Decoded: The Cybersecurity Podcast

Decoded: The Cybersecurity Podcast presents an episode titled "Hacking the Airwaves," which analyzes the cybersecurity vulnerabilities within a complete telecom network architecture. The podcast episode, hosted by Edward Henriquez, systematically examines each layer of the network, from the radio access network to service delivery, through the lens of a malicious actor. It highlights potential att...

TLDR InfoSec reports on recent cybersecurity incidents, including a data breach at Hertz via a vendor and data theft from government contractor Conduent. The newsletter also covers vulnerabilities like browser history leaks in Chrome and security concerns related to GitHub Actions and AI agent protocols. Furthermore, it highlights the resurgence of state-backed hacktivism and inherent security fla...

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

Several cybersecurity reports from April 2025 detail a significant rise in ransomware attacks across various sectors globally, including education, legal, and critical infrastructure, with threat actors like INC, Rhysida, RansomHub, Lynx, and Storm-2460 actively exploiting vulnerabilities. These reports highlight specific incidents, such as data breaches affecting the State Bar of Texas, Port of S...

"Decoded: The Cybersecurity Podcast" features Edward Henriquez, a hacker, explaining QRL Jacking. This technique exploits QR code-based logins found in apps like WhatsApp Web by tricking users into scanning a malicious code. The attacker clones the login page, lures the victim, and upon scanning, gains immediate session access, bypassing passwords and multi-factor authentication. Henriquez outline...

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

This podcast script for "Decoded" features a cybersecurity expert, Thunderbolt, discussing the growing threat of API attacks and their potential to compromise digital infrastructure. The episode explains what APIs are, outlines common attack methods like Broken Object Level Authorization and Mass Assignment, and provides real-world examples of breaches affecting companies such as T-Mobile and Pelo...

This podcast script for "Decoded: The Cybersecurity Podcast" with host Edward Henriquez and ethical hacker Sentinel explains SQL Injection (SQLi), a prevalent web vulnerability. The discussion covers what SQLi is, detailing how malicious code can be inserted into input fields to manipulate database queries. The experts also explore attacker tools and step-by-step attack methodologies, alongside va...

This podcast episode of Decoded: The Cybersecurity Podcast, hosted by Edward Henriquez, examines the critical cybersecurity threats of secrets sprawl and automated identity attacks from a hacker's perspective. Henriquez explains how the unintentional scattering of sensitive credentials like API keys and passwords across various systems creates vulnerabilities easily exploited by malicious actors u...

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

Download full study questions for CISSP Domain 1-8 (200 questions) at: https://www.patreon.com/DecodedPodcast.

Several sources highlight significant cybersecurity concerns, including a CISA advisory on the evasive "fast flux" technique and active exploitation of a CrushFTP vulnerability. Additionally, a zero-day flaw in CentreStack is being actively exploited to breach enterprise file servers, prompting a CISA warning. The ransomware attack on Sensata Technologies further illustrates the ongoing threat to...

These sources collectively address the significant cybersecurity challenge of lateral movement, where attackers navigate compromised networks to reach valuable assets. TechTarget and CERT-EU offer technical insights into common techniques like Pass-the-Hash and Pass-the-Ticket, detailing detection methods within Windows environments using event logs. Bleeping Computer and Medium explain how these...

A podcast episode transcript titled "The Hackable Highway: Smart Cars and Cybersecurity" features host Edward and cybersecurity expert The Kernel discussing the vulnerabilities present in modern smart vehicles. The conversation explores how features like infotainment systems, Bluetooth, Wi-Fi, mobile apps, and over-the-air updates create potential entry points for cyberattacks. The Kernel outlines...

Edward Henriquez's podcast script for Decoded: The Cybersecurity Podcast explains the Path Traversal vulnerability from a hacker's perspective. This technique exploits weaknesses in web applications that allow users to specify file paths. By manipulating these paths with sequences like "../", attackers can navigate outside intended directories to access sensitive files such as configuration files,...

Multiple sources highlight the escalating and evolving cybersecurity landscape as of early April 2025. The WEF report emphasizes proactive OT security strategies for industrial organizations facing complex threats like geopolitical tensions and AI-driven attacks. Another article reveals a new AI-powered platform, Lovable, highly susceptible to "VibeScamming" for creating sophisticated phishing cam...

Patreon Support: https://www.patreon.com/DecodedPodcast

Recent reports highlight escalating cybersecurity concerns across various sectors. AI agents are identified as emerging targets for cyberattacks due to their increasing presence in organizational infrastructures. Critical infrastructure, such as water and power utilities, faces heightened threats from nation-state cyberattacks, leading to data corruption and public safety risks. Healthcare organiz...

Decoded: The Cybersecurity Podcast features Edward Henriquez, in character as a top hacker, exploring the often-overlooked realm of Non-Human Digital Identities (NHDIs) such as bots and API keys. The podcast highlights the security risks associated with the proliferation and poor management of these identities, explaining how attackers can exploit their weaknesses, often leading to significant bre...

This resource serves as a comprehensive study guide for the CISSP certification, a globally recognized credential in information security offered by (ISC)². It outlines the eight crucial domains covered in the CISSP Common Body of Knowledge (CBK), ranging from security and risk management to software development security. Each domain's key concepts and principles are listed, providing a structured...

These sources provide insights into the April 2025 software update landscape, primarily focusing on Microsoft products like Windows and Office. AskWoody advises caution with Office non-security updates due to unclear reliability, while Feedly highlights a critical vulnerability in Microsoft Edge. The Hacker News reports on a Google Android update addressing actively exploited flaws. A Reddit threa...