x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Bites

Welcome to Hello InfoSec, your ultimate hub for all things cybersecurity! Dive into our thrilling podcast series, InfoSec Bites, where we unleash deep dives into Information Security, jaw-dropping Major Security Incidents, cutting-edge Cloud Information Security, crucial Privacy topics, revolutionary Artificial Intelligence, mind-bending Quantum Computing, and so much more! Get ready to geek out with expert insights and stay ahead of the curve—hit that like button, subscribe now, and turn on

technology

All Episodes

00:27:57

Cloud Security Alliance's Governance Frameworks:...

InfoSec Bites ·

2026/02/07

The Cloud Security Alliance (CSA) provides a global framework for cloud governance and trust. Key tools like the Cloud Controls Matrix (CCM) and the STAR program standardise security across providers. Recent updates address AI risks, compliance automation, and shared responsibility.

en

00:28:08

Well Architected Framework :The Architecture of...

InfoSec Bites ·

2026/02/06

Major cloud providers like Amazon Web Services, Microsoft Azure, and Google Cloud have developed Well-Architected Frameworks to help organisations build high-quality, resilient infrastructure. These frameworks are structured around core pillars, which typically include security, reliability, operational excellence, cost optimization, and performance efficiency. AWS uniquely adds a sixth pillar for sustainability, while Google integrates Site Reliability Engineering and DORA principles into its

en

00:40:27

Engineering Resilience: The Netflix Chaos Framework

InfoSec Bites ·

2026/02/02

In this podcast we explore Netflix’s Chaos Engineering philosophy, a proactive strategy designed to ensure business continuity and disaster recovery by intentionally simulating system failures. Rather than viewing outages as anomalies, this approach treats infrastructure instability as an inevitability of cloud computing, using empirical experimentation to identify and fix vulnerabilities before they impact users. The source outlines a suite of specialised tools, such as Chaos Monkey and Chaos Kong,

en

00:36:19

The Architecture of Isolation: Virtualization...

InfoSec Bites ·

2026/01/28

In this podcast we examine the critical evolution of virtualisation security within modern cloud environments, highlighting how the hypervisor acts as a vital yet vulnerable point of isolation. It details the transition from complex software emulators to minimalist hardware-assisted architectures designed to reduce potential attack surfaces. By reviewing landmark breaches such as VENOM and Meltdown, the source illustrates the persistent risks posed by legacy code and hardware-level flaws

en

00:42:45

SS7 Attacks: Decade Old Flow In Your Phone,...

InfoSec Bites ·

2026/01/23

The dicussion provides a detailed expert analysis of the Signaling System 7 (SS7) protocol, identifying it as a foundational yet profoundly vulnerable component of global telecommunications infrastructure. Built on a legacy assumption of a closed and trusted network, SS7 lacks essential security features like encryption and authentication, making it susceptible to widespread exploitation. The discussion explains how this architectural flaw enables malicious actors to perform location tracking, call

en

00:28:21

Security Architectures: Zero Trust vs Defence in Depth

InfoSec Bites ·

2026/01/16

The podcast dicussion provides an extensive comparative analysis of two major cybersecurity paradigms: Defence in Depth (DiD) and Zero Trust Architecture (ZTA). It explains that traditional DiD, which relies on a layered, location-centric approach with an implicit trust zone once the perimeter is breached, is strategically inadequate for modern distributed environments due to the risk of uncontained lateral movement by attackers. In contrast, ZTA is presented as the essential evolution of technical

en

00:36:14

Salesforce/Salesloft Cyber Incident 2025: Identity...

InfoSec Bites ·

2026/01/09

The dicussion in this podcast provides an extensive post-mortem and strategic analysis of the 2025 Salesforce/Salesloft cyber incident, attributed to the threat actor UNC6395, which exposed a critical failure in SaaS supply chain security. The attack circumvented perimeter defenses by compromising the vendor’s infrastructure to steal pre-authorised OAuth tokens, granting the attackers persistent, legitimate API access to hundreds of customer environments, including major cybersecurity firms. The

en

00:29:48

MFA Fatigue and Social Engineering Cyber Incidents

InfoSec Bites ·

2025/12/26

The discussion in this podcast is about analyzing the rise of Multi-Factor Authentication (MFA) fatigue as a critical new cyber threat, detailing how attackers exploit the human element through social engineering rather than technical flaws. It examines five high-profile 2022 breaches at major companies—Uber, Cisco, Okta, Twilio, and Microsoft—to illustrate the success of this low-tech approach, which often involves bombarding victims with MFA requests until they approve malicious access. The

en

00:32:20

Willow Processor: Fault Tolerance and Verifiable...

InfoSec Bites ·

2025/12/19

This podcast primarily discusses Google’s advancements in processor technology, focusing on the Willow quantum chip and the Tensor series of system-on-chip (SoC) processors. Multiple articles highlight the Willow chip as a significant milestone in quantum computing due to its development of fault tolerance and demonstrated error correction capabilities, potentially solving problems far exceeding classical supercomputers' capacity, despite continuing challenges related to cost and scaling. In

en

00:44:19

Cybersecurity Strategies 2025: Attack, Defence, and...

InfoSec Bites ·

2025/12/12

This comprehensive summary outlines in this podcast is about the 4th Edition of "Cybersecurity Attack and Defense Strategies" (2025) by Yuri Diogenes and Erdal Ozkaya, a guide for cybersecurity professionals. It addresses the dynamic and perilous cybersecurity environment of 2025, highlighting the expansion of the attack surface due to digital transformation and the sophisticated methods employed by cybercriminals. It details attack strategies through the Cyber Kill Chain and MITRE

en

00:39:38

Federal Information Processing Standards(FIPS):...

