PP038: A Peek Inside The Security Mind Packet Protector podcast

44:03

There’s lots of juicy stories in our monthly security news roundup. The Scattered Spider hacking group makes effective use of social engineering to target MSPs, Microsoft pushes for better Windows resiliency by rethinking kernel access policies for third-party endpoint security software, and the US Justice Department files indictments against alleged operators of laptop farms that ... Read more »…

1
PP069: A Quantum Primer: It’s More Than Cracking Crypto 41:44

21 days ago41:44

41:44

Quantum computing is here, and it’s being used for more than cracking encryption. On today’s Packet Protector we get a primer on quantum, how it differs from classical computing, its applications for difficult computing problems, why quantum will be the death of blockchain, and how to think about quantum risks. Our guest, Johna Johnson, is ... Read more »…

1
PP068: Common Kubernetes Risks and What to Do About Them 39:09

28 days ago39:09

39:09

Today’s Packet Protector digs into risks and threats you might encounter in a Kubernetes environment, what to do about them, and why sometimes a paved path (or boring technology) is the smartest option. My guest is Natalie Somersall, Principal Solutions Engineer for the Public Sector at Chainguard. We talk about risks including identity and access ... Read more »…

1
PP067: Protecting Secrets With Vault and TruffleHog 35:35

5 weeks ago35:35

35:35

Secrets trickle out through misconfigurations, poor tooling, and rushed Git commits. Today’s guest, John Howard, joins us on Packet Protector to walk through practical secrets management with Vault and TruffleHog to help make sure you don’t expose your privates. John discusses work he’s done to build an automated process in his organization for developers and ... Read more »…

1
PP066: News Roundup – NIST’s New Exploit Metric, Windows RDP Issues, Compromised Routers, and More 41:34

6 weeks ago41:34

41:34

Our security news roundup discusses the compromise of thousands of ASUS routers and the need to perform a full factory reset to remove the malware, why Microsoft allows users to log into Windows via RDP using revoked passwords, and the ongoing risk to US infrastructure from “unexplained communications equipment” being found in Chinese-made electrical equipment ... Read more »…

1
PP065: A Microsegmentation Overview 33:47

7 weeks ago33:47

33:47

Microsegmentation divides a network into boundaries or segments to provide fine-grained access control to resources within those segments. On today’s Packet Protector we talk about network and security reasons for employing microsegmentation, different methods (agents, overlays, network controls, and so on), how microsegmentation fits into a zero trust strategy, and the product landscape. Episode Links: ... Read more »…

1
PP064: How Aviatrix Tackles Multi-Cloud Security Challenges (Sponsored) 42:51

8 weeks ago42:51

42:51

Aviatrix is a cloud network security company that helps you secure connectivity to and among public and private clouds. On today’s Packet Protector, sponsored by Aviatrix, we get details on how Aviatrix works, and dive into a new feature called the Secure Network Supervisor Agent. This tool uses AI to help you monitor and troubleshoot ... Read more »…

1
PP063: Wi-Fi Security and AI in the WLAN at Mobility Field Day 52:57

9 weeks ago52:57

52:57

Wireless security takes center stage in this episode of Packet Protector. Jennifer Minella and guests discuss “secure by default” efforts by WLAN vendors; the current state of PSK, SAE, and WPA3; NAC and zero trust; more WLAN vendors adding AI to their products (or at least their messaging); and more. Jennifer is joined by Jonathan ... Read more »…

1
PP062: Hunting for Host Security and Performance Issues with Stratoshark 33:45

10 weeks ago33:45

33:45

Stratoshark is a new tool from the Wireshark Foundation that analyzes system calls on a host. Network, security, and application teams can use Stratoshark to diagnose performance issues and investigate behavior that may indicate malware or other compromises of the host. On today’s Packet Protector we talk with Gerald Combs of the Wireshark Foundation about ... Read more »…

1
PP061: Comparing Breach Reports, RSAC 2025 Highlights, and a Security Awareness Soapbox 35:36

11 weeks ago35:36

35:36

New breach reports show threat actor dwell times are dropping significantly. It’s a positive development, but there is a caveat. We discuss this caveat and other findings from the 2025 editions of the Verizon Data Breach Investigations Report and the Google M-Trends Report. We also get highlights from the 2025 RSA Conference, and JJ gets ... Read more »…

1
PP060: Subsea Cables and the Watery Risks to Critical Infrastructure 44:43

12 weeks ago44:43

44:43

Submarine cables are a hidden wonder. These fiber optic bundles carry data and voice traffic around the world and serve as critical global links for communication and commerce. Today on Packet Protector, guest Andy Champagne dives into the history of submarine cables, the technological and operational advancements that allow voice and data to travel hundreds ... Read more »…

1
PP059: News Roundup – Oracle Plays Breach Word Games, Fast Flux Worries CISA, AI Package Hallucinations, and More 34:09

13 weeks ago34:09

34:09

Once a month, the Packet Protector podcast likes to see what’s going on out there via our news roundup. There’s a lot happening! Today we discuss Fortinet warning that a threat actor has found a way to maintain read-only access on Fortinet devices even if you’ve applied the patch for the original threat. Avanti VPNs ... Read more »…

1
PP058: Network Discovery with NMAP: You’ve Got Swaptions 45:09

14 weeks ago45:09

45:09

We’re diving into NMAP on today’s show with guest Chris Greer. Chris, an expert in network analysis and forensics, explains what NMAP is, the difference types of scans, how device fingerprinting works, and more. We also coin the term “swaptions” as we have some fun with NMAP terminology. He also gives details on how to ... Read more »…

1
PP057: Behind the Scenes At Cisco: PSIRT, AI, CVEs, and VEX 54:13

15 weeks ago54:13

54:13

Cisco Systems has a sprawling portfolio of home-grown and acquired products. What’s it like trying to find and address bugs and vulnerabilities across this portfolio? Omar Santos, a Distinguished Engineer at Cisco, gives us an inside look. We dig into how Cisco identifies security bugs using internal and external sources, the growing role of AI ... Read more »…

1
PP056: Ask A CISO with Joe Evangelisto 38:30

16 weeks ago38:30

38:30

On today’s show, we chat with Joe Evangelisto, CISO at NetSPI. He recounts his journey to becoming a Chief Information Security Officer, one that started as an IT sysadmin, advanced to management, and led him ultimately to the CISO role. Joe talks about building security programs from the ground up and developing both personally and ... Read more »…

Packet Protector

1
PP055: News Roundup – BotNet Targets TP-Link, Threat Hunting In the Electric Grid, Apple Vs. UK Snoops, and More 38:28

17 weeks ago38:28

38:28

This week we dive into security headlines including a botnet bonanza that includes TP-Link routers, Chinese attackers targeting Juniper and Fortinet, and a case study of nation-state actors penetrating the operator of a small US electric utility. We also discuss ransomware attacks targeting critical infrastructure, a backdoor in an Android variant used in streaming devices, ... Read more »…

Packet Protector

1
PP054: Understanding WireGuard and Overlay VPNs with Tom Lawrence 49:11

18 weeks ago49:11

49:11

WireGuard and other overlay VPNs are the focus of today’s podcast with guest Tom Lawrence from Lawrence Systems. We dig into differences between WireGuard and traditional IPSec VPNs, how WireGuard’s opinionated approach to crypto suites helps improve its performance, and how WireGuard compares to OpenVPN. We also look at the broader category of overlay VPNs ... Read more »…

Packet Protector

1
PP053: Rethinking Secure Network Access and Zero Trust With Bowtie (Sponsored) 42:47

19 weeks ago42:47

42:47

On today’s Packet Protector episode we talk with sponsor Bowtie about its secure network access offering. If you think secure network access is just another way to say ‘VPN,’ you’ll want to think again. Bowtie’s approach aims to provide fast, resilient connectivity while also incorporating zero trust network access, a secure Web gateway, CASB, and ... Read more »…

Packet Protector

1
PP052: The State of the Network Security Market In 2025 40:38

20 weeks ago40:38

40:38

How big is the network security market? Is it growing? How is that growth measured? What effect is SASE having on security spending? Will security products or security operators get more effective thanks to AI? We put these and other questions to Mauricio Sanchez. He’s Sr. Director, Enterprise Security and Networking at the Dell’Oro Group, a ... Read more »…

Packet Protector

1
PP051: Security Certifications From Beginner to Advanced 36:53

21 weeks ago36:53

36:53

Certifications are a fact of life in a technical career. They can also provide a pathway to help you earn new roles, sharpen your skills, and boost your salary. On today’s Packet Protector we look at security certifications for beginners, experienced professionals, and advanced practitioners. This episode was inspired by a LinkedIn post by Ethan ... Read more »…

Packet Protector

1
PP050: Understanding–and Protecting Yourself From–the Malware Economy 42:40

22 weeks ago42:40

42:40

There’s a robust malware economy with an active market for exploits, brokered access to compromised systems, ransomware, bots-as-a-service, and more. And this malware economy is targeted at you. On today’s Packet Protector we talk with Jake Williams, a security researcher, consultant, and instructor, about the malware economy, how it operates, and the most effective strategies ... Read more »…

Packet Protector

1
PP049: CSMM – A Practical Model for Improving Your Cloud Security 42:55

23 weeks ago42:55

42:55

The Cloud Security Maturity Model (CSMM) is a practical blueprint for improving the security of your public cloud deployments. Developed in partnership with the Cloud Security Alliance, IANS, and Securosis, the model covers 12 categories, such as network security and application security, across 3 domains. It describes 5 levels of security maturity, and includes process ... Read more »…

Packet Protector

1
PP048: News Roundup – 5G Vulnerabilities Abound, CSRB Disbanded, Magic Packets Target Juniper Routers, and More 39:08

24 weeks ago39:08

39:08

JJ and Drew catch you up on cybersecurity news including new research that uncovers a host of 5G/LTE vulnerabilities, the chain of breaches in a BeyondTrust attack that led to infiltration of the US Treasury Dept., and a lawsuit against LinkedIn alleging that data from paying customers was used to train AI models. Researchers unpack ... Read more »…

Packet Protector

1
PP047: Why Packet Analysis (and Wireshark) Should Be In Your Security Toolkit 43:23

25 weeks ago43:23

43:23

Don’t underestimate the value of packet analysis in your security strategy. And if you’re analyzing packets, the open-source Wireshark software is a go-to tool. On today’s episode, we talk with Chris Greer, a Wireshark trainer and consultant specializing in packet analysis. Chris explains the critical role of packet analysis in cybersecurity, particularly in threat hunting ... Read more »…

Packet Protector

1
PP046: IPv6 Security, Migration, and Adoption 39:42

26 weeks ago39:42

39:42

You asked for more IPv6 and we listened. In today’s episode, we talk with Ed Horley, co-host of the IPv6 Buzz podcast about IPv6 security, migration, and adoption. We talk about how your general security strategy doesn’t change with v4 or v6, but the trouble starts with a lack of v6 knowledge. We talk about ... Read more »…

Packet Protector

1
PP045: Reducing the Risk of Compromised Digital Certificates with CAA and Certificate Transparency 31:28

27 weeks ago31:28

31:28

Transport Layer Security (TLS) relies on certificates to authenticate Web sites and enable encryption. On today’s Packet Protector we look at mechanisms that domain owners can take to ensure the validity of their digital certificates. More specifically, we cover Certification Authority Authorization (CAA) and Certificate Transparency (CT). Our guest is Ed Harmoush. Ed is a ... Read more »…

Packet Protector

1
PP044: Optimizing Security and Performance with ADEM and App Acceleration (Sponsored) 41:31

31 weeks ago41:31

41:31

Autonomous Digital Experience Management, or ADEM, measures network and application performance from the user perspective and gives network and IT teams visibility into the entire data path—including the home user network, first mile and last mile, and the WAN. On today’s Packet Protector, we learn how ADEM can complement your network and security efforts with ... Read more »…

Packet Protector

1
PP043: The Perils and Perks of the CISO Track 39:49

32 weeks ago39:49

39:49

A Chief Information Security Officer (CISO) helps to architect and drive an organization’s security strategy. The role requires technical chops and business acumen. You also need strong communication skills to help executives understand risk and response, choose the right metrics to measure infosec effectiveness, and provide guidance to the technical teams actually running security operations. ... Read more »…

Packet Protector

1
PP042: CISO Liability Insurance, A Seriously Dangerous Menu Hack, and more Security News 26:45

33 weeks ago26:45

26:45

Our monthly news roundup discusses liability insurance for CISOs (if you are one, you should get it), serious intrusions of US telecom companies by Chinese state actors (according to the FBI), and a novel attack that leapt across multiple Wi-Fi networks. We also discuss significant vulnerabilities affecting Palo Alto Networks’ Expedition migration product, how fake ... Read more »…

Packet Protector

1
PP041: Cyber Insurance from a Policyholder Perspective 24:57

34 weeks ago24:57

24:57

Cyber insurance provides compensation if a company suffers financial loss due to a security incident such as a ransonware payment, costs of data recovery, legal expenses or fines, or damage to a company’s reputation. Today on the Packet Protector podcast, we discuss the ins and outs of cyber insurance with a policy holder. Joe Stern ... Read more »…

Packet Protector

1
PP040: Personal Privacy Tools 32:11

35 weeks ago32:11

32:11

Surveillance is a fact of life with modern technology, be it corporate data harvesting or government snooping. If you’re thinking about personal privacy, today’s episode covers common tools for communication and Web browsing. We dig into the end-to-end encryption capabilities of the messaging tools Signal and WhatsApp, look at the capabilities and limits of the ... Read more »…

Packet Protector

1
PP039: Securing Active Directory from a Pen Tester’s Perspective 46:36

36 weeks ago46:36

46:36

Microsoft’s Active Directory and Entra ID are valuable targets for attackers because they store critical identity information. On today’s Packet Protector, we talk with penetration tester and security consultant Eric Kuehn about how he approaches compromising AD/Entra ID, common problems he sees during client engagements, quick wins for administrators and security pros to fortify their ... Read more »…

Packet Protector

1
PP038: A Peek Inside the Security Mind 39:59

37 weeks ago39:59

39:59

Security professionals often have an impulse to want to move on to the next new thing. While that can be helpful in a field that thrives on change, it can also make it hard to focus on routine tasks and mundane (yet essential) security controls and practices. Whether this impulse is due to varying degrees ... Read more »…

Packet Protector

1
PP037: From Supply Chain Security to Post-Quantum Cryptography – Live from XFD! 30:47

38 weeks ago30:47

30:47

This episode was recorded live at Security Field Day (XFD) 12 in October, 2024. As delegates at the event, JJ and Drew heard presentations from DigiCert, Dell Technologies, SonicWall, and Citrix. These presentations covered topics including digital certificate management, post-quantum cryptography, supply chain security, recovering from ransomware, Zero Trust Network Access (ZTNA), and Secure Service ... Read more »…

Packet Protector

1
PP036: News Roundup – NIST Nixes Password Resets, Cargo Crane Espionage Risks, Municipal Govs Targeted, and More 34:05

39 weeks ago34:05

34:05

Today’s Packet Protector rounds up recent security news, including revised password guidelines from NIST, a White House push to help fill infosec jobs, and potential espionage risks from Chinese-made cranes being used at US ports. We also cover a hospital data breach that leaked nude patient photos, discuss why municipal governments are rich targets for ... Read more »…

Packet Protector

1
PP035: What IT Should Know About Securing Industrial Systems 47:31

40 weeks ago47:31

47:31

Industrial Control Systems (ICS) and Operational Technology (OT) used to stand apart from traditional IT. But those worlds are converging, and IT pros, including infosec teams and network engineers, need to become familiar with the operational challenges and quirks of ICS/OT systems. On today’s Packet Protector, guest Mike Holcomb demystifies ICS and OT for IT ... Read more »…

Packet Protector

1
PP034: Driving Security and Network Assurance with Juniper Networks (Sponsored) 37:04

41 weeks ago37:04

37:04

Today on the Packet Protector podcast we talk with sponsor Juniper Networks about how to simplify the complexity that affects network and cybersecurity teams alike. From tool sprawl to floods of data, complexity bedevils operations and troubleshooting. We talk about what Juniper brings to the table for networking and security professionals to help them do ... Read more »…

Packet Protector

1
PP033: AI and Machine Learning 101 for Cybersecurity 46:21

42 weeks ago46:21

46:21

The terms “AI” and “machine learning (ML)” get thrown around pretty regularly in IT and cybersecurity. On today’s Packet Protector we get an introduction to AI and ML to help you ask the right questions when vendors tout their latest AI-infused products. Our guest is Jeff Crume, a distinguished engineer and cybersecurity architect at IBM. ... Read more »…

Packet Protector

1
PP032: Unpacking RPKI for BGP Security 36:59

43 weeks ago36:59

36:59

Today on Packet Protector we get into BGP security. BGP is an essential protocol for directing traffic across the Internet, but it wasn’t designed with bad actors in mind, not to mention plain old configuration mistakes. Without additional controls in place, BGP is susceptible to issues such as route leaks and route hijacks that can ... Read more »…

Packet Protector

1
PP031: Cloud Firewall Architecture Essentials 33:41

44 weeks ago33:41

33:41

Today on Packet Protector we look at cloud firewall architectures. If you’ve deployed firewalls in the campus or a data center, it’s useful to know that there are differences in the public cloud. We’ll dive into what you need to know, including deployment options, the role of high availability in public cloud, selecting the right ... Read more »…

Packet Protector

1
PP030: Volt Typhoon On the Attack, Starlink Joins the Navy, and More Security News 33:15

45 weeks ago33:15

33:15

Today’s Packet Protector is an all-news episode. We cover the Volt Typhoon hacker group exploiting a zero-day in Versa Networks gear and a multitude of vulnerabilities in Zyxel network products. We also debate whether Microsoft’s endpoint security summit will be more than a public relations exercise, a serious backdoor in RFID cards used in offices ... Read more »…

Packet Protector

1
PP029: Translating Security Objectives into Business Outcomes 55:22

46 weeks ago55:22

55:22

On today’s Packet Protector we talk about how to talk about security objectives in ways that resonate with business and non-technical leaders in your organization. Tying security objectives to business outcomes can help you maintain (or increase) budgets, build trust and credibility with executives, and better align your risk management efforts with the organization’s broader ... Read more »…

Packet Protector

1
PP028: Can SecOps and NetOps Work Together? 50:10

47 weeks ago50:10

50:10

IT tends to divide itself by job function and technological specialization, especially as technology gets more complex. However, each IT domain is part of a larger system, and these systems require coordination and cooperation to operate effectively. On today’s Packet Protector we look at how and why Security Operations (SecOps) and Network Operations (NetOps) should ... Read more »…

Packet Protector

1
PP027: How Wi-Fi Positioning Systems Enable Mass Surveillance 47:45

48 weeks ago47:45

47:45

Smartphones use Wi-Fi based Positioning Systems (WPSes) to collect data about nearby Wi-Fi access points and other wireless devices to help determine the phones’ geographic location. Researchers at the University of Maryland show how WPSes from Apple and Google can be used for mass surveillance of access points and, potentially, owners and users of those ... Read more »…

Packet Protector

1
PP026: Security Considerations for Working from Anywhere 43:25

49 weeks ago43:25

43:25

Remote work is now a norm. And whether it’s a day or two at home every week, or relocating overseas so you can log in to the office from an Italian piazza or a beach in Thailand, there are lots of opportunities to do our jobs outside traditional workplaces. On today’s Packet Protector, we look ... Read more »…

Packet Protector

1
PP025: Wi-Fi Security Part 2 – Listener Q&A 33:51

50 weeks ago33:51

33:51

On today’s Packet Protector we answer listener questions about Wi-Fi security with guest Stephen Orr. Stephen is Chair of the Security Technical Task Group for the Wi-Fi Alliance and a Distinguished Solutions Engineer at Cisco. Questions include what recommendations Stephen would make for using multiple SSIDs vs. role-based device segmentation, what he sees as the ... Read more »…

Packet Protector

1
PP024: Considering Resiliency in a Time of Global Outages 37:33

51 weeks ago37:33

37:33

In the wake of one of the largest global IT outages, resiliency is the theme of today’s show. We dig into the CrowdStrike debacle as well as an Azure outage that kinda flew under the radar. We also look at the Resiliency Planning Framework Playbook from CISA and other frameworks for building resilient infrastructure. We ... Read more »…

Packet Protector

1
PP023: Wi-Fi Security Part 1 – Unpacking Vulnerabilities and Exploits 43:46

52 weeks ago43:46

43:46

From an SSID confusion exploit to a RADIUS attack to a critical vulnerability in a Windows Wi-Fi driver, the past several months have seen multiple attacks and exploits targeting the wireless realm. On today’s Packet Protector podcast we talk with Wi-Fi security expert Stephen Orr to get his take on the severity of these issues, ... Read more »…

Packet Protector

1
PP022: Inside an Equipment Test Lab 47:11

1 year ago47:11

47:11

Third-party test labs can help buyers make decisions about which products to purchase. While a testing lab can’t mimic the conditions of your specific production environment, it can assess a product’s fundamental capabilities and measure throughput, performance, and–in the case of security devices–effectiveness against a test suite of malware or attack techniques. On today’s episode ... Read more »…

Packet Protector

1
PP021: Critical Vulnerabilities, AI-Assisted Scams, Compromised VPNs, and More Security News 36:42

1 year ago36:42

36:42

It’s an all-news episode for this week’s Packet Protector podcast. We cover critical vulnerabilities in the MOVEit file transfer software and in thousands of ASUS routers, and a remote code execution vulnerability in a Windows wireless driver that you really should patch. We discuss a Wall Street Journal article about how AI tools are helping ... Read more »…

Packet Protector

1
PP020: Dropping the SBOM: The Software Bill of Materials and Risk Management 35:29

1 year ago35:29

35:29

If you care about nutrition, you check the ingredients of your food. If you care about your IT infrastructure, you check the Software Bill of Materials (SBOM) of the tech. At least that’s the future that Thomas Pace hopes for. Right now, SBOMs aren’t super common and software transparency is very low. Thomas walks us ... Read more »…

Packet Protector

1
PP019: The God Accounts: Cloud IAM

1 year ago

—

Today we discuss how to secure your all-powerful root accounts on the three major public cloud providers: AWS, Azure, and GCP. Our guests today, Ned Bellavance and Kyler Middleton from the Day Two Cloud podcast (soon to be Day Two DevOps podcast), describe the struggle of securely managing several root accounts at once. They take ... Read more »…

Packet Protector

1
PP018: RSA Recap, Including a View from the Event SOC 38:46

1 year ago38:46

38:46

Drew and JJ have recovered from the overstimulation of the RSA expo floor and are ready to discuss their takeaways from the conference. They discuss the surprising emphasis on microsegmentation and storage backups, and the not-so-surprising focus on IoT security and AI-assisted products. They also pull back the curtain on what the conference’s own SOC ... Read more »…

Packet Protector

1
PP017: What’s the Matter? Understanding the Matter Protocol

1 year ago

—

Matter is an IoT protocol that has security and interoperability baked into it. Steve Hanna, the chair of the Product Security Working Group in the Connectivity Standards Alliance, joins the show today to walk us through this IP-based protocol for smart home devices. He compares Matter to an armored car, delivering a valuable payload securely ... Read more »…

Packet Protector

1
PP016: Tabletop Security Exercises: D&D for Grown-ups

1 year ago

—

Tabletop security exercises can help organizations game out their response to a security incident. From the technical and business considerations to legal and PR implications, a tabletop exercise, like Dungeons and Dragons, lets you play-test attack and defense scenarios. Johna Till Johnson, CEO of Nemertes consulting firm and co-host of the Heavy Strategy podcast, joins ... Read more »…

Packet Protector

1
PP015: Zero Trust Architecture: Because You Can’t Trust Anybody Any More 42:09

1 year ago42:09

42:09

Zero trust is a buzzword, but what does it actually mean and how will it impact network engineers? Jennifer is here to get us up to speed. First, she gives a general description: It’s a security architectural strategy that’s progressing toward increased observability and trust inferences. Then she breaks it down for the three main ... Read more »…

Packet Protector

1
PP014: Good Threat Hunting 33:01

1 year ago33:01

33:01

Have you ever noticed “threat hunting” in vendor products and wondered exactly what it means? James Williams is here to explain: Threat hunting is the R&D of detection engineering. A threat hunter imagines what an attacker might try and, critically, how that behavior would show up in the logs of a particular environment. Then the ... Read more »…

Packet Protector

1
PP013: Untangling Managed Security Services 42:48

1 year ago42:48

42:48

What’s the difference between cybersecurity “as a service” vs. “managed” vs. “hosted”? And what’s the difference between an MSP and an MSSP? In this episode, JJ helps untangle the terms and concepts in cybersecurity offerings. She explains what questions you should ask vendors to make sure you’re picking the right one for your needs; negotiating ... Read more »…

Packet Protector

1
PP012: Planning for a Post Quantum Cryptography World 40:58

1 year ago40:58

40:58

The classical encryption algorithms that currently undergird our IT infrastructure will be broken once there’s a powerful and stable enough quantum computer to do the job. Quantum-resistant algorithms are being developed by NIST, but implementation and deployment of these algorithms still have to be addressed. So what does all this mean for busy IT and ... Read more »…

Packet Protector

1
PP011: IoT Protocols: Detection and Protection 46:50

1 year ago46:50

46:50

IoT devices are often like the tiny aliens in the locker in Men in Black: They’ve created a whole little world on your network without almost any humans knowing they exist. Today Troy Martin joins the show to teach us the basics of how to find and secure IoT devices on your network, specifically focusing ... Read more »…

Packet Protector

1
PP010: CISA’s Cyber Incident Reporting Law: What You Need to Know 37:27

1 year ago37:27

37:27

The US government is seeking comment on a new law mandating detailed cyber incident reporting. In this episode, we cover what you need to know about the “Cyber Incident Reporting for Critical Infrastructure Act.” We break down the details, including what kind of companies the law applies to, what it defines as an “incident,” and ... Read more »…

Packet Protector

1
PP009: Don’t Forget the Firmware 41:44

1 year ago41:44

41:44

If your approach to firmware is that you don’t bother it as long as it doesn’t bother you, you might want to listen to this episode. Concerns about supply chain vulnerabilities are on the rise and for good reason: Attackers are targeting firmware because compromising this software can allow attackers to persist on systems after ... Read more »…

Packet Protector

1
PP008: Dishin’ Up Cloud SLAW (Security Lab A Week)

1 year ago

—

Learning cloud security can be daunting for experienced network engineers, much less complete newbies. That’s why Rich Mogull started “Cloud Security Lab A Week,” aka Cloud SLAW. Every Thursday, he emails subscribers a new hands-on lab, building a full enterprise deployment week-by-week, step-by-step. Rich explains all the details to JJ and Drew including the cost ... Read more »…

Packet Protector

1
PP007: IPv6 Security Essentials 53:04

1 year ago53:04

53:04

You’re already running IPv6, even if you don’t know it yet. Your remote users are using it at their homes, your printers come with it built into the kernel, your generals are using it on their mobile phones (check out our news headlines section). So let’s stop trying to disable it whack-a-mole style, and start ... Read more »…

Packet Protector

1
PP006: Effective Security for Small IT Shops 49:11

1 year ago49:11

49:11

This episode is for IT professionals who work in small- to medium-sized businesses and are expected to handle cybersecurity on top of issues like “my camera isn’t working on Zoom.” Guest Joe Stern has been filling this role for an 80-person company for almost 30 years. We talk about how he prioritizes risks, security tools ... Read more »…

Packet Protector

1
PP005: Red, Blue, Purple: Choosing the Right Teams for Security Testing and Defense 43:23

1 year ago43:23

43:23

According to Bryson Bort, you can build higher metaphorical fences, electrify them, and have sharks with laser beams prowling the moat, but attackers are still going to get through the security perimeter. That’s why the priority of any IT team should be to identify anomalies and anticipate attack logic. To do this, organizations need to ... Read more »…

Packet Protector

1
PP004: Exploiting Vulnerabilities, Not Customers: How to Pick Good Pen Testers 49:29

1 year ago49:29

49:29

When you’re picking a penetration tester to poke at your security infrastructure, how do you know if you’re picking a good one? Is pen testing even the right service for your needs? Pen tester, SANS course creator, and OWASP board member Kevin Johnson joins the show to share tips for what to look for in ... Read more »…

Packet Protector

1
PP003: An Insider’s Look At Security Certs 54:17

1 year ago54:17

54:17

What are the best cybersecurity certs to get? Do advancements in cloud and AI mean security professionals need to re-skill? How do certifying organizations decide what new courses to create? Chief Curriculum Director and Faculty Lead at the SANS Institute, Rob Lee, joins Jennifer “JJ” Minella and Drew Conry-Murray to give an insider’s view on ... Read more »…

Packet Protector

1
PP002: The Tricky Biz Of Secrets Management 36:58

1 year ago36:58

36:58

Today we look at secrets management and privileged access management from the perspective of a network engineer. How do you and your team securely store sensitive data including passwords, SSH keys, API keys, and private certificate keys, while still being able to work nimbly? What Privileged Access Management (PAM) practices can help put guardrails in ... Read more »…

Packet Protector

1
PP001: WPA3: Everything You Wanted To Know But Were Afraid To Ask 31:59

1 year ago31:59

31:59

It’s time to make the switch from WPA2 to WPA3. We cover how to do it and what migration challenges to be prepared for no matter what WLAN you are dealing with (open, passphrase, or 802.1x) . We also discuss what features make WPA3 an improvement over WPA2, particularly the replacement of PSK with SAE. ... Read more »…

Packet Protector

1
Join Us For Packet Protector, A New Cybersecurity Podcast 0:45

1 year ago0:45