Decoded: The Cybersecurity Podcast

Decoded: The Cybersecurity Podcast by Edward Henriquez features a segment called Cipher's Corner. In this segment, host Edward Henriquez adopts the persona of "Cipher," a legendary hacker, to explain fundamental cybersecurity concepts aligned with the GIAC Security Essentials. Cipher answers essential security questions in a roleplay format, providing insights on topics such as defense-in-depth, a...

25 fundamental questions essential for those preparing for the GIAC Security Essentials (GSEC) certification. The questions span crucial cybersecurity domains, directly aligning with the exam's key areas such as network security, access management, and incident handling. By addressing these topics, individuals can build a strong foundational understanding of core security principles and practices....

Decoded: The Cybersecurity Podcast by Edward Henriquez offers insightful discussions on current trends, expert interviews, and deep dives into topics like certification preparation and security best practices, making it a valuable resource for both aspiring and seasoned cybersecurity professionals. The primary source from NIST provides a comprehensive introduction to information security, detailin...

Fast flux, a technique used by cybercriminals to make their online infrastructure more resilient against takedowns by rapidly changing the IP addresses associated with their domain names. The texts detail how this method, often employing botnets, helps malicious actors evade detection and maintain uptime for activities like phishing, malware distribution, and command and control. Different variati...

This podcast script for "Decoded: The Cybersecurity Podcast" with Edward Henriquez explains Cloud Security Posture Management (CSPM). It defines CSPM as a set of tools and practices for continuous monitoring and management of cloud configurations to ensure security and compliance across platforms like AWS, Azure, and GCP. The episode highlights how misconfigurations are a primary cause of cloud br...

The provided texts collectively describe Secure Access Service Edge (SASE) as a modern, cloud-based network architecture integrating networking and security functions to provide secure and efficient access to applications and data for a distributed workforce. SASE aims to overcome the limitations of traditional network security by offering benefits like enhanced security, simplified management, im...

This podcast episode for Decoded: The Cybersecurity Podcast by Edward Henriquez provides a comprehensive overview of Data Loss Prevention (DLP). It defines DLP as a crucial cybersecurity strategy for preventing sensitive data from unauthorized access, misuse, or loss across various environments. The script explains why DLP is increasingly vital in today's landscape of hybrid work and cloud-based s...

Daily cybersecurity topics from April 2025, highlighting emerging threats and vulnerabilities affecting various sectors. CISA issues alerts and advisories on weaknesses in software like Ivanti and industrial control systems, alongside guidance on secure website practices. Help Net Security offers news and expert analysis on topics including WinRAR flaws, identity-first security, and AI-driven thre...

This podcast episode from "Decoded: The Cybersecurity Podcast by Edward Henriquez" explains credential stuffing, a cyberattack that uses lists of leaked usernames and passwords to automatically attempt logins on various services, exploiting password reuse. The host, Edward Henriquez, details the mechanics of these attacks, including readily available tools and the significant volume of recorded at...

Cryptojacking, a cyberattack, involves the unauthorized use of a victim's devices to mine cryptocurrency without their knowledge. Attackers employ methods like malicious websites injecting scripts, malware installation, and compromising cloud accounts to secretly utilize computing power. Detection involves monitoring for unusual CPU usage, high electricity consumption, and unfamiliar processes. Pr...

Edward Henriquez's "Decoded: The Cybersecurity Podcast" episode on Shadow IT uses a newscast format to explain this hidden use of unapproved technology within organizations. The podcast defines Shadow IT as hardware, software, or services adopted without IT oversight, highlighting the risks it poses through unmonitored data and security vulnerabilities. It explores the reasons behind Shadow IT, su...

This podcast excerpt explains stack spoofing, a technique where attackers manipulate the call stack to evade security measures and execute malicious code undetected. It details how this manipulation works, covering methods like return address spoofing, fake stack frames, and stack pivoting. The discussion highlights how attackers leverage these techniques for malware evasion, exploit development,...

