More Open Source Security episodes

The Art of Crisis Management with David Bernstein thumbnail

The Art of Crisis Management with David Bernstein

Published 2 Feb 2026

Duration: 35:32

Emergency management and business continuity planning are critical for organizations to proactively identify and prepare for potential disruptions.

Episode Description

Josh talks to David Bernstein about the world of crisis management and business continuity. David is a certified emergency manager and tell us about p...

Overview

The podcast focuses on the critical role of emergency management and business continuity planning in ensuring organizational resilience against both major and minor disruptions. It underscores the complexity of modern systems by using a hospital as an example, illustrating how a single technology failure can lead to widespread operational challenges. The discussion emphasizes the value of scenario-based planning, including creative examples like "zombie plans," to prepare for a range of potential crises.

The conversation highlights the importance of crisis management strategies, the need for emergency managers to coordinate diverse perspectives, and the role of tabletop exercises in identifying weaknesses in preparedness plans. It also addresses human factors, such as stress and communication, as key elements of effective incident response, stressing the importance of practicing proper procedures to prevent the reinforcement of poor habits. The content further explores the distinctions between departmental and organization-wide planning, the necessity of infrastructure readiness, and the risks of over-relying on technology without adequate backup systems.

Recent Episodes of Open Source Security

22 Jun 2026 Packagist and Composer security with Jordi Boggiano

Strategies for securing open-source ecosystems include malware detection via third-party feeds, transparency logs, rapid incident response, blocking malicious downloads, private registry controls, immutable package releases, standardized workflows, MFA enforcement, and technical proposals like artifact validation and build attestation, while addressing challenges like maintainer hacking, AI risks, usability trade-offs, and the need for ecosystem-wide alignment and human verification.

15 Jun 2026 Sustaining Open VSX with Mike and Thabang

Eclipse Foundation's OpenVSX, a VS Code extension repository, surged to 600M monthly downloads, evolved to a commercial model with enterprise SLAs and security teams, while addressing scalability, open-source balance, and funding challenges for AI expansion.

8 Jun 2026 Hacking your CI/CD with Francois Proulx

Critical vulnerabilities in open source CI/CD pipelines, including hijacking and supply chain attacks via social engineering or compromised builds, are highlighted through incidents like TJ Actions and Ultralytics, with mitigation strategies emphasizing secure credentials, externalized workflows, threat modeling, and tools like *Smoked Meat* and *Bagel* to enhance incident response and supply chain security.

1 Jun 2026 Open source verification with Sal Kimmich

Cybersecurity challenges include complex application ecosystems, overlooked kernel vulnerabilities, supply chain risks, and systemic risks from under-resourced organizations prioritizing surface-level controls, alongside calls for regulatory reforms, proactive threat modeling, secure development practices, and addressing tribal nations' unique legal and sovereignty concerns.

25 May 2026 Vulnerability disclosure with Casey Ellis

The evolution of vulnerability disclosure highlights challenges in prioritizing critical issues, outdated legal frameworks, and the role of initiatives like Disclosed.io in standardizing policies, alongside AI's impact on detection, open-source risks, triage complexities, and the need for collaboration and transparency to address systemic security barriers.

More Open Source Security episodes