x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Bites

Welcome to Hello InfoSec, your ultimate hub for all things cybersecurity! Dive into our thrilling podcast series, InfoSec Bites, where we unleash deep dives into Information Security, jaw-dropping Major Security Incidents, cutting-edge Cloud Information Security, crucial Privacy topics, revolutionary Artificial Intelligence, mind-bending Quantum Computing, and so much more! Get ready to geek out with expert insights and stay ahead of the curve—hit that like button, subscribe now, and turn on

technology

All Episodes

00:39:43

AWS Security Incident Lessons: Customer Failure...

InfoSec Bites ·

2025/09/20

The discussion in this podcast provides a detailed analysis of significant security incidents involving Amazon Web Services (AWS) and consistently conclude that the vast majority of major breaches stem from customer-side failures rather than flaws in AWS infrastructure. This principle is governed by the AWS Shared Responsibility Model, which dictates that customers are responsible for security in the cloud, managing elements like configurations, data, and access controls. The discussion examines

en

00:39:21

AWS IAM: Architecture, Security, and Incident Analysis

InfoSec Bites ·

2025/09/19

The discussion in this podcast provides an extensive overview of AWS Identity and Access Management (IAM), describing it as the foundational service governing all resource access within the AWS ecosystem. It details IAM’s core architectural components, including Users, Groups, Roles, and Policies, emphasizing the use of temporary credentials and the Principle of Least Privilege. Furthermore, it explains the complex policy evaluation logic and advanced security features such as Service Control

en

01:18:54

NIST Privacy Framework: Enterprise Risk Management...

InfoSec Bites ·

2025/09/19

This podcast discussion is about NIST Privacy Framework which is a voluntary, risk-based tool designed to assist organisations in managing the complex privacy challenges of the digital age. It distinguishes privacy risk from cybersecurity risk, highlighting that privacy issues can arise even when systems function as intended. The framework is structured around a Core of five functions (Identify-P, Govern-P, Control-P, Communicate-P, and Protect-P), which are customised through Profiles and assessed

en

00:35:07

AWS Container Security, Architecture and Incident...

InfoSec Bites ·

2025/09/19

The discussion in this podcast offers a comprehensive expert analysis of container security on Amazon Web Services (AWS), focusing on the architectures and security trade-offs of services like EKS, ECS, and Fargate. It thoroughly explains the nuances of the AWS Shared Responsibility Model, emphasizing that most security failures are caused by customer-side misconfigurations, such as overly permissive IAM roles and poor secrets management. It examines real-world security incidents, including the

en

00:34:36

NIST Risk Management Framework: Cybersecurity's Gold...

InfoSec Bites ·

2025/09/18

The discussion in this podcast comprehensively outlines the NIST Risk Management Framework (RMF), presenting it as the definitive gold standard for cybersecurity governance in the United States federal government. It details the RMF's evolution from a compliance-focused model to a dynamic, risk-based, and continuous process, particularly highlighting its seven sequential steps: Prepare, Categorise, Select, Implement, Assess, Authorise, and Monitor. The document emphasises the RMF's symbiotic

en

00:50:59

Uber 2022 Data Breach: How an 18 Year Old Hacker...

InfoSec Bites ·

2025/09/18

The discussion in this podcast analyzes the Uber 2022 data breach, detailing how a multi-vector attack exploited both technical vulnerabilities and human weaknesses. It explains that the incident began with a compromised contractor password and escalated through MFA fatigue social engineering, ultimately leading to a full network compromise via hardcoded administrative credentials. The report emphasizes the need for a fundamental shift in security philosophy, advocating for proactive cyber

en

00:55:44

NIST Cybersecurity Framework: A Guide to Digital...

InfoSec Bites ·

2025/09/17

The discussion in this podcast offers a comprehensive analysis of the NIST Cybersecurity Framework (CSF), detailing its evolution from a critical infrastructure directive to a globally applicable guide for digital risk management, particularly highlighting the significant enhancements introduced in CSF 2.0. It meticulously explains the framework's three core components: the Framework Core, which outlines six key functions (Govern, Identify, Protect, Detect, Respond, Recover); Implementation

en

01:00:38

IPv6 on AWS: Architecture, Benefits, and Security

InfoSec Bites ·

2025/09/16

The discussion on this podcast offers a comprehensive overview of IPv6 implementation on AWS, detailing its strategic importance and practical application. The discussion explains how IPv6 addresses the exhaustion of IPv4 addresses and the economic imperative driven by AWS's charging for public IPv4 addresses. The dicussions further outlines the technical advantages of IPv6, such as simplified network architecture, reduced NAT reliance, and enhanced security features like mandatory IPsec

en

01:00:55

Quantum Supremacy: Reshaping the Future

InfoSec Bites ·

2025/09/16

This podcast discusses around Michio Kaku's 2023 book, "Quantum Supremacy," which explores the revolutionary potential of quantum computing. Kaku's work describes how this emerging technology, leveraging principles like superposition and entanglement, could solve complex global challenges in areas such as medicine, energy, and climate modeling. While acknowledging the transformative promise and milestones like Google's Sycamore, it also present critiques regarding Kaku's optimistic speculations,

en

00:20:33

Digital Forensics: Unmasking the secret world of...

