UNSECURITY: Information Security Podcast
Weekly information security podcast hosted by Oscar Minks and Brad Nigh. They focus on protecting personal information, covering cyber security, physical security, and administrative controls. Oscar is the CTO of FRSecure, and Brad is a Principal Security Consultant with over 20 years of experience.
Episodes
Unsecurity Episode 263: Why AI Pen Testing Can’t Replace Human Testers with Seth Bowling
As tools and companies adopt AI features at a monumental rate, AI pen testing has exploded. Do these tests stack up, or are they far less magical than the hype suggests?Brad Nigh, Megan Larkins, and guest Seth Bowling break down what these tools actually do, where they fall short, and why a human tester is still typically a much more effective and thorough option.Seth, who heads R&D at FRSecur
Unsecurity Episode 262: Healthcare Security & Delays to the HIPAA Security Rule with April Meyer
In this episode of Unsecurity Podcast, Megan Larkins, Brad Nigh, and April Meyer dig into one of the biggest issues facing healthcare today: cybersecurity as a business, operational, and patient safety risk.April breaks down what healthcare organizations should watch as the proposed HIPAA security rule evolves, why the industry still struggles with basics like multi-factor authentication, encrypti
Unsecurity Episode 261: CMMC Delay and Compliance Costs with Eric Vollbrecht and Nathan Austin
In this episode of Unsecurity, Megan, Brad, Nathan, and Eric unpack the recent 60-day pause on CMMC Phase 2 requirements and what it really means for contractors and subcontractors.The conversation goes beyond the headline to explore the ongoing importance of self-attestation, the risks of false claims, and why compliance is still very much on the clock.The team also breaks down the real costs of
Unsecurity Episode 260: Women In Cybersecurity
Welcome to Episode 260 of the Unsecurity Podcast!Join hosts Brad Nigh and Megan Larkins as they sit down with special guest Mea Yang, an Information Security Consultant at FRSecure.The conversation explores the pipeline problem from multiple angles — from early interest and industry perception to hiring bias, retention challenges, and the lack of women in leadership. They unpack how cybersecurity
Unsecurity Episode 259: The Cyber Resilience Act, Open Source, & AI w/ Madalin Neag & CRob
In this episode of the Unsecurity Podcast, we unpack the Cyber Resilience Act and why it’s becoming a critical framework for anyone building or selling digital products in today’s connected world.Megan talks with Madalin Neag and Christopher "CRob" Robinson about open source security, software supply chain risk, software bills of materials, and why passive consumption of open source is no longer e
Unsecurity Episode 258: The CISSP Mentor Program with Brian Kelley
In this episode of the Unsecurity Podcast, hosts Brad Nigh and Megan Larkins speak with Brian Kelley, information security consultant at FRSecure and one of the infamous CISSP Mentor Program's leads this year. Together, they talk about Brian's journey in information security and how it led him to helping support the FRSecure CISSP Mentor Program.Hear the trio discuss:Working in IT and finding inte
Unsecurity Episode 257: Samantha Floyd, Career Transitions, and Amplifying Diverse Perspectives
In this episode of the Unsecurity Podcast, hosts Brad Nigh and Megan Larkins speak with Samantha Floyd, an associate penetration tester and active member of Blacks in Cyber and Black Women in Cyber.Together, they talk about Samantha's shift from marketing to the cyber industry, including:The thrill and ethics of hacking and CTFsThe power of inclusive communitiesReducing barriers and amplifying div
Unsecurity Episode 256: Annual Breachmas Recap with Pinky
The Unsecurity Podcast is back for our annual discussion with Pinky, FRSecure's Incident Response Manager, to discuss the "Breachmas" season.Breachmas is a time of year or a phenomenon when attackers pull a few more levers available to them—more people on PTO, increased online spending, and general busyness contributing to less focus. The result is an uptick in cyber incidents nearing the end of e
Unsecurity Episode 255: Jo Moldenhauer, Crafting Security News Reviews, A Unique Path to Infosec
The Unsecurity Podcast returns with a truly joyful conversation with FRecure's own Jo Moldenhauer.Jo, an Associate Information Security Consultant, is famous around the FRSecure office for her weekly security news reviews, where she meticulously compiles articles and talking points for a company-wide discussion around industry trends and snapshots.And this couldn't have been easy to do. Jo's path
Unsecurity Episode 254: Journey to Becoming A CISO with Ted Peterson
A slow-rolling holiday episode featuring CISO at DataSite, Ted Peterson! Transitioning from a Director Role, Ted shares his journey to the CISO title and how his unique background informs his work approach.Tune in for insights on:Realities to navigating organizational leadership as a CISOImportance of diverse perspectives and backgrounds in the security space Establishing pathway to career goalsLi
Unsecurity Episode 253: The Human Element of Cybersecurity with Kyle Waters
Kyle “caboose” Waters of Cyber Unicorns enlightens this extended episode! Having a combined passion for people and security, Kyle demonstrates how to effectively educate the masses. Steering away from typical training and using unique approaches, this talk explores how to break through the barriers that create vulnerabilities. Like, subscribe, and share with your network to stay informed about the
Unsecurity Episode 252: Bridging the Gap Between CISO & CFO - Executive Panel
A live panel from Hacks & Hops featuring FRSecure's CFO, Vanae Pearson, Information Security Consultant, Greg Cloon, and Director of IT at Miner's Inc., Tyree Johnson. Veterans in the field discuss consulting, translating security needs to executive teams, and advocating for the best budget practices. Like, subscribe, and share with your network to stay informed about the latest in cybersecuri
Unsecurity Episode 251: Practicing Personal Cybersecurity with Coral Morgan & Cory Hanks
Coming off Cybersecurity Awareness Month and into the holidays, this season is the perfect time to reflect on personal cybersecurity practices. Information Security Consultant, Coral Morgan, and IR Case Manager, Cory Hanks, join this episode to provide tips and cybersecurity practices for all age groups. Like, subscribe, and share with your network to stay informed about the latest in cybersecurit
Unsecurity Live: Special 250th Edition with Oscar Minks & Evan Francen
Celebrating 250 episodes of Unsecurity, Megan and Brad go live at Hacks & Hops with former hosts and leaders of FRSecure, Evan Francen and Oscar Minks.Stories of navigating the growing team and the evolution of Unsecurity weaves personal testimonies of leadership, trust in self, and growth. This is a milestone episode you won’t want to miss!Thank you to our listeners for the support! Reach out
Unsecurity Episode 249: Navigating Holiday Threats with AI and VPN Vulnerabilities w/ Pinky
In this episode of the Unsecurity Podcast, hosted by Megan Larkins and Brad Nigh from FRSecure, we are joined by Pinky from the IR team to dive deep into the pressing cybersecurity challenges as the holiday season approaches.From early breaches to the increasing sophistication of AI in phishing attacks, discover how attackers are evolving their tactics. The trio discusses the impact of VPN vulnera
Unsecurity Episode 248: Unveiling & Mapping Government Vulnerabilities with Seth Bowling
Join us for another episode of the Unsecurity Podcast as Megan, Brad, and Seth Bowling, lead researcher and developer at FRSecure, dive into the evolving landscape of cybersecurity for city and county governments.Seth shares how Mirrored Defense's innovative heat map visualizes the attack surface across the U.S. and presents surprising findings from their research. The trio discusses the challenge
Unsecurity Episode 247: Cloud Security Best Practices with Jim Nelson
In this episode of the Unsecurity Podcast, hosts Brad Nigh and Megan Larkins are joined by special guest Jim Nelson from FRSecure to dive deep into the world of cloud security. Whether you're using AWS, Azure, or GCP, understanding the right security protocols is crucial. Jim, a subject matter expert in cloud assessments, CIS benchmarks, and cloud infrastructure, shares valuable insights on common
Unsecurity Episode 246: Practicing Policy
In this Friday edition of Unsecurity, Megan and Brad tackle Policy! They approach a topic commonly avoided with a consulting perspective, having real examples of policy benefits. Hear the full coversation, covering:- Standardizing programs, documentation, and access - The relationship between technology and policy development - Legal considerations - Executive support and how to engage leadership
Unsecurity Episode 245: DEF CON Recap w/ Matt Dowd, Matt Findlay, Pinky Thompson
Returning from this year's DEF CON, hear from our Offensive Team Managers, Dowd and Findlay, and Pinky, IR Manager and co-host of The Hackle Box. Hear about new highlights, CTF's, and villages, and reflection from Brad as a Blue Team member navigating past challenges. Have something to say? Contact us at unsecurity@frsecure.com and follow us for more!LinkedIn: frsecure Instagram: frsecureofficialF
Unsecurity Episode 244: Journey to Pen Testing w/ Morgan Trust
We're back! Pen Tester and Team Ambush member Morgan Trust walks us through his journey into the cybersecurity field. With a can-do approach, Morgan discusses how he has developed professionally, expanding his expertise across public speaking and competitive hacking. His presentation, "The New Era of Deception: AI, Deep Fakes, and The Dark Web" has hit many a stage with these essential points to k
Unsecurity Episode 243: Cyber Counsel w/ Heidi Fessler
Attorney Heidi Fessler is this week's guest! Practicing law for 35 years and specializing in cybersecurity, Heidi walks us through the right time to engage legal, navigating incident response, distinctions between general and cyber counsel, and cyber law. Thoughts on Unsecurity? Contact us at unsecurity@frsecure.com and follow us for more! LinkedIn: https://www.linkedin.com/company/frsecure/ Insta
Unsecurity Episode 242: AI Evolution, Application, & The Future w/Jim Wilt
You hear it everywhere: the buzzing hot-topic, AI, lands on this week's episode with featured guest, Jim Wilt! Brad returns with Megan to hear from the AI Guy himself. With an introduction to AI in the 90s, Jim shares his expertise as a technologist and early adopter of the tool. Whether you have a place in tech, executive space, or creative, get key takeaways on:-AI impact & bias -Advancing u
Unsecurity Episode 241: Business Impact Analysis w/ FRSecure Consultants
How can you approach your company's leadership to advocate for best security practices? Megan dives into a BIA (Business Impact Analysis) breakdown with triple guest features from FRSecure's Consulting Team. Mea Yang, Coral Morgan, and Kathryn Frickstad-Olson recall client trumphs and challenges they have witnessed with implementing BIAs.Whether you need a 101 course in BIA Practices, want a littl
Unsecurity Episode 240: Mental Strength & Resilience in Cybersecurity w/ Cindra Kamphoff
Special guest & performance coach Dr. Cindra Kamphoff explores with Megan and Brad mental practices to thrive in demanding environments like IT and Cybersecurity fields.Through her work with companies like Verizon, the Minnesota Vikings, and Mayo Clinic, Cindra unpacks tools for resilience, confidence building, and facing setbacks. From the "Learn, Burn, Return" method to understanding Imposte
Unsecurity Episode 239: Meet the Mentor - CISSP w/ John Kennedy
We're back! It's time for a "Meet The Mentor" session with our newest CISSP Program Instructor, John Kennedy. From joining the Air Force to being an ISSM and a cybersecurity mentor, John transports us from his challenges in tech to now leading live sessions, the pressure of building slide decks, and why giving back is essential to him and the security field. Listen to hear John's success story and
Unsecurity Episode 238: Air Gapping w/ Sean Behan
This week on Unsecurity, Senior Offensive Security Engineer Sean Behan sits with Brad and Megan to dissect Air Gapping. Starting with the development of the Air Gap method, they discuss its evolution and the pros and cons of each type. Tune in for an engaging discussion on understanding systems operations, strengths, and weaknesses of air gapped networks.About FRSecure:https://frsecure.com/FRSecur
Unsecurity Episode 237: HERoic Hacks Recap w/ Melissa Kjendle
In this episode of the Unsecurity Podcast, hosts Brad Nigh and Megan Larkins are joined by Melissa Kjendle, Assessor Manager at FRSecure, to recap our recent HERoic Hacks event. Melissa spoke at the event, highlighting the significance of inclusive and diverse perspectives in cybersecurity—particularly focusing on the growing role of women in the field.Together, the three delve into the dynamics o
Unsecurity Episode 236: FRSecure Team Reflections w/ Mike Kongsjord
In this episode of the Unsecurity Podcast, hosts Brad Nigh and Megan Larkins are joined by Melissa Kjendle, Assessor Manager at FRsecure, to recap our recent HERoic Hacks event. Melissa spoke at the event, highlighting the significance of inclusive and diverse perspectives in cybersecurity, particularly focusing on the growing role of women in the field.Together, the three delve into the dynamics
