YusufOnSecurity.com

YusufOnSecurity.Com
  • 0.0 (0)
  • 科技
  • 一周一更

This is a weekly podcast on cyber security domains. We discuss, dissect and demystify the world of security by providing an in-depth coverage on the cybersecurity topics that matter most. All these in plain easy to understand language. Like it, share it, and most importantly enjoy it!

  1. 9月20日

    241 - AI vs. Cybersecurity-How LLMs Are Reshaping the Defender-Attacker Battle

    Enjoying the content? Let us know your feedback! In this week's episode I am joined by my good old friend Shakel Ahmed a cyber security practitioner with over 20 years of experience. We discussing how the cybersecurity landscape is at a tipping point as AI revolutionizes both defenses and threat capabilities. While tools like ML/LLM boost defender and developer efficiency, they're simultaneously empowering attackers with unprecedented advantages—operating without the ethical constraints that limit defenders. As traditional security measures struggle to keep pace, innovative strategies like specialized AI models and strategic honeypot deployments are emerging as critical weapons in this evolving digital battleground. - https://cyberdesserts.com: Shakel Ahmed's blog Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    55 分钟

  2. 9月6日

    240 - The Great OAuth Heist: How Salesloft's Breach Exposed Major Cybersecurity Firms

    Enjoying the content? Let us know your feedback! Today we're unpacking one of the most significant supply chain attacks of 2025 - the Salesloft-Drift OAuth breach that sent shockwaves through the enterprise software world. We'll explore how a compromise at one marketing company led to data theft at some of the biggest names in cybersecurity and technology. We'll break down the technology at the  heart of it all - i.e. those digital keys that let applications talk to each other - and examine how threat actors turned them into free passes for corporate data theft. https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift - https://krebsonsecurity.com: The Ongoing Fallout From- A Breach At AI Chatbot-Maker Salesloft Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    37 分钟

  3. 8月30日

    239 - Volt Typhoon Report-How Critical Infrastructure Was Targeted and Compromised

    Enjoying the content? Let us know your feedback! Today’s episode is all about Volt Typhoon, a Chinese state-sponsored hacking group whose stealthy techniques and strategic missions have caused significant concern for defenders worldwide. We’ll break down who Volt Typhoon is, analyze the recent major report covering their activities, walk through real examples of the organizations they targeted, and explain every bit of technical jargon so everyone can follow along. By the end, you’ll understand why this group is considered one of the top cyber threats facing critical infrastructure today—globally and in the West. - https://www.cyber.nj.gov: VOLT TYPHOON APT A Strategic Threat Assessment - https://www.cisa.gov: PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    26 分钟

  4. 8月23日

    238 - Patchwork and Transparency -Microsoft’s August Security Updates & Google's Project Zero Redefined

    Enjoying the content? Let us know your feedback! This week, the cybersecurity landscape delivers two major stories that demand attention. Microsoft’s August Patch Tuesday brought a wave of critical updates and exposed gaps, challenging defenders to reassess their priorities and protections. Meanwhile, Google’s Project Zero team is changing the rules on how and when the world learns about new vulnerabilities—speeding up transparency and raising fresh questions for vendors and users alike. - https://thehackernews.com: Microsoft August-= 2025 Patch Tuesday - https://www.infosecurity-magazine.com: Google to Publicly Report New Vulnerabilities Within One Week of Vendor Disclosure Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    15 分钟

  5. 8月16日

    237 - Generative AI Security-How Companies Protect Against Attacks and Data Risks

    Enjoying the content? Let us know your feedback! In this episode, we’re diving into how companies are working to secure Generative AI—the technology behind chatbots, image creators, and code-writing assistants. We’ll break down how it’s different from traditional enterprise security, look at real-world attack examples, bust some myths, and explore what the future holds. - https://owaspai.org: AI Security Overview - https://artificialintelligenceact.eu: The EU AI Act Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    23 分钟

  6. 8月9日

    236 - The Hidden Danger in Your Cloud-Why Misconfiguration Is the Real Vulnerability

    Enjoying the content? Let us know your feedback! Today we’re tackling a critical subject that causes countless data breaches yet often gets misunderstood: misconfiguration — what it is, why it’s different from a software vulnerability, and why it remains one of the biggest security risks organizations face. One quick reminder before we dive into the main topic:Microsoft reminds of Windows 10 support ending in two months Windows 10 Sunset Alert: What You Need to Know Before October 2025- https://learn.microsoft.com: Windows 10 End Of Service Reminder -  https://owasp.org: Security Misconfiguration Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    31 分钟

  7. 8月2日

    235 - The Microsoft SharePoint vulnerability

    Enjoying the content? Let us know your feedback! Today, we focus on a critical and rapidly evolving Microsoft SharePoint vulnerability that’s rocked the security world in July 2025. We’ll walk you through what it is, why it matters, how attackers exploit it, and most importantly, what you and your organization can do to defend against it. For those new to cybersecurity, we’ll also explain the tricky technical jargon around this vulnerability, so you can follow along confidently, whether you’re an entry-level analyst or someone keen to learn more. - https://www.sans.org: Critical SharePoint Zero-Day Exploited: What You Need to Know About CVE-2025-53770 - https://msrc.microsoft.com: Update Guide Vulnerability CVE-2025-53770 - https://msrc.microsoft.com: Guidance For Sharepoint Vulnerability CVE 2025-53770/ - https://www.bleepingcomputer.com: US nuclear weapons agency hacked in Microsoft SharePoint attacks Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    28 分钟

  8. 7月26日

    234 - Protecting the Invisible-How to Secure Infrastructure without Agents

    Enjoying the content? Let us know your feedback! The world of cybersecurity isn’t just about defending laptops and servers—it’s also about safeguarding the “invisible” corners of our networks: those printers, cameras, routers, and dozens of other devices that quietly power our organizations. But what do you do when you can’t install security software or agents on these endpoints? In this episode of YusufOnSecurity, we’re digging into the art and science of protecting infrastructure you can’t easily touch or monitor from within. From game-changing network tactics to clever monitoring tricks, we’ll explore the evolving landscape of agentless security—and why protecting these overlooked devices just might be the next frontier in building a truly resilient environment. Stay with me as we unlock the secrets of securing the unmanageable. - https://www.techtarget.com: Agent vs Agentless Security Learn The Differences Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    28 分钟
查看全部 241 集

关于

This is a weekly podcast on cyber security domains. We discuss, dissect and demystify the world of security by providing an in-depth coverage on the cybersecurity topics that matter most. All these in plain easy to understand language. Like it, share it, and most importantly enjoy it!

信息

  • 创作者
    YusufOnSecurity.Com
  • 活跃年份
    2021年 - 2025年
  • 单集
    241
  • 分级
    儿童适宜
  • 版权
    © 2025 YusufOnSecurity.com
  • 节目网站
    YusufOnSecurity.com