"The 443 - Security Simplified" Podcast | Secplicity
Secplicity
Subscribe
Get inside the minds of leading white-hat hackers and security researchers. Each week, we’ll educate and entertain you by breaking down and simplifying the latest cyber security headlines and trends. Using our special blend of expertise, wit, and cynicism, we’ll turn complex security concepts into easily understood and actionable insights.
Available episodes
Newest first
Oldest first
1 day ago
The NSA’s Guidance on Securing Authentication
This week we have all the acronyms as we cover a joint publication by CISA and the NSA with Identity and Access Management (IAM) best practices. We then cover some new proposed cybersecurity rules out of the Securities and Exchange Commission (SEC) before ending with an FBI takedown of a popular hacking forum.
Read More - The NSA’s Guidance on Securing Authentication
playlist_add
Mar 20, 2023
An Update on Section 230
On this week’s episode we look back to our initial monologue on Section 230 protections that allow the social media and the internet as a whole to function. We cap off the episode replay with a new discussion on a recent supreme court case that has the potential to dramatically impact the internet as […]
Read More - An Update on Section 230
playlist_add
Mar 13, 2023
Here Come The Regulations
On today’s episode, we cover two new sets of cybersecurity regulations, fresh off the heels of the White House’s National Cybersecurity Strategy publication, targeting different critical infrastructure sectors in the United States. We’ll also cover the latest in nation state activity targeting network connectivity appliances and end with some fun research into an oldie but […]
Read More - Here Come The Regulations
playlist_add
Mar 6, 2023
US National Cybersecurity Strategy
This week’s episode is all about the White House’s recently released National Cybersecurity Strategy. We’ll walk through the strategy from top to bottom and discuss the key elements most likely to impact individuals and organizations as well as our overall thoughts on the direction the US Federal Government is planning to take.
Read More - US National Cybersecurity Strategy
playlist_add
Feb 27, 2023
Cybersecurity’s Toll on Mental Health
This week on the episode we have a discussion about stress related issues impacting cybersecurity professionals and ways to combat them. Before that, we cover the latest news including new 0click exploit protection from Samsung, the latest update on GoDaddy’s security woes, and Twitters latest erratic move.
Read More - Cybersecurity’s Toll on Mental Health
playlist_add
Feb 21, 2023
Successfully Prosecuting a Russian Hacker
In today’s episode, we discuss a recent court case resulting in the succesful conviction of a Russian national tied to breaking in to several publicly traded US companies. We also cover the latest details on the ESXiArgs ransomware attacks that have been impacting organizations globally as well as the latest CISA alert on nation-state ransomware […]
Read More - Successfully Prosecuting a Russian Hacker
playlist_add
Feb 13, 2023
Live Audience MSP Q&A Panel
On this week’s very special episode of the podcast, we sit down with Matt Lee, Calvin Engen, and Scott Williamson, three MSP security and business experts for a Q&A panel in front of a live audience! We’ll cover everything from how MSPs and MSSPs should address the cyber threat landscape to what vendors can do […]
Read More - Live Audience MSP Q&A Panel
playlist_add
Feb 7, 2023
What is CVSS?
This week on the podcast we cover the Common Vulnerability Scoring System (CVSS) including how it works and some of its limitations. Before that though, we discuss a recent survey on the risks of ChatGPT’s usage in cyberattacks and the latest activity from Lazarus, the North Korean government hacking operation.
Read More - What is CVSS?
playlist_add
Jan 31, 2023
CISA Warns of Weaponized RMM Software
On today’s episode, we cover a recent Department of Justice operation that resulted in taking down a major ransomware organization. After that, we cover two recent publications from CISA, the first on malicious use of legitimate RRM software and the second giving guidance to K-12 on how to address cybersecurity concerns.
Read More - CISA Warns of Weaponized RMM Software
playlist_add
Jan 23, 2023
Report Roundup
This week on the podcast, we cover key findings from three individual reports published last week. In the first report we’ll dive into the world of blockchain analysis looking for illicit transactions. In the second report, we’ll cover the state of SMB security. The final report includes a discussion of overall financial crime involving stolen […]
Read More - Report Roundup
playlist_add
Jan 17, 2023
The RCE Vulnerability That Wasn’t
This week on the podcast we cover a recently-disclosed vulnerability in the popular JavaScript library JsonWebToken. After that, we give an update to weaponizing ChatGPT, the currently free Artificial Intelligence chat bot that has made waves since it’s release in November. We round out the episode with a wave farewell to Windows 7 and Windows […]
Read More - The RCE Vulnerability That Wasn’t
playlist_add
Jan 10, 2023
Reviving a Dead Botnet
This week on the podcast we cover a recent analysis by Mandiant on a Russia-based APT using a decade old botnet to deliver new attacks. Before that, we cover an update from LastPass about their most recent breach as well as the 200 million Twitter accounts leaked last week.
Read More - Reviving a Dead Botnet
playlist_add
Jan 3, 2023
Q3 2022 Internet Security Report
This week on the podcast we discuss key findings from the WatchGuard Threat Lab’s Q3 2022 Internet Security Report. We’ll cover everything from the top malware threats to the latest network attack trends targeting small and midsize enterprises globally and give practical defensive tips that anyone can use to keep their organizations safe. [PowerPress]
Read More - Q3 2022 Internet Security Report
playlist_add
Dec 20, 2022
2023 Security Predictions
It’s that time of year for us to discuss the WatchGuard Threat Lab’s 2023 cyber security predictions! On this episode, we will cover the six predictions plus another two that didn’t make the cut as well as some defensive strategies to try and help stop them from coming true.
Read More - 2023 Security Predictions
playlist_add
Dec 12, 2022
Apple’s New Privacy Expansion
This week on the podcast, we cover Apple’s latest announcement of expanded privacy and security features for their users. Before that, we cover a major breach in the Android ecosystem followed by a new Internet Explorer (yes, that still exists) 0-day vulnerability.
Read More - Apple’s New Privacy Expansion
playlist_add
Dec 6, 2022
Hacking Hyundai
On this week’s episode, we cover the latest in car hacking, this time involving a vulnerability that could have given remote attackers full control over certain Hyundai models’ doors, lights and engine. After that, we discuss the latest breach impacting a major password management app and how it’s different from previous ones we’ve seen. We […]
Read More - Hacking Hyundai
playlist_add
Nov 29, 2022
CISA Incident Response Learnings
On today’s episode we cover a pair of alerts from the Cybersecurity Infrastructure and Security Agency (CISA), one detailing the tools, tactics and procedures from a prolific ransomware organization and another walking through a recent incident response engagement CISA completed with a federal agency. Before that though, we learn about what happens when you use […]
Read More - CISA Incident Response Learnings
playlist_add
Nov 21, 2022
Attack Surface Management
This week on the podcast we dive into the world of attack surface management. We discuss what your attack surface is made up of including some areas you may not have thought of and then cover the best ways to reduce and ultimately protect it.
Read More - Attack Surface Management
playlist_add
Nov 14, 2022
2022 Cybersecurity Predictions Recap
This week on the podcast we take a look back at our 2022 cybersecurity predictions and give ourselves a grading on how well we did. From cyber insurance to space hacks, we’ll cover each of the 6 predictions we made last December and discuss why we think they did or did not come to fruition. […]
Read More - 2022 Cybersecurity Predictions Recap
playlist_add
Nov 7, 2022
Why OpenSSL Downgraded Their Vulnerability
On this episode we cover the much anticipated OpenSSL vulnerabilities that were disclosed and patched on November 1st and why the 6 year streak of no critical issues continues. After that, we dive back in to election security and the hacking activity that could have the most impact. We end with an update from Apple […]
Read More - Why OpenSSL Downgraded Their Vulnerability
playlist_add
Oct 31, 2022
CISA’s Cybersecurity Performance Goals
This week on the podcast we cover CISA’s freshly-released Cybersecurity Performance Goals (CPGs) designed to help smaller organizations bridge the gap between frameworks and practical implementation. After that, we discuss a new bill working its way through the US Senate designed to address open source software security risks. Finally, we end with a research post […]
Read More - CISA’s Cybersecurity Performance Goals
playlist_add
Oct 26, 2022
Ransomware TTPs Deep Dive
This week on the podcast, we cover another remote code execution vulnerability that looks extremely concerning on the surface but might be less serious in reality. After that, we cover two research articles by Microsoft on ransomware campaigns including defensive takeaways for all organizations.
Read More - Ransomware TTPs Deep Dive
playlist_add
Oct 17, 2022
Cyber Energy Star
This week on the podcast we cover a proposed program from the White House to create an Energy Star-like label for cybersecurity in consumer products. Before that, we cover two other updates from the federal government including a new open source tool from CISA and the latest reincarnation of Privacy Shield.
Read More - Cyber Energy Star
playlist_add
Oct 11, 2022
Q2 Threats and Guilty CSOs
This week on the podcast, we focus on highlighting WatchGuard’s Q2 Internet Security Report, covering the latest threat trends and what you can do to avoid them. However, we also pack in our security news segment, with an Optus breach update from an Australian IT and security expert and WatchGuard Partner, the latest on the […]
Read More - Q2 Threats and Guilty CSOs
playlist_add
Oct 3, 2022
Optus Opts Out of PII Protection
This week on the podcast, we cover an Optus data breach that could affect over 10 million Australian customers, and what they should do to protect themselves. We highlight a new malware-as-a-service (MaaS) information stealer that lowers the cost and technical bar for cybercriminals. Finally, we end with some good news about how the FBI […]
Read More - Optus Opts Out of PII Protection
playlist_add
Sep 27, 2022
An Uber Hack
This week on the podcast, we cover Uber’s most recent security incident and the alleged individual behind it. After that, we dive into the world of gas station operational technology and potential security weaknesses in one tool. Finally, we end with a chat about the FBI CISO Academy and how the FBI as a whole […]
Read More - An Uber Hack
playlist_add
Sep 14, 2022
Are CISOs Legally Accountable for Security?
This week on the podcast we cover a court case that is attempting to hold the ex-CISO of a popular tech company accountable for their actions involving a data breach dating back to 2016. Before that though, we dive in to a novel command and control (C2) method as well as the latest commoditization of […]
Read More - Are CISOs Legally Accountable for Security?
playlist_add
Sep 6, 2022
A Day in the Life of a Malware Analyst
This week on the podcast we sit down with Ryan Estes, a malware analyst on the WatchGauard Threat Lab team, to discuss what it takes to rapidly differentiate malware from goodware. In this interview, we discuss what it takes to get in to malware analytics, popular tools to help with the task, and resources anyone […]
Read More - A Day in the Life of a Malware Analyst
playlist_add
Aug 29, 2022
The Twitter Thing
This week on the podcast, we cover the big whistleblower complaint against Twitter including our hot takes on who to believe. We then cover an FBI alert on evasion techniques cyber criminals are deploying in their authentication attacks before finishing with a highlight of a very convincing phish.
Read More - The Twitter Thing
playlist_add
Aug 22, 2022
2022 Black Hat and Def Con Recap
This week on the podcast we review our time at this year’s Black Hat and Def Con cybersecurity conferences in Las Vegas. We’ll cover how the WatchGuard CTF contest went this year and discuss takeaways from a few of the briefings we attended.
