x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

InfoSec Bites

Welcome to Hello InfoSec, your ultimate hub for all things cybersecurity! Dive into our thrilling podcast series, InfoSec Bites, where we unleash deep dives into Information Security, jaw-dropping Major Security Incidents, cutting-edge Cloud Information Security, crucial Privacy topics, revolutionary Artificial Intelligence, mind-bending Quantum Computing, and so much more! Get ready to geek out with expert insights and stay ahead of the curve—hit that like button, subscribe now, and turn on

technology

All Episodes

00:32:20

Willow Processor: Fault Tolerance and Verifiable...

InfoSec Bites ·

2025/12/19

This podcast primarily discusses Google’s advancements in processor technology, focusing on the Willow quantum chip and the Tensor series of system-on-chip (SoC) processors. Multiple articles highlight the Willow chip as a significant milestone in quantum computing due to its development of fault tolerance and demonstrated error correction capabilities, potentially solving problems far exceeding classical supercomputers' capacity, despite continuing challenges related to cost and scaling. In

en

00:44:19

Cybersecurity Strategies 2025: Attack, Defence, and...

InfoSec Bites ·

2025/12/12

This comprehensive summary outlines in this podcast is about the 4th Edition of "Cybersecurity Attack and Defense Strategies" (2025) by Yuri Diogenes and Erdal Ozkaya, a guide for cybersecurity professionals. It addresses the dynamic and perilous cybersecurity environment of 2025, highlighting the expansion of the attack surface due to digital transformation and the sophisticated methods employed by cybercriminals. It details attack strategies through the Cyber Kill Chain and MITRE

en

00:39:38

Federal Information Processing Standards(FIPS):...

InfoSec Bites ·

2025/12/05

The discussion in this podcast offers a comprehensive overview of Federal Information Processing Standards (FIPS), which are guidelines developed by the National Institute of Standards and Technology (NIST) to ensure security, interoperability, and data protection across U.S. federal computer systems. FIPS standards are mandatory for federal agencies under laws like FISMA and serve as a crucial framework for risk mitigation against cyber threats, though their adoption is often voluntary in the

en

00:29:07

FIDO2: Deep Dive into The New Passwordless...

InfoSec Bites ·

2025/11/28

The discussion in this podcast provides an extensive, expert-level overview of FIDO2, which is presented as the new gold standard for passwordless authentication. It explains that FIDO2 fundamentally replaces the vulnerable "shared secret" password model with a cryptographic public-key system, where a private key is securely stored on the user's device, making it inherently resistant to phishing and credential stuffing attacks. The discussion meticulously breaks down the technical

en

00:37:45

Virtualisation and VDI: Architecture, Security,...

InfoSec Bites ·

2025/11/21

The discussion in this podcast provides an extensive analysis of the security challenges, exploitation techniques, and resilience strategies necessary for modern Virtual Machine (VM) and Virtual Desktop Infrastructure (VDI) environments. It details the fundamental security trade-offs between Type 1 (bare metal) and Type 2 (hosted) hypervisors, noting that enterprise solutions mandate the superior isolation of Type 1. It systematically examines critical attack vectors, including Virtual Machine

en

00:50:23

Eternal Blue & WannaCry: How NSA secret leaked & Cost...

InfoSec Bites ·

2025/11/14

The interesting discussion in this podcast provides a comprehensive post-mortem of the EternalBlue cyber crisis, focusing primarily on the devastating WannaCry and NotPetya attacks of 2017. They explain that the root cause was the National Security Agency (NSA) developing and stockpiling the EternalBlue exploit, which was subsequently leaked by the Shadow Brokers hacking group. The discussion analyzes the technical execution of the attacks, which exploited a vulnerability in Microsoft’s Server

en

00:33:03

Cozy Bear's(APT29) Quiet Espionage Against the DNC

InfoSec Bites ·

2025/11/07

The discussion in this podcast provide an extensive analysis of the Russian threat actor Cozy Bear (APT29), focusing on its sophisticated cyber espionage operations. The first source concentrates on the 2020 SolarWinds supply chain attack, detailing how the group injected the Sunburst backdoor into legitimate software updates to compromise numerous organizations, including U.S. government entities, and discusses the subsequent remediation, legal action, and lessons learned regarding supply chain

en

00:29:33

Due Diligence and Due Care in Security Governance

InfoSec Bites ·

2025/11/03

The dicussion in this podcast provides an exhaustive analysis of Due Diligence (DD) and Due Care (DC), presenting them as the dual legal and operational pillars of robust security governance, particularly in the context of the CISSP certification. Due Diligence is defined as the strategic, investigative, and planning phase, focusing on foresight, risk assessment, and establishing security policies; it is about knowing what should be done. Conversely, Due Care is the continuous, operational execution

en

00:35:50

Jaguar Land Rover 2025 Cyber Failure: Resilience and...

InfoSec Bites ·

2025/11/01

This podcast dicussion provides an extensive post-mortem analysis of the Jaguar Land Rover (JLR) Cyber Incident of 2025, which caused an estimated £1.9 billion in economic damage and crippled production for approximately 40 days. The analysis attributes the crisis not to a sophisticated new exploit, but to systemic operational resilience failures, particularly catastrophic weaknesses in Identity and Access Management (IAM) and the architectural flaw of insufficient IT/Operational Technology (OT)

en

01:05:32

SIEM, SOAR, EDR, and DLP: The Integrated...

InfoSec Bites ·

2025/10/30

The dicussion in this podcast provides an extensive overview of the integrated cybersecurity ecosystem, detailing the four foundational pillars necessary for a modern Security Operations Center (SOC). It comprehensively examines Security Information and Event Management (SIEM) as the central command post for data aggregation and threat detection, and Security Orchestration, Automation, and Response (SOAR) as the tool that automates and accelerates incident response using playbooks. Furthermore, the

en

00:49:02

Single Sign-On(SSO) Protocols: Kerberos, SAML, OAuth,...

InfoSec Bites ·

2025/10/29

The discussion in this podcast is an expert-level analysis of four critical Single Sign-On (SSO) protocols: Kerberos, SAML, OAuth, and OpenID Connect (OIDC), detailing their architectures, security features, and ideal use cases within a modern enterprise. It explains that while Kerberos is best for internal networks and SAML for enterprise federation, OAuth is for delegated API authorization, which OIDC then extends to cover user authentication for consumer applications. A significant portion of the

en

00:37:09

Overflow, RCE, and MITM Attacks: Advanced Cyber Threats

InfoSec Bites ·

2025/10/27

The discussion in this podcast provides an extensive analysis of three major categories of cyber threats: Buffer Overflow, Remote Code Execution (RCE), and Man-in-the-Middle (MITM) attacks. It systematically examines the mechanics of each attack type, from the foundational memory corruption of buffer overflows to the network-based deception used in MITM attacks. It emphasizes that while technical defenses like Address Space Layout Randomization (ASLR) and HTTPS are crucial, the most significant

en

00:35:42

Australia's Cyber Security Act 2024: Analysis and Impact

InfoSec Bites ·

2025/10/26

The dicussion in this podcast provides an exhaustive analysis of the Australian Cyber Security Legislative Package of 2024, a major government overhaul shifting the nation from a voluntary to a mandatory cyber security posture driven by high-profile systemic failures. This package is composed of three principal acts: the Cyber Security Act 2024 (CSA 2024), the Security of Critical Infrastructure and Other Legislation Amendment (ERP Act), and the Privacy and Other Legislation Amendment Act 2024

en

00:40:28

AWS US-EAST-1 Outage: Cascading Failure and Systemic...

InfoSec Bites ·

2025/10/25

The podcast discussion provides an extensive forensic analysis of the Amazon Web Services (AWS) US-EAST-1 outage in October 2025, attributing the initial failure to a latent race condition within the DynamoDB Domain Name System (DNS) management automation. The analysis details how this localised regional DNS failure resulted in a global operational paralysis because critical worldwide services, such as Identity and Access Management (IAM), maintain a centralised control plane dependency on

en

00:32:11

OAIC and ACSC: Australian Cyber Preparedness and...

InfoSec Bites ·

2025/10/24

The discussion on this podcast is an extensive analysis of the Australian cyber security benchmarks established by the Federal Court's landmark judgment against Australian Clinical Labs (ACL) under the Privacy Act 1988. This judgment effectively converted guidance from the Office of the Australian Information Commissioner (OAIC) and the Australian Cyber Security Centre (ACSC) into mandatory legal standards for protecting personal information. The text meticulously details the requirements across

en

00:34:11

Quantum World Congress 2025: Summary and Key Themes

InfoSec Bites ·

2025/10/22

The podcast provides an extensive overview of the rapidly advancing field of quantum technology, focusing heavily on the Quantum World Congress 2025 event and the technical roadmaps of major industry players. A core theme is the shift from theoretical science toward commercialization and real-world deployment, particularly in areas like climate solutions, finance, and security. It detail the progress of several quantum computing companies—IonQ, D-Wave, Quantum Computing Inc. (QUBT), and Rigetti

en

00:40:59

Optus Data Breach: A Deep Analysis of Broken API &...

InfoSec Bites ·

2025/10/21

The discussion in this podcast provides a deep analysis of the 2022 Optus data breach, describing it as a failure of national significance in Australia that exposed the personal information of up to ten million current and former customers. This extensive topic discusses how the breach was not a sophisticated attack but rather the exploitation of a basic and long-standing security flaw in an unauthenticated Application Programming Interface (API). The discussion meticulously outlines the technical

en

00:32:56

Medibank Cyber Incident 2022: Analysis and Lessons...

InfoSec Bites ·

2025/10/20

The dicussion in this podcast offers a comprehensive overview of the Medibank cyber incident in 2022, detailing the catastrophic data breach suffered by Australia's largest health insurer, affecting approximately 9.7 million current and former customers. The breach, linked to Russian national Aleksandr Gennadievich Ermakov and the REvil ransomware group, was primarily enabled by critical security lapses, notably the absence of multi-factor authentication (MFA) on key systems and poor third-party

en

00:29:30

Qantas 2025 Cyber Attack: Supply Chain Attack and...

InfoSec Bites ·

2025/10/19

This podcast discussion provides a comprehensive overview of the Qantas data breach that occurred in July 2025, which compromised approximately 5.7 to 6 million customer records through the exploitation of a third-party customer service platform. Several sources confirm that the attack was attributed to the threat actor group Scattered Spider and involved social engineering tactics like Multi-Factor Authentication (MFA) bypass and targeting call center personnel. This incident underscores the

en

00:42:39

REST APIs and Webhooks: Architecture and Security...

InfoSec Bites ·

2025/10/18

The discussion in this podcast provides an expert-level analysis of two foundational architectural paradigms in digital communication: REST APIs and Webhooks, emphasizing that they are complementary, not competitive, technologies. It explains that REST APIs operate on a pull-based, stateless model ideal for on-demand data retrieval, while Webhooks use a push-based, event-driven mechanism for real-time notifications, thereby avoiding the inefficiency of continuous polling. A significant portion of

en

122 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs