InfoSec Bites

"Phishing: The Art of Digital Deception," Podcast offers a comprehensive overview of phishing attacks , explaining this prevalent form of cybercrime where malicious actors trick individuals into revealing sensitive information. It details numerous types of phishing , from the classic email phishing and personalized spear phishing to voice-based vishing and text-based smishing, illustrating how the...

The podcast dicusses comprehensive overview of Google Chrome's architecture, security mechanisms, and vulnerabilities . It highlights Chrome's multi-process design , which isolates components like the browser, renderer, and GPU processes to enhance stability, fault tolerance, and security through sandboxing . It also explains key technical components such as the Blink rendering engine and the V8 J...

In this podcast we discuss comprehensive overview of the quantum internet , describing it as a transformative evolution of global communication that will operate as a hybrid classical-quantum network . It explains that this next-generation infrastructure harnesses quantum mechanics principles like superposition and entanglement through qubits to enable unprecedented security and efficiency . The d...

Lets explores the challenges and opportunities presented by quantum computing , particularly focusing on the urgent need for Post-Quantum Cryptography (PQC) . We details how distributed quantum computing (DQC) is overcoming hardware limitations to create powerful quantum machines, which in turn pose an existential threat to current encryption methods. The report highlights the "Harvest Now, Decryp...

In this Podcast we introduce and explain homomorphic encryption (HE) , a groundbreaking cryptographic method that permits computations directly on encrypted data without prior decryption. We highlight how HE addresses critical security gaps in "data-in-use," where traditional encryption methods fall short. It categorizes HE into partially, somewhat, and fully homomorphic schemes , with fully homom...

In this Podcast we discuss, "Exploiting SSL/TLS Vulnerabilities in Modern Technologies" by Simreen Kaur Matharu, comprehensively examines cryptography fundamentals, the evolution of SSL/TLS protocols, and a timeline of significant security attacks against these protocols. It details various attack methods, such as BEAST, CRIME, Lucky13, Heartbleed, POODLE, FREAK, and ZOMBIE POODLE, explaining thei...

This podcast collectively provides a comprehensive overview of email forensics , defining it as a specialized discipline within digital forensics crucial for investigating cybercrimes and legal disputes. It explains that email forensics systematically recovers and analyzes email data to determine authenticity, origin, and content, emphasizing that this goes beyond mere message review. It details a...

This podcast comprehensively explains the critical differences between data breaches and data spills , highlighting how both expose sensitive information . It clarifies that data breaches typically involve unauthorized, often malicious, access to data, while data spills are the result of accidental exposure due to errors or misconfigurations. It details the significance of Personally Identifiable...

In this podcast, discussing Zero Trust , a cybersecurity framework that operates on the principle of "never trust, always verify." It highlights how this model assumes all users and devices are potential threats until their legitimacy is continuously validated, moving away from older perimeter-based security. The discussion outlines key principles such as least privilege access, continuous monitor...

This podcast offers an extensive and often humorous exploration of the CIA Triad , a foundational concept in information security comprising Confidentiality, Integrity, and Availability . It explains each principle in detail, using sarcastic and satirical examples to illustrate common security failures and their consequences. The podcast outlines various tools and strategies for upholding each asp...

This podcast explains the three core pillars of digital security: Authentication, Authorisation, and Accounting (AAA) . Authentication involves verifying a user's identity through methods like passwords, physical tokens, or biometrics, with a focus on the increased security of multi-factor authentication. Following this, Authorisation determines a user's permissions and access levels to specific r...

In this podcast we offer a comprehensive overview of the Trusted Platform Module (TPM) , a specialised hardware chip crucial for modern computer security. We explain what a TPM is , detailing its internal components like cryptographic engines, unique keys, and Platform Configuration Registers (PCRs), which enable secure operations. It also describe how TPMs function , from generating and storing k...

