight guardrails with approvals and audit trails. The g...

en

25:44

CCT 329: Cyber Security Skills Gap - Practice CISSP...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/05

Send a text Security readiness is slipping while threats race ahead—so we zero in on what actually moves the needle. We start with a frank look at why so many teams feel behind: AI-driven attacks, budget constraints, and a hiring market that demands senior talent at entry-level pay. Then we get practical, connecting CISSP Domain 1 concepts to real decisions leaders make every week: how to align risk management with business goals, how to write policies that drive action, and how to use standa...

en

35:11

CCT 328: Security Impact for Acquired Software...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/03/02

Send a text Stop guessing which software to trust. We break down a clear, repeatable path to evaluate commercial off-the-shelf tools, open source projects, custom third‑party builds, and cloud services so you can pass CISSP Domain 8.4 with confidence and protect your environment in the real world. We start with exam-winning tactics—how to slow down, read for intent, and think like a manager—then move into concrete practices that tame software risk without stalling delivery. You’ll hear how t...

en

28:08

CCT 327: Anthropic Claude Code Crashes Stocks -...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/26

Send a text AI just found hundreds of high-severity vulnerabilities hiding in open source, and the market flinched. We dig into what Anthropic’s Claude Code Security actually means for security teams, why vendors like CrowdStrike and Okta aren’t going away, and how the real change lands on roles, workflows, and the skills you need next. From CI/CD integration to vulnerability discovery at scale, we frame where general models augment specialized tools and where human expertise still anchors th...

en

33:30

CCT 326: Anthropic Claude Code Security - 5...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/23

Send a text Want a clear path from CISSP to top-tier pay without getting lost in buzzwords? We break down five high-income specialties that pair perfectly with CISSP leadership: modern GRC, cloud security as code, AI ethics and governance, advanced identity, and software supply chain security. Along the way, we unpack how AI reasoning tools like Claude Code Security are reshaping AppSec by cutting false positives and detecting logic flaws scanners miss, and we translate that shift into concre...

en

24:22

CCT 325: Hackers Can Use Grok/Copilot And Beating The...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/19

Send a text Half of CISSP candidates fail not because they lack knowledge, but because they answer like technicians when the exam demands a manager’s mindset. We dig into the three traps that derail smart people—technical heroism, perfect security fantasies, and the confusion of multiple “right” answers—and replace them with clear mental models that work under pressure. You’ll learn how to pick process over panic, see risk through the business lens, and choose the action that enables everythi...

en

36:02

CCT 324: How Least Privilege, Need-To-Know, And PAM...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/16

Send a text A router headline can feel distant until it lands in your network plan. We start with the growing chatter around possible TP-Link restrictions and what that means for ISPs, small businesses, and anyone balancing budget against risk. Then we roll up our sleeves and walk through the operational controls that actually hold the line when attackers probe, insiders slip, or vendors fail to deliver. We break down principle of least privilege with practical steps: role-based access contr...

en

27:37

CCT 323: Practice CISSP Questions - Generating...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/12

Send a text Alarms go off, dashboards turn red, and leadership wants everything fixed yesterday—sound familiar? We dig into the real craft of vulnerability management: deciding what truly matters, when to defer safely, and how to protect customers while keeping the business moving. Along the way, we unpack the forces shaping 2025 security: AI-fueled threats, smarter cyber insurance, the edge of quantum risk, stricter privacy laws, and the rising stakes of DevOps security. We share a practica...

en

36:02

CCT 322: From Firewalls To AI: Building A Smarter...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/09

Send us a text The weakest link is often sitting on the edge, blinking away with expired firmware and no vendor support. We kick off with a blunt reality check on outdated firewalls, load balancers, and IoT gateways, and why waiting two years to retire them is a gift to attackers. From there, we guide you through Domain 7.7 with a practical blueprint for operating and maintaining detective and preventive measures that actually hold up under pressure. We unpack firewall fundamentals with clea...

en

22:24

CCT 321: From BIOS Passwords To ABAC - Practice CISSP...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/05

Send us a text A surprising number of security leaders admit they’re flying blind on hardware and firmware. We start by exposing how shared BIOS passwords, slow maintenance cycles, and careless e‑waste practices create avoidable risk, then lay out the fixes: privileged vaulting, disciplined asset disposition, and practical ways to repurpose gear without leaking data. That real-world foundation sets the stage for a focused tour through CISSP Domain 5—Identity and Access Management—built for pr...

en

41:11

CCT 320: OT Attacks And CISSP Domain 6.4 Essentials

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/02/02

Send us a text What happens when custom malware turns IoT into a springboard for OT, and gas pumps become levers for panic? We open with a timely look at Iranian-linked operations targeting PLCs and use that story to ground a full, practical tour of CISSP Domain 6.4: how to analyze scan output and generate reports that actually drive action. We break down the anatomy of a high-value vulnerability report—clean executive summaries, CVE and CVSS clarity, and the business context that separates ...

en

22:44

CCT 319: Ransomware’s New Playbook - CISSP Practice...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/01/29

Send us a text Ransomware isn’t always after your data anymore—sometimes the goal is to burn your operations down. We open with a hard look at the Stoli bankruptcy and what it teaches about ERP paralysis, regulatory deadlines, and why “we’ll restore soon” is not a resilience plan. From there, we shift into a high-impact CISSP Domain 4 walkthrough that connects real-world failures to the protocols and controls that actually reduce risk. We break down HTTPS beyond the lock icon—what it secures...

en

37:19

CCT 318: APIs To End Of Life (EOL) and End of Service...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/01/26

Send us a text Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get access to my FREE CISSP Self-Study Essentials Videos: https://www.cisspcybertraining.com/offers/KzBKKouv Podcast Link(s): https://www.securityweek.com/cyber-insights-2026-api-security/ Agentic AI doesn’t just call your APIs; it creates them, connects them, and expands your attack surface faster than most t...

en

28:12

CCT 317: Local Cybersecurity Funding - CISSP Practice...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/01/22

Send us a text Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get access to my FREE CISSP Self-Study Essentials Videos: https://www.cisspcybertraining.com/offers/KzBKKouv Podcast Link(s): https://www.cisa.gov/news-events/news/dhs-launches-over-100-million-funding-strengthen-communities-cyber-defenses Cyber attacks don’t skip small towns, and today we dig into how l...

en

29:00

CCT 316: CrowdStrike, Signal, And Identify, Analyze,...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/01/19

Send us a text Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get access to my FREE CISSP Self-Study Essentials Videos: https://www.cisspcybertraining.com/offers/KzBKKouv A quiet identity revolution is underway, and it’s not about people. CrowdStrike’s move to acquire Signal shines a light on the fastest‑growing attack surface in modern environments: non‑human identities...

en

31:45

CCT 315: Cybercrime Inc and Practice CISSP Questions...

CISSP Cyber Training Podcast - CISSP Training Program ·

2026/01/15

Send us a text Check us out at: https://www.cisspcybertraining.com/ Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout Get access to my FREE CISSP Self-Study Essentials Videos: https://www.cisspcybertraining.com/offers/KzBKKouv Cybercrime now runs like a tech startup—with roles, KPIs, and customer support—while most defenders are stuck in annual review cycles. We dive into how this underground economy operates as a service cha...

en

377 results

Similar Podcasts

Edutainment Learning

Ralph Krauss

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Education Futures

Svenia Busson & Laurent Jolie

Out In The Hall

NHSA