CCT 370: CISSP Cryptography, FIPS Validation, and Post-Quantum (Domain 3)
Send us Fan Mail A compliance deadline can change your security posture without changing a single bit of your encryption. We start with a simple sticker-on-the-windshield analogy that maps directly to...
14 Sep 38min
CCT 369: Security Models Demystified - CISSP Domain 3.2 (Replay of CCT 278)
Send us Fan Mail 🔁 REPLAY — this episode originally aired as CCT 278 in September 2025. I'm heads-down finishing a Domain 3 cryptography episode, so I'm re-running one of the strongest episodes in t...
7 Sep 31min
CCT 368: CISSP Asset Security and Data Classification (Domain 2)
Send us Fan Mail Nine million images. No password. No encryption. And the defence was basically: “It wasn’t public because you had to know the URL.” That single line opens up one of the most important...
31 Aug 42min
CCT 367: Threat Modeling and the AI Agent That Breached Hugging Face (CISSP Domain 1.10)
Send us Fan Mail A rogue AI agent didn’t “hack the future” so much as exploit the oldest security problems in the book: weak boundaries, over-trusted inputs, exposed endpoints, and credentials lying a...
24 Aug 42min
CCT 366: Software Supply Chain Security Explained — CISSP Domain 8 (ChainDrop Case Study)
Send us Fan Mail A supply chain attack that leaves your Git history spotless should change how you think about “secure code.” We walk through ChainDrop, a worm discovered in the NPM ecosystem that poi...
17 Aug 33min
CCT 365: Malicious QR Code Attacks and Digital Forensics Techniques Every CISSP Should Know [REPLAY]
Send us Fan Mail One careless QR scan can quietly turn a “private” chat into a live wiretap. We start with a timely threat story: Russian APT-style actors abusing Signal’s linked device flow by pushin...
10 Aug 25min
CCT 364: Third Party Risk Management - How One Vendor Breach Exposed 119,000 Users
Send us Fan Mail A breach can hit your headlines even when your own systems never get touched, and that’s exactly why third-party risk management keeps showing up on the CISSP exam and in real inciden...
3 Aug 46min
CCT 363: CISSP AI Governance - What Credit Union Examiners Are Really Asking
Send us Fan Mail One bad AI decision can cost you more than money. It can cost you trust, trigger regulators overnight, and put your name on the hook when the board asks, “Who approved this?” We dig i...
27 Jul 44min