Unsecurity Episode 235: CMMC Updates w/ Scott Singer & Ryan Abraham
With two guest features, Scott Singer from CyberNINES and FRSecure's own Security Information Consultant, Ryan Abraham, this week's episode focuses on CMMC's recent changes, enforcement, and compliance requirements.About FRSecure https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered in Minneapolis, MN. Our team of experts is constantly developing solution
Unsecurity Episode 234: HHS Cybersecurity Performance Goals w/ April Meyer
April Meyer, Information Security Consultant, shines light on the recent initiative of HHS Cybersecurity Performance Goals. *Note: This Unsecurity Episode was recorded in August 2024. CPGs are currently voluntary and it is expected that requirements be added through HIPAA in 2025. Read more about the HHS CPG's in our blog: HHS Cybersecurity Performance Goals: Context and 2 Comprehensive Checklists
Unsecurity Episode 233: HERoic Hacks - Women in InfoSec w/ Tonya Barnes
In this special Edition of Unsecurity, Key Account Manager Tonya Barnes speaks on the creation of HERoic Hacks, the infosec conference that empowers women in the field. About HERoic Hacks: Envisioned by Tonya, and supported by FRSecure, HERoic Hacks addresses the gap in representation by providing networking opportunities, expert speakers, and award recognition with notable infosec organizations a
Unsecurity Episode 232: Breachmas Recap with Mike "Pinky" Thompson
Join us in the new year as FRSecure's Incident Response Manager, Pinky Thompson, joins to recap Breachmas 2024. The group discusses LDAP, recent cyberattack trends, Evil Jinx, and more. Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com. About FRSecure https://frsecure.com/ FRSecure i
Unsecurity Episode 231: Security Predictions for 2025 with Evan Francen & Oscar Minks
Brad returns with Megan to talk 2025 predictions with former Unsecurity host Evan Francen and President of FRSecure, Oscar Minks. They discuss potential effects of new administration and AI.Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com.About FRSecurehttps://frsecure.com/FRSecure
Unsecurity Episode 230: What A CISO Wants for Christmas
In this special holiday-themed episode, Gary Berger, Director of Information Security for Ogletree Deakins Law Firm, joins Megan to go over what a CISO wants for Christmas. Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com. About FRSecure https://frsecure.com/ FRSecure is a mission-d
Unsecurity Episode 229: API Security w/ Baljeet Malhotra & Nicole Salazar
This week, CEO, Nicole Salazar and Founder, Dr. Baljeet Malhotra of TeejLab join Megan and Brad to discuss all things Open Source and API Risk Management. Along with a brief review of Dr. Malhorta's background, the group discusses TeejLab's origins and discuss a new API workshop. About FRSecure https://frsecure.com/ FRSecure is a mission-driven information security consultancy headquartered in Min
Unsecurity Episode 228: Recon InfoSec with Andrew Cook
This week, Unsecurity hosts are joined by CTO of Recon InfoSec, Andrew Cook. They discuss Andrew's journey into the InfoSec field and Recon InfoSec's approach and value. Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com. About FRSecure https://frsecure.com/ FRSecure is a mission-driv
Unsecurity Episode 227: Executive Security Decisions with Vanae Pearson & Randy Kaedar
In this episode of the Unsecurity Podcast, FRSecure's CFO, Vanae Pearson, and Illumifin's Chief Security Officer, Randy Kaedar are guests. The group discusses how to prompt key decision makers and executive teams to make the most effective security decisions.Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to u
Unsecurity Episode 226: Infosec Buy In with Victoria Fogarty
In this episode of the Unsecurity Podcast, Associate Penetration Tester Victoria Fogarty joins Megan and Brad to walk through how to buy in for InfoSec programs with an executive team. Don't forget:The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com. About FRSecure https://frsecure.com/ FRSecure is
Unsecurity Episode 225: Hacks & Hops Panel Discussion
Hosts of "Unsecurity" podcast, Megan Larkins and Brad Nigh, join Evan Francen and Michael Kennedy of "Sunsets and Snowdrifts" for a crossover panel.Find the event slides here: https://info.frsecure.com/hubfs/FRSecure_Hacks%20and%20Hops_Master%20Deck-1.pdfWe look forward to seeing you next year! To stay updated about Hacks & Hops 2025, check our site. hacksandhops.comPlease send any questions,
Unsecurity Episode 224: Key Takeaways from Blackhat, Bitsloth Exploits, Windows TCP IP Flaw
In this episode of the Unsecurity Podcast, Brad and Megan recap Blackhat. They also discuss a zero-click exploit involving a Windows TCP IP flaw and backdoor Bitsloth exploits.Don't forget: The show is available in audio-only form wherever you listen to podcasts! Please send any questions, comments, or feedback to unsecurity@protonmail.com.About FRSecure https://frsecure.com/FRSecure is a mission-
Unsecurity Episode 223: Introducing a New Host and Breaking Down the Crowdstrike Saga
In this episode of the Unsecurity Podcast, Brad and Oscar are joined by a new host, FRSecure's Megan Larkins!Together, they discuss the recent CrowdStrike outage and its illustration of the importance of understanding your application inventory and dependencies—and the need for proper application allow listing and conditional access policies to prevent attacks.00:00 Introduction and Weather Conver
The Impact of an 'Always On' Mentality on Mental Health w/ Michael Kennedy
In this episode of the Unsecurity Podcast, the guys sit down with Michael Kennedy of Ostra to discuss burnout and share their personal experiences and strategies for preventing and managing work-related stress.Please send any questions, comments, or feedback to unsecurity@protonmail.com.About FRSecure https://frsecure.com/FRSecure is a mission-driven information security consultancy headquartered
CISSP Certification and Becoming a Security Consultant w/ Brian Kelley
In this episode of the Unsecurity Podcast, Brad, and Oscar discuss the CISSP Mentorship Program with Brian Kelley now that this year's course has officially wrapped up, and touch on challenges and roadblocks for security professionals in the job market. 00:00 Intro01:56 Ransomware and Security Best Practices06:32 CISSP Mentorship Program and Learning Journey25:32 Challenges of Information Security
Incident Response Stories w/ Mike (Pinky) Thompson
In this episode of the Unsecurity Podcast, Brad, Oscar, and Pinky discuss recent news stories about IP and central manager flaws, as well as a vulnerability enrichment project by CISA. They also share an interesting incident response story involving internal domains and proxy auto-configuration files. Please send any questions, comments, or feedback to unsecurity@protonmail.com.About FRSecurehttps
Meet the Mentors - Ryan Cloutier
In this episode of the Unsecurity Podcast, Brad interviews guest Ryan Cloutier as part of our Meet the Mentors series.They discuss the importance of the CISSP Mentor Program and the value of different perspectives in teaching. They also discuss the release of an exploit code for the Palo Alto Networks Zero Day vulnerability and the ethics of publicly sharing vulnerabilities.Don't forget: The show
Meet the Mentors - Ron Woerner
Episode 218 of the Unsecurity Podcast is now live!This time, Brad is joined by Ron Woerner for another episode of our "Meet the Mentors" series introducing the 2024 CISSP Mentor Program instructors!Links & information:Find Ron on LinkedInhttps://www.linkedin.com/in/ronwoerner/Please send any questions, comments, or feedback to unsecurity@protonmail.com.About FRSecurehttps://frsecure.com/FRSecu
Meet the Mentors - Chris Foulon
Episode 217 of the Unsecurity Podcast is now live!This time, Brad is joined by Chris Foulon for the first episode in our "Meet the Mentors" series, introducing our 2024 CISSP Mentor Program instructors!Links & information:Chris's Podcast (Breaking Into Cybersecurity)https://podcasts.apple.com/us/podcast/breaking-into-cybersecurity/id1463136698Please send any questions, comments, or feedback to
Vulnerability Scanning V.S. Penetration Testing w/ Matt Dowd
Episode 216 of the Unsecurity Podcast is now live! This time, Oscar and Brad are joined by FRSecure's Matt Dowd to discuss the difference between vulnerability scanning and penetration testing. Links & informationCisco Critical Vulnerabilities https://www.securityweek.com/cisco-patches-critical-vulnerabilities-in-enterprise-communication-devices/Please send any questions, comments, or feedback
ISACA Home Network Webinar Series w/ Dave Tuckman
Episode 215 of the Unsecurity Podcast is now live! This time, Brad is joined by FRSecure's Dave Tuckman to discuss an upcoming webinar series about securing home networks with ISACA and select FRSecure staff leading the sessions.Links & informationISACA home network webinar series:Session 1: 2/12 - Household Computer Safety, Using The Internet Safely https://isaca-sd.org/events/2024-02-12Sessi
