BrakeSec Education Podcast

Bryan Brake, Amanda Berlin, and Brian Boettcher

Podcast

Episodes

Latest Episodes

Josh Grossman - building Appsec programs, bridging security and developer gaps

4/15/2024 • 76 min

Youtube VOD: https://youtu.be/G3PxZFmDyj4 #appsec, #owasp, #ASVS, #joshGrossman, #informationsecurity, #SBOM, #supplychain, #podcast, #twitch, #brakesec, #securecoding, #Codeanalysis Questions and topics: 1. The background to the topic, why is it something that interests you? How do you convince developers to take your course? 2. What do you think the … Play episode

Managing messaging with management, becoming a CISO with Mary Gardner from…
p2-accidentalCISO, building trust in new places, securing SaaS products
AccidentalCISO on BrakeSecEd, talking Leadership, SaaS development, and Ap…
1st show of 2024! Our 10th Anniversary...
Brakesec Call to Action 2023
How to get more headcount, BLUFFs Vulnerability, and Ranty Clause debuts!
25Oct - okta breached (again), Energy company hit by supply chain attack, …
Nicole Sundin - CPO at Axio - SEC compliance, usable security, setting up …
John Aron, letters of marque, what does a "junior" job look like with AI?
Megan Roddie - co-author of "Practical Threat Detecion Engineering"
meeting new people, walking on your keyboard causes issues, even google ge…
Bsides Seattle and Austin, SecureBoot patch, and more
lynsey wolf, conducting insider threat investigations, CASB and UEBA utliz…
3CX supply chain attack, Mark Russinovich and Sysinternals, CISA ransomwar…
Dish NetwDish Network is still busted, John Deere avoiding OSS requests, I…
Nickolas Means talks about Security, Devops velocity, blameless orgs, and …
SPECIAL INTERVIEW: John Aron and Jerod Brennen
Layoff discussions, another TMO breach, OneNote Malware, and more!
GPS car hacks, Google Threat report, notable topics of 2020, satellite thr…
Josh-Whalen-risk-management-data_visualization-tools, value-creating activ…
John Whalen, data visualization tools, risk management, handling org risk-…
Interview with Infrared - one of the Seattle Community Network organizers
JAMBOREE - an Android App testing platform from @operat0r -part2
JAMBOREE - an Android App testing platform from @operat0r
07-oct-news-twitch streaming
Uber Breach, MFA fatigue, who can help communicate biz risk?
Manual Code reviews/analysis, post-infosec Campout discussion
Amanda's Sysmon Talk -p2
Amanda's Sysmon Talk -p1
Tanya Janca, Securing APIs, finding Security Champions, and accepting Risk
Tanya Janca on secure coding practices, Swagger docs, and why documentatio…
PYPI enables 2FA, some devs have a problem with this
JW Goerlich on Training, phishing exercises, security metrics,getting the …
RSA conference, Zero Trust, SSO, 2FA, and multi-cloud tenancy with J Goerl…
jon-dimaggio-part2-threat intel-hacking back-analyzing malware
Jon DiMaggio_Art-of-cyberwarfare_hacking_back-insider-threat-messaging_P1
news, infosystir's talk at RSA, conti has an 'image' problem
Mieng Lim, Ransomware actions, using insurance to offset risk, good IR/PR …
Mieng-Lim-Ransomware-Best-Practices-p1
Mick Douglas on threat intel, customer worries about being hacked, and more
news, farmers affected by ransomware, protestware for the 3rd time, trusti…
Mick Douglas discusses What2Log, and guidance in light of Okta incident
logging analysis, log correlation, and threat analysis dicussion continues…
Amanda and Bryan discusses log analysis, finding, IOCs, and what to do abo…
Shannon Noonan and Stacey Cameron - process automation -p2
Shannon Noonan and Stacey Cameron - process automation
K12SIX-project-Doug_Levin-Eric_Lankford-threat_intel-edusec-p2
K12SIX's Eric Lankford and Doug Levin on helping schools get added securit…
April Wright and Alyssa Miller - IoT platforms, privacy and security, embr…
Alyssa Miller, April Wright, on IoT Privacy & Security, using tech for sta…
Bit of news, Belarus train system hack, VMware Horizon vulns, edge network…
April Wright and Alyssa Miller- Open Source sustainabilty
Amélie Koran and Adam Baldwin discuss OSS sustainability, supply chain sec…
OSS sustainability, log4j fallout, developer damages own code-p1
Mick Douglas, Log4j vulnerabilities, egress mitigations- part2
Mick Douglas, Log4j vulnerability, egress mitiations - part 1
Litmoose discusses stalking and protecting yourself
2021-043- Fred Jennings, Vuln Disclosure policy, VEP, and 0day disclosure …
2021-042- Fred Jennings, VDP, Vuln Equity, And 0day disclosure - p1
Blumira Sponsor #3 - Emily Eubanks, more actionable events, incident respo…
0day disclosure, Randori, FBI email server pwnage
Sweden's parents rebel over poor App design, US government forcing patchin…
Minimum Viable vendor security sheet, Federal logging requirements, and mo…
SPONSOR-Blumira's Nato Riley on Log Classification, Security Maturity,
Liz Saling, 5 pillars of building a good team
Tony Robinson, leveraging your home lab for job success - Part2
Tony Robinson, news of the week, @da_667 new book! -part1
2021-035-GRC selection discussion, TechSecChix, and the 'job description p…
Khalilah Scott, good GRC tool practices - part1
Kim_Crawley, 8 steps to better security-Part2
SPONSOR: Blumira's Patrick Garrity
2021-032--Author_Kim_crawley-8-Simple_Rules_for_Cybersecurity
2021-031- back in the saddle, conference discussion, company privacy
incident response, business goal alignment, showing value in IR -p2

BrakeSec Education Podcast RSS Feed

Share: Twitter • Facebook • Embed

Copy embed code: