Take 1 Security Podcast: Episode 2

Take 1 Security Podcast: Episode 2



START CONTENT


* UK police arrest 18-year-old in connection to Playstation and XBox attack
* Major ASUS router bug


* Local users can take full control without a password
* Biggest issue there seems to be DNS hijacking

* Legislative attacks on infosec profession and encryption


* Anti-hacking law language ambiguous “according to owner”
* Obama is said to agree with Cameron, but it’s complicated
* Evidence of a plot is different than outlawing encryption
* There’s other talk about it being illegal to see hack data

* French reporting 19,000 DoS attacks since the shootings
* Anonymous is going after ISIS and others


* An attack on free speech is an attack on Anonymous

* Google releases another Windows flaw that they didn’t fix
* Verizon API vulnerability exposes customer email addresses


* Issue was with a mobile API used by Android devices
* Allowed him to retrieve peoples’ emails and send emails as them

* On whether we should trust the FBI regarding the Sony attack


* We now find out the attribution came from a previous NSA hack
* It’s hard to criticize without data
* This doesn’t mean they did it, or that the FBI is always right, or that they should always be trusted
* It means be cautious when you don’t have any information, and the person you’re criticizing has all of it

* Free speech and the Paris attacks


* Where is the line for free speech?
* I think it comes down to safety and taste
* You can’t yell fire, and art matters

* Quote of the week


* No one is as happy as they seem on Facebook, as depressed as they seem on Twitter, or as employed as they seem on LinkedIn.


END CONTENT


Play Podcast

Notes


* I have a consolidated InfoSec news feed (here) that I use as a source for headlines.

Become a Member: https://danielmiessler.com/upgrade

See omnystudio.com/listener for privacy information.

Episoder(532)

A Conversation with Christine Gadsby from BlackBerry

A Conversation with Christine Gadsby from BlackBerry

In this conversation, I speak with Christine Gadsby, Head of Product Security Operations Team at BlackBerry. We talk about: The Role of AI in Cybersecurity:  AI's real advancements, practical applications, and associated challenges, moving beyond the hype.  Enhancing Incident Response and Threat Hunting Christine highlights AI's significant impact on enhancing incident response and threat hunting, how AI quickly analyzes vast data to identify Indicators of Compromise (IoCs), automates routine tasks, and improves decision-making with actionable insights.  The Evolution of Blackberry in Cybersecurity Christine discusses Blackberry's shift from mobile devices to cybersecurity, emphasizing their focus on highly regulated environment and how the acquisition of Silence brought advanced AI capabilities, enhancing their security solutions.  Among other topics.  Intro (00:00:00)AI in Cybersecurity: Hype or Reality? (00:00:06)Incident Response and Threat Hunting (00:01:12)Automation in Security Programs (00:02:08)Industry-Specific AI Needs (00:03:20)AI's Role in Regulated Environments (00:04:23)Blackberry's AI Integration (00:04:50)Perceptions of Blackberry's Evolution (00:06:51)Trust in Vendor Relationships (00:09:11)AI's Potential in Monitoring (00:11:12)Challenges of Staffing in Cybersecurity (00:13:18)Staff Turnover in Cybersecurity (00:13:54)Burnout and Job Satisfaction (00:14:18)Hiring Challenges in Security (00:15:17)Confusion in Cyber Job Market (00:16:10)Job Changes Among Cyber Leaders (00:17:10)Outsourcing Security Functions (00:18:09)Pressure from Boards (00:18:57)Evolving Security Needs (00:19:40)Human Element in Cybersecurity (00:20:46)Talent Pipeline Issues (00:21:40)Challenges of Smaller Companies (00:22:32)Job Satisfaction and Workload (00:24:03)Pressure Cooker Environment (00:24:43)Crypto Attacks Resurgence (00:26:16)Crypto Mining Discussion (00:26:33)APT 32 Insights (00:27:22)Employee Training Importance (00:28:41)Indicators of Crypto Mining (00:29:45)Detection Challenges (00:30:30)Normal System Behavior (00:32:13)Looking Ahead to 2025 (00:32:44)*Supply Chain Pressures (00:35:08)Arms Race in Security (00:35:27)Liability Hot Potato (00:36:27)Managed Services Growth (00:36:44)Cyber Insurance Trends (00:37:52)CISO Evolution (00:39:10)The Importance of Trust in Supply Chain (00:39:56)Predictions for Cybersecurity Roles (00:40:46)Following Blackberry's Work (00:41:00)Networking and Future Conversations (00:41:05)Conclusion (00:41:37)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

