Security by Default
Security by Default is a cybersecurity podcast hosted by Joseph Carson, an ethical hacker and security expert. The show explores current security trends, real-world threats, and practical advice for staying safe in the digital world. Through interviews and clear explanations, Joseph makes complex security topics accessible to both IT professionals and curious listeners.
Episodes
Same Scams, Cleaner Wrapper: Cybersecurity Awareness Month in the AI Era with Erich Kron
It's Cybersecurity Awareness Month, and Joe Carson is joined by Erich Kron of KnowBe4 to ask whether the classic messages — strong passwords, phishing awareness, MFA, and patching — still hold up. Spoiler: they do, but attackers have upgraded the wrapper. Erich explains why users should ignore deepfake "tells" and focus on emotion, urgency and the request itself, how phishing has moved into Teams,
Passwords, Passkeys & Rogue AI Agents | Credentials in the Age of AI with Evil Mog
We assert that agentic AI constitutes a profound and immediate threat to passwords, passkeys, and credential stewardship when such agents are afforded unfettered operational or contractual authority without deterministic guardrails. I describe, with technical specificity, how agents that hold passkeys or password-manager access can act autonomously to transact, alter accounts, or execute legally b
When a Simple Breach Became a Crisis: Lessons We Learned | Lukas Hlavicka
I discuss with Lukas Hlavicka how ordinary security incidents can escalate into full-blown crises when organizations lack preparation, reliable backups, and secure deployment pipelines. We share stark war stories, from backups that were never actually taken to compromised software deployment systems and a ransomware attack that exposed six months of bank fraud. Lukas draws on over a decade of inci
From Legacy to Modern PAM: A Migration Playbook with Erik Siebler
Navigating the intricate landscape of identity security has evolved dramatically over the past two decades. Once characterized by a mere username and password, the contemporary environment demands that employees manage an astonishing array of digital identities—approximately one hundred per individual, not accounting for the emerging complexities introduced by agentic AI.Joe Carson engages Erik Si
Navigating the Convergence of Physical Security and Digital Access | Daniel Raines
Daniel Raines, a luminary in the realm of electronic security, shares his extensive journey through the intricate landscape of physical security and digital access. With three decades of experience, he has transitioned from hands-on installation of access control systems to software development, addressing vulnerabilities and enhancing security measures. Our discourse delves into the convergence o
L0pht Legend Chris Wysopal on the Evolution of Application Security
Chris Wysopal, a distinguished figure in the realm of cybersecurity and a celebrated L0pht legend, engages in a profound dialogue with Joe Carson, delving into his remarkable journey from scavenging for Unix manuals to pioneering modern application security. Central to the discussion is the evolution of application security practices, particularly as they pertain to the emergence of artificial int
Ransomware Unmasked: Inside the World's Biggest Cybercrime Gang | Geoff White
The discourse surrounding ransomware takes center stage as we engage with investigative journalist Geoff White, whose extensive research delves into the notorious Conti Ransomware gang. This episode elucidates the profound implications of ransomware attacks, which have escalated beyond mere data encryption to encompass severe extortion tactics that threaten the integrity of personal and organizati
The Voice of the Customer: Why Listening Beats Selling with David Muniz
The paramount focus of this podcast episode is the critical necessity of amplifying the voice of the customer in the contemporary business landscape. I engage in a profound dialogue with David Muniz from Segura, exploring the integral role that understanding customer pain points plays in the provision of effective solutions. We delve into the importance of listening attentively to customers, rathe
Why Identity Is Becoming Every CISO's Biggest Challenge | Vlad Shapiro
Vlad Shapiro, a distinguished mathematician turned identity management expert, articulates his transformative journey in this episode, offering profound insights into the intersection of identity and business. He elucidates how the realm of identity has evolved into a critical pillar for organizational functionality, emphasizing that without effective identity management, business operations may f
How Hackers Attack AI: The New Battle to Secure Intelligent Machines | Harriet Farlow
This podcast episode delves into the intricate nexus of artificial intelligence and security, featuring an enlightening conversation with Harriet, the author of a newly released book Practical AI Security. We explore her compelling journey from a background in physics and anthropology to becoming a pivotal figure in the realm of cybersecurity, particularly focusing on the challenges posed by adver
AI Is Not Magic: The Truth Behind the Technology Changing Everything | Diana Kelley
This podcast episode elucidates the evolution of artificial intelligence, particularly focusing on the transition from earlier models such as ELIZA and Watson to contemporary systems like ChatGPT and Claude. Our discussion emphasizes the importance of understanding the context and limitations of AI, as well as the implications of its rapid advancement on our professional landscape. We delve into t
Why Cybersecurity Fails Without Trust: The Human Side of Defense | JC Vega
This podcast episode elucidates the critical importance of effective communication and leadership within the realm of cybersecurity. We engage in a profound discussion with JC Vega, who shares his extensive background in both operational security and cybersecurity, emphasizing the necessity of translating complex technical concepts into relatable business language. We explore the pivotal role of l
Can AI Beat Hackers? The Future of Cyber Training Has Changed | Hack The Box
The eminent discourse of this podcast episode delves into the pivotal role of artificial intelligence in the contemporary cybersecurity landscape, underscoring the symbiotic relationship between AI and human expertise. I, Joseph Carson, engage in a compelling conversation with Gerasmus, a distinguished figure from Hack the Box, as we explore the transformative impact of AI on both offensive and de
Behind the Scenes: How Cybersecurity Decisions Really Get Made | Fernando Montenegro
Fernando Montenegro, a distinguished industry analyst in cybersecurity, articulates the pivotal best practices that analysts should adopt to navigate the complexities of the cybersecurity landscape effectively. Throughout our discourse, he elucidates the necessity for analysts to function as intermediaries among various stakeholders, including buyers, sellers, and investors, thus facilitating info
Can We Make Cybersecurity Fun Again? Turning Fear Into Action | Gary Berman
This podcast episode delves into the imperative of transforming the often daunting landscape of cybersecurity into a realm of engagement and enjoyment. I, Joe Carson, alongside my esteemed guest Gary, explore how the prevailing culture of fear, uncertainty, and doubt (FUD) can be supplanted by a more vibrant and playful approach. We discuss the significance of fostering a sense of community and su
Inside Modern Cyber Warfare: The Invisible Battles Happening Every Day | Chris Kubecka
This podcast episode delves into the intricate interplay between global politics, cybersecurity, and the evolving nature of threats faced by critical infrastructure. Our esteemed guest, Chris, shares his compelling journey from early experiences with technology to significant roles in safeguarding vital systems against sophisticated cyber threats. Notably, the discussion illuminates the transforma
How Anyone Can Become a Hacker: Learning Cybersecurity the Right Way | Ian Austin
This podcast episode delves into the evolving landscape of cybersecurity, particularly focusing on the intersection of cloud security and artificial intelligence. Ian Austin, co-founder of Pwned Labs, shares his extensive journey through the cybersecurity domain, highlighting the gradual transition from traditional IT roles to specialized security positions. A salient point discussed is the signif
Inside Password Cracking: How Hackers Really Break Your Secrets | Evil Mog
This podcast episode delves into the intricate realm of password security and the evolving landscape of authentication methods, with particular emphasis on the implications of artificial intelligence within this domain. I am joined by the esteemed Evil Mog, an executive managing hacker at IBM, who shares his extensive expertise and insights derived from years of involvement in the password crackin
Understanding the Critical Role of Identity in Modern Cybersecurity with Charles Chase
The focal point of today’s discourse centers on the crucial importance of identity security and privileged access management in contemporary organizational frameworks. I am joined by the esteemed Charles Chase, who shares his extensive experience in the realm of identity security, elucidating the pressing trends and best practices that organizations must adopt to safeguard their digital assets. Ou
A Deep Dive into Cyber Operations and OSINT with The Grugq
The Grugq, a distinguished expert in the realm of open-source intelligence (OSINT) and cyber operations, elucidates the intricate interplay between information warfare and contemporary security challenges. He articulates the notion that during times of conflict, traditional rules governing cyber operations, such as deniability and stealth, become markedly less pertinent. Instead, the focus shifts
Building Resilience in Cybersecurity: Lessons from Joe Sullivan
The paramount theme of this podcast episode revolves around the critical necessity of preparing for crises within cybersecurity frameworks. As we navigate an increasingly chaotic landscape, it becomes evident that security must be accessible and comprehensible for all stakeholders involved. We engage in an enlightening dialogue with our esteemed guest, Joe Sullivan, who elucidates his remarkable j
Laughing with Cyber - A Standup Comedy Special with Ian Murphy
This podcast episode delves into the often-overlooked notion that the field of cybersecurity can be both enjoyable and engaging, rather than solely characterized by its daunting challenges and threats. We, Joe Carson and Ian Murphy, reflect on our shared experiences within the industry, emphasizing the importance of maintaining a sense of humor and joy amidst the chaos often associated with cybers
From Teenage Hacker to Hollywood: A Cybersecurity Story You Won’t Believe | Alissa Knight
This podcast episode features an enlightening conversation with Alissa Knight, a notable figure in the cybersecurity landscape, who shares her unique journey into the realm of hacking and cybersecurity. From her early days of curiosity and mischief, starting at the tender age of thirteen, to her transformative experiences following a pivotal arrest, Alissa reflects on the lessons learned and the p
Understanding Customer Success: Beyond Support in Cybersecurity
This podcast episode elucidates the essential nature of customer success within the realm of cybersecurity, positing that the discipline transcends mere technical proficiency to encompass a broader business perspective. I convey that security is no longer confined to IT; rather, it is a multifaceted issue that intertwines with various organizational domains such as finance, sales, and human resour
Personalizing Cybersecurity Training: The Key to Modern Defense Strategies Michael Waite
The primary focus of today's discussion revolves around the profound implications of artificial intelligence (AI) on the cybersecurity landscape, particularly emphasizing the heightened sophistication and frequency of cyberattacks. As we navigate through the intricacies of this evolving domain, we aim to elucidate how the advent of advanced AI technologies is transforming both the methods employed
The Future of Trustworthy AI: Insights from Satu Korhonen
Satu Korhonen elucidates the intricacies of hacking artificial intelligence, emphasizing the necessity of understanding both the vulnerabilities and ethical considerations inherent in AI systems. She advocates for a paradigm shift where cybersecurity and AI development converge, fostering collaboration rather than division among these domains. Central to her discussion is the notion that AI, while
The Evolving Landscape of Identity Threats: Strategies for Mitigation and Awareness
This podcast episode delves into the pressing issue of identity threats and the evolving trends surrounding them. Our esteemed guest, Philippe Peters, who leads Identity Threat Labs at Segura, provides invaluable insights into the methodologies employed by cybercriminals in their quest to exploit vulnerabilities associated with credentials. We explore the alarming shift in tactics, where attackers
Cyber Law Unveiled: Bridging Security and Legal Perspectives with Pamela Victor Ibitamuno
The salient point of this episode revolves around the intricate relationship between cybersecurity and cyber law, emphasizing the challenges faced in regulating the rapidly evolving digital landscape. I, Joe Carson, host of the Security By Default podcast, engage in a profound dialogue with our esteemed guest, Pamela Victor Ibitamuno, a legal expert with a unique background in penetration testing.
The Role of Game Design in Cybersecurity Training with Peadar
This podcast episode elucidates the pivotal role of game design in enhancing cybersecurity training, presented through an engaging dialogue between the host, Joe Carson, and guest Peadar. The discussion commences with Peadar's fascinating transition from education to game design, highlighting the necessity of bridging the gap between technical and non-technical audiences in the cybersecurity spher
Your Security Badge Can Be Hacked: RFID Secrets Exposed | Iceman
Christian Herman, known in the hacking community as Iceman, joins us to delve into the intricacies of RFID hacking, with a particular focus on the Proxmark device. This episode elucidates the journey of Iceman from his early encounters with technology to becoming a prominent figure in the RFID hacking domain. We discuss not only the technical aspects of utilizing the Proxmark for various hacking e
Understanding Cybersecurity: The Importance of Effective Storytelling
This podcast episode delves into the multifaceted nature of branding and communication within the realm of cybersecurity, emphasizing that cybersecurity is no longer merely an IT concern but rather a societal issue that necessitates a broader perspective. We engage with George, a distinguished podcast host and community leader, who shares his insights on the importance of understanding human behav
Exploring the Intricacies of Cybersecurity Marketing with Zara Pirzada
The discussion presented in this episode revolves around the intricate dynamics of the cybersecurity industry, emphasizing the multifaceted roles within it. Our esteemed guest, Zara Pirzada, the managing partner and owner of Infinitus Management Consulting, elucidates her journey into cybersecurity, highlighting the importance of understanding various market strategies for startups. She articulate
Bringing Clarity to Cybersecurity: A Conversation with Harry Coker Jr.
