Breakpoint Security Podcast

Effective Paper Submission for Beginners Part 02 You've seen the good researchers on stage at the best conferences or your favorite local security conference, dropping knowledge bombs and getting that well-deserved applause. Ever wondered how they got there? It all starts with a killer paper submission! In this second episode, part of our "CFP series", I'll share some fun facts...

Imagine an AI agent managing your life. Sounds cool, right? But what if it gets hacked? We're exploring the future of AI agents and the critical need for their security. In this video from  this fun series, we ask our guests to share 'What they would like their Agents to do for them' :) Guest: Devesh Bhatt Cyber Security Leader | Co-Founder BSides Goa Agents have the potential for h...

Imagine an AI agent managing your life. Sounds cool, right? But what if it gets hacked? We're exploring the future of AI agents and the critical need for their security. As the first installment, we share this fun series where we ask our guests to share 'What they would like their Agents to do for them' :) Guest: Anant Shrivastava Founder & Chief Researcher | Cyfinoid Research P...

Effective Paper Submission for Beginners Part 01 Note : There will be tons of illustrations in this series. Checkout the Breakpoint YouTube Episode to access all that. You've seen the good researchers on stage at the best conferences or your favorite local security conference, dropping knowledge bombs and getting that well-deserved applause. Ever wondered how they got there? It all starts wit...

What an incredible season it’s been on the Breakpoint Security Podcast! From decoding API security with Bucchi Reddy to diving into SOC (un)automation with Dr. Anton Chuvakin, this season was packed with insights, stories, and actionable advice from some of the brightest minds in cybersecurity. This video shares some interesting highlights from the Season. Which was your favourite episode of the s...

In this episode of the Breakpoint Security Podcast , we dive into the evolving world of Security Operations Centers (SOC) with Dr. Anton Chuvakin, Security Advisor at the Office of the CISO, Google Cloud. Key discussion points include: Event Correlation : Exploring the automation of correlating security events in real-time and at scale. When should we rely on automation, and where does human exper...

When even a seasoned security professional thinks about cryptography, the obvious areas are encryption at rest and in transit. But modern cryptography has penetrated our lives - in the areas we don’t even think about.  It works its magic in  IoT devices, in the cloud, while we shop, and even in the car we drive! Guest: Sandip Dholakia, Principal Security architect and co-chair of Cryptography CoE...

Guest: Prashant Mahajan, Director for Payatu Australia Pty Ltd and OzHack The Cybersecurity landscape is driven by the increasing complexity and integration of systems. One major challenge is the proliferation of interconnected devices and platforms, which expand the attack surface and create numerous entry points for malicious actors. Additionally, the rapid adoption of cloud services and virtual...

A "notorious hacker" by FOX25 Boston, "World Class Hacker" by National Geographic Breakthrough Series and described as a "paunchy hacker" by Rolling Stone Magazine. He however prefers if people refer to him simply as a Hacker, Helper & Human. This is none other than our Guest- Jayson E. Street, Chief Adversarial Officer at Secure Yeti. In today's highly digit...

In this episode, we're diving deep into "Gamification for Hacking Humans" with Jayson E. Street, Chief Adversarial Officer at Secure Yeti.  We discuss how attackers are exploiting human psychology through techniques like #phishing and pretexting and how #AI is making #socialengineering attacks even more sophisticated. With the rise of remote work, these #threats are more real than e...

Interested in Cyber Reporting? Check out this episode where we discuss - Interpreting Security Metrics to understand real business Risk. Guest : Runa Desai Dalal, Cyber Risk Leader at Accenture Cyber Strategy| CISO Dashboard| Cyber KPI| Cyber Analytics| Business Continuity |Enterprise Risk|Mentor| Coach| Guide| Understanding security data within an organization involves synthesizing data from vari...

TOPIC: Mastering Application Threat Modeling at Scale Guest: Tony UV, CEO & Founder of VerSprite Security, and the Author of Risk Centric Threat Modeling & PASTA Methodology We dive deep into everything from effective threat modeling techniques for Agile and waterfall applications to scaling threat modeling across large application ecosystems. Tony shares his insights on automating this cr...

In this episode, we delve into the intricate world of AI security, tackling the dual challenge of safeguarding artificial intelligence systems and utilizing AI to enhance cybersecurity. Guest: Tamaghna Basu, Founder & CEO, DeTaSECURE Join us as we unravel the complexities of AI security and provide valuable insights that can help you stay ahead in the ever-evolving cybersecurity landscape. Whe...

Learn to DevOpsify your Threat Detection Development! Guest: Wasim Halani, Director - Detection Engineering at Securonix SOC teams face a continuous challenge of evolving threats and a difficulty in developing #analytics to detect such #threats. Recent times have seen the Detection Engineering function evolve along the lines of Software Engineering - which means the Agile and DevOps methodologies...

Checkout AI for your DevOps pipelines! Guest: Shashank Pramod Dixit, Principal Consultant, Sumeru Solutions CISO advisory, Product Management, Security leadership, Product Security. There exist many common challenges today for SMBs doing DevSecOps. Organizations are confused among the tools, there are so many options which ones shall we choose. There are so many false positives, and unnecessary no...

What does Proactive API Security Testing encompass and what all you need to enhance your API Security Posture? We discuss all this with our expert guest Buchi Reddy. Guest: Buchi Reddy B, Founder & CEO of Levo.ai Proactive API security testing refers to an approach where security testing activities are conducted preemptively to identify and address potential security vulnerabilities in APIs be...

The proliferation of digital identities and access points has increased the attack surface, making it difficult to monitor and secure user identities effectively. The rising sophistication of cyber threats, including identity theft and credential-based attacks, demands proactive measures to detect and respond to these threats promptly. Additionally, compliance requirements and data protection regu...

Just like cloud is omnipresent in 2023, SaaS sprawl is just as prevalent. A company on an average uses 110 SaaS apps and broadly 70% of the software that is being run is SaaS with issues even more severe  at enterprise level.  SaaS security today is thought of as an IAM problem solved with an SSO integration but issues go beyond that, with misconfigurations leading to leaked data, insecure SaaS pl...

In today's world of rapidly evolving technology and the increasing complexity of software systems, ensuring the security and compliance of applications across the stack has become paramount. The stack has also gotten to be much more complex with the proliferation of APIs on cloud and cloud-native technologies. Tightly coupled security controls for things like Authorization, Validation and Adm...

From Chaos to Compliance: Navigating the ISMS Implementation Maze In this episode, we will be talking about the challenges an organization faces when doing an ISMS implementation. We will talk about this in the context of ISO 27001 implementation and see the practical nuances it entails. Guest: Sripati MS, Assistant Vice President, Risk, Utkarsh Small Finance Bank He is an information security ris...

MITRE ATT&CK has been the go-to framework for both offensive & defensive security teams. It’s sophistication and vast coverage makes it quite comprehensive, often not easy to fathom, let alone implement to the fullest. In this episode of br3akp0int, we demystify this through practical scenarios & Shweta’s experience of implementing it in day-to-day activities of Cyber Defenders.  Guest...

From Zero to One: Bootstrapping Security for your Organization With the rise in the number of digital start ups, many of us in security and engineering find ourselves in a place where we are the first of the lot. We need to not just define, but start and secure our organization and assets from the ever growing set of breaches & attacks.  This episode is dedicated to starting security from scra...

The world is getting smarter and the number of IoT devices is growing by the day. Securing such environments presents unique challenges due to the diverse nature of these devices and the complexity of their interactions. Guest: Aseem Jakhar  Co-Founder & Dir. Research at Payatu Linkedin: @aseemjakhar X: @aseemjakhar Aseem Jakhar is a Cybersecurity Entrepreneur and Technologist with two decades...

TOPIC : DevSecOps for teams building on Steroids  Developers have already adopted public cloud in all tech enabled companies and industry verticals. Security teams are mostly for after the fact testing, signaling that compliance is in place or even as a sales aid when selling to large enterprises.  If Continuous Delivery is the goal (as that gets the business money) then the integration and deploy...

TOPIC :   Sprinting Securely: Pentesting Keeping Pace with Agile Development Building Actionable Security Champion Programs & Pentest catching up with speed of agile Podcast Guest: Sanoop Thomas (@s4n7h0) Sanoop Thomas (@s4n7h0) is a seasoned security professional with a diverse background in consulting, teaching, research and product-based industries with a passion to solve complex security p...