5 Aug 202441min

UL NO. 442: Crowdstrike Analysis, Cannabis=Soma?, NK Github SE, AI Weaponry

UL NO. 442: Crowdstrike Analysis, Cannabis=Soma?, NK Github SE, AI Weaponry

Chinese Solar Builds, DOJ Domain Seizures, Scattered Spider Arrest, Kaiser AI, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Discussed in this episode:Intro (00:00:00)CrowdStrike Incident Discussion (00:01:49)Threat Actor and Social Engineering (00:03:49)AI Weapons for Ukraine (00:04:56)China's Energy Expansion (00:06:09)Foreign Influence and Disinformation (00:07:30)AI Race and China's Restrictions (00:08:33)Healthcare Innovations with AI (00:10:20)Nvidia's Potential Losses (00:11:19)Google's URL Shortening Service Shutdown (00:14:36)Tech Startup Challenges (00:14:36)Meta Analysis on Toothbrushing (00:16:43)Young Adulthood and Happiness Crisis (00:17:53)AI's Impact on Employment (00:19:08)The Impact of UBI on Ambition (00:20:11)The Nature of Ambition (00:21:18)Cultural Influence on Drive (00:23:14)Addressing Societal Issues (00:24:16)Mental Models for Success (00:24:16)Cannabis and Mediocrity (00:25:25)Conspiracy Culture Commentary (00:26:28)AI in Security (00:27:39)Silicon Valley Political Movements (00:27:39)Discovery Dilemma Tool (00:28:52)Emergency Preparedness (00:28:52)Constructive Political Conversations (00:29:48)Finding Common Ground (00:30:49)Wisdom in Silence (00:31:43)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

24 Jul 202432min

UL NO. 441: Substrate, OpenAIs AGI Levels, US Literacy Rates

UL NO. 441: Substrate, OpenAIs AGI Levels, US Literacy Rates

HackerCamp Approaches, Introducing Substrate, Kaspersky--, Exim/Gitlab Vulns, Personal/Business Branding, and more… ➡ Check out the Autonomous IT Podcast:https://community.automox.com/autonomous-it-podcasts-144 Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one! Discussed on this episode: Intro (00:00:00)AGI Definitions (00:01:29)Pinnacle Human Employees (00:02:36)Transition to ASI (00:03:18)Dynamic Content Summaries (00:03:48)Deepfakes in Education (00:04:43)AI and Disinformation (00:09:04)Manipulation and Inequality (00:11:01)Internet Trust and Content Verification (00:11:01)Concerns Over AI's Impact on Society (00:12:09)OpenAI's AGI Levels (00:13:08)AI Startups and Future Predictions (00:15:24)Technological Innovations (00:16:24)Literacy Crisis in the U.S. (00:17:29)Public Reaction to Health Risks (00:18:35)Search for Extraterrestrial Life (00:19:19)Exoplanets and the Drake Equation (00:19:37)VCs in Medical Practices (00:19:57)Conspiracies and Failures (00:20:48)Therapy and Rumination (00:20:57)Discovery Fluff on Lambda (00:21:12)Securing Workflows with GitHub Actions (00:21:22)Employee Disposability (00:21:32)Correlation of Smoking and Lung Cancer (00:21:48)AI in Satellite Imagery (00:22:04)Git Commits Insights (00:22:49)Check on Friends (00:23:12)Judgment as a Key Skill (00:23:22)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

21 Jul 202424min

UL NO. 440: RAID (Real World AI Definitions)

UL NO. 440: RAID (Real World AI Definitions)

Twillio API Dump, North Korea Russia, Funny AI Memes, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!   Discussed on this episode: Intro (00:00:01)Rebranding of Al Qaeda (00:01:06)Reading Alex Ramos's Business Books (00:01:14)Supporting a Struggling Army Veteran (00:01:54)In-person Sessions with Entrepreneurs (00:02:36)Real World AI Definitions Resource (00:03:00)Defining AI (00:04:08)Machine Learning Definition (00:06:15)Prompt Engineering (00:08:18)Retrieval Augmented Generation (00:09:22)AI Agent Definition (00:10:20)Chain of Thought (00:11:30)Prompt Injection vs. Jailbreaking (00:12:23)Artificial General Intelligence (00:13:24)Sample Efficient AI (00:14:26)Levels of AGI (00:15:25)Artificial Super Intelligence (00:17:21)The Levels of AI (00:19:40)Real World AI Definitions (00:21:49)Cloudflare's New Tool (00:23:51)Emerging AI Capabilities (00:26:00)Technology and Business Updates (00:27:54)Impact of AI on Society (00:32:12)Ground News Recommendation (00:34:29)Aphorism of the Week (00:34:29)Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