InfoSec Bites ·

2025/12/05

The discussion in this podcast offers a comprehensive overview of Federal Information Processing Standards (FIPS), which are guidelines developed by the National Institute of Standards and Technology (NIST) to ensure security, interoperability, and data protection across U.S. federal computer systems. FIPS standards are mandatory for federal agencies under laws like FISMA and serve as a crucial framework for risk mitigation against cyber threats, though their adoption is often voluntary in the

en

00:29:07

FIDO2: Deep Dive into The New Passwordless...

InfoSec Bites ·

2025/11/28

The discussion in this podcast provides an extensive, expert-level overview of FIDO2, which is presented as the new gold standard for passwordless authentication. It explains that FIDO2 fundamentally replaces the vulnerable "shared secret" password model with a cryptographic public-key system, where a private key is securely stored on the user's device, making it inherently resistant to phishing and credential stuffing attacks. The discussion meticulously breaks down the technical

en

00:37:45

Virtualisation and VDI: Architecture, Security,...

InfoSec Bites ·

2025/11/21

The discussion in this podcast provides an extensive analysis of the security challenges, exploitation techniques, and resilience strategies necessary for modern Virtual Machine (VM) and Virtual Desktop Infrastructure (VDI) environments. It details the fundamental security trade-offs between Type 1 (bare metal) and Type 2 (hosted) hypervisors, noting that enterprise solutions mandate the superior isolation of Type 1. It systematically examines critical attack vectors, including Virtual Machine

en

00:50:23

Eternal Blue & WannaCry: How NSA secret leaked & Cost...

InfoSec Bites ·

2025/11/14

The interesting discussion in this podcast provides a comprehensive post-mortem of the EternalBlue cyber crisis, focusing primarily on the devastating WannaCry and NotPetya attacks of 2017. They explain that the root cause was the National Security Agency (NSA) developing and stockpiling the EternalBlue exploit, which was subsequently leaked by the Shadow Brokers hacking group. The discussion analyzes the technical execution of the attacks, which exploited a vulnerability in Microsoft’s Server

en

00:33:03

Cozy Bear's(APT29) Quiet Espionage Against the DNC

InfoSec Bites ·

2025/11/07

The discussion in this podcast provide an extensive analysis of the Russian threat actor Cozy Bear (APT29), focusing on its sophisticated cyber espionage operations. The first source concentrates on the 2020 SolarWinds supply chain attack, detailing how the group injected the Sunburst backdoor into legitimate software updates to compromise numerous organizations, including U.S. government entities, and discusses the subsequent remediation, legal action, and lessons learned regarding supply chain

en

00:29:33

Due Diligence and Due Care in Security Governance

InfoSec Bites ·

2025/11/03

The dicussion in this podcast provides an exhaustive analysis of Due Diligence (DD) and Due Care (DC), presenting them as the dual legal and operational pillars of robust security governance, particularly in the context of the CISSP certification. Due Diligence is defined as the strategic, investigative, and planning phase, focusing on foresight, risk assessment, and establishing security policies; it is about knowing what should be done. Conversely, Due Care is the continuous, operational execution

en

00:35:50

Jaguar Land Rover 2025 Cyber Failure: Resilience and...

InfoSec Bites ·

2025/11/01

This podcast dicussion provides an extensive post-mortem analysis of the Jaguar Land Rover (JLR) Cyber Incident of 2025, which caused an estimated £1.9 billion in economic damage and crippled production for approximately 40 days. The analysis attributes the crisis not to a sophisticated new exploit, but to systemic operational resilience failures, particularly catastrophic weaknesses in Identity and Access Management (IAM) and the architectural flaw of insufficient IT/Operational Technology (OT)

en

01:05:32

SIEM, SOAR, EDR, and DLP: The Integrated...

InfoSec Bites ·

2025/10/30

The dicussion in this podcast provides an extensive overview of the integrated cybersecurity ecosystem, detailing the four foundational pillars necessary for a modern Security Operations Center (SOC). It comprehensively examines Security Information and Event Management (SIEM) as the central command post for data aggregation and threat detection, and Security Orchestration, Automation, and Response (SOAR) as the tool that automates and accelerates incident response using playbooks. Furthermore, the

en

00:49:02

Single Sign-On(SSO) Protocols: Kerberos, SAML, OAuth,...

InfoSec Bites ·

2025/10/29

The discussion in this podcast is an expert-level analysis of four critical Single Sign-On (SSO) protocols: Kerberos, SAML, OAuth, and OpenID Connect (OIDC), detailing their architectures, security features, and ideal use cases within a modern enterprise. It explains that while Kerberos is best for internal networks and SAML for enterprise federation, OAuth is for delegated API authorization, which OIDC then extends to cover user authentication for consumer applications. A significant portion of the

en

00:37:09

Overflow, RCE, and MITM Attacks: Advanced Cyber Threats

InfoSec Bites ·

2025/10/27

The discussion in this podcast provides an extensive analysis of three major categories of cyber threats: Buffer Overflow, Remote Code Execution (RCE), and Man-in-the-Middle (MITM) attacks. It systematically examines the mechanics of each attack type, from the foundational memory corruption of buffer overflows to the network-based deception used in MITM attacks. It emphasizes that while technical defenses like Address Space Layout Randomization (ASLR) and HTTPS are crucial, the most significant

en

130 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs