What an incredible season it’s been on the Breakpoint Security Podcast! From decoding API security with Bucchi Reddy to diving into SOC (un)automation with Dr. Anton Chuvakin, this season was packed with insights, stories, and actionable advice from some of the brightest minds in cybersecurity.

This video shares some interesting highlights from the Season. Which was your favourite episode of the season? Mention in the comments below :)

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

In this episode of the Breakpoint Security Podcast, we dive into the evolving world of Security Operations Centers (SOC) with Dr. Anton Chuvakin, Security Advisor at the Office of the CISO, Google Cloud.

Key discussion points include:

• Event Correlation: Exploring the automation of correlating security events in real-time and at scale. When should we rely on automation, and where does human expertise still play a vital role?
• Threat Detection & Response: A deep dive into machine learning (ML) and behavior-based analytics for threat detection, including insider threats and the impact of UBA/UEBA on SOC operations.
• Automated Response: Insights & limits of leveraging SOAR platforms to streamline incident response, the boundaries of automated remediation, and real-world use cases like quarantining devices or resetting accounts.
• Threat Hunting: How organizations can fine-tune automation to enhance predictive accuracy and overcome the limitations of AI in identifying potential threats.

Dr. Chuvakin shares technical insights, real-world examples, and practical advice, making this a must-watch for anyone looking to optimize their SOC operations.

Recommended reading/viewing for practitioners:

https://cloud.withgoogle.com/cloudsecurity/podcast/ 

https://medium.com/anton-on-security/security-correlation-then-and-now-a-sad-truth-about-siem-fc5a1afb1001 

https://medium.com/anton-on-security/stop-trying-to-take-humans-out-of-soc-except-wait-wait-wait-e19c5887ef2f 

https://medium.com/anton-on-security/crosspost-a-simple-soar-adoption-maturity-model-dacf61ae857b 

https://medium.com/anton-on-security/about-threat-intel-retro-matching-5d94f2cc1991 

https://cloud.google.com/blog/topics/threat-intelligence/gemini-for-malware-analysis 

https://medium.com/anton-on-security/stop-trying-to-take-humans-out-of-soc-except-wait-wait-wait-e19c5887ef2f 

https://medium.com/anton-on-security/anton-and-the-great-xdr-debate-part-1-8ed148c3cee4 

https://cloud.withgoogle.com/cloudsecurity/podcast/ep75-how-we-scale-detection-and-response-at-google-automation-metrics-toil/ 

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

When even a seasoned security professional thinks about cryptography, the obvious areas are encryption at rest and in transit. But modern cryptography has penetrated our lives - in the areas we don’t even think about.  It works its magic in  IoT devices, in the cloud, while we shop, and even in the car we drive!

Guest: Sandip Dholakia, Principal Security architect and co-chair of Cryptography CoE at SAP Global Security & Compliance.

Glossary

• ECM = Engine Control Module
• BCM = Body Control Module
• RFM = Radio Frequency Module

Recommended reading/viewing, Paper(in this topic) for practitioners

• Modern Cryptography - The Practical Guide
  • For India: https://www.shroffpublishers.com/books/9789355426079/
  • For other countries: https://bit.ly/3X36gel
• Patent Link: https://patents.google.com/patent/US8056538B2/en
• Where Things Fall Apart, Matthew Green
• Cybersecurity in Automotive: Mastering the Challenge
• https://www.metabaseq.com/threat/car-hacking-current-trend-in-car-theft/ 

Follow us on LinkedIn: https://www.linkedin.com/company/breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

Guest: Prashant Mahajan, Director for Payatu Australia Pty Ltd and OzHack

The Cybersecurity landscape is driven by the increasing complexity and integration of systems. One major challenge is the proliferation of interconnected devices and platforms, which expand the attack surface and create numerous entry points for malicious actors. Additionally, the rapid adoption of cloud services and virtualization technologies introduces new vulnerabilities and requires robust security measures that are often inadequately implemented.

Furthermore, the rise of sophisticated attack techniques, such as advanced persistent threats (APTs) and zero-day exploits, further complicates the defense mechanisms needed to protect infrastructure. Addressing these challenges requires a multi-faceted approach, including advanced threat detection, continuous monitoring, and enhanced collaboration across the cybersecurity community.

In this episode we explore this through some very interesting stories from Prashant M. What can really go wrong in our IT infra and how attackers can leverage our assumptions.