Breachmas Report w/ Mike (Pinky) Thompson
Episode 214 of the Unsecurity Podcast is now live! This time, Brad and Oscar sit down with FRSecure's Mike (Pinky) Thompson for a Breachmas report and some news from around the industry.News linksMandiant's X (Twitter) Account Hackedhttps://thehackernews.com/2024/01/mandiants-x-account-was-hacked-using.htmlCISCO Patchhttps://www.securityweek.com/cisco-patches-critical-vulnerability-in-unity-connec
Managing FRSecure's Culture w/ Amy MacElroy
Episode 213 of the Unsecurity Podcast is now live! This time, Brad and Oscar sit down with FRSecure's Amy MacElroy to discuss company culture and how she helps maintain it in her role as head of HR.VulnerabilitiesApache Strutshttps://www.securityweek.com/recent-apache-struts-2-vulnerability-in-attacker-crosshairs/Microsoft Patch Tuesdayhttps://securityaffairs.com/155719/security/microsoft-patch-tu
Business Impact Analysis Starter Kit, CMMC
Episode 212 of the Unsecurity Podcast is now live!This time, Brad and Oscar sit down with FRSecure's Shawn Pollard to discuss our new free BIA starter kit, CMMC, and more.Water facilities report falling to hackers in separate breacheshttps://arstechnica.com/security/2023/11/2-municipal-water-facilities-report-falling-to-hackers-in-separate-breaches/Send any questions, comments, or feedback to unse
R&D and Defense Evasion w/ Eric Hanson and Seth Bowling
Episode 211 of the Unsecurity Podcast is now live!This time, Brad and Oscar sit down with FRSecure's Eric Hanson and Seth Bowling to discuss R&D and defensive evasion.Blackcat report company they breached to SEC https://www.bleepingcomputer.com/news/security/ransomware-gang-files-sec-complaint-over-victims-undisclosed-breach/About FRSecure: https://frsecure.com/FRSecure is a mission-driven inf
Proofpoint 2023 Voice of the CISO w/ Megan Larkins
Episode 210 of the Unsecurity Podcast is now live!This time, Brad is joined by Megan Larkins to discuss her role as FRSecure's security consulting manager, as well as Proofpoint's 2023 Voice of the CISO report.Proofpoint's 2023 Voice of the CISOhttps://www.proofpoint.com/us/resources/white-papers/voice-of-the-ciso-reportGive this episode a listen and send any questions, comments, or feedback to un
Catching Up with Evan!
Episode 209 of the Unsecurity Podcast is now live! This time, Oscar and Brad welcome Evan back to the show to catch up on all his latest endeavors.Give this episode a listen and send any questions, comments, or feedback to unsecurity@protonmail.com.
Catching Up - DEFCON, Annual InfoSec Report, CISSP Mentor Program
Episode 208 of the Unsecurity Podcast is now live!This time, Oscar returns to the show and the guys get a chance to catch up on all the latest.Give this episode a listen and send any questions, comments, or feedback to unsecurity@protonmail.com
Defcon 2023 Recap, Huntin' Ground, CloudNordic
Episode 207 of the Unsecurity Podcast is now live! This week, Brad and Pinky discuss Defcon 2023, Huntin' Ground, and the recent CloudNordic ransom case.CloudNordic says it can't, and won't, pay the ransom demand (article): https://www.theregister.com/2023/08/23/ransomware_wipes_cloudnordic/Send any questions, comments, or feedback to unsecurity@protonmail.com.
Adobe ColdFusion & Citrix NetScaler Vulnerabilities
This week, Oscar and Brad sit down to discuss Adobe ColdFusion & Citrix NetScaler Vulnerabilities.Give this episode a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com
Unsecurity/Hacklebox Crossover: MOVEit, Microsoft Patch Tuesday, and Fortinet Infinity
This month, we're doing a crossover episode with The Hackle Box!For those who are not yet aware, The Hacklebox is another FRSecure podcast focused on the technical end of current events and happenings within the security industry. It's hosted several times a month by FRSecure's Technical Services Team.Discussed this month: MOVEit AttacksMicrosoft Patch Tuesday: Six 0-DaysFortinet InfinityPlease li
ChatGPT, Mobile Malware, Super Mario Malware
Episode 205 of the Unsecurity Podcast is now live!This week, Oscar and Brad sit down to discuss ChatGPT, mobile malware, and the recent Super Mario malware. Don't forget: The show is available in audio or video form wherever you get your podcasts!Give this episode a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com.
MOVEit, Fortinet, and Barracuda Vulnerabilities
Episode 204 of the Unsecurity Podcast is now live!This week, Oscar and Brad sit down to discuss the recent MOVEit, Fortinet, and Barracuda Vulnerabilities.Links: Fortigate/Fortinet Vulnerability https://projecthyphae.com/threat/the-fortigate-to-mordor-has-been-left-open/ Critical MOVEit Transfer Vulnerability https://projecthyphae.com/threat/hackers-like-to-moveit-moveit-critical-moveit-transfer-v
Malvertising & Malverposting
Episode 203 of the Unsecurity Podcast is live!This week, Oscar and Brad sit down to discuss 'malvertising' and 'malverposting'.Links:“Malverposting” — With Over 500K Estimated Infections... https://labs.guard.io/malverposting-with-over-500k-estimated-infections-facebook-ads-fuel-this-evolving-stealer-54b03d24b349 Give this episode a listen or watch and send any questions, comments, or feedback to
FBI Takedown of The Hive, Passwordless Technology
This week, Oscar and Brad sit down to discuss passwordless tech, and the FBI's recent move to take down The Hive, one of the world's most notorious ransomware gangs.FBI Takedown of The Hive https://therecord.media/hive-ransomware-decryptors-fbi-bryan-smith-interview-click-here Give this episode a listen and send any questions, comments, or feedback to unsecurity@protonmail.com
Used Network Equipment Resale - How to Protect Yourself
This week, Oscar and Brad sit down to discuss used network equipment resale, the risks posed to organizations, and how you can protect yourself. Give this episode a listen and send any questions, comments, or feedback to unsecurity@protonmail.com.
An Interview w/ the Creators of Hack Space Con - the Mission, Neurodiversity, and More!
This week, Oscar and Brad sit down with the creators of Hack Space Con to discuss the mission behind the conference, the unique venue, how the event came to be, and more!Links:https://www.hackspacecon.com/ Send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!
New APT Compromise Strategy, Threat Actors Exploit 3-Year-Old Vulnerability
Episode 198 of the Unsecurity Podcast is now live!This week, Oscar and Brad discuss a new APT compromise strategy, a 3-year-old vulnerability exploited by multiple threat actors, and more.Links:3-Year-Old Vulnerability Exploited by Multiple Hacking Groups https://thehackernews.com/2023/03/multiple-hacker-groups-exploit-3-year.htmlAdobe ColdFusion Bughttps://gbhackers.com/adobe-coldfusion-bug/Don't
Vendor Risk Management, Incident Response, Facebook/Instagram Vulnerability
Episode 197 of the Unsecurity Podcast is now live! This week, Oscar and Brad discuss vendor risk management, incident response practices, and the recent Facebook vulnerability.Links:KillNet DDoS Blocklisthttps://github.com/securityscorecard/SSC-Threat-Intel-IoCs/blob/master/KillNet-DDoS-Blocklist/proxylist.txtGive this episode a listen and send any questions, comments, or feedback to unsecurity@pr
Red Teaming + Research and Development (w/ Seth Bowling and Eric Hanson)
Episode 196 of the Unsecurity Podcast is now live! This week, Oscar is joined by FRSecure's Eric Hanson and Seth Bowling to discuss red teaming and R&D.Give this episode a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!
New Year's (Security) Resolutions
This week, Oscar and Brad discuss some ideas for new year's resolutions you can apply to your security program.Give this episode a listen and send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!
Veeam Backup/Replication Being Exploited, FBI Seizes 48 Domains, and More.
Episode 194 of the Unsecurity Podcast is now live! This week, Oscar and Brad discuss a CISA alert regarding Veeam backup and replication vulnerabilities being exploited, FBI seizing 48 domains linked to DDoS services, hackers using .svg files to install QBot malware on windows systems, and more.Links:CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks https://thehac
What the New CISA Reporting Rule Means for Critical Infrastructure
Episode 193 of the Unsecurity Podcast is now live! This week, Oscar and Brad discuss the new CISA reporting rule and what it means for organizations in the critical infrastructure sector. Links:Critical Infrastructure Sectorshttps://www.cisa.gov/critical-infrastructure-sectorsCISA - Reporting Rulehttps://thehackernews.com/2022/12/what-cisa-reporting-rule-means-for-your.htmlhttps://www.congress.gov
Holiday Precautions, VRM Review, New Vulnerabilities, and More
Episode 192 of the Unsecurity Podcast is now live! This week, Oscar and Brad discuss holiday precautions, vendor risk management, a few new vulnerabilities on the scene, and more.Give episode 192 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!
Fortinet, ProxyShell 2 (or 3?), Cybersecurity Awareness Month
Episode 191 of the Unsecurity Podcast is now live! This week, Oscar and Brad discuss some recent vulnerabilities, cybersecurity awareness month, Hacks and Hops 2022, and more!Links:Fortinet Authentication Bypasshttps://projecthyphae.com/threat/fortinet-authentication-bypass-critical/ZeroDay: ProxyShell 2 (or 3?)https://projecthyphae.com/threat/zeroday-proxyshell-2-or-3-even-proxier/Cybersecurity A
Unsecurity Episode 190: Evan Returns! Life in Mexico, New CvCISO program, & Industry News
Episode 190 of the Unsecurity Podcast is now live! This week, Oscar and Brad welcome Evan back to the show to discuss life in Mexico, next steps in the CvCISO program, and all the latest industry happenings.Links:Fancy Bearhttps://projecthyphae.com/threat/fancy-bear-sinks-its-graphite-claws-into-powerpoint/9/26/2022 Security News Rounduphttps://projecthyphae.com/threat/information-security-news-9-
Unsecurity Episode 189: An Interview with Chris Furner and Jeremy Young of Blumira
Episode 189 of the Unsecurity Podcast is now live! This week, Oscar and Brad are joined by Chris Furner and Jeremy Young with Blumira to discuss their perspectives on information security.New EvilProxy Phishing Service Allowing Cybercriminals to Bypass 2-Factor Securityhttps://thehackernews.com/2022/09/new-evilproxy-phishing-service-allowing.htmlTA505 Hackers Using TeslaGun Panel to Manage ServHel
Unsecurity Episode 188: Ostra Cybersecurity & FRSecure, LastPass Security Incident, Other News
Episode 188 of the Unsecurity Podcast is now live! This week, Oscar and Brad are joined by Michael Kennedy, Founder of Ostra Cybersecurity to discuss Ostra, working with FRSecure, industry news, and more.LastPass Security Incident:https://blog.lastpass.com/2022/08/notice-of-recent-security-incident/Okta one-time MFA passcodes exposed in Twilio cyberattackhttps://www.bleepingcomputer.com/news/secu
Unsecurity Episode 187: DEFCON 30 Recap w/ Eric Hanson and Mike Thompson
Episode 187 of the Unsecurity Podcast is now live! This week, Oscar and Brad are joined by Eric Hanson and Mike Thompson of FRSecure's technical services team to discuss this year's DEFCON conference. DEFCON site:https://defcon.org/ Give episode 187 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!
Unsecurity Episode 186: FTC Safeguards Rule Updates- What You Need to Know
Episode 186 of the Unsecurity Podcast is now live! This week, Oscar and Brad review the recent updates to the FTC's Safeguards Rule concerning financial institutions. Here's what you need to know...Need more detail? Check out FRSecure's blog post covering all the details of the recent updates:https://frsecure.com/blog/ftc-safeguards-rule-what-you-need-to-know/More resources:https://www.ftc.gov/bus
UNSECURITY Episode 185: How Do We Secure a Remote Workforce In a Post-COVID World?
Episode 185 of the Unsecurity Podcast is now live! This week, Oscar and Brad discuss securing a remote workforce in a post-COVID environment, industry news, and more!Give episode 185 a listen or watch and send any questions, comments, or feedback to unsecurity@protonmail.com. Don't forget to like and subscribe!
UNSECURITY Episode 184: 'Quick Wins' for Your Security Program
Episode 183 of the Unsecurity Podcast is now live! This week, Oscar and Brad discuss some of the simpler things you can do to bolster your security program. While there is no such thing as 'easy button' security, there are still some quick wins to be had!News:https://thehackernews.com/2022/07/5-key-things-we-learned-from-cisos-of.html- Remote work has accelerated the use of EDR Technology- 90% of
Recommended
紐約鳥｜New York Aperture
The Swerve Podcast: Obscure Topics | Conspiracy Theories
The Bread and Banter Podcast
The Church of What's Happening Now: The New Testament
Busted Open
Deadline: White House
Panda Show - Picante
Crickets Corner
History of the Earthquake and Fire in San Francisco
Fox news
K-Drama Obsessed Mamas | Beyond “Just One More Episode!”
True Crime Classics
