Everything Cyber

🔒 2023 Security Recap & 2024 Predictions 🔍 | Cybersecurity Trends & Tools Unveiled! Dive into the biggest security incidents of 2023, explore the latest cybersecurity trends, and uncover the most effective tools that have shaped the digital landscape. Plus, get a comprehensive analysis of what to expect in 2024. From advanced threats to cutting-edge defenses, join us as we navigate the evolving world of cybersecurity. --------------------------------------------------------------------------------------------------------------------------- Follow us on LinkedIn: / ever. . Our Hosts: Kaif Ahsan - / kaif-ahsan Kumar Soorya - / kumar-soorya Samuel Sentongo - / sentongo --------------------------------------------------------------------------------------------------------------------------- Audio Credit - shushubobo - “I need bingsu” cute vlog music [no copyright music] [(tag or mention or link)]( • [no copyright music] " i need bingsu ... ) #Cybersecurity2023 #2024Predictions #SecurityTrends

🏥 Cybersecurity in healthcare has never been more vital, and understanding the landscape can be crucial to dealing with the threats properly. In this in-depth analysis, we unravel the challenges that are looming in the healthcare sector and offer reliable strategies to safeguard sensitive data. It is essential viewing for healthcare professionals, IT experts, and everyone in between. To do that, we have Alana Tobgui, a cybersecurity professional with vast experience in this space. The topics we covered - 🔥 00:00 | Intro - Summarising the upcoming episode. 🌟 01:30 | Speaker Intro - Introducing the speaker to the audience. 🏥 04:07 | Landscape of Security in Healthcare Understand the current status quo of security measures in the healthcare industry. 🛑 06:00 | Typical Threat in Healthcare Identify the common threats that are putting healthcare data at risk. 🛡️ 07:40 | Data Protection in Healthcare Learn robust strategies to protect healthcare data from unauthorized access. 💻 09:36 | Securing Software and…

In this talk we dive deep into current world of zero trust network, how they are built and how the space is evolving over time.

Welcome to another episode of deep-dive conversations! In the 14th instalment of the series, we are again joined by the esteemed Jeevan Singh to discuss how we can be a data-driven security program. Security can often be operating on a hunch. But if we can validate our hunches with data, we can become much more impactful as a team. In this talk, we explore common strategies and pitfalls when it comes to building a data-driven security program. Guest speaker profile - / jeevansecurity Timestamp: 00:00 - Episode intro 00:49 - Episode start 04:30 - Product security metrics building 06:38 - Evolution of data-driven metrics 11:03 - Communicating risk between product security and business 08:04 - Avoiding common metric pitfalls 30:34 - Security: more or less for organisations? 35:19 - Appsec engineers enhancing metric usage 38:47 - Conclusion -------------------------------------------------------------------------- Follow us on LinkedIn: / everything-cyber Our Hosts: Kaif Ahsan - / kaif-ahsan Kumar Soorya - /…

Welcome back to Everything Cyber’s Deep Dive Conversations! In today's episode, we're diving deep into the role of product security leadership, looking at the different areas of impact within this role. In this video, we'll explore: 1️⃣ The role of product security leadership. 2️⃣ How democratizing security can enable you to do more with less. 3️⃣ A look into the different levels of product security leadership. 4️⃣ Tips for empowering leaders within the product security team. Whether you're an aspiring or experienced cybersecurity professional, this video is sure to enhance your understanding of product security leadership and elevate your skillset! 🚀💼 Don't forget to hit that like button, follow our channel, and hit the notification bell so you never miss out on our latest cybersecurity content! 🔔👍 Speaker Profile - jeevansecurity AppSec PNW - https://www.appsecpnw.org/ Timestamps: 00:00 - Episode intro 01:12 - Episode Start 02:03 - Speaker Intro 04:40 - Impact of Great Leadership 06:25 - Traits Of A Great…

Welcome back to Everything Cyber’s Deep Dive Conversations! In today's episode, we're diving deep into the incredible world of the Unprotect Project – the ultimate resource for evasion techniques, code snippets, and detection rules! 💥🔒 The Unprotect Project is an unparalleled database designed specifically for those in Threat Intelligence and Red Teaming. With its vast array of resources, this project is a game-changer for cybersecurity professionals worldwide. 🌎🔐 In this video, we'll explore: 1️⃣ The origins and goals of the Unprotect Project. 2️⃣ A walkthrough of the platform's features and interface. 3️⃣ Hands-on demos of evasion techniques and code snippets. 4️⃣ Tips for effectively using the Unprotect Project in your day-to-day work. 5️⃣ How to contribute to this community-led initiative. Whether you're an aspiring or experienced cybersecurity professional, this video is sure to enhance your understanding of the Unprotect Project and elevate your skillset! 🚀💼 Don't forget to hit that like button,…

Overview In this video, we will be discussing SAST (Static Application Security Testing). SAST is a type of security testing that analyzes the source code of an application in order to identify vulnerabilities and security risks. It is an important step in the development process as it helps to ensure that an application is secure before it is deployed. However, SAST has some major challenges and rolling out successfully is never easy. Organisations across the globe struggle with making SAST effective for their companies. Hence, in this episode we have Siddhant Rath joining us to discuss the benefits, challenges and most importantly, how to properly roll out SAST in an organisation. Timestamps 00:00 - Intro 03:20 - What is SAST? 04:48 - Most Common Challenges 08:40 - Building In-house vs 3rd Party Tools 15:10 - Choosing The Right Tool 24:00 - How To Roll Out Successfully 37:40 - Success Metrics 40:25 - Who Triages The Issues? 43:19 - SAST for Start-up 48:56 - Unforeseen Challenges 52:58 - Outro Follow us on…

Application Security (AppSec) has been one of the fastest-growing fields in Cybersecurity. From being a niche area that certain companies perform to one of the most innovative fronts of Cyber, AppSec certainly saw a fair share of growth. In this video, Cole Cornford, a popular face in the AppSec space, is joining us as a guest speaker to share his thoughts on future trends in 2023 and a recap of the current year. Timestamps: 00:00 - Start 02:47 - Shoutouts 06:47 - 2022 AppSec Trends 13:29 - Impactful AppSec Vulns 14:32 - Grave digging 22:31 - 2022 Technology Recap 30:13 - Implications of AI in AppSec 37:02 - 2023 Trends for AppSec 46:43 - What new skills to learn Links: Cole’s LinkedIn - https://www.linkedin.com/in/colecornf... /NEW Conference - https://www.linkedin.com/company/slas... Emerging Themes in AppSec blog - https://www.galahcyber.com.au/practic... Follow us on LinkedIn: https://www.linkedin.com/company/ever... Our Hosts: Kaif Ahsan - https://www.linkedin.com/in/kaif-ahsan/ Kumar Soorya -…

We have had a very eventful year in the cybersecurity world. As 2022 draws to its end, we will explore some of the major developments, highlights and vulnerabilities that shaped the cloud security world this year. And based on the lessons learnt from 2022, what new trends and technologies can we expect in the coming year? To discuss all these, we have not one but two very special guests joining us. We are delighted to have Ashish Rajan and Shilpi Bhattacharjee from the popular Cloud Security podcast present as guest speakers. Timestamps: 00:00 - Intro 03:00 - Announcements 04:56 - Major Developments in Cloud Security 13:13 - Biggest Cloud-Related Vulnerabilities in 2022 27:19 - General Trends/Buzzwords in Cloud 35:00 - Favourite Tool/Technology of 2022 47:05 - Predictions about 2023 53:40 - What New Skills to Learn in 2023 56:00 - Wrap-up Cloud Security Podcast: https://cloudsecuritypodcast.tv/ Events Mentioned: Melbourne Cloud Security Meetup: https://www.meetup.com/en-AU/meetup-g... DevSecCon:…

Starting a cybersecurity program at a start-up or even an established company can be a maze. To help us navigate through that maze, we have Brian Lam joining as a guest speaker explaining what it takes to start a security program at a company. Brian is leading the security program at Eucalyptus, a well-known start-up in Australia, responsible for amazing products like Pilot, Juniper, Kin, Normal etc. Brian was the first security hire at Eucalyptus and currently working to establish their application security program. In this episode we shine light what’s it like to establish an application security program from the ground-up. Our special guest has shared numerous insights and resources that will be very helpful for those who are operating in security for start-ups and newly established security orgs. Brian Lam’s social: https://www.linkedin.com/in/brianlamsydney/ Follow us on LinkedIn: https://www.linkedin.com/company/everything-cyber/ Our Hosts: Kaif Ahsan - https://www.linkedin.com/in/kaif-ahsan/ Kumar…

With attacks like the Log4j, Dependency Confusion and SolarWinds, we have recently witnessed major cyber disruptions because of our weak software supply chain security. In this episode, we want to dive deep and try to identify the root causes that are making the supply chain so vulnerable. Follow us on LinkedIn: https://www.linkedin.com/company/ever... Our Hosts: Kaif Ahsan - https://www.linkedin.com/in/kaif-ahsan/ Kumar Soorya - https://www.linkedin.com/in/kumar-soo... Music: Motivational Day from AudioCoffee Sound Effect from Pixabay

APIs are an integral part of the internet. In this episode, we explore the top trends, threats and best practices related to API Security. Follow us on LinkedIn: https://www.linkedin.com/company/ever... Our Hosts: Kaif Ahsan - https://www.linkedin.com/in/kaif-ahsan/ Kumar Soorya - https://www.linkedin.com/in/kumar-soo...

In this episode, we inspect zero-trust through a range of practical steps to implement. The goal of this video is to give our audience concrete examples and demystify the vagueness surrounding Zero-Trust.

As the cyber landscape shifts, we are seeing the rise of authentication and authorization-related vulnerabilities across the industry. This is prompting us to move towards new architecture and rethink how we are doing identity management. In this episode, our hosts dive deep into the big shifts that are coming into the identity space.

If you want to know both from a technical perspective as well the psychological on why Phishing is so dangerous then this episode is for you! In this episode, our hosts Kaif Ahsan and Kumar Soorya first dive into why email security is hard for corporations. Next, we discuss the human aspects that make it difficult to protect against phishing. And finally future predictions on what the landscape will look like.

The Ukraine conflict has led to a number of companies walk-out of Russia. Among them were the major technology companies from USA which both the government and the public relies upon to a great extent. Such disruption prompted many companies to rethink their dependency on foreign technology. In this episode, we do a thought experiment on what the future might look like with such sanctions in place. With countries having incentives to move away from 'foreign' technology and double down on homegrown resources, how might the cyber landscape also shift. Music: Motivational Day from AudioCoffee Sound Effect from Pixabay