Recommended reading/viewing for practitioners:

ADRecon:

• https://github.com/adrecon/ADRecon
• https://github.com/adrecon/AzureADRecon
• https://www.defcon.org/html/defcon-26/dc-26-demolabs.html
• https://www.blackhat.com/us-18/arsenal/schedule/index.html#adrecon-active-directory-recon-11912

A few recommended books for getting into Pen Testing:

• The Web Application Hacker's Handbook: Finding and Exploiting Security Flaws
• The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities
• Network Security Assessment: Know Your Network
• Silence on the Wire: A Field Guide to Passive Reconnaissance and Indirect Attacks by Michal Zalewski
• Tangled Web: A Guide to Securing Modern Web Applications by Michal Zalewski
• Black Hat Python, 2nd Edition: Python Programming for Hackers and Pentesters by Justin Seitz and Tim Arnold
• The Hacker Playbook 3: Practical Guide To Penetration Testing

Follow us on LinkedIn: https://www.linkedin.com/company/breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

A "notorious hacker" by FOX25 Boston, "World Class Hacker" by National Geographic Breakthrough Series and described as a "paunchy hacker" by Rolling Stone Magazine. He however prefers if people refer to him simply as a Hacker, Helper & Human.
This is none other than our Guest- Jayson E. Street, Chief Adversarial Officer at Secure Yeti.

In today's highly digitized world, organizations are increasingly susceptible to social engineering attacks, where malicious actors manipulate individuals/employees into divulging confidential information. Despite advanced technical defenses, attackers exploit human psychology to breach security perimeters. Techniques such as phishing emails, pretexting, and baiting continue to trick employees into revealing passwords, granting access to sensitive systems, or clicking on malicious links. 

As digital enterprises expand their online footprints, the potential attack surface grows, making it imperative for organizations to adopt robust social engineering defenses. Failure to address this threat can lead to significant financial losses, reputational damage, and operational disruptions.

This is a big one and loaded with fun stories by Jayson. 
Stay tuned for this next one- the Rapid Fire with Jayson Street.

Episode recommendations/Links:
His Book- Dissecting the Hack: The F0rb1dd3n Network (Jayson Street)
His website: https://jaysonestreet.com/

Follow us on LinkedIn: https://www.linkedin.com/company/breakpoint-security-podcast
YouTube: https://youtube.com/@breakpointsecuritypodcast

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

In this episode, we're diving deep into "Gamification for Hacking Humans" with Jayson E. Street, Chief Adversarial Officer at Secure Yeti. 

We discuss how attackers are exploiting human psychology through techniques like #phishing and pretexting and how #AI is making #socialengineering attacks even more sophisticated. With the rise of remote work, these #threats are more real than ever!

Want to know how your organization can defend against these tactics? Check out the follow up full video for valuable insights into protecting your team from manipulation. #cybersecurity 

Follow us on LinkedIn: https://www.linkedin.com/company/breakpoint-security-podcast
YouTube: https://youtube.com/@breakpointsecuritypodcast

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

Interested in Cyber Reporting? Check out this episode where we discuss - Interpreting Security Metrics to understand real business Risk.

Guest: Runa Desai Dalal, Cyber Risk Leader at Accenture
Cyber Strategy| CISO Dashboard| Cyber KPI| Cyber Analytics| Business Continuity |Enterprise Risk|Mentor| Coach| Guide|

Understanding security data within an organization involves synthesizing data from various domains such as risk management, DevSecOps, and SOC operations to create meaningful correlations. By interpreting these security metrics, businesses can transform raw data into actionable insights that highlight potential risks and inform strategic decisions, ultimately enhancing their overall security posture and reducing business risk.

Recommended reading/viewing for practitioners:

Cybersecurity measurement
https://www.nist.gov/cybersecurity-measurement

Reporting Cyber Risk to the Board: Real Life Examples
https://youtu.be/cwvwvzMo44I?si=HNxXqppzVvInH4vp

Reporting Cyber Risk to the Board by Omar Khwaja
https://youtu.be/1CLG0bJLqFo?si=h8yIGMrcS5I9G7y8
---

Follow us on LinkedIn: @breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

TOPIC: Mastering Application Threat Modeling at Scale

Guest: Tony UV, CEO & Founder of VerSprite Security, and the Author of Risk Centric Threat Modeling & PASTA Methodology

We dive deep into everything from effective threat modeling techniques for Agile and waterfall applications to scaling threat modeling across large application ecosystems. Tony shares his insights on automating this critical process, handling technical and cultural dependencies, and ensuring security practices keep up with rapid development velocity.

If you're looking to understand what a robust threat modeling program looks like and how to measure its success, you're at the right place!

