YusufOnSecurity.com

YusufOnSecurity.Com

This is a weekly podcast on cyber security domains. We discuss, dissect and demystify the world of security by providing an in-depth coverage on the cybersecurity topics that matter most. All these in plain easy to understand language. Like it, share it, and most importantly enjoy it!

  1. 27 DE SET.

    243 - Are Web Application Firewalls (WAFs) Obsolete in 2025? Pros, Cons, and Future of Application Security - Part 2

    Enjoying the content? Let us know your feedback! Welcome back and thank you for tuning in to YusufOnSecurity, the cyber-security podcast for everyday defender from analyst to the C-Suites, in plain English. I am your host Ibrahim Yusuf... This is part 2 of  where we will continue covering the debate that's been heating up in security circles: Are Web Application Firewalls obsolete? Now, if you've been in the security game for a while, you've probably heard the whispers. Some people are saying WAFs are dead weight, legacy technology from a bygone era. Others swear by them as the cornerstone of application security. So which is it? Well, listen to these two part episode. I suggest you start with episode 1 first  then come back to this one. In episode 1, we covered all the foundational parts and background. In our second part, we will kick off with modern attacks. Enjoy. Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    29min

  2. 20 DE SET.

    242 - Are Web Application Firewalls (WAFs) Obsolete in 2025? Pros, Cons, and Future of Application Security - Part 1

    Enjoying the content? Let us know your feedback! We're tackling a debate that's been heating up in security circles: Are Web Application Firewalls obsolete? Now, if you've been in the security game for a while, you've probably heard the whispers. Some people are saying WAFs are dead weight, legacy technology from a bygone era. Others swear by them as the cornerstone of application security. So which is it? Well, stay tuned because this is exactly what you will find out in today's episode. - https://en.wikipedia.org: Web Application Firewall Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    23min

  3. 13 DE SET.

    241 - AI vs. Cybersecurity-How LLMs Are Reshaping the Defender-Attacker Battle

    Enjoying the content? Let us know your feedback! In this week's episode I am joined by my good old friend Shakel Ahmed a cyber security practitioner with over 20 years of experience. We discussing how the cybersecurity landscape is at a tipping point as AI revolutionizes both defenses and threat capabilities. While tools like ML/LLM boost defender and developer efficiency, they're simultaneously empowering attackers with unprecedented advantages—operating without the ethical constraints that limit defenders. As traditional security measures struggle to keep pace, innovative strategies like specialized AI models and strategic honeypot deployments are emerging as critical weapons in this evolving digital battleground. - https://cyberdesserts.com: Shakel Ahmed's blog Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    55min

  4. 6 DE SET.

    240 - The Great OAuth Heist: How Salesloft's Breach Exposed Major Cybersecurity Firms

    Enjoying the content? Let us know your feedback! Today we're unpacking one of the most significant supply chain attacks of 2025 - the Salesloft-Drift OAuth breach that sent shockwaves through the enterprise software world. We'll explore how a compromise at one marketing company led to data theft at some of the biggest names in cybersecurity and technology. We'll break down the technology at the  heart of it all - i.e. those digital keys that let applications talk to each other - and examine how threat actors turned them into free passes for corporate data theft. https://cloud.google.com/blog/topics/threat-intelligence/data-theft-salesforce-instances-via-salesloft-drift - https://krebsonsecurity.com: The Ongoing Fallout From- A Breach At AI Chatbot-Maker Salesloft Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    37min

  5. 30 DE AGO.

    239 - Volt Typhoon Report-How Critical Infrastructure Was Targeted and Compromised

    Enjoying the content? Let us know your feedback! Today’s episode is all about Volt Typhoon, a Chinese state-sponsored hacking group whose stealthy techniques and strategic missions have caused significant concern for defenders worldwide. We’ll break down who Volt Typhoon is, analyze the recent major report covering their activities, walk through real examples of the organizations they targeted, and explain every bit of technical jargon so everyone can follow along. By the end, you’ll understand why this group is considered one of the top cyber threats facing critical infrastructure today—globally and in the West. - https://www.cyber.nj.gov: VOLT TYPHOON APT A Strategic Threat Assessment - https://www.cisa.gov: PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    26min

  6. 23 DE AGO.

    238 - Patchwork and Transparency -Microsoft’s August Security Updates & Google's Project Zero Redefined

    Enjoying the content? Let us know your feedback! This week, the cybersecurity landscape delivers two major stories that demand attention. Microsoft’s August Patch Tuesday brought a wave of critical updates and exposed gaps, challenging defenders to reassess their priorities and protections. Meanwhile, Google’s Project Zero team is changing the rules on how and when the world learns about new vulnerabilities—speeding up transparency and raising fresh questions for vendors and users alike. - https://thehackernews.com: Microsoft August-= 2025 Patch Tuesday - https://www.infosecurity-magazine.com: Google to Publicly Report New Vulnerabilities Within One Week of Vendor Disclosure Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    15min

  7. 16 DE AGO.

    237 - Generative AI Security-How Companies Protect Against Attacks and Data Risks

    Enjoying the content? Let us know your feedback! In this episode, we’re diving into how companies are working to secure Generative AI—the technology behind chatbots, image creators, and code-writing assistants. We’ll break down how it’s different from traditional enterprise security, look at real-world attack examples, bust some myths, and explore what the future holds. - https://owaspai.org: AI Security Overview - https://artificialintelligenceact.eu: The EU AI Act Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    23min

  8. 9 DE AGO.

    236 - The Hidden Danger in Your Cloud-Why Misconfiguration Is the Real Vulnerability

    Enjoying the content? Let us know your feedback! Today we’re tackling a critical subject that causes countless data breaches yet often gets misunderstood: misconfiguration — what it is, why it’s different from a software vulnerability, and why it remains one of the biggest security risks organizations face. One quick reminder before we dive into the main topic:Microsoft reminds of Windows 10 support ending in two months Windows 10 Sunset Alert: What You Need to Know Before October 2025- https://learn.microsoft.com: Windows 10 End Of Service Reminder -  https://owasp.org: Security Misconfiguration Be sure to subscribe! You can also stream from https://yusufonsecurity.com In there, you will find a list of all previous episodes in there too.

    31min
Ver tudo (243)

Sobre

This is a weekly podcast on cyber security domains. We discuss, dissect and demystify the world of security by providing an in-depth coverage on the cybersecurity topics that matter most. All these in plain easy to understand language. Like it, share it, and most importantly enjoy it!

Informações

  • Criado por
    YusufOnSecurity.Com
  • Anos de atividade
    2021 - 2025
  • Episódios
    243
  • Classificação
    Livre
  • Copyright
    © 2025 YusufOnSecurity.com
  • Site do podcast
    YusufOnSecurity.com