Asset Management

<body>We interview the co-founder and CTO of Fleet to understand why good, cross platform MDM/EMM has been such a challenge for so many years. Want good Windows device management? You're probably going to compromise on MacOS management. Ditto for Windows if you prioritize your Macs. Want good Linux device management? It doesn't exist.</body>

<body>We interview the co-founder and CTO of Fleet to understand why good, cross platform MDM/EMM has been such a challenge for so many years. Want good Windows device management? You're probably going to compromise on MacOS management. Ditto for Windows if you prioritize your Macs. Want good Linux device management? It doesn't exist.</body>

<body>Hopefully, Fleet can change all that in 2024, as they aim to complete their support for all major platforms, using the open source OSQuery project as their base.</body>

<body>Hopefully, Fleet can change all that in 2024, as they aim to complete their support for all major platforms, using the open source OSQuery project as their base.</body>

<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://github.com/zwass">Zach's GitHub</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=3RzT-Yk8Hzg">Zach's Conf42 DevSecOps Presentation on Securing the endpoint with open source software</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=srprZ2NgRgk">GopherCon 2022: Collect First, Ask Questions Later</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=hBtYFm2m2Lo">Glitches in the Matrix, or Taming Agent Chaos</a></li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12432″} podcast from PPWorks

Governance, Risk and Compliance

Endpoint/Device Security

2024: The Year Cross-Platform Endpoint Management Finally Gets Good? – Zach Wasserman – ESW #347

<body>We sit down with the father of the SBOM, Allan Friedman, to discuss examples of where we really need SBOMs, how to operationalize SBOMs, and how to identify and deal with bad things that may be in your SBOM! CISA's resources on SBOM are at cisa.gov/SBOM and anyone can find out more or ask for a meeting at SBOM@cisa.dhs.gov</body>

<body>We sit down with the father of the SBOM, Allan Friedman, to discuss examples of where we really need SBOMs, how to operationalize SBOMs, and how to identify and deal with bad things that may be in your SBOM! CISA's resources on SBOM are at cisa.gov/SBOM and anyone can find out more or ask for a meeting at SBOM@cisa.dhs.gov</body>

<body>This segment is sponsored by Eclypsium. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/eclypsium">https://securityweekly.com/eclypsium</a> to learn more about them!</body>

<body>This segment is sponsored by Eclypsium. Visit <a rel="noreferrer noopener" target="_blank" href="https://securityweekly.com/eclypsium">https://securityweekly.com/eclypsium</a> to learn more about them!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12495″} podcast from PPWorks

Supply chain

ICS/SCADA

SBOMs and Supply Chains – Allan Friedman – BTS #22

Digital Russian flag and a binary background cybersecurity concept with 0 and 1.

Vulnerability Management

News

Echoes of SolarWinds: JetBrains TeamCity servers under attack by Russia-backed hackers

<body>Russ runs the show solo with the absence of Dr. Doug to talk about Travel Security! He explains different aspects such as Personal Security, Asset Security, and Digital Security! Traveling is a lot of fun, but also requires a lot of responsibility. Don't be intimidated, use common sense, adhere to all of the points we mentioned above, stay away from problem areas, and we ensure you’ll have a great time!</body>

<body>Russ runs the show solo with the absence of Dr. Doug to talk about Travel Security! He explains different aspects such as Personal Security, Asset Security, and Digital Security! Traveling is a lot of fun, but also requires a lot of responsibility. Don't be intimidated, use common sense, adhere to all of the points we mentioned above, stay away from problem areas, and we ensure you’ll have a great time!</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12118″} podcast from PPWorks

Travel Security – SDL – SWN Vault

<body>Today, we discuss the state of attack surface across the Internet. We've known for decades now that putting an insecure service on the public Internet is a recipe for disaster, often within minutes. How has this knowledge changed the publicly accessible Internet? We find out when we talk to Censys's Aidan Holland today.</body>

<body>Today, we discuss the state of attack surface across the Internet. We've known for decades now that putting an insecure service on the public Internet is a recipe for disaster, often within minutes. How has this knowledge changed the publicly accessible Internet? We find out when we talk to Censys's Aidan Holland today.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12195″} podcast from PPWorks

Network Security

Critical Infrastructure Security

The State of Internet Attack Surface – Aidan Holland – ESW #339

<body>This week, we discuss Island's raise, unicorn status, and what that means for both the enterprise browser market and the cybersecurity market in general. We discuss Censys and the state of the external attack surface management market, or what they're trying to call, "exposure management". We discuss the details of the Okta breach in depth, and why we're worried about the larger impact it could have on the industry and vendor trust in general. Finally, we wrap up with some fun squirrel stories.</body>

<body>This week, we discuss Island's raise, unicorn status, and what that means for both the enterprise browser market and the cybersecurity market in general. We discuss Censys and the state of the external attack surface management market, or what they're trying to call, "exposure management". We discuss the details of the Okta breach in depth, and why we're worried about the larger impact it could have on the industry and vendor trust in general. Finally, we wrap up with some fun squirrel stories.</body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”12076″} podcast from PPWorks

AI/ML

Cybersecurity Unicorns Are Back, the Okta Breach Is Bad, & Don’t Invest in Startups – ESW #337

<body>As long as there are profits to be made, cybercriminals will continue to monetize enterprise assets—whether they be devices, applications, data, or users. It only takes one weak or unknown asset to compromise an entire organization. Brian will discuss why enterprises need to move away from assumption-based approaches to asset data and decision making to evidence-based asset intelligence to secure their environments quickly, easily, and at scale.</body>

<body>As long as there are profits to be made, cybercriminals will continue to monetize enterprise assets—whether they be devices, applications, data, or users. It only takes one weak or unknown asset to compromise an entire organization. Brian will discuss why enterprises need to move away from assumption-based approaches to asset data and decision making to evidence-based asset intelligence to secure their environments quickly, easily, and at scale.</body>

<body>This segment is sponsored by Sevco Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://www.securityweekly.com/sevcoisw">https://www.securityweekly.com/sevcoisw</a> to learn more about them!</body>

<body>This segment is sponsored by Sevco Security. Visit <a rel="noreferrer noopener" target="_blank" href="https://www.securityweekly.com/sevcoisw">https://www.securityweekly.com/sevcoisw</a> to learn more about them!</body>

<body>In this ISW interview, CRA's Bill Brenner catches up with Kevin Johnson of Secure Ideas for a chat about application security.</body>

<body>In this ISW interview, CRA's Bill Brenner catches up with Kevin Johnson of Secure Ideas for a chat about application security.</body>

<body>In this segment from ISW, Dakota State COO and General Counsel Stacy Kooistra talks to Bill Brenner about the university's effort create more cyber warriors.</body>