E28 - Cyber Frameworks All The Way Down Socializing Security podcast

23:31

In this episode of Socializing Security, Milou and Brian take a deep dive into the shifting landscape of digital privacy in 2025. With privacy concerns on the rise, they explore the growing adoption of secure communication tools like Signal and unpack the ethical dilemmas of information sharing in an increasingly connected world. From social engineering tactics to network security insights, they discuss the delicate balance between privacy and convenience—how much are we really willing to trade for digital ease? They also break down personally identifiable information (PII) and why even seemingly harmless data points can be powerful in the wrong hands. Beyond personal security, Milou and Brian emphasize the power of community engagement, sharing how everyday users can take control of their digital footprints and advocate for stronger privacy practices. Whether you're a cybersecurity pro or just starting your privacy journey, this episode delivers real-world strategies, eye-opening discussions, and actionable steps to help you navigate the evolving world of online security. 💡 Listen into Part 2 and start taking back control of your digital privacy today! Don't forget to check out Part 1 Chapters: 00:00 - Introduction & Recap 02:00 - Ethical Hacking & Privacy Awareness 04:30 - Understanding Privacy & Personally Identifiable Information (PII) 07:00 - Data Brokers & The Risks of Location Tracking 10:30 - Balancing Privacy with Convenience 13:00 - Smart Home & Cloud Privacy Considerations 17:00 - Network Security & Privacy Best Practices 20:00 - Encouraging Privacy Conversations in Communities 23:30 - Future Topics & Closing Remarks…

Socializing Security

1
E038 - Going Incognito into 2025 (Part 1) 27:05

8天之前27:05

27:05

In this episode of Socializing Security, Milou and Brian discuss the current state of privacy in 2025, emphasizing the resurgence of privacy concerns and the importance of secure communication. They explore the adoption of Signal as a secure messaging platform, its unique structure, and the ethical implications of information sharing. The conversation also delves into social engineering, networking insights, and the balance between privacy and connectivity in today's digital landscape. In this conversation, Milou and Brian explore various aspects of privacy, social engineering, and the importance of understanding personally identifiable information (PII). They discuss the ethical implications of social engineering, the significance of encryption in communication, and the impact of data privacy in everyday life. The dialogue emphasizes the need for community engagement and awareness regarding technology and privacy, highlighting the evolving nature of personal privacy in a digital age. Part 2 coming next week! Tune in! Chapters: 00:00 The State of Privacy in 2025 03:01 Adopting Signal for Secure Communication 06:02 Understanding Signal's Unique Structure 09:01 Social Engineering and Networking Insights 12:07 The Ethical Implications of Information Sharing 15:05 Navigating Privacy in a Connected World 26:19 Experiences and Perspectives on Access 27:11 Social Engineering and Ethical Considerations…

Socializing Security

1
E037 - Is the Fight for Privacy Dead? 2024 Edition (Part 2) 30:14

15天之前30:14

30:14

Is the Fight for Privacy Still Alive? – A Special Look Back In this special edition of Socializing Security, Milou takes listeners through Part 2 of a retrospective journey through 2024, revisiting one of the podcast’s most thought-provoking questions: Is there still really a fight for privacy? Inspired by a conversation with a CTO who claimed privacy was a lost battle and security had taken center stage, Milou reflects on the diverse perspectives shared by guests throughout the past year. This episode compiles compelling insights from the Socializing Network—a lineup of expert speakers who weighed in on whether privacy is still worth fighting for or if it has already been overshadowed by broader security concerns. With so many incredible voices and thought-provoking answers, this discussion is just the beginning. Chapters 00:38 Introduction 03:09 Revisiting the Key Question: is the fight for privacy dead? 04:11 Expert Opinions & Discussions 24:55 Closing Remarks: Milou responds to the question herself…

