YusufOnSecurity.com

Enjoying the content? Let us know your feedback! Thanks for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain english. I hope you had a good start with 2023!  Our first episode of the year is all about the Red Teaming tools. We will look at an open source testing and validation library call Atomic Read Team. In addition, we will r...

Enjoying the content? Let us know your feedback! Welcome to YusufOnSecurity episode 100! Perfect timing to finish off the year with the 100th episode! As it is customary and being the end of the year, we will go back to the best of 2021 episodes. There are quite a few popular ones. Enjoy! Just last like last year the YusufOnSecurity podcast kept me in cadence on this fast evolving threat landscape...

Enjoying the content? Let us know your feedback! 2022, what a year it has been! in our 99th episode which nicely coincides the year end we are look back at the rear view mirror to revisit the big cybersecurity events. so bacle up because it will be an eventfull listening! - https://blog.talosintelligence.com : Talos-year in review 2022 - https://cybersecurityventures.com : Cybersecurity Almanac 20...

Enjoying the content? Let us know your feedback! It is often said, attacks are when and not if they will happen at all. However, when they happen what matters is how hard you fall, scope and recover. In this week's episode,  I will talk about the steps taken by attackers  when they successfully breach organisations so that you can limit the damage and recover faster. In addition, we will reca...

Enjoying the content? Let us know your feedback! Welcome to YusufOnSecurity episode 97. Yes we are nearly at the grand number of 100! This week I am talking about privilege escalation. It is the critical step during an attack and it is vital to understand how the bad guys pull this off. By understand their the methods and some the tool used, you will hopefully minimise their success on using this...

Enjoying the content? Let us know your feedback! Welcome to YusufOnSecurity. Making use of what resources you have is an import aspect of technology use whether that is virtualisation or containarisation. But it is important to understand the impact the choices you make have on security. Are containers more secure? That is the questions of this week's episode. In addition, we will recap other...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, welcome back once again! Complexity is the greatest challenge in cyber security. With millions of software applications, services, and systems in use today, each one has its own features and use cases independently: It is called the silo dilemma. With exchanging information, they can never hope to have meaningful comm...

Enjoying the content? Let us know your feedback!  Fo the majority of enterprises, security can turn out to be extremely challenging, especially with  the move to remote and/or  hybrid work and the current geo-political tension.    The International Information Systems Security Certification Consortium also known as (ICS)2, estimates that 23% of companies have seen an increase in cybersecurity inci...

Enjoying the content? Let us know your feedback! Attackers target the weakest link. Lately though there is one tool that is in their cross-hair: MFA.  MFA has been a torn on the side of the cyber crooks and they up their anti-to come up ingenious way to circumvent it. How do they do it. This is the topic of this week's episode. In addition, we will recap the week's top trending security...

Enjoying the content? Let us know your feedback! Cyber security roles are in demand. Everyone talks about this fact. So I often asked "How do I start in cyber security"? I will cover this question in this week's episode and provides some pointers to would be new starter in Cyber Security. In addition, we will recap the week's top trending security news. Mastodon, the new micro...

Enjoying the content? Let us know your feedback! Every organisation goes and purchase the tools they thing is good for the job. Often, some rotated  the installation of their security products every 2 to 3 years or when they think it is starting to fall behind in features and detection capabilities. All these are well and good but very few organisations test the effectiveness of the tools they ins...

Enjoying the content? Let us know your feedback! In our journey to a more secure posture, zero trust is talked about a lot. The question most businesses usually ask is where do you start. After all ZT is not a product but a framework to a better posture day in and day out. This is our topic of the week. In addition, we will recap top of mind  trending  security news  including: Quarterly Report: I...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, thanks for tuning in! Waow, have a good a great content for you! I am in Dubai and it is the Gulf Information Technology Exhibition week, short for GITEX 2022. I think they named it Gitex Global this year. It's been a week filled with sampling cool cyber security tools and technology as well as meeting like minde...

Enjoying the content? Let us know your feedback! Here is one of those memes related to the topic du jour "Someone once told me that none of us are actually afraid of the dark; we're scared of what it conceals from us. We're afraid of having something with the potential to hurt us standing right before our eyes and not registering it as a threat. People can be like that too." We...

Enjoying the content? Let us know your feedback! Here is one of those memes related to the topic du jour "Someone once told me that none of us are actually afraid of the dark; we're scared of what it conceals from us. We're afraid of having something with the potential to hurt us standing right before our eyes and not registering it as a threat. People can be like that too." We...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, welcome back once again! Security teams face an ongoing challenge: how best to collect event data from all of their  tools and infrastructure - network, endpoint and anything in between. The critical part being how  to turn this mass of data into threat intelligence to prevent or stop  the next cyber attacks. This is...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, welcome back once again! In our march to architecting a solution approach to security, today we will talk about one such approach. The network and how the data that flows through can help paint a picture to help us gain more visibility into what is lurking beneath the surface. In addition, we will recap one  important...

Enjoying the content? Let us know your feedback! When cyber criminals attack an organisation, they is usually follow a beaten path. So there is method to their madness. Understanding this will allow you to follow their trail, over take and deny them reaching their objective  & causing further damage until you kick them out. That is the topic of this week's episo, in addition, we will reca...

Enjoying the content? Let us know your feedback! When cyber criminals attack an organisation, they is usually follow a beaten path. So there is method to their madness. Understanding this will allow you to follow their trail, over take and deny them reaching their objective  & causing further damage until you kick them out. That is the topic of this week's episo, in addition, we will reca...

Enjoying the content? Let us know your feedback! Bringing an outsider into your network can introduces many risks but if you deal something as complex as supply chain it can appear as a daunting task. It does not have to be though; with adequate due diligence and basic hygiene, you can stay one step ahead of the bad guys. Lets see how you go about this in this this week's episode. -   LastPas...

Enjoying the content? Let us know your feedback! While we wait for a passwordless future, it is paramount you limit exposing and leaving your password in many places. I deliberately chose the title of this episode to draw attention to this fact. I will go over the many place we often put our password in the quest for convenience over security. There are lessons of how me make these choices. In add...

Enjoying the content? Let us know your feedback! This is part 2 of our two part series on "How machine learning helps the cybersecurity industry". If you have not listen to part 1, we recommend you go back to the previous episode. In addition, we will recap other  trending  security news  includes: Slack Resets Some Users’ Passwords Black Hat 2022: Few presentations that you might find p...

Enjoying the content? Let us know your feedback! As the adage we grew up with goes, "you cannot predict the future but you can be prepared for it". Predicting the future is exactly what we do everyday to stay one step ahead of malware attack. For instance the industry has put a great deal of work on taking advantage of Machine Learning, but what is Machine Learning anyway and how does it...

Enjoying the content? Let us know your feedback! Welcome to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites. In plain english. Malware can hide but it must run. Yes, in the cat and mouse game between cyber crimal and defenders, the threat landscape is constantly shifting.  Malware's tactics to evade detection tools include the topic of this week&...

Enjoying the content? Let us know your feedback! As a craftsperson, you would not excel in your chosen trade without the right tools.  Even better, you need to carefully select those tools, sharpen them when they become blunt and upgrade them when new ones come around that will improve your work.   Cyber security is no different, we need well calibrated machinery to use in our defensive strategy....