Tech Unplugged

Strategy and Implementation focuses on designing and implementing a structured security framework aligned with business objectives. It emphasizes risk management, governance, and security controls to protect enterprise assets. The book covers security architecture principles, frameworks like SABSA, TOGAF, and Zero Trust, and integrating security into enterprise IT systems. It provides guidance on...

In this episode, we explore Microsoft Intune and its role in securing devices, data, and applications within Microsoft 365 environments. We break down Intune’s capabilities for device management, cloud security, and hybrid architectures. iOS and Android security measures, platform-level protections, and potential risks are covered in detail. We also walk through practical implementation steps, inc...

DNS Rebinding can turn a victim’s browser into a proxy to bypass Same-Origin Policy (SOP), enabling Server-Side Request Forgery (SSRF). By rapidly changing DNS records, an attacker tricks a web app into accessing internal resources or local files. This bypasses SSRF protections that rely on domain allowlists. If the app fetches file URLs (e.g., file:///etc/passwd ), an attacker can exfiltrate sens...

Satellite systems face increasing cybersecurity threats across their lifespan, impacting critical functions and necessitating international legal cooperation. These vulnerabilities span launch systems, communications, and ground infrastructure, with hostile acts ranging from kinetic attacks to cyber disruptions like jamming and data manipulation. Research reveals that satellite broadband services...

A Hazelcast podcast typically covers topics related to real-time data processing, in-memory computing, distributed systems, and caching solutions . The discussions often explore how Hazelcast's in-memory data grid (IMDG) and real-time stream processing engine help businesses improve performance, scalability, and resilience in modern applications. Key Themes in a Hazelcast Podcast: Introduction to...

Wiz Research disclosed critical unauthenticated remote code execution (RCE) vulnerabilities, collectively named #IngressNightmare, affecting the Ingress NGINX Controller for Kubernetes. Exploiting these flaws could allow attackers to gain complete control over Kubernetes clusters by accessing all stored secrets. The vulnerabilities, identified as CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, and C...

The podcast series "Tech Unplugged by SublimeTechie" introduces fundamental concepts in software architecture and distributed systems. The initial episodes cover core architectural principles, including maintainability, scalability, and the layered approach. As the series progresses, it delves into scaling strategies such as horizontal scaling and caching, along with the challenges of distributed...

n this episode, we kick off our Certified Kubernetes Administrator (CKA) journey! Get an overview of what the CKA certification entails, its importance in the DevOps and cloud-native ecosystem, and the key topics covered in the exam. Whether you're a beginner or an experienced engineer, this introduction will set the stage for mastering Kubernetes administration. Stay tuned for hands-on insights a...

This podcast examines the burgeoning field of AI Ethics, which the author argues lacks systematic organization due to its rapid, voluminous, and multidisciplinary growth. To address this, the author proposes a tripartite framework, categorizing AI ethics into Ethics and AI , focusing on the alignment of AI's functional characteristics with pre-existing ethical norms; Ethics in AI , concerned with...

The provided materials cover a range of Amazon Web Services (AWS) security and architecture topics. Several sources discuss best practices for securing cloud environments , including network security with VPCs and firewalls, identity and access management using IAM, data protection through encryption, threat detection with GuardDuty and Security Hub, and application security measures against commo...

The ByteByteGo newsletter article, drawing from the Netflix Tech Blog and Apache Cassandra documentation, explains how Netflix manages the massive scale of user viewing data generated daily . Initially relying on Apache Cassandra , Netflix faced challenges with increasing data volume from global expansion, new features like video previews, and inefficient data retrieval. To address these issues, N...

This YouTube transcript from a Stanford CS229 lecture provides an overview of building large language models (LLMs). It outlines key components for training LLMs, emphasizing architecture, training loss, data, evaluation, and system considerations. The lecture distinguishes between pre-training, focused on modeling internet text, and post-training, aimed at creating AI assistants. The discussion c...

This podcast from OWASP serves as a guide for secure code review , aiming to help organizations build self-defending applications . It outlines the importance of manual code review in identifying security and logical flaws, often surpassing automated tools and penetration testing alone. The guide covers various aspects of code review, including integrating it into the software development lifecycl...

This podcast presents a comprehensive AI Audit Checklist designed for certified trainers and consultants. It outlines key audit areas spanning AI governance, regulatory compliance, bias detection, security, explainability, performance monitoring, deployment, ethics, and continuous monitoring. The checklist provides specific audit questions and methods to check compliance status , including referen...

This podcast on " Configure Secured-core server for Windows Server " provides instructions on how to enable and verify Microsoft's Secured-core security features. It outlines necessary prerequisites like Secure Boot and TPM 2.0 , and details configuration steps using the Windows Security app , Windows Admin Center , and Group Policy . The guide also explains how to confirm that Secured-core is suc...

This podcast offer a comprehensive overview of modern software testing practices. The text explores a wide array of testing methodologies, including functional, non-functional, and specialized techniques, emphasizing their application across the software development lifecycle. It discusses crucial aspects like test planning, environment setup, automation, performance optimization, and security con...

This podcast explore Microsoft Graph API permissions and their use in accessing and managing Microsoft 365 services like SharePoint, Teams, and Entra ID (Azure AD) . They cover topics such as permission types (delegated and application) , best practices for applying the principle of least privilege , and the process of granting and managing these permissions through the Azure portal and Microsoft...

These YouTube transcripts feature Sean Metcalf from Trimarc Security discussing critical aspects of Active Directory (AD) security . The first source, a DerbyCon talk, outlines common AD security issues , methods for detecting reconnaissance , and techniques for hardening AD components . The second source is a Trimarc webcast focused on performing self-assessments of AD security , highlighting com...

This document offers a comprehensive overview of AI-driven Managed Detection and Response (MDR), explaining its fundamental concepts and evolution within cybersecurity. It details how artificial intelligence enhances traditional MDR by automating threat detection and response, leading to greater efficiency and accuracy. The text highlights key differences between traditional and AI-driven MDR, emp...

Autonomous Vehicle Cybersecurity Development Lifecycle (AVCDL) document, version 56. This document outlines a comprehensive framework of processes and requirements designed to ensure the cybersecurity of autonomous vehicle development. It details various phases of the lifecycle , from foundational elements like training and threat prioritization, through design, implementation, verification, relea...

The provided text introduces PASETO (Platform-Agnostic Security Tokens) as a modern and more secure alternative to JSON Web Tokens (JWTs) , focusing on its design principles for creating secure, stateless tokens for web applications. The author explains the structure of PASETOs , detailing their version, purpose (local or public), payload, and optional footer. It clarifies how local (symmetric) an...

Automotive Security Research Group presents a Car Hacking 101 talk focusing on in-vehicle networks . The speaker, Kamel, an automotive cybersecurity architect, introduces the concept of these networks as essential for communication between electronic control units (ECUs) within a vehicle. The lecture covers various types of in-vehicle networks , including CAN bus, LIN, FlexRay, CAN FD, MOST, and A...

Kubernetes architecture for beginners. It explains that Kubernetes, or K8s, is a tool for managing and orchestrating containers, comparing it to an orchestra conductor. The article outlines core components like Nodes (computers), Clusters (groups of nodes), Master Node (the planner), Worker Nodes (the executors), Pods (containers grouped together), and Controllers (ensuring the desired number of p...

Guidance on advanced cybersecurity topics. One document offers a comprehensive collection of interview questions and answers covering areas like C2 frameworks, XDR/AMSI bypass techniques, LOL attacks, and exploits, serving as a thorough resource for security professionals . The other report focuses on effective preparation strategies for these complex red teaming and security architecture subjects...

a comprehensive overview of security architecture reviews , outlining their processes and best practices. It discusses Cloud Security Posture Management (CSPM) methodologies for evaluating and improving cloud security. The text also identifies common and critical vulnerabilities that should be a focus during these reviews. Furthermore, it recommends various tools for conducting security architectu...