Wait Just an InfoSec

With the continuous evolution of ransomware and its pervasive risks to organizations’ very existence, new threats can be difficult to predict. That’s why, in this newest episode of Wait Just an Infosec, SANS Certified Instructors and leading ransomware authorities, Ryan Chapman and Mari DeGrazia are joined by guest Ann Pham, to break down what they see as the most important ransomware threats of 2...

Join SANS Senior Instructor, Blueprint podcast host, and blue team guru, John Hubbard, as he walks us through his cyber defense trends and predictions for 2024. John is joined by  Ismael Valenzuela , Gene McGowan , and Mark Baggett  - who will detail important insights and considerations of which you should be aware and which you can use to improve your organization’s cyber defense skills in the n...

In an era characterized by the profound interconnection of technology, business strategy, and people within the realm of cybersecurity, the need for leaders with transformative capabilities has never been more critical. Join us as we explore the SANS Transformational Triad , an integral framework encompassing SANS' three most advanced security courses meticulously crafted for both existing an...

Join renowned cybersecurity experts Rob Lee and Jake Williams in a riveting livestream discussion as they delve into the complex world of offensive cyber operations amid ongoing nation-state conflicts. In this episode of Wait Just an Infosec, we’ll explore the critical role of cyber warfare in the Ukraine-Russia and other global conflicts, providing insights into how these digital battlegrounds sh...

Join us for an exhilarating episode as we dive into the extraordinary journeys of two unconventional cybersecurity success stories. Discover how they harnessed unique skills to prosper and make a difference in their communities. Get inspired by their innovative paths and their commitment to giving back. Wait Just an Infosec is produced by the SANS Institute. You can watch the full, weekly Wait Jus...

In this episode of Wait Just an Infosec, host Ryan Chapman is joined by Sherrod Degrippo to get a little weird and discuss some of the things they are seeing most recently in the cybersecurity space. Wait Just an Infosec is produced by the SANS Institute. You can watch the full, weekly Wait Just an Infosec live stream on the SANS Institute YouTube, LinkedIn, Twitter, and Facebook channels on Tuesd...

Applying psychological principles to educating end users about cybersecurity is nothing new; security awareness teams have long relied on behavioral science to influence best practices.  But “cyberpsychology” as a unique discipline is having a moment, and its implications go far beyond Cybersecurity Awareness Month.   Join us for this episode of Wait Just an Infosec. SANS’s Rich Greene moderate&ap...

Ed Skoudis, SANS.edu President and creator of many a cyber range, will take the reins as host to welcome a bevy of cyber range aficionados, for an episode packed with tips, tricks, and behind-the-scenes looks at all thing’s SANS cyber ranges.  Hear from range designers about what makes for a good challenge and how SANS ranges are fundamentally different from others. Then, get a look from our event...

In a perfect world, what would the ultimate Security Culture team look like? What would be the different roles and skill sets on your team? Who would partner with whom, and what would their responsibilities and goals look like?  Join SANS Security Awareness Director Lance Spitzner and his guest, Molly McLain, expert in Security Culture, for this episode of Wait Just an Infosec. They’ll discuss sec...

SANS Certified Instructor and ransomware expert Ryan Chapman hosts this episode of Wait Just an Infosec, exploring tactics for defending your organization against ransomware and cyber extortion.   Ryan welcomes his guest Brett Callow, threat analyst at cybersecurity solution provider Emsisoft – renowned in the ransomware community for building decryptors for many ransomware families over the years...

The ground floor for corporate cybersecurity awareness begins with the users. Or does it begin with corporate safeguards?  In this episode of Wait Just an Infosec, join SANS Certified Instructor Lodrina Cherne for a debate on one of the top Cybersecurity Awareness Month topics. Later in the show, SANS Author and Certified Instructor Dean Parsons joins the broadcast to talk Security Awareness. Dean...

"The more we learn about the tools that threat actors use — from discovery/enumeration tools all the way through ransomware payloads — the better we can understand how to detect, hunt, and prevent these actors from accomplishing their goals.  In this episode of Wait Just an Infosec, join hosts Ryan Chapman and Mari DeGrazia as they welcome reverse engineer and threat hunter Silas Cutler for a...

Detection engineering requires a unique combination of technical skills, threat research, and scientific method. Done properly, it allows us to better sift through the noise and identify information we can use to save time and manual effort. In this episode of Wait Just an Infosec, SANS Certified Instructor Mark Orlando welcomes Zack Allen and Scott Foley for a discussion on common challenges in d...

Ed Skoudis, President of SANS.edu, joins us as host for another episode of Wait Just an Infosec, this time focusing on the infamous SANS Holiday Hack Challenge – SANS’s annual gift to the cybersecurity community.   Ed is joined by special guests to share about the history of this free festive cyber challenge, showcase how this year’s challenge is coming together, and offer insight from past winner...

Join Ryan Chapman, Mari DeGrazia, and their special guest, Will "BushidoToken" Thomas in an informal, freeform, and most of all, fun conversation on tracking ransomware actors over time. In this in-depth conversation, learn how tracking darknet forum posts, alias pivoting, correlating TTPs, identifying affiliations, and performing blockchain analytics lead to insights used by the InfoSec...

"Cloud security continues to evolve at a rapid pace, and you need to stay abreast of the latest trends and services to ensure that you have the most up to date skills.   SANS Fellow Frank Kim hosts this episode of Wait Just an Infosec, talking about the different cloud journeys that you can take. Wait Just an Infosec is produced by the SANS Institute. You can watch the full, weekly Wait Just...

Operational Technology (OT) security has never been more important. When beginning the work of securing your Industrial Control System (ICS) environment, there are five key controls you should consider.   In this episode of Wait Just an Infosec, ICS security pioneer and expert Robert M. Lee takes the chair as host, exploring which key controls to focus on in your OT environment but through the len...

Ransomware actors continue to perpetrate their heinous crimes because, in aggregate, the attacks are lucrative. But what if ransomware became non-lucrative? What if that change came by way of sweeping regulations and mandates from governments around the world? This episode of Wait Just an Infosec is hosted by ransomware subject-matter experts Ryan Chapman, who invites on Mr. Allan "Ransomware...

This week on Wait Just an Infosec, join host John Hubbard, who welcomes his guests from the ongoing special season of the Blueprint Podcast for an in-depth discussion of key points coming from MITRE’s book: 11 Strategies of a World-Class Cybersecurity Operations Center.   The book's authors Kathryn Knerler, Ingrid Parker, and Carson Zimmerman have been exploring top strategies for taking your...

In this episode of Wait Just an Infosec hosted by SANS editor Thomas Wolfe, SANS contributors Stacy Dunn and Rich Greene discuss their personal journeys into cybersecurity and the importance of skill versus background.     Join Stacy and Rich as they explore questions like; should employers dare to invest in potential over pedigree? Why did you choose cybersecurity? What was your profession before...

This week on Wait Just an Infosec, Lance Spitzner, Director of SANS Security Awareness, joins us as host to talk about an area of cybersecurity that often doesn’t get enough attention: security culture.  It’s become glaringly obvious that cybersecurity is no longer just a technical challenge, but a human challenge as well. If you’re not quite sure where to start when it comes to assessing your org...

Ransomware continues to pose a serious threat to organizations, and the threat is only growing as ransomware attacks increase in sophistication and number.   This episode of Wait Just an Infosec is hosted by ransomware subject-matter expert Ryan Chapman, who invites on cloud DFIR SME Megan Roddie for a lively discussion aimed at helping arm our community with actionable tactics to combat ransomwar...

The term “Dark Knight” has been used to describe people with a willingness to operate in gray areas and a commitment to combating injustice through unconventional means. In this episode of Wait Just an Infosec, meet the Dark Knight of open-source intelligence (OSINT), Matt Edmondson.  Matt Edmondson is a SANS Principal Instructor and author of SEC497: Practical Open-Source Intelligence (OSINT). In...

What is the future of AI use in cyber? How can red teams and blue teams use it in their own operations? Let’s find out together! This week on Wait Just an Infosec, Editorial Contributor Thomas Wolfe steps in to host and welcomes Kirk Trychel, Senior Red Team Engineer III, Box, for a discussion on AI’s influence on offensive cybersecurity and malware development. We’ll be playing a clip from Kirk’s...

This episode of Wait Just an Infosec focuses on going behind the firewall and inside higher education for cybersecurity, examining the trends that are shaping how we learn and grow in this fast-paced field. Who better to lead this exploration than Ed Skoudis , President of SANS Technology Institute ( SANS.edu ), where cybersecurity is all we teach — and nobody does it better. Ed is joined by sever...