This is a weekly podcast on cyber security domains. We discuss, dissect and demystify the world of security by providing an in-depth coverage on the cybersecurity topics that matter most. All these in plain easy to understand language. Like it, share it, and most importantly enjoy it!
…
continue reading
![Artwork](/static/images/128pixel.png)
1
185 - Cybersecurity Capability Maturity Model
33:03
33:03
Play later
Play later
Lists
Like
Liked
33:03
Enjoying the content? Let us know your feedback! In this week's episode we will dig in exploring a critical framework that’s reshaping how organizations approach cybersecurity—especially in the energy sector—known as the Cybersecurity Capability Maturity Model. This is also refer to C2M2. We’ll unpack what C2M2 is, why it’s so important, and how it…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
184 - Why Hackers Target Stolen Credentials
37:23
37:23
Play later
Play later
Lists
Like
Liked
37:23
Enjoying the content? Let us know your feedback! In this week's episode, we’re unpacking a topic that’s crucial for anyone connected to the digital world: _Why Hackers Target Stolen Credentials_. From understanding the value behind those stolen usernames and passwords to exploring the dark web marketplaces where they’re traded, we’ll break it all d…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
183 - The Malware Information Sharing Platform
30:00
30:00
Play later
Play later
Lists
Like
Liked
30:00
Enjoying the content? Let us know your feedback! In this week's episode, we're diving into the Malware Information Sharing Platform, or MISP. We'll explore how MISP helps organizations share and leverage threat intelligence, enhancing their defense against cyber threats. Stay tuned as we unpack its features, benefits, challenges, and practical tips…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
82 - Weighting The Risk Benefit Of Kernel Level Access By 3rd Party Apps
29:44
29:44
Play later
Play later
Lists
Like
Liked
29:44
Enjoying the content? Let us know your feedback! In this week's episode, we will dig into the risk benefit analysis of allowing kernel level access to third party application. We will look into the inherent risks this brings into the operating system and the benefit thereof. We will also compare the approach the two major operatic system makers too…
…
continue reading
Enjoying the content? Let us know your feedback! This week's episode needs very little introduction: The CrowdStrike IT Outage. We will delve into the unprecedented IT outage caused by a corrupt update from CrowdStrike, which led to widespread Blue Screen of Death (BSOD) errors on Windows systems across globe. Join us as we explore how this inciden…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
180 - Unmasking Data Breaches - Understanding the Surge and Examining Recent Major Incidents - Part 2
35:32
35:32
Play later
Play later
Lists
Like
Liked
35:32
Enjoying the content? Let us know your feedback! As I said in part of this two part series episode, It's easy to feel like nothing is secure these days, with constant reports of data breaches and exploits occurring everywhere you look. From major corporations to small businesses, no one seems immune to these pervasive cyber threats. The frequency a…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
179 -Unmasking Data Breaches - Understanding the Surge and Examining Recent Major Incidents - Part 1
28:43
28:43
Play later
Play later
Lists
Like
Liked
28:43
Enjoying the content? Let us know your feedback! It's easy to feel like nothing is secure these days, with constant reports of data breaches and exploits occurring everywhere you look. From major corporations to small businesses, no one seems immune to these pervasive cyber threats. The frequency and scale of these incidents can make it seem like o…
…
continue reading
Enjoying the content? Let us know your feedback! In this episode, we’re focusing on the rising trend of IT outsourcing and its implications for cybersecurity. As more businesses delegate non-core tasks to third-party providers, they inadvertently open doors to trust relationship attacks. We'll explore how attackers exploit the trust between compani…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
177 - The importance Of Automation And Orchestration In Cyber Security - Part 2
41:01
41:01
Play later
Play later
Lists
Like
Liked
41:01
Enjoying the content? Let us know your feedback! This week's episode will continue with part 2 of "The Importance of Automation and Orchestration in Cyber Security." As I said in the episode one, the need for efficient and effective security measures has never been more critical. I suggest you listen to E1, before you dive into this one. Without fu…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
176 - The importance Of Automation And Orchestration In Cyber Security - Part 1
36:37
36:37
Play later
Play later
Lists
Like
Liked
36:37
Enjoying the content? Let us know your feedback! In this week's episode of the podcast we dissect "The Importance of Automation and Orchestration in Cyber Security." As you are well aware cyber threats are becoming increasingly sophisticated and frequent. The need for efficient and effective security measures has never been more critical. Equally, …
…
continue reading
Enjoying the content? Let us know your feedback! In this week's episode, we're tackling a topic that has become increasingly relevant in our post-pandemic world: the hidden dangers posed by remote work. As more companies embrace flexible work arrangements, the convenience and efficiency of working from home bring new set of challenges. From cyberse…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
