CCT 352: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY
Send us Fan Mail Your security program can be airtight and still get wrecked by someone else’s breach. We open with a Wired-style reality check: third-party app ecosystems and data brokers collecting ...
25 Touko 40min
CCT351: BitLocker Bypass Reality Check (YellowKey) and CISSP Practice Questions
Send us Fan Mail BitLocker feels like a safety net until you see how a single bypass can change the whole risk picture. Today we react to the Yellow Key vulnerability (noted in the news and referenced...
21 Touko 24min
CCT 350: Investigation Types Made Simple - CISSP Training (Replay)
Send us Fan Mail Default passwords are the kind of problem everyone “knows” about and yet they still open doors for attackers every day. We start with a quick reality check on router security and why ...
18 Touko 44min
CCT 349: FOXCONN Hack and Domain 7 CISSP Practice Questions
Send us Fan Mail Eight terabytes of stolen schematics is not just a scary number, it is a reminder that cyber risk becomes business risk fast. We start with the Wired report on the Foxconn ransomware ...
14 Touko 28min
CCT Vendor 04: The Practical Realities of Geopolitical Cyber Risk - Next Peak Interview
Send us Fan Mail Next Peak: https://nextpeak.net/services/icr/ A regional conflict can spike your cyber risk even if your offices never move and your headcount never changes. That is the uncomfortab...
13 Touko 28min
CCT 348: ClaudeBleed - The Hidden Risk In AI Browser Extensions and CISSP Domain 3
Send us Fan Mail Your browser just became a security boundary you can’t afford to ignore. We start with ClaudeBleed, a vulnerability in the Claude AI Chrome extension that shows how an AI browser agen...
11 Touko 34min
CCT 347: AI Poisoning the Quiet Enterprise Threats and CISSP Questions (Domain 1)
Send us Fan Mail Quiet failures are the ones that scare me most, and enterprise AI creates a brand-new way for them to spread. If a chatbot becomes the “trusted employee” everyone relies on, a slow dr...
7 Touko 28min
CCT 346: Testing Disaster Recovery Plans and Why BEC Still Works Despite MFA (CISSP Domain 7)
Send us Fan Mail MFA feels like the finish line until you watch a company wire tens of millions of dollars to an attacker without a single password being stolen. We dig into why business email comprom...
4 Touko 26min