Socializing Security

1
E036 - Is the Fight for Privacy Dead? 2024 Edition (Part 1) 29:55

22天之前29:55

29:55

Is the Fight for Privacy Still Alive? – A Special Look Back In this special edition of Socializing Security, Milou takes listeners on a retrospective journey through 2024, revisiting one of the podcast’s most thought-provoking questions: I s there still really a fight for privacy ? Inspired by a conversation with a CTO who claimed privacy was a lost battle and security had taken center stage, Milou reflects on the diverse perspectives shared by guests throughout the past year. This episode compiles compelling insights from the Socializing Network—a lineup of expert speakers who weighed in on whether privacy is still worth fighting for or if it has already been overshadowed by broader security concerns. With so many incredible voices and thought-provoking answers, this discussion is just the beginning. Stay tuned for Part Two next week, where even more industry leaders share their take on privacy in the modern era. Chapters 00:00 Welcome to a Special Edition 00:38 The Big Question: Is Privacy Still a Fight Worth Having? 03:15 The Catalyst: A CTO’s Perspective on Privacy vs. Security 08:42 Perspectives from the Socializing Network – Key Takeaways from 2024 18:30 The Evolution of Privacy Concerns in the Digital Age 25:12 Why Some Believe the Fight is Over 30:45 The Argument for Keeping Privacy at the Forefront 36:20 Wrapping Up – What’s Next in 2025?…

Socializing Security

1
E035 - 2024 Year in Review: AI, Cyber Lessons, & Personal Growth 41:00

29天之前41:00

41:00

In this episode of Socializing Security, Milou and Brian take a step back to reflect on the rollercoaster that was 2024. From the explosive rise of generative AI to personal growth and the power of strong relationships, they unpack the biggest trends, challenges, and wins of the year. They dive into AI’s evolving role in security and privacy, debating whether it’s truly transformative or just another overhyped bubble. The conversation also gets personal as they share what they’ve learned from a year of podcasting—navigating adversity, balancing passion with sustainability, and the unexpected friendships formed along the way. They also get into why soft skills are a game-changer in cybersecurity, why going back to basics is still the best strategy for security programs, and what’s ahead for Socializing Security in 2025. It’s a candid, insightful, and (as always) fun conversation you won’t want to miss! Chapters 00:00 Reflecting on 2024: A Year of Growth 04:09 Generative AI: Boon or Bane? 14:39 Personal Highlights and Relationships in 2024 19:58 The Journey of Podcasting 22:26 Facing Adversity Together 26:30 Learning from Challenges 28:58 The Importance of Soft Skills 31:45 Back to Basics in Cybersecurity 36:29 Reflecting on Growth and Future Goals…

Socializing Security

1
E034 - Researching Threats 48:46

5 weeks之前48:46

48:46

In this episode, Bharat Jogi, Senior Director of Vulnerability and Threat Research at Qualys, discusses the intricacies of threat research, the growing landscape of vulnerabilities, and the importance of responsible disclosure. He emphasizes the need for curiosity and creativity in cybersecurity roles, the challenges of managing an influx of vulnerabilities, and the balance between privacy and security. Bharat also shares insights from Qualys' annual vulnerability report, highlighting the staggering number of CVEs and the need for effective vulnerability management strategies. Bharat Jogi on LinkedIn: https://www.linkedin.com/in/bharat-jogi-3a680b13 Qualys Threat Research Unit: https://www.qualys.com/tru regreSSHion vulnerability info: https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server Chapters 00:00 Intro 00:38 Introduction to Threat Research 04:39 The Role of Threat Researchers 16:29 Responsible Disclosure and Communication 23:24 Annual Reports and Industry Insights 27:35 The Challenges of Patch Management 34:31 The Balance of Privacy and Security 39:37 Reflections 48:15 Outro…

Socializing Security

1
E033 - Navigating the Zero Trust Landscape 40:10

6 weeks之前40:10

40:10

In this episode, Nathanael Iverson, Chief Evangelist at Zentera, discusses the concept of Zero Trust in cybersecurity. He emphasizes the importance of incremental progress, understanding core principles, and the historical context of Zero Trust. The conversation explores the need for organizational change, executive support, and the business case for cybersecurity investments. Nathanael shares insights on identifying critical assets, risk management, and the journey of implementing Zero Trust effectively. Chapters 00:00 Introduction to Nathanael Iverson and Chief Evangelism 04:02 The History of Zero Trust 07:54 Core Principles of Cybersecurity 15:26 Incremental Approaches to Zero Trust Implementation 19:13 The Value of Zero Trust 24:39 The Zero Trust Journey 30:36 Organizational Impacts of Zero Trust 33:20 The Fight for Privacy vs. Security 37:37 Reflections 39:38 Outro Nathanael on LinkedIn: https://www.linkedin.com/in/nathanaeliversen/ Zentera: https://www.zentera.net…

Socializing Security

1
E032 - Penetration Testing 40:00

7 weeks之前40:00

40:00

In this episode, Brian and Milou talk with Martin Edwards, a seasoned penetration tester, discussing the intricacies of cybersecurity, the importance of curiosity in IT careers, and the dynamics between red and blue teams. They explore the role of certifications, share fascinating stories from the field, and delve into the hiring process for penetration testers. The conversation also touches on physical penetration testing techniques and the ongoing debate between privacy and security in today's tech landscape. Chapters 00:00 Introduction to Martin Edwards and Penetration Testing 04:24 Understanding Red Team vs Blue Team Dynamics 06:50 The Value of Certifications in Cybersecurity 08:16 Favorite Penetration Testing Stories 14:05 Physical Pen Testing Techniques and Insights 21:07 The Business Value of Penetration Testing 32:07 The Evolving Landscape of Privacy and Security 36:10 Reflections…

Socializing Security

1
E031 - Socializing Unspoken Security 41:57

8 weeks之前41:57

41:57

In this episode, AJ Nash, founder of Unspoken Security, discusses the challenges and rewards of podcasting in the security space. He emphasizes the importance of authenticity in conversations about security, the need to break the taboo surrounding these discussions, and the generational shift in attitudes towards privacy and security. The conversation also touches on the role of ignorance in security awareness and the challenges of personal security practices. AJ shares insights on creating safe spaces for dialogue and the importance of community in enhancing security awareness. Connect with AJ: https://www.unspokensecurity.com/ https://www.linkedin.com/in/nashaj Chapters 00:00 Introduction to AJ Nash and Unspoken Security Podcast 00:37 Introduction to AJ Nash 03:45 Podcasting About the Unspoken Parts of Cybersecurity 08:18 Making Security More Approachable 14:07 Breaking the Taboo: Why Security Topics Remain Unspoken 19:23 The Challenge of Acknowledging Ignorance 32:20 The State of Privacy in a Digital Age 38:15 Reflections 41:25 Outro…

Socializing Security

1
E30 - Finding a Job in Tech (Part 2) 34:38

9 weeks之前34:38

34:38

In this episode, Milou and Brian discuss the challenges and reflections surrounding job loss, emphasizing the importance of mental health and support during career transitions. They share personal stories and insights on how to navigate the job search process, the significance of networking, and the human element in hiring. The conversation highlights the need for empathy and understanding in both job seekers and hiring managers, encouraging proactive outreach and support for those affected by layoffs. Chapters 00:00 Introduction 01:04 Using Your Job Loss to Help Others 06:32 The Importance of Taking a Break 11:33 Finding Silver Linings in Tough Times 13:56 Using Forced Downtime Wisely 18:19 Building Personal Brands and Freelancing 20:37 The Importance of Mental Health in Job Searching 26:02 Hiring for Potential vs. Experience 32:33 Wrapping Up 34:17 Outro…

Socializing Security

1
E29 - Finding a Job In Tech (Part 1) 38:09

12 weeks之前38:09

38:09

In this episode of Socializing Security, Milou and Brian discuss the complexities of job searching during the holiday season, sharing personal experiences with layoffs and the evolving job market in the technology industry. They explore the impact of freelancing and consulting as alternative income sources, the importance of financial planning for job security, and the value of building a supportive network during transitions. The conversation emphasizes lessons learned from their experiences and offers insights for navigating the current job landscape. Chapters 00:00 Navigating Job Market Challenges During the Holidays 03:03 Personal Experiences with Layoffs and Job Searches 05:48 The Impact of Freelancing and Consulting 09:04 Financial Planning and Job Security 12:09 Building a Supportive Network During Job Transitions 14:51 Lessons Learned and Moving Forward 21:02 Navigating Job Search Challenges 24:25 The Importance of Networking 27:13 Effective Job Posting Strategies 29:33 Leveraging Social Media for Job Search 32:51 Building a Personal Brand 35:14 Utilizing Diverse Platforms for Job Opportunities 38:33 The Value of Informational Interviews…