174 - Digital Twin Technology And Its Application In Security
38:27
38:27
Play later
Play later
Lists
Like
Liked
38:27
Enjoying the content? Let us know your feedback! In this week's episode we're exploring an exciting and transformative innovation: Digital Twins technology and its groundbreaking application in cybersecurity. Imagine having a virtual replica of your entire digital infrastructure—a detailed, dynamic model that mirrors every aspect of your environmen…
…
continue reading
Enjoying the content? Let us know your feedback! In this episode we continue with part 2 on comparing SSL VPN and IPsec VPN, two popular technologies used for secure remote access. As I said last week, understanding the nuances of these technologies is therefore crucial. We'll explore how each VPN works, their security features, performance differe…
…
continue reading
Enjoying the content? Let us know your feedback! In this week's episode we're diving into the world of VPNs, Specifically we will compare SSL VPN and IPsec VPN, two popular technologies used for secure remote access. In the post pandemic area, remote work become part of the new normal post. Understanding the nuances of these technologies is therefo…
…
continue reading
Enjoying the content? Let us know your feedback! In this week's episode, we will be exploring the fascinating world of remote browser isolation technology or RBI as it appreciated. We will delve into what remote browser isolation is, how it works, and the limitations it faces. Join us as we uncover the complexities of this innovative cybersecurity …
…
continue reading
Enjoying the content? Let us know your feedback! In part 2 on eBPF we continue demystifying this promising new technology that is strengthening the cyber space. Please listen to the previous episode i.e. Episode 169 before you to listen to this one. Having said that, lets recap a top trending security news, shall we? New UK Law: No Default Password…
…
continue reading
Enjoying the content? Let us know your feedback! In this episode, we're diving deep to demystif a groundbreaking technology that's gathering pace on the security front. It is not something most people are aware of. This technology is bringing enhanced visibility, increased performance to enabling powerful security measures. Hang around as we unrave…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
168 - Preparing for and responding to ransomeware attack - Part 2
33:31
33:31
Play later
Play later
Lists
Like
Liked
33:31
Enjoying the content? Let us know your feedback! In this week's episode, we will continue with part 2 on "Preparing for and responding to ransomeware attack" As I said last week, ransomware is a threat that will be around us for the foreseeable future. Do listen to part 1 before you listen to this episode. With that out of the way, lets have a look…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
167 - Preparing for and responding to ransomeware attack
34:53
34:53
Play later
Play later
Lists
Like
Liked
34:53
Enjoying the content? Let us know your feedback! Ransomware is a threat that will be around us for the foreseeable future. In this week's episode we will look at the history of ransomware, the common TTPs in use by threat actors such as Turla, how to align our incident response to that threat and others, and finally how to contain, eradicate, and r…
…
continue reading
Enjoying the content? Let us know your feedback! This week we will dive into a collection of powerful system utilities and tools designed to help users diagnose, troubleshoot, and monitor Windows operating system. These utilities provide advanced functionality beyond what is typically available in Windows, as they offer insights into system interna…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
165 - How AI is helping Incident Responders
35:02
35:02
Play later
Play later
Lists
Like
Liked
35:02
Enjoying the content? Let us know your feedback! AI is getting into all sorts of places but no less than in cybersecurity in both a good way and bad ways. In a good way with bolstering Incident response live cycle but unfortunately in a bad way with generating convincing phishing email or assisting with script and coding etc. In this week's episode…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
164 - What Is Platform Approach To Security? - Part 2
32:41
32:41
Play later
Play later
Lists
Like
Liked
32:41
Enjoying the content? Let us know your feedback! In our second episode, we continue exploring the concept of adopting a platform security. In this second part we will continue where we left off from last week and will encourage you to listed to the first episode if you have not done so. Before we get into the main topic, lets touch one important to…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
163 - What Is Platform Approach To Security? - Part 1
34:41
34:41
Play later
Play later
Lists
Like
Liked
34:41
Enjoying the content? Let us know your feedback! Welcome and thank you for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain english. In this episode, we explore the recently much talked about concept of adopting a platform security. As technology advances, cyber criminals continua…
…
continue reading
Enjoying the content? Let us know your feedback! It was the LEAP event this past week. LEAP is a technology event in Saudi Arabia, Riyadh and it attracts every technology company imaginable especially in the cyber security domain. This is year was no different. At LEAP, I met with Port53, a firm that helps from SMB to enterprise businesses with the…
…
continue reading
Enjoying the content? Let us know your feedback! This week I attended Qatar Web Summit. This is a technology and start-up summit held yearly in Doha, Qatar. There were a lot going on and I am lucky to have spent time with the Ken Fee, the CEO of Business Technology Architect shorten as BTA where we talked about security, network optimisation and au…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
160 - The Hidden Risks of Default Configurations - Part 2
45:21
45:21
Play later
Play later
Lists
Like
Liked
45:21
Enjoying the content? Let us know your feedback! In this episode, we are continuing with part 2 of the risks paused by default configuration. As I said last week, while default config is convenient for initial setup, these settings are may introduce significant security risks that can leave systems vulnerable to exploitation by malicious actors. Pl…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
159 - The Hidden Risks of Default Configurations - Part 1
37:19
37:19
Play later
Play later
Lists
Like
Liked
37:19
Enjoying the content? Let us know your feedback! In today's interconnected world, default configurations are ubiquitous across various systems and devices, from routers to software applications. While convenient for initial setup, these default settings often harbor significant security risks that can leave systems vulnerable to exploitation by mal…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
158 - Is quantum computing a threat to cryptography, really? - Part 2
37:46
37:46
Play later
Play later
Lists
Like
Liked
37:46
Enjoying the content? Let us know your feedback! This is the second episode of our two part episode on whether quantum computing is a threat to cryptography really. Make sure you listen to episode 1 first as we laid the foundation on what is coming up in this episode. As always lets review this week's top trending security news first. CISA and the …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
157 - Is quantum computing a threat to cryptography, really? - Part 1
39:54
39:54
Play later
Play later
Lists
Like
Liked
39:54
Enjoying the content? Let us know your feedback! Cryptography are the backbone of privacy since time immemorial. Toda is THE foundational block of the connected world without which the Internet will crumble as we know it. There is a feverish discussions happening and fast improving of a new era in computing - Quantum computing, and it is improving …
…
continue reading
Enjoying the content? Let us know your feedback! Welcome and thank you for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain english. Accessing and managing various applications and services remotely is a daily occurrence for a typical administrator. It is often the fastest way to …
…
continue reading
Enjoying the content? Let us know your feedback! When things go wrong, they go wrong fast. This week will dive into the widespread exploitation on iVanti VPN solution that attracted a lot of attention from both the security community as well as from the bad guys. What went wrong? Stay tuned. Just before we get into iVanti, lets review the other top…
…
continue reading
Enjoying the content? Let us know your feedback! We are continuing demystifying a couple of terms that folks new to the realm of cyber security often mix up. Those are the terms Exfil or DLP. So by the end of the session you will surely understand where you stand the next time you will hear an Exfil has happened to so and so org or a DLP is require…
…
continue reading
Enjoying the content? Let us know your feedback! We will kick off the year with demystifying a couple of terms that folks new to the realm of cyber security often mix up. Those are the terms Exfil or DLP. So by the end of the session you will surely understand where you stand the next time you will hear an Exfil has happened to so and so org or a D…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
152 - Recap of most popular episodes of 2023
1:42:39
1:42:39
Play later
Play later
Lists
Like
Liked
1:42:39
Enjoying the content? Let us know your feedback! Welcome back and thank you for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain English. Well 2023 came and is is now gone, in this final episode we are unwinding the tape to go back to our most popular episodes. If you ever wondere…
…
continue reading
Enjoying the content? Let us know your feedback! Welcome back and thank you for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain English. In our penultimate episode, we will review the twist and turn of 2023. We will go over the trend that stood out the most and both the trends an…
…
continue reading
Enjoying the content? Let us know your feedback! Digital inter-connectivity define our era. One of the primary challenges facing supply chain cyber security is the expanding attack surface. In this week's episode we will turn to Supply Chain Security, how attackers carry out such attacks. We will also look at previous examples and what mitigations …
…
continue reading
Enjoying the content? Let us know your feedback! The holiday season is when most of us let our guard down. For the cyber criminal though, it is their hunting season. In this episode we will give you practical advise on how to stay one step ahead of the miscreants and avoid getting their hands on your sensitive data or cash or both. To get started, …
…
continue reading
Enjoying the content? Let us know your feedback! In episode 148 we look inside the mysterious world of the Dark Web. The Dark Web is a hidden area of the internet that is often obscured by mystery and intrigue to many, and it is unlike standard search engines and browsing destination. I will try to deconstruct this covert network and make you aware…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
147 - Web shells - Understanding Their Role in Cyber Attacks
41:02
41:02
Play later
Play later
Lists
Like
Liked
41:02
Enjoying the content? Let us know your feedback! One of the go tools for attackers are Web shells. In this episode we will explore what these are, their background, how they are used and how you can avoid be turned against you. These deceptive tools bring immense power to the hands of hackers, acting as covert entry door to infiltrate and control t…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
146 - Symbolic Language in cyber security
35:30
35:30
Play later
Play later
Lists
Like
Liked
35:30
Enjoying the content? Let us know your feedback! During Gitex Global in Dubai I sat down with the leaders and founders of Source Technology an organisation based in Swizerland that developed a tool called Source Security. This is ...quote... "technology to integrate behavioral analytics with Symbolic Language that can significantly enhance cybersec…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
145 - Indication of compromise best practice
51:13
51:13
Play later
Play later
Lists
Like
Liked
51:13
Enjoying the content? Let us know your feedback! Welcome back and thank you for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain english. I'm your your host Ibrahim Yusuf In today's episode, we're shedding light on a critical yet often overlooked aspect of cybersecurity - Indicati…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
144 - The New Common Vulnerability Scoring System
44:37
44:37
Play later
Play later
Lists
Like
Liked
44:37
Enjoying the content? Let us know your feedback! Today, we're diving into the world of cybersecurity with an eye to vulnerability scoring system. C We've got a topic that's on the mind of anyone with interest in risk management, one that's of paramount importance to anyone concerned with the safety and integrity of their assets. That's right, today…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
143 - Smart Homes - Discussion with Floris Grandvarlet EMEA Innovation and Sustainability CTO at Cisco
29:45
29:45
Play later
Play later
Lists
Like
Liked
29:45
Enjoying the content? Let us know your feedback! And in today's episode we ponder over how technology continues to reach every aspect of our lives and now the places we call our castles...our homes. The other week at GITEX I also sat down with Floris Grandvarlet, EMEA Innovation, Sustainability, CTO at CISCO. More that later, but first..... we look…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
142 - Discussion With Eric Vedel Directory CISO Advisory at Cisco
31:13
31:13
Play later
Play later
Lists
Like
Liked
31:13
Enjoying the content? Let us know your feedback! This was GITEX 2023 Dubai week. GITEX, short for the "Gulf Information Technology Exhibition," is a prominent annual technology event and trade show held in Dubai, United Arab Emirates. It is one of the largest and most influential technology exhibitions in the Middle East, attracting participants an…
…
continue reading
Enjoying the content? Let us know your feedback! This is the second part of our Threat Modeling episode. Please listen to last week week's episode, that is episode 140 before you dive into this one. Having said that, lets have a look at the top security news this week: - https://blog.google: New Gmail protections for a safer, less spammy inbox - ht…
…
continue reading
Enjoying the content? Let us know your feedback! In this week's episode I step through what Threat Modeling is. And yes it a crucial aspect of cybersecurity that is often overlooked. Join us as we explain this concept by carefully examining its definition, and, more importantly, highlighting its effectiveness as a powerful tool in the ever-changing…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
139 - Initial Access - When the Rubber Hits the Road During the Attack Phases - Part 2
42:00
42:00
Play later
Play later
Lists
Like
Liked
42:00
Enjoying the content? Let us know your feedback! Today's episode is a continuation of what we've started last week: Initial Access. This is part 2. And as I said, it truly is the point where the rubber hits the road when it comes to the important stages to look out for during an attack. Thoroughly investigation the Initial Access stage allows us fi…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
138 - Initial Access - When the Rubber Hits the Road During the Attack Phases
46:11
46:11
Play later
Play later
Lists
Like
Liked
46:11
Enjoying the content? Let us know your feedback! In today's episode, we're peeling back the layers of cybersecurity to delve into a critical phase of the attack lifecycle: Initial Access. It's the point where the rubber truly hits the road during a cyberattack. We will uncover the strategies, tactics, and technologies involved in gaining that cruci…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
137 - Introduction to Cybersecurity - Part 2
40:38
40:38
Play later
Play later
Lists
Like
Liked
40:38
Enjoying the content? Let us know your feedback! Today we will step back and talk about the fundamentals to understanding this ever-evolving field: cyber security. And what better way than to cover "Introduction to Cyber Security" in this episode. But before that, we will recap other trending security news including: The stolen LastPass vaults may …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
136 - Introduction to Cybersecurity - Part 1
37:38
37:38
Play later
Play later
Lists
Like
Liked
37:38
Enjoying the content? Let us know your feedback! Today we will step back and talk about the fundamentals to understanding this ever-evolving field: cyber security. And what better way than to cover "Introduction to Cyber Security" in this episode. But before that, we will recap other trending security news including: Notepad++ 8.5.7 released with f…
…
continue reading