Read More - 2022 Black Hat and Def Con Recap
playlist_add
Aug 9, 2022
Hacker Summer Camp 2022
This week on the podcast, we give our preview of the Black Hat and Def Con cybersecurity conferences, aka Hacker Summer Camp. Throughout the episode, we’ll discuss the briefings and panels we’re most excited to see and what we hope to get out of them. If you’re not able to attend either conference in person […]
Read More - Hacker Summer Camp 2022
playlist_add
Aug 2, 2022
Private Sector Offensive Actors
This week on the podcast we discuss the shifting landscape of phishing attacks in the wake of Microsoft’s efforts to block malicious Office macros. We then cover a private organization that has been found not just selling exploit tools but also participating in offensive cyber operations. We end the episode with a review of IBM […]
Read More - Private Sector Offensive Actors
playlist_add
Jul 25, 2022
USA’s Answer to GDPR
This week on the podcast, we discuss the current cyber skills gab and a federal program designed to help combat it. After that, we dive in to the American Data Privacy protection Act and what it potentially means if passed by US Congress. We end this week with a quick update on Microsoft’s attempts to […]
Read More - USA’s Answer to GDPR
playlist_add
Jul 21, 2022
Rolling PWN
This week on the podcast we cover the latest in car hacking research, this time targeting vulnerabilities in remote keyless entry. We then dive in to Microsoft’s latest research on Adversary in the Middle (AitM) attacks and end with key findings from the latest WatchGuard Threat Lab quarterly Internet Security Report.
Read More - Rolling PWN
playlist_add
Jun 27, 2022
Grading Gartner’s Guesses
This week on the podcast, we discuss two recent security reports, one on the topic of open source software and the other on “insecure by design” in the Operational Technology (OT) space. We go through the key findings from each report and what our thoughts are on their accuracy within the real world. We end […]
Read More - Grading Gartner’s Guesses
playlist_add
Jun 21, 2022
200th Episode Extravaganza
In celebration of our 200th episode, this week on the podcast we take a look back at the last few years and revisit some of our favorite episodes. Along the way, we’ll give updates on a few of our cybersecurity predictions from years past that took just a little bit longer than anticipated to come […]
Read More - 200th Episode Extravaganza
playlist_add
Jun 14, 2022
Robux Ransomware
This week on the podcast we cover the latest and most bizarre ransomware extortion demand we’ve seen in recent memory. Before that though, we cover the latest updates on nation state hacking activity including threats of escalating attacks leading to physical retaliation.
Read More - Robux Ransomware
playlist_add
Jun 9, 2022
0-Days for Days
This week on the podcast we cover two fresh 0-day vulnerabilities, one in Windows and another in Atlassian’s Confluence, both under active exploitation in the wild. Additionally, we cover Costa Rica’s no good, terrible month in Cybersecurity.
Read More - 0-Days for Days
playlist_add
May 31, 2022
Package Hijacking
This week on the podcast, we discuss the line between ethical security research and malicious activity thanks to a compromised open source software package. After that we cover the latest industry to fall victim to Ransomware and end by highlighting a 0-click vulnerability in Zoom’s message system discovered by Google Project Zero.
Read More - Package Hijacking
playlist_add
May 23, 2022
Building Security Strategies with Matt Lee
This week on the podcast we sit down for a chat with Matt Lee, Sr. Director of Security and Compliance at Pax8 and well-known cyber security educator, to discuss security strategies for MSPs and midsize enterprises in the face of a dynamic threat landscape. We cover everything from picking a framework to getting buy in […]
Read More - Building Security Strategies with Matt Lee
playlist_add
May 17, 2022
CISA Guidance for MSPs
This week on the podcast we walk through CISA alert AA222-131A which gives bulleted guidance to MSPs and customers of MSPs on how to navigate their relationship security as threats targeting service providers continue to grow. We’ll walk through the list and hit each recommendation and give our own guidance on top of them for […]
Read More - CISA Guidance for MSPs
playlist_add
May 9, 2022
The REturn of REvil?
