Another return guest! Richard Henderson is Global Security Strategist for Absolute. He talked with me at RSA 2018 in San Francisco about dark endpoints, GDPR, Software Defined Radio, his DEF CON ham radio fox hunt and more!
ICYMI: Richard’s first appearance on the podcast last year.
DIRECT DOWNLOAD OF PODCAST MP3 FILE
Subscribe on iTunes, GooglePlay and Stitcher!
Giovanni is a co-founder and CTO of Lastline, Inc., a company which develops solutions to detect and mitigate advanced malware and targeted threats. He is a Professor in the Department of Computer Science at the University of California in Santa Barbara and director of the Center for CyberSecurity at UCSB. He is co-director of the Security Lab, which is part of the iSeclab group and founder of the Shellphish hacker group which has annually competed in the DEFCON CTF (won in 2005) and also The DARPA Cyber Grand Challenge (3rd place). He also organizes the International Capture The Flag (iCTF), one of the world’s largest attack-defense hacking competitions.
Giovanni’s research focuses on vulnerability analysis, web security, malware analysis, and mobile security. We met in San Francisco at RSAC 2018 this year where he presented two talks, one entitled How Automated Vulnerability Analysis Discovered Hundreds of Android 0-days and also The Good, the Bad and the Ugly of the Ultrasonic Communications Ecosystem.
This episode we discuss all these things plus GDPR, Santa Barbara hot springs and more!
DIRECT DOWNLOAD OF PODCAST MP3 FILE
Subscribe on iTunes, GooglePlay and Stitcher!
Check out Giovanni at RSAC 2018:
Benjamin Caudill and Spencer Gietzen of Rhino Security Labs
Benjamin Caudill and Spencer Gietzen of Rhino Security Labs join me to discuss their research on Amazon Web Services privilege escalation vulnerabilities. Spencer recently revealed their AWS research on the Rhino Security Labs blog. Rhino is also rolling out a new open source AWS post-exploitation framework, designed for offensive security testing against AWS environments called Pacu. We also discuss how Ben and Spencer both found their way into the information security industry, pet peeves and more!
DIRECT DOWNLOAD OF PODCAST MP3 FILE
Subscribe on iTunes, GooglePlay and Stitcher!
Guest Jessy Irwin
This episode’s guest is Jessy Irwin, Head of Security at Tendermint. We spoke at RSAC 2018 in San Francisco where she presented Cracking the Security Communications Code: Talk about Security without FUD. She also did a talk at OURSA entitled Defense in Depth: Building An Old Lady Gang. Check out Jessy’s website!
DIRECT DOWNLOAD OF PODCAST MP3 FILE
Subscribe on iTunes, GooglePlay and Stitcher!
Guest Joe Gray
My guest this episode is social engineering guru Joe Gray. Joe is a Senior Security Architect at IBM and has his own blog and podcast called Advanced Persistent Security. Joe presented a talk at RSA this year with friend of the show Rachel Tobac on social engineering and OSINT which I posted the full audio of here. Joe spoke with me about Social Engineering, OSINT, vishing, SECTFs, password inspections and more!
DIRECT DOWNLOAD OF PODCAST MP3 FILE
Subscribe on iTunes, GooglePlay and Stitcher!!
Guest Mark Nunnikhoven
Mark is Vice President of Cloud Research at Trend Micro. He joined me at RSAC 2018 to discuss developing new email security gateway tools, operational technology in IoT, the new Cybersecurity Tech Accord, information security buzzwords and more!
DIRECT DOWNLOAD OF PODCAST MP3 FILE
Subscribe on iTunes, GooglePlay and Stitcher!!
Guest Katie Moussouris
Katie is the founder and CEO of Luta Security. She presented a talk on bug bounties, penetration testing and vulnerability disclosure entitled “Bug Bounty Buzzword Bingo—Deep Dive under a Jumped Shark” at the RSA Conference last week in San Francisco. Check out her slides here.
After her talk she spoke with me about the evolution of bug bounty programs, her work in developing ISO standards for vulnerability disclosure, her path to a career in information security and much more.
This episode is the 1st in a series dedicated to RSA Conference 2018. Stay tuned for more!
DIRECT DOWNLOAD OF PODCAST MP3 FILE
Subscribe on iTunes, GooglePlay and Stitcher!!
Guest – Rachel Tobac
Rachel is co-founder and CEO of Social Proof Security and Chair of the Board of Women In Security and Privacy.
Rachel discusses (and demonstrates) the art of “vishing” and social engineering. She placed 2nd twice in the Social Engineering Capture the Flag competition at DEFCON 24 and DEFCON 25 and has become a popular speaker and advocate for personal and organizational safety through social engineering awareness.
Subscribe via iTunes, GooglePlay and/or Stitcher!
DIRECT DOWNLOAD MP3 OF PODCAST
This episode is an interview with intelligence analyst Judy Towers and Michael Goedekr, CEO of hackdefnet, conducted over the summer at DEFCON 25 in Las Vegas (2017). Judy and Michael share their thoughts on threat intelligence, risk analysis, dealing with C suite executives and more.
This episode’s guest is Ray Watson who presented at Black Hat 2017. He joins me to talk about hacker history and share some of his infosec pet peeves. We recorded this interview in July 2017 during the week of Black Hat and DEFCON in Las Vegas. His talk was entitled “Jedi Masters, Sith Lords, and Droids: 5 Generations of Hacking” and can be seen in it’s entirety below.
Vince in the Bay 