YusufOnSecurity.com

YusufOnSecurity.Com

This is a weekly podcast on cyber security domains. We discuss, dissect and demystify the world of security by providing an in-depth coverage on the cybersecurity topics that matter most. All these in plain easy to understand language. Like it, share it, and most importantly enjoy it!

  1. ٢٣ أغسطس

    238 - Patchwork and Transparency -Microsoft’s August Security Updates & Google's Project Zero Redefined

    Enjoying the content? Let us know your feedback! This week, the cybersecurity landscape delivers two major stories that demand attention. Microsoft’s August Patch Tuesday brought a wave of critical updates and exposed gaps, challenging defenders to reassess their priorities and protections. Meanwhile, Google’s Project Zero team is changing the rules on how and when the world learns about new vulnerabilities—speeding up transparency and raising fresh questions for vendors and users alike. - https://thehackernews.com: Microsoft August-= 2025 Patch Tuesday - https://www.infosecurity-magazine.com: Google to Publicly Report New Vulnerabilities Within One Week of Vendor Disclosure Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ١٥ من الدقائق

  2. ١٦ أغسطس

    237 - Generative AI Security-How Companies Protect Against Attacks and Data Risks

    Enjoying the content? Let us know your feedback! In this episode, we’re diving into how companies are working to secure Generative AI—the technology behind chatbots, image creators, and code-writing assistants. We’ll break down how it’s different from traditional enterprise security, look at real-world attack examples, bust some myths, and explore what the future holds. - https://owaspai.org: AI Security Overview - https://artificialintelligenceact.eu: The EU AI Act Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ٢٣ من الدقائق

  3. ٩ أغسطس

    236 - The Hidden Danger in Your Cloud-Why Misconfiguration Is the Real Vulnerability

    Enjoying the content? Let us know your feedback! Today we’re tackling a critical subject that causes countless data breaches yet often gets misunderstood: misconfiguration — what it is, why it’s different from a software vulnerability, and why it remains one of the biggest security risks organizations face. One quick reminder before we dive into the main topic:Microsoft reminds of Windows 10 support ending in two months Windows 10 Sunset Alert: What You Need to Know Before October 2025- https://learn.microsoft.com: Windows 10 End Of Service Reminder -  https://owasp.org: Security Misconfiguration Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ٣١ من الدقائق

  4. ٢ أغسطس

    235 - The Microsoft SharePoint vulnerability

    Enjoying the content? Let us know your feedback! Today, we focus on a critical and rapidly evolving Microsoft SharePoint vulnerability that’s rocked the security world in July 2025. We’ll walk you through what it is, why it matters, how attackers exploit it, and most importantly, what you and your organization can do to defend against it. For those new to cybersecurity, we’ll also explain the tricky technical jargon around this vulnerability, so you can follow along confidently, whether you’re an entry-level analyst or someone keen to learn more. - https://www.sans.org: Critical SharePoint Zero-Day Exploited: What You Need to Know About CVE-2025-53770 - https://msrc.microsoft.com: Update Guide Vulnerability CVE-2025-53770 - https://msrc.microsoft.com: Guidance For Sharepoint Vulnerability CVE 2025-53770/ - https://www.bleepingcomputer.com: US nuclear weapons agency hacked in Microsoft SharePoint attacks Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ٢٨ من الدقائق

  5. ٢٦ يوليو

    234 - Protecting the Invisible-How to Secure Infrastructure without Agents

    Enjoying the content? Let us know your feedback! The world of cybersecurity isn’t just about defending laptops and servers—it’s also about safeguarding the “invisible” corners of our networks: those printers, cameras, routers, and dozens of other devices that quietly power our organizations. But what do you do when you can’t install security software or agents on these endpoints? In this episode of YusufOnSecurity, we’re digging into the art and science of protecting infrastructure you can’t easily touch or monitor from within. From game-changing network tactics to clever monitoring tricks, we’ll explore the evolving landscape of agentless security—and why protecting these overlooked devices just might be the next frontier in building a truly resilient environment. Stay with me as we unlock the secrets of securing the unmanageable. - https://www.techtarget.com: Agent vs Agentless Security Learn The Differences Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ٢٨ من الدقائق

  6. ١٩ يوليو

    233 - CI-CD Pipelines and Associated Security Risks

    Enjoying the content? Let us know your feedback! In this week's episode, we talk through the technical details of CI/CD (Continuous Integration/Continuous Development) pipelines: what they are, how they work, the jargon around them, and the potential security risks organizations need to be aware of. Finally, we’ll bust a persistent myth in software development that you might find surprising. - https://www.cisco.com: What is CI/CD? Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ٢٨ من الدقائق

  7. ١٢ يوليو

    232 - Catching up with security

    Enjoying the content? Let us know your feedback! Today’s episode takes you through three intersecting stories revealing how technology shapes both our vulnerabilities and our digital identity—from the sprawling and adaptable threat of AsyncRAT malware, to critical Bluetooth vulnerabilities threatening millions of vehicles globally, and finally to a thought-provoking glimpse into how AI models create intimate profiles of their users.  - https://simonwillison.net/2025: Simon's ChatGPT dossier - https://blog.talosintelligence.com/AsyncRAT - https://www.bankinfosecurity.com: PerfektBlue Bug Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ٣٢ من الدقائق

  8. ٥ يوليو

    231 - A Crash Course in Vendor Risk, Lessons from the CrowdStrike Outage

    Enjoying the content? Let us know your feedback! Today, we’re focusing on the critical lessons from one of the most disruptive IT failures in recent memory: the global outage triggered by a CrowdStrike software update on July 19, 2024. While the headlines focused on grounded flights and downed systems, the real story lies in what this incident revealed about the way we build, secure, and rely on digital infrastructure. This episode isn’t just about a faulty update—it’s about the cascading impact of vendor trust, software architecture, and system design decisions made long before disaster strikes. We’ll explore how over-reliance on a single vendor can introduce hidden points of failure, why resilience must be baked into every layer of our IT stack, and how incident response can make or break reputations in a hyperconnected world. We’ll also look at Microsoft’s rapid response and how this moment might reshape the rules for how security software integrates with Windows. The takeaway? In cybersecurity, it’s not enough to be secure—you also have to be prepared for when your most trusted systems fail. Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    ٢٩ من الدقائق
مشاهدة الكل (٢٣٨)

حول

This is a weekly podcast on cyber security domains. We discuss, dissect and demystify the world of security by providing an in-depth coverage on the cybersecurity topics that matter most. All these in plain easy to understand language. Like it, share it, and most importantly enjoy it!

المعلومات

  • صناع العمل
    YusufOnSecurity.Com
  • سنوات النشاط
    ٢٠٢١ - ٢٠٢٥
  • الحلقات
    ٢٣٨
  • التقييم
    ملائم
  • حقوق النشر
    © 2025 YusufOnSecurity.com
  • موقع البرنامج على الويب
    YusufOnSecurity.com