SEC.co Podcast

Source code is arguably a technology company's most valuable digital asset, yet it's routinely the least-defended. This episode of Cybersecurity explores why Git repositories have become a prime target for data loss — and what engineering and security teams need to do, together, to close the gap. The discussion is grounded in the full DLP for code repositories deep-dive published by SEC, and cover...

Picking the wrong marketing agency costs more than money in cybersecurity — it costs pipeline. This episode of Cybersecurity digs into why the industry's unique buyer psychology demands specialist marketing partners, profiles ten agencies earning spots on 2026 shortlists, and offers a clear framework for vetting whoever you hire. The full analysis behind this episode is drawn from SEC's cybersecur...

Command-and-control communication is what keeps an attacker operational after the initial breach — and it's increasingly invisible to traditional defenses. This episode of Cybersecurity examines how modern threat actors disguise their C2 traffic to survive inside enterprise networks, drawing on this in-depth breakdown of C2 obfuscation tactics and defenses . Understanding these techniques isn't ju...

Security teams pour resources into defending the well-known attack paths — phishing, unpatched perimeter devices, weak RDP credentials — but adversaries are increasingly slipping through the gaps that never made it onto the risk register. This episode of Cybersecurity breaks down six underappreciated initial access vectors drawn from this practical breakdown of ignored access vectors , explaining...

Stealthy data theft doesn't always look like a breach — sometimes it looks like nothing at all. Low-and-slow exfiltration is designed to mimic normal traffic, drip-feeding stolen data out of an environment in fragments too small to trigger conventional alarms. This episode of Cybersecurity draws on this six-minute deep-dive on detecting data exfiltration without false positives to walk defenders t...

A CI pipeline turns green. Deployment looks clean. No alerts fire. And yet a malicious package has already harvested credentials, phoned home to an attacker's server, and slipped a backdoor into production — all before anyone noticed. This episode of Cybersecurity puts dependency confusion back on the active threat list, drawing on this eight-minute deep-dive on the dependency confusion time bomb...

It doesn't announce itself. It doesn't trip alarms. DLL hijacking weaponizes the way Windows was designed to work, letting attackers execute malicious code inside trusted, signed processes while endpoint tools watch quietly and see nothing wrong. This episode of Cybersecurity examines why this decades-old technique remains one of the most reliable tools in an attacker's kit — and what defenders ne...

A bank employee in Hong Kong once authorized a $35 million wire transfer after joining a video call with what looked and sounded exactly like his CFO. Every face was familiar. Every voice matched. None of it was real. This episode of Cybersecurity examines how deepfake technology has become a frontline weapon in the attacker's toolkit — and what defenders need to do about it now. The discussion dr...

Encryption was supposed to make the internet safer — and it did. But it also handed threat actors a near-perfect hiding place. This episode of Cybersecurity takes a hard look at what it actually means to defend a network where nine out of ten packets are wrapped in cryptography your traditional tools can't read, and lays out the architectural trade-offs defenders must confront. The discussion draw...

Two terms. One persistent source of confusion. Cybersecurity audits and cybersecurity assessments show up side by side in vendor proposals and boardroom conversations all the time — and they are not the same thing. This episode of Cybersecurity unpacks the structural differences between these two distinct exercises, drawing on this in-depth guide to audits versus assessments to help listeners make...

Vulnerability management runs on a single number — and that number is lying to you. CVSS scores are embedded in scanner reports, regulatory frameworks, and executive dashboards worldwide, yet most defenders who work with real production environments eventually reach the same conclusion: the system, used in isolation, is a poor guide for prioritizing actual risk. This episode draws on this seven-mi...

Every cryptographic algorithm has an expiration date, and the gap between "trusted standard" and "actively exploited weakness" is shrinking. This episode of Cybersecurity examines the algorithm lifecycle crisis — the accelerating convergence of advances in cryptanalysis, cloud-scale computing, and the approaching reality of quantum computers — and makes the case that the window for proactive actio...