Today, we delve into the profound insights of Mr. Secretary Harry Coker Jr., who elucidates the imperative of fostering clarity amidst the pervasive chaos inherent in cybersecurity. In our discourse, he emphasizes the necessity for defenders to perceive disruption not as a hindrance, but as an opportunity for innovation and growth within the realm of online security. Coker recounts his own journey
A Legacy of Malware: Mikko Hyppönen Reflects on His Career
Mikko Hyppönen, a luminary in the realm of cybersecurity, reflects on his illustrious career during this insightful dialogue. With over three decades of experience, he articulates the evolution of his professional journey, transitioning from programming to the intricate domain of malware analysis. He recounts his initial encounter with malware, specifically the Omega virus, which ignited his passi
Unveiling the Complexity of Non-Human Identities in Cybersecurity with Evandro Goncalves
The discussion with Evandro Goncalves centers on the critical topic of machine identities, which are non-human identities operating within IT environments. As organizations increasingly rely on automation, understanding and managing these identities has become paramount. Evandro elucidates the complexities and challenges associated with machine identities, highlighting the vast number of such iden
From Cybercriminal to Defender: An Incredible Hacker Redemption Story | Hieu Minh Ngo
Hieu Minh Ngo, a former cybercriminal turned cyber threat investigator, shares his remarkable journey from the dark depths of hacking to a profound commitment to cybersecurity. In this episode, we delve into Hieu's transformation, which commenced with his early fascination with computers in Vietnam and evolved into illicit activities on the dark web. Following a significant prison sentence, Hieu e
Understanding Identity Threats in Cybersecurity with Filipi Pires
In this episode of the Security by Default podcast, host Joe Carson speaks with Filipi Pires, a cybersecurity expert with a diverse background in both technical and sales roles. They discuss Filipi's journey into cybersecurity, the importance of identity in security, and the challenges organizations face with misconfiguration. The conversation also covers tools and techniques used in cybersecurity
The Hacker Building AI Tools to Find Security Weaknesses | Carlos Polop
The primary focus of this podcast episode revolves around the innovative contributions of Carlos Polop to the field of cybersecurity, particularly through his work on HackTricks and various vulnerability assessment tools. Carlos shares his journey into the realm of hacking, which began later than most, ignited by a curiosity to overcome Wi-Fi challenges. He elaborates on the creation of Hack Trick
Exploring the Evolution of Identity Governance and Administration with Martin Sandren
This podcast episode delves profoundly into the intricate nuances of Identity Governance and Administration (IGA) within the broader context of Identity and Access Management (IAM). We engage in a comprehensive dialogue with Martin, a seasoned expert in the field, who elucidates the fundamental distinctions between IGA and IAM while tracing the historical evolution of IGA systems, notably highligh
Unveiling the Art of Hardware Hacking with Joe Grand
This podcast episode centers on the exploration of hardware hacking, emphasizing the significance of continuous learning and community engagement within the hacker culture. I am joined by the esteemed Joe Grand, a prominent figure in the hardware hacking domain, who shares his extensive knowledge and experiences. Throughout our conversation, we elucidate the importance of collaboration and mentors
Harnessing AI: The Future of Cybersecurity and Data Governance with Terence Jackson
The primary focus of this podcast episode is the evolving role of Chief Information Security Officers (CISOs) in the contemporary cybersecurity landscape, particularly in relation to the integration of artificial intelligence (AI) into security strategies. We engage in a profound discussion about the necessity for CISOs to adapt their approaches in light of increasing data complexities and the rap
Recommended
پلی لیست | PlayList
Conspiracy Files with Paige Carter
Bad Friends
Learn 50 English Phrases While You Sleep | Everyday English Phrases & Vocabulary
This Past Weekend w/ Theo Von
Dateline NBC
Back to the 80s Radio
Crime Stories with Nancy Grace
Bible Tea
این نقطه
TED Business
Dark Night Tales with Brian King