Socializing Security

1
E28 - Cyber Frameworks All The Way Down 34:03

13 weeks之前34:03

34:03

In this episode of Socializing Security, Milou and Brian discuss various cybersecurity frameworks, their applications, and the importance of compliance in building effective information security programs. They explore the NIST Cybersecurity Framework, MITRE frameworks, CIS Critical Security Controls, and compliance standards like SOC 2 and ISO 27001. The conversation emphasizes the need for organizations to adopt a comprehensive approach to cybersecurity that goes beyond mere compliance, focusing on continuous improvement and maturity models to enhance security posture. Chapters 00:00 Introduction and Context Setting 01:34 Exploring Cybersecurity Frameworks 09:24 Deep Dive into NIST Cybersecurity Framework 12:48 Understanding MITRE Frameworks 15:01 CIS Critical Security Controls Overview 18:17 Compliance Frameworks: SOC 2 and ISO 27001 21:30 Governance and IT Management Frameworks 25:35 Industry-Specific Compliance Standards 29:51 Maturity Models in Cybersecurity 35:49 Conclusion and Future Discussions…

Socializing Security

1
E27 - Hacking Mental Health 41:57

14 weeks之前41:57

41:57

In this episode, Amanda Berlin discusses the importance of mental health in the tech industry, particularly within cybersecurity. She shares her journey in founding Mental Health Hackers, a nonprofit organization aimed at providing support and safe spaces for individuals struggling with mental health issues. The conversation explores the challenges faced by tech professionals, the impact of keynote talks on mental health awareness, and the significance of community support. Amanda emphasizes the need for open discussions about mental health, coping strategies, and the balance between privacy and security in the tech world. Links and Resources https://www.mentalhealthhackers.org https://infosecindustry.com/category/podcasts/brakeing-down-security/ If you need help, and it’s an emergency, don’t hesitate and call 988. For less severe situations, Mental Health Hackers has a wealth of information here: https://www.mentalhealthhackers.org/resources-and-links/ Chapters 00:00 Introduction to Amanda Berlin 04:39 The Birth of Mental Health Hackers 10:36 Expanding Mental Health Conversations in Tech 13:08 Helping Others With Mental Health Hackers 21:56 Giving People Space for Mental Health 28:31 Finding Professional Help 32:17 The Fight for Privacy 36:24 Reflections 41:25 Outro…

Socializing Security

1
E26 - Cyber Resilience 31:44

15 weeks之前31:44

31:44

In this episode, Milou and Brian delve into the concept of cyber resiliency, exploring its definition, importance, and the various components that contribute to a robust cyber resilience program. They discuss the nuances of cyber recovery compared to traditional disaster recovery, the significance of incident response planning, and the role of cyber insurance in mitigating risks. The conversation emphasizes the need for organizations to consider the maturity of their cyber resilience plans, ensuring continuous improvement and adaptation to the ever-evolving cybersecurity landscape. Further reading: - In retrospect: Normal Accidents: https://www.nature.com/articles/477404a - NIST Cybersecurity Framework: https://www.nist.gov/cyberframework Chapters 00:00 Introduction to Cyber Resiliency 03:14 Understanding Cyber Resilience 08:39 Cyber Resilience vs. Disaster Recovery 14:10 Building a Cyber Resiliency Program 19:47 The Role of Cyber Insurance 23:51 Testing with Tabletop Exercises 26:49 Measuring Maturity of Cyber Resilience 31:13 Outro…

Socializing Security

1
E25 - Securing Databases 35:31

16 weeks之前35:31