Category: security Episodes

Most recent episodes from podcasts in the security category.

Back to category podcasts

Showing 11-20 of 65

AIBOM, CBOM, and HBOM with Allan Friedman thumbnail

Open Source Security

AIBOM, CBOM, and HBOM with Allan Friedman

29 Jun 2026

The evolution of Software Bill of Materials (SBOM) beyond manufacturing into cryptographic, hardware, and AI domains faces challenges in unified integration, compliance, tooling, and dependency tracking, requiring open-source collaboration, standardized frameworks, and adaptive policies to meet industry demands in procurement and risk management.

Open episode
Packagist and Composer security with Jordi Boggiano thumbnail

Open Source Security

Packagist and Composer security with Jordi Boggiano

22 Jun 2026

Strategies for securing open-source ecosystems include malware detection via third-party feeds, transparency logs, rapid incident response, blocking malicious downloads, private registry controls, immutable package releases, standardized workflows, MFA enforcement, and technical proposals like artifact validation and build attestation, while addressing challenges like maintainer hacking, AI risks, usability trade-offs, and the need for ecosystem-wide alignment and human verification.

Open episode
Hacking your CI/CD with Francois Proulx thumbnail

Open Source Security

Hacking your CI/CD with Francois Proulx

8 Jun 2026

Critical vulnerabilities in open source CI/CD pipelines, including hijacking and supply chain attacks via social engineering or compromised builds, are highlighted through incidents like TJ Actions and Ultralytics, with mitigation strategies emphasizing secure credentials, externalized workflows, threat modeling, and tools like *Smoked Meat* and *Bagel* to enhance incident response and supply chain security.

Open episode
Soap Box: Detection and response in the AI age thumbnail

Risky Business

Soap Box: Detection and response in the AI age

5 Jun 2026

The text explores the growing threat of zero-day exploits and vulnerabilities, emphasizing the need for advanced detection/response strategies, AI-driven automation in SOC tasks, collaborative AI systems for faster threat mitigation, and the evolving balance between AI capabilities and human oversight in security operations.

Open episode
Bayrob thumbnail

Darknet Diaries

Bayrob

2 Jun 2026

Sophisticated cybercriminals exploit legitimate tools like PowerShell to evade detection, as seen in the Bayrob malware's eBay fraud case, which required decrypting encrypted data, navigating geofencing, and dismantling a global botnet of 400,000 systems through international law enforcement collaboration.

Open episode

Showing 11-20 of 65