API tokens are the invisible connective tissue of the modern SaaS stack — and they accumulate far faster than security teams can track them. This episode tackles cross-SaaS token sprawl head-on, drawing on this in-depth eight-minute read on discovering, rotating, and revoking API tokens to walk through a full governance lifecycle that actually holds up at scale. Whether you're running a lean secur...

Credential stuffing is no longer the noisy, easily-blocked brute-force attack it once was. In this episode of Cybersecurity , the hosts draw on this six-minute deep dive into evolving credential stuffing defenses to map exactly how attackers have refined their tradecraft — and why organizations that haven't updated their mental model of this threat are already behind. From underground combo-list e...

Scheduled tasks are one of the most overlooked real estate in any enterprise environment — and that obscurity is precisely what makes them attractive to attackers. This episode of Cybersecurity examines how threat actors abuse task schedulers to plant persistent footholds that survive reboots, password resets, and even closed incident tickets, all while blending in with the everyday automation eve...

When every firewall rule shows green and no alerts are firing, an attacker could still be quietly draining your network — one DNS query at a time. This episode of Cybersecurity examines covert channels: the technique of weaponizing trusted, everyday protocols to smuggle data and commands past security controls that were never designed to look twice at them. Drawing on this deep-dive on covert chan...

Container adoption has outpaced container security at organizations of every size. Kubernetes and Docker power modern software delivery, but their default configurations were built for ease of use — not for defense. This episode of Cybersecurity draws on the five-minute deep dive on hardening container environments published by SEC to walk through the most consequential security gaps teams are lea...

Serverless computing promises less operational overhead, faster deployment, and infinite scalability — but it doesn't promise security. The shared responsibility model means cloud providers manage the infrastructure, while everything above that line remains squarely in your hands. This episode of Cybersecurity unpacks the specific threats that emerge in serverless environments and what engineering...

Container security is often treated as a solved problem — namespaces, cgroups, and image hardening give teams confidence that workloads are properly isolated. But that confidence has a critical blind spot: every container on a host shares the same kernel. This episode of Cybersecurity examines one of the most dangerous exploitation paths in modern infrastructure — container escape via kernel modul...

Despite years of cloud adoption and a booming security tooling market, misconfigured cloud environments continue to top the list of breach root causes. This episode of Cybersecurity examines why organizations — from scrappy startups to enterprise giants — keep falling into the same traps, drawing on the six-minute deep dive on cloud misconfigurations and how to prevent them published by SEC. The c...

Outbound traffic from cloud workloads is noisy, fast-moving, and easy to overlook — right up until a breach makes it impossible to ignore. This episode of Cybersecurity takes a practical look at cloud egress control, examining why the gap between "we have a firewall" and "we have meaningful outbound control" is where so many security programs fall short. Drawing from the cloud egress control best...

Cloud security in 2025 looks nothing like the threat models most organizations were built to handle. This episode of Cybersecurity digs into the mechanics of modern cloud data exfiltration — drawing on this seven-minute deep-dive on cloud exfiltration tactics and defenses — to explain why attackers are so consistently succeeding against organizations that believe their perimeter controls still mat...

Modern software delivery depends on CI/CD pipelines that move fast, trust automation, and touch virtually every sensitive asset in an organization — source code, cloud credentials, signing certificates, deployment keys, and more. That combination of broad access and low scrutiny has made pipelines one of the most attractive targets in the attacker playbook. This episode of Cybersecurity draws on t...

The internet's global routing system was built for efficiency and trust — not security. This episode of Cybersecurity examines Border Gateway Protocol (BGP) hijacking: a threat that operates at the very foundation of how data moves across the internet, and one that sophisticated attackers can exploit without triggering a single alarm. Drawing from this four-minute deep dive on BGP hijacking and ro...

Address Space Layout Randomization has long been treated as one of memory security's most reliable guarantees — but that confidence deserves a second look. This episode of Cybersecurity examines how side channel techniques quietly erode ASLR's protections, drawing on the 7-minute deep dive into ASLR side channel tactics to explore an attack surface that most threat models still underestimate. Here...