This week on the podcast we discuss the latest rumblings around the return of the prolific ransomware-as-a-service organization REvil. Before that though, we dive in to the latest tools, tactics and procedures of the Lazarous nation state hacking group as well as a recently discovered form of fileless malware evasion.
Read More - The REturn of REvil?
playlist_add
May 2, 2022
Most Exploited Vulnerabilities of 2021
This week on the podcast, we dive into CISA’s list of the 15 most exploited vulnerabilities in 2021. We’ll walk through each flaw and give a refresher on their history and how attackers have exploited them. After that, we cover the latest ransomware-as-a-service threat that has victimized over 60 organizations worldwide before ending with a […]
Read More - Most Exploited Vulnerabilities of 2021
playlist_add
Apr 26, 2022
Psychic Signatures
This week on the podcast we cover a critical and easily-exploited vulnerability in how some recent versions of Java handle cryptography. We also discuss the latest in a series of alerts from CISA and international intelligence organizations on cyber threats to critical infrastructure. Finally, we end with a condensed overview of the latest internet security […]
Read More - Psychic Signatures
playlist_add
Apr 18, 2022
Hidden Hafnium
This week on the podcast, we cover the latest evasion and persistence techniques from the state-sponsored threat actors known as Hafnium. Then, we dive into the world of ICS and SCADA devices to discuss the latest joint-agency alert from the US Government. We then round out the episode by highlighting some recent research into spoofing […]
Read More - Hidden Hafnium
playlist_add
Apr 4, 2022
Patch Management Lag
This week on the podcast we discuss one of the most rampant yet easily resolved risks facing many organizations today, not installing vendor-supplied security fixes. We’ll cover some of the reasons why organizations might fall behind on patching as well as the potentially serious consequences. After that, we cover the latest 0-day Chromium vulnerability before […]
Read More - Patch Management Lag
playlist_add
Mar 28, 2022
The Rise and Fall of Lapsus$
This week on the podcast we cover the hacking organization Lapsus$ including their tactics, targets, and how they ended up with several members arrested last week. After that, we cover the cyber cold war and threats of Russian revenge attacks against the US energy sector that prompted classified meetings with potentially targeted organizations.
Read More - The Rise and Fall of Lapsus$
playlist_add
Mar 21, 2022
SATCOM Security
This week on the podcast, we cover a CISA alert on securing satellite communications (SATCOM) in the wake of several recent incidents involving providers and networks in eastern Europe. After that, we check in on the TSA’s cybersecurity rules for pipeline distribution networks and how adoption is going so far in the industry.
Read More - SATCOM Security
playlist_add
Mar 14, 2022
US-Backed Cryptocurrency
This week on the podcast, we cover last week’s Executive Order from the White House that lays the foundation for a United States Central Bank Digital Currency, or CBDC, and what it means for the future of Cryptocurrency. We also discuss recent research from Mandiant on APT41, a Chinese threat actor that has recently turned […]
Read More - US-Backed Cryptocurrency
playlist_add
Mar 9, 2022
Conti Leaks
This week on the podcast we cover the recent leaks highlighting the inner workings of the Conti ransomware group that started with chat logs and grew to entire source code dumps. We then round out the episode by discussing the recent Nvidea breach and how some of the stolen information might fuel future attacks.
Read More - Conti Leaks
playlist_add
Feb 28, 2022
Rewind: Can We Trust Facial Recognition
This week on the podcast we dig back into our archives for an episode that originally aired back in July 2020 where we discussed one of our analysts first-hand research into facial recognition biases.
Read More - Rewind: Can We Trust Facial Recognition
playlist_add
Feb 22, 2022
BGP-Powered Crypto Theft
This week on the podcast we cover a cryptocurrency heist that abused the backbone of the internet to steal millions of dollars of coins. In related news, we also cover the FBI’s new Virtual Asset Exploitation Team and their focus on tracking cryptocurrency-related cybercrime as well as a recent alert on business email compromise from […]
Read More - BGP-Powered Crypto Theft
playlist_add