Recommended reading/viewing for practitioners:

• https://www.linkedin.com/posts/tonyuv_technology-cybersecurity-threatmodeling-activity-7136353298416107520-DOxu?utm_source=share&utm_medium=member_ios- https://versprite.com/blog/organizational-threat-model-enterprise-risk-assessment/
• https://versprite.com/blog/threat-modeling-against-supply-chains/
• https://www.amazon.com/Risk-Centric-Threat-Modeling-Simulation/dp/0470500964?dplnkId=35a18e4f-f9bb-48cc-b747-46fae78757f4&nodl=1

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

In this episode, we delve into the intricate world of AI security, tackling the dual challenge of safeguarding artificial intelligence systems and utilizing AI to enhance cybersecurity.

Guest: Tamaghna Basu, Founder & CEO, DeTaSECURE

Join us as we unravel the complexities of AI security and provide valuable insights that can help you stay ahead in the ever-evolving cybersecurity landscape. Whether you're a security professional, an AI enthusiast, or simply curious about the intersection of these fields, this episode offers critical knowledge and practical tips to enhance your understanding and approach to AI security.

Glossary for Listeners

Artificial Intelligence (AI) is the creation of computer systems that can perform tasks normally requiring human intelligence. This includes recognizing speech, making decisions, and learning from data. Imagine a smart assistant like Siri or Alexa—they use AI to understand and respond to your requests.

Machine Learning (ML)

• A subset of AI focused on developing algorithms that allow computers to learn from and make predictions or decisions based on data.

Neural Networks

• Computational models inspired by the human brain, consisting of interconnected nodes (neurons) that process information in layers to recognize patterns and make decisions.

Natural Language Processing (NLP)

• A branch of AI that enables machines to understand, interpret, and respond to human language in a natural way, including tasks like translation, sentiment analysis, and chatbots.

Deep Learning

• A type of machine learning involving neural networks with many layers (deep neural networks), which excel at analyzing large datasets and performing complex tasks such as image and speech recognition.

Adversarial Attacks

• Techniques used to deceive AI models by introducing malicious input, causing the model to make incorrect predictions or classifications, highlighting vulnerabilities in AI systems.

Recommended reading/viewing for practitioners:

• Tamaghna’s BackHat Talk- Clone with AI : https://www.youtube.com/watch?v=XafJT7I71yo
• Adversarial Attacks: https://youtu.be/t5-vMJDFr8E
• T-Mobile Breach: https://www.t-mobile.com/news/network/cyberattack-against-tmobile-and-our-customers
• Samsung bans ChatGPT: https://www.forbes.com/sites/siladityaray/2023/05/02/samsung-bans-chatgpt-and-other-chatbots-for-employees-after-sensitive-code-leak/
• OpenAI Data Breach: https://openai.com/index/march-20-chatgpt-outage/

Follow us on LinkedIn: @breakpoint-security-podcast
Audio on Buzzsprout: https://breakpoint.buzzsprout.com

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy

Learn to DevOpsify your Threat Detection Development!

Guest: Wasim Halani, Director - Detection Engineering at Securonix

SOC teams face a continuous challenge of evolving threats and a difficulty in developing #analytics to detect such #threats. Recent times have seen the Detection Engineering function evolve along the lines of Software Engineering - which means the Agile and DevOps methodologies also apply to new detections being developed and deployed. 

Continuous development, continuous testing and continuous deployment are part of the game.
In this episode, we dive into the challenges faced by traditional #SOC teams in building effective threat detections, explore why threat detection is inherently difficult, and discuss how #DevOps principles can enhance this process. We also cover the groundwork for implementing these principles and the most challenging aspects of developing a #detection #engineering #program.

Recommended reading/viewing for practitioners:

1. https://medium.com/anton-on-security/can-we-have-detection-as-code-96f869cfdc79
2. https://www.securonix.com/blog/ddlc-detection-development-life-cycle/
3. https://medium.com/snowflake/detection-development-lifecycle-af166fffb3bc

Follow us on LinkedIn: @breakpoint-security-podcast
Breakpoint Youtube: BreakpointSecurityPodcast
https://youtube.com/@breakpointsecuritypodcast

I would love to hear your suggestions and feedbacks, please DM me. If you liked this episode, please share with others in the community. It always means a lot!

If you’re interested in a security challenge that you’re facing or would like to hear from a specific speaker/team, let me know. Buzz me on Twitter or LinkedIn; checkout my handles below:

• Twitter: @NeeluTripathy
• LinkedIn: neelutripathy