This podcast collectively offers a comprehensive overview of quantum computing , explaining its fundamental principles and future implications. They clarify how quantum bits (qubits) , utilising superposition and entanglement , enable quantum computers to tackle problems beyond the reach of traditional machines, such as drug discovery and optimisation . We also highlight the dual nature of quantum...

In this podcast we discuss the "Harvest Now, Decrypt Later" (HNDL) threat, a critical and immediate cyber security risk where adversaries, primarily nation-states and sophisticated cybercrime groups, are actively stockpiling encrypted data today, anticipating future decryption by quantum computers . This data, particularly long-lived sensitive information like medical records, intellectual propert...

This podcast about " Risk and Information Systems Control ," provides a comprehensive overview of risk management and information system controls, primarily designed as a study aid. It explores key concepts such as identifying threats and vulnerabilities, developing risk scenarios, and understanding information security goals like confidentiality, integrity, and availability. The guide details var...

In this guide we examine Broken Access Control , identified by OWASP as the number one security risk in 2021 , due to its widespread occurrence and severe impact. It details how applications fail to adequately restrict user actions or access , enabling attackers to view private data or perform unauthorised tasks. It explains various types of access control (such as Role-Based Access Control) and c...

In this podcast we outline four major cybersecurity incidents from 2025 , highlighting the diverse and evolving threat landscape . It details attacks ranging from sophisticated social engineering campaigns like the attempted infiltration of SentinelOne by PurpleHaze, to large-scale ransomware breaches such as the Coinbase password leak. We also discuss critical software vulnerabilities exemplified...

In this podcast we provide a comprehensive overview of AWS WAF , a web application firewall that helps protect web applications from common web exploits. It explains how to set up and configure WAF accounts , including user creation and tool downloads, and details the creation and management of protection packs, web ACLs, and rules , including different rule actions like allow, block, count, CAPTC...

In this podcast we collectively outline the Australian Signals Directorate's (ASD) Essential Eight cybersecurity mitigation strategies , designed to protect organisations from various cyber threats. The Essential Eight maturity model details four levels, from zero to three, indicating increasing sophistication in mitigating cyber attacks and targeting. The Essential Eight assessment process guide...

In this episode we are discussing a fundamental shift in cybersecurity from "How the Browser Became the Main Cyber Battleground", where attackers increasingly target web browsers rather than traditional local network endpoints. This change is driven by the "SaaS-ification" of enterprise IT , meaning core business systems are now accessed online via browsers, making user identities and their associ...

In this podcast lets discuss the intersection of quantum computing and artificial intelligence , exploring their individual capabilities and combined impact, particularly on cybersecurity and data protection . This podcast highlights the fundamental differences between classical and quantum AI , with quantum systems utilising qubits for parallel processing, offering significant speed advantages fo...

This podcast collectively explore the profound impact of quantum computing on information security , examining both threats and solutions. They consistently highlight Shor's and Grover's algorithms as significant dangers to current public-key and symmetric cryptography , respectively. We also universally present Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) as crucial...

The OWASP Top 10 (2021) Comprehensive Guide provides a detailed overview of the ten most critical web application security risks , identifying prevalent and impactful vulnerabilities. It outlines various categories such as Broken Access Control, Cryptographic Failures, and Injection , explaining their technical details, common attack scenarios, and real-world case studies. The guide offers practic...

This podcast present two distinct perspectives on success and security. The first source, an Information Security Manual (ISM) , outlines a comprehensive cybersecurity framework for organisations, detailing guidelines and principles across five key functions: govern, identify, protect, detect, and respond . It emphasizes risk management , the importance of evaluated products , secure IT equipment...

This Podcast offers a comprehensive overview of the MITRE ATT&CK framework , a standardised model for understanding cyber adversary behaviours. It details four distinct matrices : Enterprise, Mobile, Industrial Control Systems (ICS), and Cloud, each tailored to specific technological environments. For each matrix, the document explains various tactics —the objectives of an attack—and their ass...