English Cybersecurity - Cybersecurity in Plain English

Eric English

This show is all about cybersecurity and helping everyone understand the “why” when it comes to cybersecurity controls. We will break down cybersecurity 101 and slowly advance to more difficult and technical topics as the show progresses.

エピソード

  1. 2025/09/08

    English Cybersecurity - Episode 10

    Identity, Access & Authentication Authentication protocols (LDAP, Kerberos, SAML, OAuth2) Identity and Access Management (IAM) Least privilege, role-based access control (RBAC) Federation and Single Sign-On (SSO)

    30分

  2. 2025/08/01

    English Cybersecurity - Episode 9

    Network Security – Deeper Dive Deeper look at ports, protocols, and services Intro to Wireshark for packet analysis Firewalls: rule sets, NAT, and deep packet inspection IDS/IPS vs. SIEM tools – what they do and how they differ

    32分

  3. 2025/07/22

    English Cybersecurity - Episode 8

    Vulnerabilities, Exploits & Patch Management CVE, CVSS, and vulnerability scoring Exploit techniques (buffer overflows, privilege escalation) Patch management process in enterprise environments Virtual patching & compensating controls

    25分

  4. 2025/07/08

    English Cybersecurity - Episode 7

    Threat Actor Evolution Threat Actor Types: Script kiddies, criminal organizations, hacktivists, insiders Nation-state actors (APT groups) – motivations and tactics Case studies of evolving threats: From basic phishing → sophisticated spear phishing From simple ransomware → double extortion models Emerging threat vectors: Deepfakes for social engineering Supply chain attacks (e.g., SolarWinds) AI-powered malware and automation Cyber Kill Chain Framework (Lockheed Martin model) 7 stages of an attack: Reconnaissance Weaponization Delivery Exploitation Installation Command & Control (C2) Actions on Objectives How defenders can “break the chain” at each stage MITRE ATT&CK Overview What is ATT&CK and why it’s useful Tactics vs. Techniques vs. Procedures (TTPs) Brief demo (or screenshots) of MITRE ATT&CK Navigator How blue teams use it for threat detection Mapping common attacks to ATT&CK

    27分

  5. 2025/06/26

    English Cybersecurity - Episode 6

    Incident Response and Reporting Recognizing signs of compromise Steps in incident response (identify, contain, eradicate, recover) Role of users in reporting Legal and compliance considerations

    21分

  6. 2025/06/19

    English Cybersecurity - Episode 5

    Security in the Workplace Acceptable Use Policies (AUP), InfoSec Program and sub policies Device management (BYOD vs. corporate devices) Physical security (access control, secure areas) Security awareness culture

    32分

  7. 2025/06/09

    English Cybersecurity - Episode 4

    Data Protection and Privacy Encryption (at rest/in transit) Backups and data recovery Secure file sharing and disposal Privacy regulations (GDPR, HIPAA, etc.)

    31分

  8. 2025/05/21

    English Cybersecurity - Episode 3

    Basic networking: IP, DNS, ports, protocols Firewalls and intrusion detection/prevention (IDS/IPS) Network segmentation and zero trust principles VPNs and secure remote access

    35分

  9. 2025/05/09

    English Cybersecurity - Episode 2 (updated)

    In this week’s episode, we discuss: Strong passwords and multi-factor authentication (MFA) Safe browsing and email hygiene Software updates and patch management Endpoint protection (AV/EDR)

    40分

  10. 2025/05/02

    English Cybersecurity - Episode 1

    In this episode we kick things off with some Cybersecurity 101 topics like the CIA triad, threats, malware types, and social engineering.

    23分
  • 10話のエピソード

番組について

This show is all about cybersecurity and helping everyone understand the “why” when it comes to cybersecurity controls. We will break down cybersecurity 101 and slowly advance to more difficult and technical topics as the show progresses.

情報