InfoSec Bites ·

2025/09/15

In this podcast we explore the multifaceted field of digital forensics, detailing the tools, techniques, and ethical considerations involved in uncovering digital evidence. It explains how specialised software like EnCase and Autopsy, alongside hardware cloners and write-blockers, are used for disk imaging, file carving, and timeline analysis to reconstruct events from fragmented data. The discussion also highlight real-world applications, such as tracking ransomware, debunking deepfakes, and

en

01:07:14

AWS API Gateway: Architecture, Use Cases, and Security

InfoSec Bites ·

2025/09/14

The dicussion in this podcast offers a comprehensive analysis of AWS API Gateway, outlining its architecture, various use cases, and robust security features. It explains how API Gateway acts as a managed entry point for APIs, simplifying traffic management, authentication, and authorization for backend services. The dicussion distinguishes between REST, HTTP, and WebSocket API types, detailing their respective features, performance characteristics, and cost implications. Furthermore, it covers

en

01:09:43

Deep Dive: Mobile Apps and Unpacking Its Hidden Security

InfoSec Bites ·

2025/09/14

The dicussion in this podcast offers a comprehensive overview of mobile application security, exploring its foundational architecture, prevalent threats, and effective defenses. It examines the security implications of different development paradigms—native, hybrid, and cross-platform—and dissects the layered architecture of mobile applications, emphasizing the roles of presentation, business logic, and data access. The discussion then analyzes the distinct security models of iOS and Android,

en

01:43:16

OWASP API Security Top-10(2023): Essential Deep Dive

InfoSec Bites ·

2025/09/14

The podcast dicussion introduces the OWASP API Security Top 10 (2023) list, which identifies the most critical security risks facing APIs today, highlighting that many threats arise from fundamental architectural and implementation flaws rather than complex exploits. The dicussion details each of the ten vulnerabilities, including Broken Object Level Authorization (BOLA) and Broken Authentication, explaining their exploitation methods, potential impacts, and crucial mitigation strategies

en

01:56:33

Vulnerability Management and Scoring Systems

InfoSec Bites ·

2025/09/13

In this podcast we discuss vulnerability management, a crucial cybersecurity practice involving the identification, assessment, prioritisation, resolution, and continuous monitoring of weaknesses in computer systems and networks. A key tool highlighted is the Common Vulnerability Scoring System (CVSS), an open framework for quantifying the severity of vulnerabilities through a numerical score (0-10) derived from base, temporal, and environmental metrics. While CVSS is widely adopted, including by

en

01:08:10

Lattice-Based Post-Quantum Cryptography: A...

InfoSec Bites ·

2025/09/13

The podcast collectively offers a comprehensive overview of lattice-based post-quantum cryptography (PQC), detailing its fundamental principles and practical applications. It explains how traditional cryptographic methods are vulnerable to quantum computers and introduce lattices as a quantum-resistant solution. It discusses the mathematical foundations of lattices, focusing on their "hard problems" like the Shortest Vector Problem (SVP) and the Closest Vector Problem (CVP), which form the basis of

en

01:08:30

Session Cookies: The Digital Passport to Your Online...

InfoSec Bites ·

2025/09/13

The discussion in this Podcast comprehensively discuss session cookies, explaining their fundamental role in maintaining user state across stateless HTTP connections, which is crucial for personalized web experiences like online shopping or persistent logins. The discussion thoroughly details the inherent weaknesses of these cookies, such as their susceptibility to theft on unsecured networks, predictability if poorly generated, and potential for manipulation. They then outline various exploitation

en

01:15:39

Microservices Unpacked: Architecture, Principles,...

InfoSec Bites ·

2025/09/13

The discussion in this podcast offers a comprehensive analysis of microservices architecture, contrasting it with traditional monolithic systems. It explores the foundational principles guiding microservices, such as Domain-Driven Design and the Single Responsibility Principle, and details the significant business benefits, including enhanced scalability, improved resilience, and faster time-to-market. The discussion also addresses the technical complexities of microservices, covering inter-service

en

01:14:14

APIs & Gateways: The Invisible Digital Backbone

InfoSec Bites ·

2025/09/13

The discussion in this podcast offers an in-depth analysis of Application Programming Interfaces (APIs) and API gateways, outlining their architectural roles as foundational components in modern software development. It explains how APIs facilitate software communication and drive business innovation, detailing various API types and their strategic importance. It also highlights the critical function of API gateways as centralized traffic managers that enhance security and streamline complex

en

00:43:06

OWASP Top-10 A02 Cryptographic Failures: The...

InfoSec Bites ·

2025/09/13

The Podcast, "Cryptographic Failures: A Comprehensive Guide," presents an in-depth exploration of vulnerabilities stemming from improper or inadequate use of cryptographic techniques. It explains that these failures, ranked highly on the OWASP Top 10, lead to the exposure or compromise of sensitive data through issues like weak encryption, poor key management, or insecure transport protocols. The guide details various attack scenarios and uses the 2017 Equifax breach as a real-world case

en

00:32:42

Passkeys: Passwordless future and its hidden traps

InfoSec Bites ·

2025/09/12

This Podcast comprehensively discusses passkeys as a cutting-edge, passwordless authentication method built on public-key cryptography. It explains that passkeys involve a private key stored securely on a user's device and a public key held by the service, enabling login through simple actions like fingerprint or PIN, thus replacing traditional passwords. The discussion highlights the necessity of passkeys due to the inherent weaknesses of passwords, such as vulnerability to phishing, data

en

137 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs