x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Bites

Welcome to Hello InfoSec, your ultimate hub for all things cybersecurity! Dive into our thrilling podcast series, InfoSec Bites, where we unleash deep dives into Information Security, jaw-dropping Major Security Incidents, cutting-edge Cloud Information Security, crucial Privacy topics, revolutionary Artificial Intelligence, mind-bending Quantum Computing, and so much more! Get ready to geek out with expert insights and stay ahead of the curve—hit that like button, subscribe now, and turn on

technology

All Episodes

00:32:42

Passkeys: Passwordless future and its hidden traps

InfoSec Bites ·

2025/09/12

This Podcast comprehensively discusses passkeys as a cutting-edge, passwordless authentication method built on public-key cryptography. It explains that passkeys involve a private key stored securely on a user's device and a public key held by the service, enabling login through simple actions like fingerprint or PIN, thus replacing traditional passwords. The discussion highlights the necessity of passkeys due to the inherent weaknesses of passwords, such as vulnerability to phishing, data

en

00:45:37

OSI Layer-7 Application Layer Incident Response

InfoSec Bites ·

2025/09/12

The podcast discussion comprehensively explores the Application Layer (OSI Layer-7), focusing on incident response strategies. It examines various protocols, including HTTP, HTTPS, DNS, SMTP, and FTP, alongside application-specific APIs. It details incident response tactics for common threats like web application attacks, injection flaws, cross-site scripting, CSRF, API abuse, and zero-day exploits, using real-world case studies such as the Equifax breach and Log4Shell. Furthermore, it outlines the

en

00:35:20

OSI Layer-6 Presentation Layer: Incident Response

InfoSec Bites ·

2025/09/12

The discussion in this podcast outlines a comprehensive incident response playbook specifically for the OSI Presentation Layer (Layer 6), a critical component responsible for data formatting, compression, and encryption. It begins by introducing the Presentation Layer's role and functions, explaining how it ensures interoperability, security, and efficiency in network communications through protocols like SSL/TLS, JPEG, and XML. The playbook then details various vulnerabilities and threats that

en

00:16:34

Heartbleed CVE-2014-0160: The invisible flaw that...

InfoSec Bites ·

2025/09/12

The dicussion in this podcast offers a comprehensive overview of the Heartbleed bug, a critical security flaw identified as CVE-2014-0160. This vulnerability stemmed from improper input validation within specific, outdated versions of the OpenSSL cryptographic library, particularly concerning the TLS Heartbeat extension. Attackers could exploit this "buffer over-read" to extract sensitive data, such as private keys, passwords, and other confidential information, from affected systems without leaving

en

00:47:57

AI Powered OSINT

InfoSec Bites ·

2025/09/12

The dicussion in this podcast explores how artificial intelligence (AI) is revolutionising open-source intelligence (OSINT), which is derived from publicly available data. It highlights that AI technologies, such as machine learning, natural language processing, and computer vision, significantly enhance the speed and scale of OSINT activities for various sectors including governments, law enforcement, journalists, and corporations. The discussion details specific AI tools and their applications in

en

00:53:28

The Invisibe Web: Your Public Digital Footprint

InfoSec Bites ·

2025/09/12

The dicussion in this podcast critically examines the pervasive myth of digital anonymity, arguing that individuals' online presence is a fragmented collection of data points, readily discoverable and aggregated. It differentiates between the surface, deep, and dark web, clarifying that publicly accessible personal data resides on the surface web, even if it's "invisible" to the average user without specialised tools. The discussion then introduces Open-Source Intelligence (OSINT)

en

00:51:24

OSINT(Open Source Intelligence): Threats & Digital...

InfoSec Bites ·

2025/09/12

Discussion in this podcast explores the concept of Open Source Intelligence (OSINT), defining it as the systematic collection and analysis of publicly available information. It highlights OSINT's dual-use nature, demonstrating how the same techniques employed for legitimate purposes like investigating war crimes can be weaponised against individuals through doxxing, social engineering, and identity theft. It details the mechanics of OSINT, differentiating between passive and active methods, and

en

01:04:04

Public Key Infrastructure(PKI): Invisible Architect...

InfoSec Bites ·

2025/09/12

This podcast discusses the critical concept of digital trust and its implementation within enterprises, highlighting the challenges organisations face in establishing and maintaining it. The 2024 State of Digital Trust Report by DigiCert, explores how enterprises are performing across various areas such as Enterprise IT, IoT & Connected Devices, Software, and eSignature trust, revealing that while digital trust is considered vital, maturity levels are generally low. It also identifies key

en

00:57:10

IPsec Deep Dive: Security, Vulnerabilities, and...

InfoSec Bites ·

2025/09/12

This podcast offer a comprehensive examination of the Internet Protocol Security (IPsec) suite, detailing its role in securing network-layer communications. The discussion explain IPsec's foundational security features, including confidentiality, integrity, authentication, and replay protection, and how these are delivered by its constituent protocols like Authentication Header (AH) and Encapsulating Security Payload (ESP). The discussion further illuminate IPsec's operational modes

en

00:20:02

S/MIME, PGP, and GPG: Securing Digital Communication...

InfoSec Bites ·

2025/09/10

In this podcast discussion explores email encryption technologies, primarily PGP (Pretty Good Privacy), GPG (GNU Privacy Guard), and S/MIME (Secure/Multipurpose Internet Mail Extension). Discussion details how these systems use public and private key cryptography for confidentiality, authentication, and integrity in digital communication. While all aim to secure emails, it highlights their fundamental differences, particularly in their trust models – PGP/GPG utilise a "web of trust", whereas S/MIME

en

00:16:40

Injection Vulnerabilities: A Comprehensive Guide

InfoSec Bites ·

2025/09/09

This podcast "Injection Vulnerabilities: A Comprehensive Guide," offers an extensive examination of injection vulnerabilities, which are a critical cybersecurity threat. It details how these flaws arise when untrusted user input is processed by interpreters without proper validation or sanitisation, enabling attackers to execute malicious code. The guide categorises various types of injection, including SQL, Command, NoSQL, and LDAP injection, explaining their technical underpinnings and common

en

01:03:17

OSI Presentation Layer: Security, Exploits, and Defenses

InfoSec Bites ·

2025/09/08

The podcast discussion offers a comprehensive overview of cybersecurity threats across the Open Systems Interconnection (OSI) model's various layers, with a particular focus on the Presentation Layer. They detail how each layer, from the Physical Layer to the Application Layer, is susceptible to specific types of attacks, such as sniffing, IP spoofing, SYN floods, session hijacking, and malware. A significant portion of the discussion then outlines mitigation strategies and best practices for

en

01:02:31

Invisible Frontline: Decoding OSI Layer-7 Application...

InfoSec Bites ·

2025/09/08

The discussion in this podcast outlines a strategic framework for responding to cybersecurity incidents that specifically target the application layer (Layer 7) of the OSI model. It emphasizes the shift in threat landscape from network-level to more sophisticated application-level attacks, which mimic legitimate user behavior and are harder to detect. The topic details a structured approach to incident response, differentiating between high-level Incident Response Plans, scenario-specific Playbooks,

en

01:25:57

OSI Application Layer 7 Security: Exploits and Defense

InfoSec Bites ·

2025/09/08

The podcast offers an extensive overview of the Open Systems Interconnection (OSI) Application Layer (Layer 7), explaining its role as the interface between users and network services. It contrasts the OSI model with the TCP/IP model, highlighting how the OSI framework aids in understanding security vulnerabilities and the necessity of tools like Web Application Firewalls (WAFs). The discussion further explores various Application Layer protocols such as HTTP/HTTPS, FTP/SFTP, email protocols, and

en

00:54:59

Open Source Intelligence(OSINT): Real-World...

InfoSec Bites ·

2025/09/08

This podcast discusses the growing threat of cybercrime and the critical role of Open-Source Intelligence (OSINT) in both perpetrating and defending against these attacks. It highlights how Artificial Intelligence (AI) is rapidly advancing phishing and social engineering tactics, making it harder for individuals and organisations to detect fraudulent schemes. The discussion emphasises the importance of managing one's digital footprint by being cautious about shared information on social media

en

00:58:03

Advanced Persistant Threat(APT): Who are they? What...

InfoSec Bites ·

2025/09/08

This podcast offers a humorous yet comprehensive guide to Advanced Persistent Threats (APTs), defining them as highly sophisticated and persistent cyber-attacks, often orchestrated by nation-states or well-resourced criminal groups. It explains that these actors, unlike typical hackers, infiltrate systems to remain undetected for extended periods, engaging in activities like espionage, sabotage, or financial theft. The overview further outlines the motivations behind APTs, such as geopolitical

en

00:55:45

Secure Hash Algorithm (SHA): A Comprehensive...

InfoSec Bites ·

2025/09/08

This podcast offers a comprehensive overview of the **Secure Hash Algorithm (SHA)** family, detailing its **evolution from SHA-0 to SHA-3** and its critical role in digital security. It explains that SHA functions act as **one-way digital fingerprints**, ensuring **data integrity, authenticity, and non-repudiation** across diverse applications like digital signatures, password storage, and blockchain technology. It differentiates between the **Merkle-Damgård construction** of SHA-1 and SHA-2,

en

01:08:52

Vulnerability Management: Understanding CVE, CVSS,...

InfoSec Bites ·

2025/09/07

This Podcast primarily discusses cybersecurity vulnerabilities and the Common Vulnerability Scoring System (CVSS), an open framework for rating their severity. They explain that vulnerabilities are flaws in computer systems that malicious actors can exploit, and highlight the National Vulnerability Database (NVD), a US government database that enriches Common Vulnerabilities and Exposures (CVEs) with additional information, including CVSS scores. The discussion details the CVSS framework, which

en

00:51:13

Navigating Cryptographic Agility: A Deep Dive into...

InfoSec Bites ·

2025/09/07

This podcast comprehensively discusses cryptographic agility, defining it as the essential ability of digital systems to seamlessly and rapidly adapt their cryptographic components without operational disruption. It emphasizes that this adaptability is no longer a luxury but a strategic imperative driven by the constant evolution of cyber threats, past failures of inflexible systems like DES and SHA-1, and the looming existential threat of quantum computing via algorithms like Shor's. The

en

01:07:51

Quantum Computing's Rapid Ascent in 2025: Milestones...

InfoSec Bites ·

2025/09/06

The dicussion in this podcast portrays 2025 as a pivotal year for quantum computing, marked by its transition from theoretical promise to practical application, leading to its designation as the International Year of Quantum Science and Technology. It outlines significant advancements in hardware and software by major companies like Google, IBM, Microsoft, and Amazon, each pursuing distinct strategies toward achieving fault-tolerant quantum computers by the end of the decade. The discussion

en

138 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs