Welcome to Vulnerable U, a podcast where we explore the intersection of vulnerability and cyber security. Each episode, we explore how vulnerability can drive growth and foster community resilience within our industry. Get ready for thought-provoking conversations, real-life stories, and curated news that inspire you to embrace discomfort on the road to a more vulnerable you.
…
continue reading
The editors of Decipher talk with a rotating cast of security practitioners, researchers, and executives about a variety of topics in the security and privacy fields.
…
continue reading
An IPO is an important milestone for a company and its shareholders, and it has long-term business, human & financial implications. Our purpose is to demystify the IPO process by leveraging the personal experience of company executives, advisors, and other stakeholders. In IPO Stories we interview executives, founders, advisors and investors who share their experience of the IPO process. The podcast is hosted by Gautier Rousseau and Per Einar Ellefsen, the founders of Amundsen Investment Man ...
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Reddit's Matt Johansen on Identity Attacks, Enterprise Security, and Burnout
31:42
31:42
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
31:42
Reddit's head of software security Matt Johansen joins Dennis Fisher to talk about the highlights of Black Hat USA, the challenges of sorting security priorities in a large enterprise, and how he's learned to take care of his mental health after many years in the security industry.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Sony Hack Ten Years Later With Brian Raftery
45:17
45:17
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
45:17
The Sony Pictures hack in 2014 by the North Korean Lazarus Group was a seminal event both in Hollywood and in the security community, bringing to light the capabilities and ambitions of North Korean attackers and showing the damage a leak of sensitive data can be. Brian Raftery joins Dennis Fisher to discuss his new Ringer podcast, The Hollywood Ha…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Zero Day Reuse and A Busy Week for Iranian APTs
18:32
18:32
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
18:32
The focus was on Iranian APTs this week, both from private threat intelligence teams and CISA, exposing new operations from UNC757 and other groups targeting government, higher education, and private industry. We also check in on a new report from Google's Threat Analysis Group on APTs using the same exploits for zero days that were developed by pr…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Rebekah Brown and John Scott-Railton on COLDRIVER and Russian Cyberespionage
23:12
23:12
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
23:12
Rebekah Brown and John Scott-Railton of the Citizen Lab join Dennis Fisher to dive into their group's new report on highly targeted spear phishing campaigns by the Russian threat actor COLDRIVER and then discuss the emergence of a new, possibly related group called COLDWASTREL.بقلم Decipher
…
continue reading
Dennis Fisher and Lindsey O'Donnell-Welch reflect on their week in Las Vegas at Black Hat and discuss the talks they liked, including Moxie Marlinspike's keynote and the Google Project Zero retrospective, and the other topics they found interesting, including vulnerability exploitation versus social engineering and the AI ecosystem.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Black Hat Podcast: Josh Harguess and Chris Ward
26:52
26:52
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
26:52
At Black Hat USA this year, Josh Harguess and Chris Ward, with Cranium AI, talk about the security challenges that organizations are experiencing while implementing AI in their environments, what AI red teaming consists of and the backstory of how MITRE Labs’ AI Red Team came to be.بقلم Decipher
…
continue reading
AI and machine learning security expert Gary McGraw joins Dennis Fisher to discuss the concept of data feudalism in LLM foundation models, what the security implications of it are, and whether narrowly focused models may help address these issues.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Black Hat USA 2024 Preview: AI, AI, and More AI
46:46
46:46
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
46:46
Decipher editors Dennis Fisher and Lindsey O"Donnell-Welch are joined by Brian Donohue to dissect the Black Hat talks they're looking forward to, including sessions with H D Moore, Sherrod DeGrippo, and Moxie Marlinspike, and some talks they can't quite figure out from the titles.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
John Hammond on the CrowdStrike Outage
18:17
18:17
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
18:17
The fallout from the CrowdStrike outage continues more than a week after the faulty update, so Huntress security researcher John Hammond joins Dennis Fisher to talk about the lessons learned from the incident, our fragile software ecosystem, and what cybersecurity practitioners can do differently next time.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Norva24 - Henrik Damgaard (IPO Stories, Ep. 27)
38:32
38:32
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
38:32
Norva24 is a leader in underground infrastructure maintenance services in Northern Europe – that is the maintenance of all the infrastructure related to sewage and waste water. It is a Norwegian company, that has grown through the acquisition of smaller players over the years. In 2021, Henrik Damgaard, the company's CEO at the time, led Norva24 to …
…
continue reading
Tyler Healy, CISO of Digital Ocean, joins Dennis Fisher to discuss the unique challenges of defending a huge platform, how AI is changing things for defenders, and what new challenges AI might bring in the near future.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
What Happened With the CrowdStrike Update and Azure Outage
11:47
11:47
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
11:47
CrowdStrike said a problem with an update the company pushed to Falcon sensors on Windows hosts on July 18 caused a blue screen of death, an issue that coincided with a Microsoft Azure outage and widespread outages across airlines, banks, hospitals, and other services. Our story on this incident: https://duo.com/decipher/crowdstrike-windows-update-…
…
continue reading
FIN7 is a highly active and capable cybercrime group also known as Carbanak that has been evolving and using its own tools such as AVNeutralizer for many years. SentinelOne researchers Antonio Cocomazzi helps us dig into the group's tactics and tools. Read Antonio's new research here: https://www.sentinelone.com/labs/fin7-reboot-cybercrime-gang-enh…
…
continue reading
Former NSA Deputy Director George Barnes joins Dennis Fisher to talk about his 35-year career at the agency, how he came to be intrigued by the cybersecurity world, the emergence of Cyber Command as a force inside the government, and what he sees as the priorities for defenders now.بقلم Decipher
…
continue reading
Chris Hughes, co-founder of Aquia and a Cyber Innovation Fellow at the Cybersecurity and Infrastructure Security Agency, joins Dennis Fisher to talk about the challenges of supply chain security, working with the government to address systemic issues, and the importance of collaboration.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Taaleem - Alan Williamson (IPO Stories, Ep. 26)
59:41
59:41
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
59:41
In this episode, we explore the journey of Taaleem, a leading operator of international private schools in the UAE, and its path to becoming one of the few listed education providers globally. Alan Williamson, the CEO of Taaleem, shares his experience taking Taaleem public in Dubai in November 2022. With Alan, we delve into the role of private educ…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The TeamViewer Breach and a Busy Week for APT29
10:07
10:07
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
10:07
Dennis Fisher and Lindsey O'Donnell-Welch dig into the news of the TeamViewer corporate breach, attributed to APT29/Midnight Blizzard, and news of more victims from the Microsoft intrusion by the same group earlier this year.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Cisco Talos: How Threat Actors Target MFA
15:42
15:42
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
15:42
Multi-factor authentication (MFA) is a critical form of defense for organizations, and threat actors are recognizing that: According to the latest Cisco Talos Incident Response Quarterly Trends report, instances related to MFA were involved in some capacity in half of all security incidents that the Talos team responded to in the first quarter of 2…
…
continue reading
Metin Kortak, CISO with Rhymetec, talks about how organizations are approaching data privacy and security compliance, and thinking about risk management policies, when it comes to generative AI in the workplace.بقلم Decipher
…
continue reading
Michael Mann's 1995 thriller Heat is considered by many people to be the best crime movie ever made. And hidden inside the intricate plot is a story of a lone hacker with a background at DARPA who uses his skills to set up scores for the crews in LA's underworld. Meg Gardiner, the co-author of Heat 2, and Casey Ellis, cofounder of Bugcrowd, join De…
…
continue reading
Amy Bogac, a longtime security executive with a deep background in systems administration and networking, joins Dennis Fisher to talk about how she came to security, how her background in communications informed her career choices, and the difficult conversations that need to occur before someone has to push the button during an incident.…
…
continue reading
A few days after Microsoft announced the new AI-enabled Recall feature--generating tremendous concerns and pushback from the security and privacy communities--the company had decided to disable it by default, but many concerns still remain. A month after the company's CEO proclaimed that it would be "prioritizing security above all else", how did t…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The Challenges of Reporting on Complex Intrusions With Ryan Naraine
26:13
26:13
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
26:13
Veteran security journalist and podcaster Ryan Naraine joins the Decipher podcast to discuss the challenges of separating fact from fiction when reporting on complex incidents such as the Snowflake breach.بقلم Decipher
…
continue reading
Garrett Yamada, associate director of identity security at Texas A&M University, talks about his experiences navigating identity challenges, building an identity-centric strategy and moving away from “home-grown, home-managed systems” that were historically used for authentication.بقلم Decipher
…
continue reading
Sarah Powazek, the Program Director of Public Interest Cybersecurity at the UC Berkeley Center for Long-Term Cybersecurity, joins Dennis Fisher to talk about her work in setting up Cybersecurity Clinics at high education institutions around the country to help bring knowledge and skills to underserved organizations.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Aker BioMarine - Matts Johansen (IPO Stories, Ep. 25)
28:43
28:43
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
28:43
Matts Johansen is the CEO of Aker BioMarine, the global leader in krill fishing and production of krill-based products, such as omega 3 supplements and aquaculture feed. Aker BioMarine was founded as part of the Aker conglomerate, and Matts has been the CEO since 2015. In July 2020, they listed the company on Euronext Growth Oslo, in the middle of …
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Caitlin Condon on the Attack Intelligence Report
29:22
29:22
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
29:22
Caitlin Condon of Rapid7 joins Dennis Fisher to dive into the juicy tidbits from the Rapid7 Attack iNtelligence Report, including the rise in attacks on zero days, ransomware proliferation, and why network edge devices remain a major problem. Read the report here: https://www.rapid7.com/c/fr-2024-attack-intelligence-report-TY/1/…
…
continue reading
Chris Langford, Director of Network, Infrastructure, and Cyber Security at the Lewisville Independent School District, talks about how having experience in the classroom has helped him from a cybersecurity perspective, and how we can best educate the next generation of students on cybersecurity best practices.…
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Gas shipping at Flex LNG and Avance Gas - Øystein Kalleklev (IPO Stories, Ep. 24)
57:04
57:04
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
57:04
Øystein Kalleklev is the CEO of not one, but 2 listed companies: Flex LNG and Avance Gas, two leading shipping companies in Liquefied Natural Gas (LNG) and Liquefied Petroleum Gas (LPG), both listed on Euronext Oslo. Øystein shares his experience steering these companies through volatile market conditions and his rationale behind dual listing Flex …
…
continue reading
At RSA Conference 2024, Kelly Shortridge, senior director of portfolio product management at Fastly, talks about the first steps organizations can take toward adopting a Secure by Design mindset and how businesses can approach the challenge of sustaining resilience in complex systems.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
RSA 2024 Preview: What are These Sessions Even About?
53:55
53:55
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
53:55
In this special episode, Dennis Fisher and Lindsey O'Donnell-Welch are joined by Brian Donohue of Red Canary to preview the RSA conference talks they're excited about and to try to make sense of some of the session titles that are maybe a little indecipherable.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
Saudi Arabia's Tadawul IPO(s) - Nayef Al-Athel (IPO Stories, Ep. 23)
37:32
37:32
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
37:32
Saudi Arabia has evolved from having 4 IPOs per year 10 years ago, to 40 IPOs per year over the last few years. Nayef Al Athel has been in the middle of this evolution, as he headed the listings activity at the Saudi Exchange between 2018 and 2023. With Nayef, we discuss the policy decisions and incentives that have made Saudi Arabia one of the mos…
…
continue reading
Lindsey O'Donnell-Welch turns the tables on Decipher editor-in-chief Dennis Fisher in this episode of Memory Safe to find out how his background covering crime prepared him for the cybersecurity beat, why Ferris Bueller's Day Off is his favorite hacker movie, and how much the security world has changed in the last 20 years.…
…
continue reading
In this week's Source Code podcast, we go over findings from a newly released Ransomware Task Force report and give an update on the types of data accessed in the Change Healthcare ransomware attack.بقلم Decipher
…
continue reading
The Salvation Army’s Lachlan McGill, general manager of cyber risk and compliance, and Euan Moore, security operations manager, talk about their experiences building a strong cybersecurity foundation, navigating the organization’s unique challenges and fostering a culture around security awareness.بقلم Decipher
…
continue reading
In this week’s Source Code podcast, we discuss new reporting from Change Healthcare parent UnitedHealth Group that the massive ransomware attack has cost the company $872 million so far. We also talk about recent research about Sandworm, which has been designated by Mandiant as APT44.بقلم Decipher
…
continue reading
Cody Stokes, a security leader at Procellis Technology, joins Dennis Fisher to talk about his time in the Marine Corps, the challenges of breaking into the cybersecurity field, and the fulfillment he gets from helping to protect users.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The IPOs of iZettle and Readly - Maria Hedengren (IPO Stories, Ep. 22)
40:11
40:11
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
40:11
Not all IPO processes end up with an IPO. The path is filled with twists and turns, in some cases cancellations, postponements, or even a strategic sale before reaching the stock market. In this episode, we sit down with Maria Hedengren, who led the IPO processes of both iZettle (bought out by Paypal in the final stages) and Readly (listed in Stock…
…
continue reading
In this week’s Memory Safe episode, Sherrod DeGrippo of Microsoft talks about her first experiences with hacker culture, why a Stanley Kubrik movie shows a glimpse of what AI is, and how she makes sure that “threat intelligence hits the right note.”بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The history of direct listings - Dakin Campbell (IPO Stories, Ep. 21)
37:32
37:32
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
37:32
In 2018, Spotify was the first company to do a direct listing instead of a regular IPO process – foregoing the usual bookbuilding process in favor of opening the shares directly on the market in an auction. Dakin Campbell is the author of the book Going Public, where he recounts the history and the inside stories of some of the major IPOs in recent…
…
continue reading
Dan Lorenc, co-founder and CEO of Chainguard, joins Dennis Fisher to dig into the recent XZ Utils backdoor incident, the implications for the open source ecosystem, and what can be done to avoid similar incidents in the future. Then they discuss the problems facing NIST's National Vulnerability Database and the CVE ecosystem.…
…
continue reading
Rick Gordon of Tidal Cyber joins Dennis Fisher to discuss his path from the US Naval Academy to submarine officer to Wall Street and finally to the cybersecurity industry, where he's worked for the last 25 years. Dennis and Rick also talk about the importance of the community aspect of cybersecurity and why it's vital to the collective defense.…
…
continue reading
In this week's Source Code news wrap podcast, we talk about a report by the U.S. Treasury Department looking at AI-specific cybersecurity risks in the financial sector, CISA's newly released Notice of Proposed Rulemaking document for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA), and recently discovered activity linked to AP…
…
continue reading
Jack Cable, senior technical advisor at the Cybersecurity and Infrastructure Security Agency (CISA), talks about his past experiences with bug bounty programs, CISA’s Secure By Design initiative and its efforts to help secure the open-source software ecosystem.بقلم Decipher
…
continue reading
Brian Donohue of Red Canary joins Dennis Fisher to talk about some of the surprising findings from the company's new 2024 Threat Detection Report, including why identity based attacks continue to work so well and how attackers are approaching the shift to the cloud.بقلم Decipher
…
continue reading
In this week's Source Code podcast, we talk about Patch Tuesday updates and the HHS investigation into the ransomware attack on Change Healthcare.بقلم Decipher
…
continue reading
Decipher editors Dennis Fisher and Lindsey O'Donnell-Welch talk about the BlackCat ransomware attack on Change Healthcare that has crippled the company and affected the ability of thousands of health care providers, pharmacies, and hospitals to get paid and submit claims.بقلم Decipher
…
continue reading
![Artwork](/static/images/128pixel.png)
1
The US IPO of Criteo - Edouard Lassalle (IPO Stories, Ep. 20)
43:23
43:23
التشغيل لاحقا
التشغيل لاحقا
قوائم
إعجاب
احب
43:23
Criteo, a French adtech company, listed on Nasdaq in 2013. Edouard Lassalle joined in 2012 to prepare the company for the IPO, and later served as head of Investor Relations for the company until 2022. One of the topics that comes up at an early stage during IPO preparation is the choice of listing location. In earlier episodes, we have heard from …
…
continue reading
Daniel Cuthbert, global head of cybersecurity research at Banco Santander, joins Dennis Fisher to talk about getting his first computer, a ZX Spectrum that he still owns (!), finding his way into hacking through IRC, his passion for photography, and his surprising alternate career path.بقلم Decipher
…
continue reading
In this week's Source Code podcast we talk about how threat actors are using malware that allows them to maintain a better foothold on compromised Ivanti appliances, and we discuss advisories from the U.S. government about APT28, APT29 and the BlackCat ransomware group.بقلم Decipher
…
continue reading