A comprehensive overview of the cybersecurity landscape, encompassing breaking news on data breaches, vulnerabilities, and cyberattacks targeting various organizations and technologies. They provide expert analysis and insights into emerging threats, such as ransomware, phishing campaigns, and state-sponsored activities. Additionally, the sources feature tutorials and guides on security practices,...

These sources collectively examine the burgeoning role of AI agents in cybersecurity, defining them as autonomous systems with capabilities like adaptive learning and real-time decision-making. They explore various applications of these agents in areas such as threat detection, incident response, and security automation, highlighting their potential benefits like enhanced efficiency and proactive...

This podcast episode of "Decoded: The Cybersecurity Podcast" explains Command & Control (C2) servers, which are infrastructures used by attackers for remotely controlling compromised systems. The episode details how these servers function, covering methods for establishing communication, common C2 frameworks like Cobalt Strike and Metasploit, and their utilization in real-world attacks such as...

This podcast episode, "Decoded: The Cybersecurity Podcast," explains reverse shells, a method for attackers to gain remote control of a compromised computer. It details how these shells bypass firewalls by having the target initiate a connection back to the attacker's listener. The episode covers the anatomy of both the listener and the malicious payloads used to establish this connection, providi...

This podcast excerpt from "Decoded: The Cybersecurity Podcast" explains IP and MAC address spoofing, detailing what these network identifiers are and why altering them is crucial for online anonymity and security. It outlines various methods to change both IP addresses, such as using VPNs and proxies, and MAC addresses through operating system commands. The source further discusses detection techn...

This podcast transcript, "DLL Hijacking: Exploiting the Windows Dynamic Link Library System," explains how attackers manipulate the way Windows applications load Dynamic Link Libraries (DLLs) to execute malicious code. It details various techniques like search order hijacking and side-loading, providing real-world examples such as Stuxnet and the CCleaner attack. The episode also covers how attack...

Decoded: The Cybersecurity Podcast by Edward Henriquez introduces essential Unix commands for cybersecurity professionals. The episode outlines commands crucial for tasks such as system reconnaissance, user and process management, and file manipulation. It further covers networking and packet analysis, forensics and malware analysis, including log review and threat detection. Finally, the podcast...

This podcast episode explains how Kerberos, a secure authentication protocol, functions to verify users and grant access in untrusted networks. It details the core components of Kerberos, such as the Key Distribution Center, and outlines the step-by-step authentication process involving tickets. The episode further describes how Microsoft's Active Directory utilizes Kerberos to provide centralized...

Recent cybersecurity news highlights significant threats and vulnerabilities. A critical flaw in CrushFTP software is actively being exploited, leading to authentication bypass. State-sponsored cyber espionage, particularly by the group Salt Typhoon, is targeting US telecommunications and critical infrastructure. Simultaneously, new malware loaders employ sophisticated techniques like call stack s...

This podcast episode of "Decoded: The Cybersecurity Podcast" explores the transformative role of Artificial Intelligence (AI) and Machine Learning (ML) in modern cybersecurity. It explains how AI and ML are used for threat detection, automated responses, and proactive defense, detailing various applications like identifying phishing and analyzing malware. The discussion also addresses the emerging...

Edward Henriquez's cybersecurity podcast episode explores the Dark Web, a hidden part of the internet requiring special access. It outlines the Dark Web's structure, contrasting it with the surface and deep web, and explains how its anonymous nature facilitates a vast cybercrime economy. This illegal marketplace involves trading stolen data, malware, hacking services, and illicit goods, often usin...

This podcast excerpt, titled "Setup and Analysis of a Packet Capture (PCAP)," introduces packet capture as a crucial cybersecurity technique for examining network traffic. It explains what PCAP is, detailing its uses in troubleshooting, threat detection, and incident response. The episode guides listeners through the process of setting up packet captures using tools like Wireshark and tcpdump, inc...

This cybersecurity podcast episode explains network exfiltration, the process where attackers steal data from compromised systems. It details common targets like PII and intellectual property, along with various methods used to extract data, including HTTP/S uploads, DNS tunneling, and cloud storage abuse. The episode also covers techniques for detecting and preventing exfiltration, such as SIEM m...