11 Jul 202435min

UL NO. 439: Humans vs. AI in Prediction Markets

UL NO. 439: Humans vs. AI in Prediction Markets

Project Metaculus, SSH and Juniper 0-Day, China v. Taiwan, R1 Leaks, and more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one! Discussed in this episode: Updates on Courses and Fabric Introduction (00:00:43)Cracking Trump's Popularity and Security Vulnerabilities (00:01:48)Snowflake Data Breach and AI Security Concerns (00:02:42)APT29 Breach and Consulting Firms' Embrace of AI (00:04:58)AI Forecasting and Chinese Models' Performance (00:06:04)Impact of AI on Vulnerability Research and Automation (00:11:25)New Features in AI Frameworks and Podcast Recommendations (00:14:26)Reflections on Waymo Experience and Epictetus' Aphorism (00:15:26)  Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

4 Jul 202418min

UL NO. 438: Confusion is a Muse

UL NO. 438: Confusion is a Muse

Sonnet 3.5 Support in Fabric, CISA AI Tabletop exercise, Kaspersky ban, China Invasion Scenario, Langchain disilussionment, more… ➡ Check out Vanta and get $1000 off:vanta.com/unsupervised Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!   Discussed on this episode: Introduction (00:00:00) Augmented V2 Registration (00:01:37) Fabric Update and Sonnet 35 (00:01:56) Personal Development and Authenticity (00:03:17) Failures and Authentic Pursuits (00:04:32) Chasing Personal Goals (00:05:30) Articulating and Emoting (00:07:35) Security Updates (00:08:33) Tech Industry Developments (00:09:44) Results as a Service (00:13:11) Intelligence as a Service (00:14:21) Structured Output from LMMS (00:16:38) Innovative Projects (00:17:42) Kludgy first generation AI frameworks (00:18:47) Building a dependable AI stack (00:20:06) Results as a service and trust in AI (00:21:34) Solar energy vs. nuclear power (00:22:36) Smartphone-free schools and societal impact (00:25:02) Sun exposure and its health effects (00:26:04) Intelligence collection and analysis (00:29:26) Future of AI and automation (00:31:32) Tech tools and discoveries (00:33:33) Stoicism and gratitude (00:34:53)    Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

27 Jun 202436min

UL NO. 437: My List of Hard-won Life Lessons

UL NO. 437: My List of Hard-won Life Lessons

New AUGMENTED Course Date, 3 New Essays, Disgruntled deletions, Scale and Merit, Russia moves to Yuan, and more… ➡ Check out the Autonomous IT Podcast:https://community.automox.com/autonomous-it-podcasts-144 Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

21 Jun 202427min

UL NO. 436: Thoughts on the Future of AI & Societal Stability

UL NO. 436: Thoughts on the Future of AI & Societal Stability

When SuperIntelligence? Apple's WWDC updates, new Fabric pattern, GPT-4 Hacking Paper, China/Russia Using OpenAI for Misinformation, and more… ➡ Check out Kolide:kolide.com/unsupervisedlearning Subscribe to the newsletter at: https://danielmiessler.com/subscribe Join the UL community at:https://danielmiessler.com/upgrade Follow on X:https://twitter.com/danielmiessler Follow on LinkedIn:https://www.linkedin.com/in/danielmiessler See you in the next one!Become a Member: https://danielmiessler.com/upgradeSee omnystudio.com/listener for privacy information.

14 Jun 202453min

Populært innen Teknologi

romkapsel
rss-avskiltet
teknisk-sett
tomprat-med-gunnar-tjomlid
energi-og-klima
shifter
rss-impressions-2
nasjonal-sikkerhetsmyndighet-nsm
elektropodden
smart-forklart
rss-alt-som-gar-pa-strom
rss-snakk-om-sikkerhet
i-loopen
kunstig-intelligens-med-morten-goodwin
rss-bouvet-bobler
teknologi-og-mennesker
pedagogisk-intelligens
rss-digitaliseringspadden
rss-alt-vi-kan
rss-heis