show episodes
 
The Application Security Weekly podcast delivers interviews and news from the worlds of AppSec, DevOps, DevSecOps, and all the other ways people find and fix software flaws. Join hosts Mike Shema, John Kinsella, and Akira Brand on a journey through modern security practices for apps, clouds, containers, and more.
  continue reading
 
On each episode we share the stories of people who've transformed their life to live in alignment with their true purpose. These stories are raw, real and remind you that you, too, can stop living for what everyone else thinks, and start living the life you were meant to live. Kay Cote is an up and coming as a professional speaker and entertainer who builds community based on mindfulness in action. After many years enduring chronic bullying as a child, Kay shares her story to inspire others ...
  continue reading
 
Artwork

1
The Anchor Point Podcast

The Anchor Point Podcast

Unsubscribe
Unsubscribe
Monthly
 
Discover the premier and original podcast dedicated to wildland firefighting, the vibrant culture surrounding wildland firefighters, firefighter mental health and physical performance, and the wilderness - The Anchor Point Podcast... Join our global community as we delve into the captivating stories of Wildland Firefighters, shed light on career opportunities, promote fire prevention awareness, educate the public, and openly discuss the mental health struggles and triumphs faced by firefight ...
  continue reading
 
Loading …
show series
 
In the quest to achieve higher scores in the IELTS Speaking test, understanding and utilizing advanced speaking techniques can make a significant difference. In this insightful tutorial led by Ben Worthington, an expert in IELTS preparation, the focus is on how to effectively use emphatic structures to enhance your spoken English. Understanding Emp…
  continue reading
 
Enhancing Your IELTS Score with Emphatic Structures In the quest to achieve higher scores in the IELTS Speaking test, understanding and utilizing advanced speaking techniques can make a significant difference. In this insightful tutorial led by Ben Worthington, an expert in IELTS preparation, the focus is on how to effectively use emphatic structur…
  continue reading
 
In this episode of Security Weekly News, Dr. Doug White and Josh Marpet delve into the widespread impact of the recent CrowdStrike and Microsoft technical issue, which disrupted various industries, including airlines, DMVs, and hospitals. They discuss the interconnectedness of modern systems, the reliance on automatic updates, and the critical need…
  continue reading
 
In this episode of Enterprise Security Weekly, we revisit the insightful book "Jump-start Your SOC Analyst Career" with authors Jarrett Rodrick and Tyler Wall, exploring updates on career paths, opportunities, and the industry's reality. We delve into the myths versus the truths about cybersecurity careers, discussing the viability of high salaries…
  continue reading
 
Thinking about getting a 3D printer or have one and need a good primer? Check out this segment, we live 3D print a Captain Crunch whistle and talk all about 3D printing for hackers! Segment Resources: Slides used in this segment: https://files.scmagazine.com/wp-content/uploads/2024/07/3D-Printing-for-Hackers.pdf Major 3D Printer Websites: https://v…
  continue reading
 
Introduction Mobile phone addiction and excessive screen time are increasingly pertinent issues, particularly among children. This article examines the societal impact of these phenomena and discusses various perspectives on the topic. Full tutorial available here: https://www.ieltspodcast.com/audio-tutorials/vocab-mobile-phone-addiction/…
  continue reading
 
This week on Cleaning Up, Michael Liebreich sits down with mechanical engineer and YouTube creator Dr Rosemary "Rosie" Barnes to discuss the critical role of engineering in addressing climate change. Rosie shares insights from her work developing clean energy technologies and her popular channel "Engineering with Rosie," where she tackles topics li…
  continue reading
 
How can LLMs be valuable to developers as an assistant in finding and fixing insecure code? There are a lot of implications in trusting AI or LLMs to not only find vulns, but in producing code that fixes an underlying problem without changing an app's intended behavior. Stuart McClure explains how combining LLMs with agents and RAGs helps make AI-i…
  continue reading
 
How can LLMs be valuable to developers as an assistant in finding and fixing insecure code? There are a lot of implications in trusting AI or LLMs to not only find vulns, but in producing code that fixes an underlying problem without changing an app's intended behavior. Stuart McClure explains how combining LLMs with agents and RAGs helps make AI-i…
  continue reading
 
Cyber insurance underwriting is all over the map. With such a variation in application requirements, how should small and medium businesses prepare to receive the best policy for the price? Brian Fritton joins Business Security Weekly to discuss a systematic approach to preparing for cyber insurance. By working with the underwriters, this approach …
  continue reading
 
I'm always thrilled to chat with ex-analysts, and Henrique Teixeira can cover a lot of ground with us on the topic of identity management and governance. The more I talk to folks about IAM/IGA, the more I'm shocked at how little has changed. If anything, it seems like we've gone backwards a bit, with the addition of cloud SaaS, mobile devices, and …
  continue reading
 
Bats in your headset, Windows Wifi driver vulnerabilities, Logitech's dongles, lighthttpd is heavy with vulnerabilities, node-ip's not vulnerability, New Intel CPU non-attacks, Blast Radius, Flipper Zero alternatives, will OpenSSH be exploited, emergency Juniper patches, and the D-Link botnet grows. Iceman comes on the show to talk about RFID and N…
  continue reading
 
Electric vehicles are finally becoming more mainstream, but this hasn’t stopped a flood of negative stories and political attempts to scare people away from making the switch to better, more cost efficient vehicles. So is the EV revolution now inevitable? Bryony Worthington sits down with Ben Nelmes, the Chief Executive of New Automotive, a UK-base…
  continue reading
 
Sandy Carielli and Janet Worthington, authors of the State Of Application Security 2024 report, join us to discuss their findings on trends this year! Old vulns, more bots, and more targeted supply chain attacks -- we should be better at this by now. We talk about where secure design fits into all this why appsec needs to accelerate to ludicrous sp…
  continue reading
 
Sandy Carielli and Janet Worthington, authors of the State Of Application Security 2024 report, join us to discuss their findings on trends this year! Old vulns, more bots, and more targeted supply chain attacks -- we should be better at this by now. We talk about where secure design fits into all this why appsec needs to accelerate to ludicrous sp…
  continue reading
 
On average, CISOs manage 50-75 security products. Many of these products have either not been deployed or only partially deployed, while others overlap of products. How do CISOs effectively consolidate their products to a manageable size? Max Shier, Chief Information Security Officer at Optiv Security, joins Business Security Weekly to discuss tech…
  continue reading
 
In this lesson, you’ll learn ● The assessment criteria of the IELTS writing test ● How to use them in your practice sessions This will help you in your IELTS because ● In understanding the criteria used in the exam you can prepare more effectively ● You can work smarter rather than harder Navigating the IELTS Writing Test: Strategies for Success Ac…
  continue reading
 
Navigating the IELTS Writing Test: Strategies for Success Achieving a high score in the IELTS writing test is a goal for many English language learners. The IELTS writing test, a crucial component of the International English Language Testing System, challenges test takers to demonstrate their ability in coherent writing, proper grammar, and extens…
  continue reading
 
Introduction Remote work and working from home have revolutionised the way we approach our professional duties. This article will explore the societal effects of this modern working trend and its implications on our daily lives. Full tutorial available here: https://www.ieltspodcast.com/audio-tutorials/vocab-working-remotely/…
  continue reading
 
Exploring the Hardware Hacking Realm with Joe Grand, AKA Kingpin Joe Grand, also known by his hacker pseudonym "Kingpin," stands as a prominent figure in the cybersecurity landscape. With an extensive background in hardware hacking, reverse engineering, and embedded systems, Joe has carved a niche for himself as a respected authority in the field. …
  continue reading
 
With the UK general election tomorrow, the Cleaning Up team sits down with Dr Simon Evans of Carbon Brief to run through each party's manifesto, and what they say about UK climate and energy policy. With Labour widely predicted to win, will the UK's become an international leader on climate once more? How will GB Energy work? And where will all the…
  continue reading
 
Check out this interview from the SWN Vault, hand picked by main host Doug White! This Secure Digital Life segment was originally published on March 6, 2017. Have you ever wondered what phishing is? Do you know what spear phishing attacks are? Doug and Russ explain how to protect yourself from phishing scams in the inaugural episode of Secure Digit…
  continue reading
 
Check out this interview from the BSW Vault, hand picked by main host Matt Alderman! This segment was originally published on October 11, 2022. As 2023 approaches, security leaders are hard at work preparing their budgets, identifying their projects, and setting their priorities for the next twelve months. At the same time, the growth mode days of …
  continue reading
 
Healthcare and malware, MoveIT, Chrome won't trust Entrust, the discovery of Volt Typhoon, & more on this episode of the Security Weekly News! Segment Resources: https://therecord.media/volt-typhoon-targets-underestimated-cisa-says Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-395…
  continue reading
 
We all might be a little worn out on this topic, but there's no escaping it. Executives want to adopt GenAI and it is being embedded into nearly every software product we use in both our professional and personal lives. In this interview, Anurag joins us to discuss how his company evaluated and ultimately integrated AI-based technologies into their…
  continue reading
 
This may be controversial, however, we've been privately discussing how organizations benefit from penetration testing and vulnerability scanning. Do you still need these services as a critical part of your security program? Can't you just patch stuff that is missing patches? Tune in for a lively debate! Zyxl NAS devices are under attack and the ex…
  continue reading
 
As the world transitions away from fossil fuels, one of the biggest challenges is decarbonizing industrial processes that require consistent, reliable sources of energy to produce high-temperatures. Typically these processes run on fossil gas, but now thermal batteries offer a solution by using electricity to store renewable energy in the form of h…
  continue reading
 
OAuth 2.0 is more than just a single spec and it's used to protect more than just APIs. We talk about challenges in maintaining a spec over a decade of changing technologies and new threat models. Not only can OAuth be challenging to secure by default, but it's not even always inter-operable. Segment Resources: https://oauth.net/2.1 https://oauth.n…
  continue reading
 
With 71% of web traffic coming from API calls last year and the average organization maintaining 613 API endpoints, a robust strategy is needed to protect APIs against automated threats and business logic attacks. Tune in as Luke Babarinde, Global Solution Architect, shares the key steps to building a successful API security strategy. This segment …
  continue reading
 
OAuth 2.0 is more than just a single spec and it's used to protect more than just APIs. We talk about challenges in maintaining a spec over a decade of changing technologies and new threat models. Not only can OAuth be challenging to secure by default, but it's not even always inter-operable. Segment Resources: https://oauth.net/2.1 https://oauth.n…
  continue reading
 
Traditional approaches to access management are no longer sufficient to safeguard enterprise security. Tim will explain why the most effective approach to modern enterprise security requires a Zero Trust model that extends beyond just access to encompass every action, no matter how minor. Tim will describe the importance of implementing a Zero Trus…
  continue reading
 
Check out this interview from the SWN Vault, hand picked by main host Doug White! This Secure Digital Life segment was originally published on June 19, 2018. This week, Doug and Russ interview Matthew Silva, President and Founder of the Cybersecurity and Intel Club at Roger Williams University! They talk about majoring in Cybersecurity vs. Computer…
  continue reading
 
FIDO security keys are not new in the authentication workflow. They have been around now for 10 years. What is new is the combination of the most secure multi-factor authentication method not only for logical but also for physical access control with the highest FIPS140-3 security certification in the market. Segment Resources: Video "Swissbit iShi…
  continue reading
 
Log4j, solar winds, tesla hacks, and the wave of high profile appsec problems aren’t going to go away with current approaches like SAST and SCA. Why? They are: -40 years old, with little innovation -Haven’t solved the problem. In this segment, we talk about fully autonomous application security. Vetted by DARPA in the Cyber Grand Challenge, the app…
  continue reading
 
This tutorial will dissect an IELTS essay poised at the 6.5 to 7 band score. We will explore the nuances that differentiate a 6.5 from a 7, analysing each sentence to identify strengths and weaknesses in the usage of grammatical structures and vocabulary. Understanding the Task 2 Question The essay question debates whether employees should remain i…
  continue reading
 
In this tutorial we have a Band 7 essay graded by an EX-IELTSexaminer (from our team of essay correctors!). First you can read the essay, and after we break down which sentences helped this essay score a Band 7. Each criteria has been considered and the sentence in the essay has been colour coded to correspond to the fours marking criteria used by …
  continue reading
 
Exploring the Strategic Minds in Cybersecurity: A Conversation with Dave Aitel Welcome to an enlightening episode of our podcast, where we sit down with Dave Aitel, a prominent figure in the cybersecurity landscape. With a robust background in offensive security and an extensive career spanning various facets of the industry, Dave brings a wealth o…
  continue reading
 
Depending on who you ask, methane is either a useful transition fuel to a low-carbon future, or a super polluter. The science of methane says that for natural gas to have a lower climate footprint than other fossil fuels, particularly coal, there can be leakage of no more than 3.2% from end to end. Yet studies across the US show wildly different le…
  continue reading
 
Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on April 4, 2023. Following on from her successful title "Container Security", Liz has recently authored "Learning eBPF", published by O'Reilly. eBPF is a revolutionary kernel technology that is enabling a whole new generation of …
  continue reading
 
Check out this interview from the ASW Vault, hand picked by main host Mike Shema! This segment was originally published on April 4, 2023. Following on from her successful title "Container Security", Liz has recently authored "Learning eBPF", published by O'Reilly. eBPF is a revolutionary kernel technology that is enabling a whole new generation of …
  continue reading
 
Loading …

Quick Reference Guide