YusufOnSecurity.com

Enjoying the content? Let us know your feedback! This week's episode is about what is giving us privacy at the heart of security, that is encryption algorithm. As computer power and speed improves so is the danger of these algorithm being broken. We need alternatives that can withstand them being compromised. We need resistant algorithms. In addition, we will recap a couple of top of mind sec...

Enjoying the content? Let us know your feedback! Companies come in different sizes and complexity and they face different challenges but also demand various level of mitigations that meets their obligation. In this week's episode, lets take a step back and look at how we approach security and how can this be improved. In addition, we will recap a couple of top of mind security news and then g...

Enjoying the content? Let us know your feedback! In this week's episode, I will continue with PowerShell and dwell a bit more on logging. If you have not listen to to last week's episode, I would suggest you do that first.  Before that though, let's recap few topics that worth your attention. They might help you mitigate more risk to your business. Up next! Google Chrome 0Day. Updat...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, welcome back once again! The bad guys love using legitimate tools to circumvent security monitoring and controls. One tool in particular stands head and shoulder above other programs and operating system components to attack Microsoft Windows users: That is PowerShell. In addition, we will recap other trending securit...

Enjoying the content? Let us know your feedback! Often times, organisation focus on technology, procuring the next shinny things in the market or the leading products according to analyst, peer review or testing labs. Although there is not thing wrong with, there is one important ingredient that are mostly overlooked: a well structure, efficient security team. This is what we will cover this week....

Enjoying the content? Let us know your feedback! The one constant them of this ever expanding threat landscpare is the creativity of the cybercrooks and their ability of improvising existing tools and techology. One case in point is the use of a combination of HTML5 and JavaScript to avade existing  business defenses. Other top top trending security news include: GDPR turns 4 Follina is Being Acti...

Enjoying the content? Let us know your feedback! Most business rely on an old fashioned approach to security. A hard on the outside and soft on the inside. In this episode we will look at why that can be dangerous in today pervasive connectivity and work from anywhere concept. Additionally, we will recap other top trending security news that are most pertinent today: - www.expressvpn.com : Rejecti...

Enjoying the content? Let us know your feedback! The more we learn, the more we know how less we know. In this episode we will cover important takeaways of the recently release Virison Data Breach Investigations Report. There are key points to be mindful of. In addition, we will recap other top trending security news, including RCE on Microsoft Diagnostic Tool (MSDT) CISA adds more exploited vulne...

Enjoying the content? Let us know your feedback! In a world where everyone...well most, wants to snoop into your privacy, we asked how one sends and receives ones email in an encrypted format. After all email is not build fro privacy. Click send and, and it is as you posted a postcard! With some effort a dedication, a privacy hungry miscreants can watch your messages go by in clear text. Also comi...

Enjoying the content? Let us know your feedback! Attack Surface is talked about a lot but it means different things to different people. This is what we will step through this week. Also coming up, a couple of pertinent recent security news: these are - South Asian Governments Targeted by Bitter APT Group - Apple Mail Now Blocks Email Trackers - https://blog.talosintelligence.com : Bitter APT adds...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, welcome back. Given the prevalence of security holes in software and the constant shifting of the threat landscape, it is paramount that organisation carry out periodic exercises that test their security preparedness. And that is exactly what we will dive into this week. Also coming up, few pertinent security news thi...

Enjoying the content? Let us know your feedback! Welcome to YusufOnSecuriy, a weekly cyber security podcast where we look at the most relevant security news of the week and follow up with a deeper look at a carefully selected cyber security domain.  In this week's episode we will continue digging into the software errors and their consequences, vulnerabilities and exploitation.  I said it is...

Enjoying the content? Let us know your feedback! Vulnerabilities is part of life. It is even more so in the cyber world. This week we will look in to the type of vulnerabilities that are there. Once thing is for sure, they are not all exploited equally. Some are more damaging, others take time, resources and perseverance to pull them off. Simply put they are part of the firebrick of modern technol...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, I welcome you to the show in this fine April day. I talk a lot about cyber security for businesses and enterprises at large but about the individuals; they too suffer the consequence of cyber attacks aren't they? Well that is what I will cover this week: how do you go about your day to day usage of technology and...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, welcome back.  Often it is not about what came in but rather what has been left behind. This week we willl continue our introduction to digital forensics and what is involved when carrying out this painstaking process. In this episode, we will go one level down into the details. So bucle up! Also coming up, a couple o...

Enjoying the content? Let us know your feedback! It is time for YusufOnSecurity, welcome onboard to this week's show. Often it is not about what came in but rather what has been left behind. This week we will look at introducing digital forensics and what is involved when carrying out this painstaking process. Also coming up, a couple of pertinent security news that you might find relevant, i...

Enjoying the content? Let us know your feedback! In this week's episode, I am bring you coverage from Gulf Information Security Expo & Conference (GISEC) 2022 Dubai. GISEC is a security focus version of GITEX the "Gulf Information Technology Exhibition" that is held in October each in Dubai where thousands of exhibitors and ten of thousands of visitors decent each year in Octobe...

Enjoying the content? Let us know your feedback! It is time for you yet another YusufOnSecurity episode. Welcome back. This week I will have a look at the important topic of remote access. I think you will agree that this is top of mind for CISO and any C-suite that cares about the bottom line of their business. Also comping up: Microsoft Releases Scanner to Detect TrickBot-Infected Devices Intern...

Enjoying the content? Let us know your feedback! In this weeks' show, lets turn our attention to an ever increasing army of small things which are becoming more pervasive: Internet Of Things. Also coming up, a number of updates including: A couple of leaks and this time from the good side unfortunately - Nvidia and Samsung A firefox emergency update. Browsers are the windows to the internet f...

Enjoying the content? Let us know your feedback! In this weeks' episode I will look into demystifying the concept of XDR. I will try to do just to compare and contrast with other technology that came before it: SIEM and SOAR in particular. But before that, and as always I have a few update for you this week on what to keep an eye on. Canti ransomware leaked a treasure trove of chat communicat...

Enjoying the content? Let us know your feedback! In this episode lets have a look at an important aspect of security, one that is becoming a battle ground lately: identity and authentication. As always I have a fews update for you this week on what is churning lately  including: - https://blog.talosintelligence.com : Threat Advisory Cyclops blink - www.wired.com : Russia’s Sandworm Hackers Have Bu...

Enjoying the content? Let us know your feedback! This is part 2  of a two parts episode where I am covering Lessons from the Irish Health Services Executive Hack. If you have not listen to part 1, please do so. In part 1, I gave the introduction to the incident and other related background details. As always I have a fews update for you on what is in news this week. This including: -U.S. Cybersecu...

Enjoying the content? Let us know your feedback! This is a two part episode and my goodness is it loaded with useful technical details.  Additionally I'll look at at two particular security updates pertaining to the most popular  platform when it comes to operating systems: Windows!  Microsoft took important steps forward in reducing the surface of attack. All that before we get into the meat...

Enjoying the content? Let us know your feedback! In this episode I will delve into the vulnerability measuring and scoring metrics, the subsets of those and the why and how these are used. An important knowledge to be had if you are responsible of security pertaining to a SOC/RISK or Security teams. In addition, we will recap other top trending security news including: -ESET antivirus bug leads to...

Enjoying the content? Let us know your feedback! The episode before last, we've looked at the Malware targetting the Mac world, this time we will look at the other side of the fense, the Linux echo systems. The linux platform is the one operating system business rely on for their  mission critical applications regardless whether they are on-premise, cloud native or somewhere in between i.e. h...