Byte Sized Security

In this eye-opening episode, host Marc David takes a critical look at the proliferation of self-proclaimed cybersecurity 'experts' on YouTube. We delve into the mechanics of content creation, the business model behind it, and the glaring gap of practical experience. Ready for a reality check? Tune in!

• 00:00 - Introduction: The Fluff & Stuff of Cybersecurity YouTube Videos
• 01:46 - Core Argument 1: The Content Mill
• 03:25 - Core Argument 2: The Business of YouTube
• 05:28 - Core Argument 3: Missing Practical Experience
• 07:15 - Counter-Arguments: The Other Side of the Coin
• 08:58 - Conclusion: A Byte-Sized Reality Check
• 10:15 - Call to Action & Community Poll: How Do You Vet YouTube Cybersecurity Experts?

1. Expertise ≠ Popularity: A large subscriber count doesn't necessarily make someone an authority in cybersecurity.
2. Content Mills: The alarming rate at which some YouTubers churn out content may impact the quality and depth of their advice.
3. Business Over Authenticity: Learn why monetization models can clash with the ethical considerations of cybersecurity.
4. The Importance of Practical Experience: There's no substitute for hands-on, in-the-field know-how.

Don't forget to participate in our YouTube community poll: "How do you vet the credibility of a cybersecurity expert on YouTube?" Click here to vote!

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

In this thought-provoking video, we delve deep into the intriguing question: "Will AI Help or Hurt Cybersecurity?" Join us as we explore the profound impact of Artificial Intelligence (AI) on the realm of cybersecurity, deciphering whether it is a trusted friend or a potential adversary. As technology continues to evolve, AI is revolutionizing various industries, including cybersecurity. This captivating discussion sheds light on how AI is transforming the cybersecurity landscape, presenting both opportunities and challenges.

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

Sites Mentioned in this Episode

• AI in Cyber Security: Pros and Cons | Terranova Security
• Humans and AI: The double-edged sword of cybersecurity | Cyber Magazine

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

Sites Mentioned in this Episode

• Securing Your Meetings

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

The show notes for this episode can be found in the previous shorter episode. No need to over extended an already extended version.

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

--

If you have questions for the show, feedback or topics you want covered. Please send a short email to [email protected] with the Subject line of "Byte-Sized Security" so I know it's about the podcast.

Connect with me on TikTok: https://www.tiktok.com/@bytesizedsecurity

Getting a job in cybersecurity without direct experience can be challenging but not impossible. Here are some strategies to help you break into the field:

1. Education and Certifications: Obtain foundational certifications like CompTIA Security+ and consider advancing to others like CISSP, CEH, or Cisco's CCNA Cyber Ops.
2. Network: Attend cybersecurity conferences, seminars, and meetups. Engage with professionals and peers in events like DEFCON or platforms like Meetup.com.
3. Internships and Entry-Level Positions: Pursue internships or related entry-level positions, such as IT support roles, to gain relevant industry experience.
4. Projects and Portfolio: Establish a home lab, explore security tools, or conduct ethical hacking on systems where you have permission. Document and showcase your endeavors.
5. Online Platforms: Engage in platforms like Hack The Box, TryHackMe, or participate in Capture The Flag (CTF) challenges to hone practical skills.
6. Blogs and Publications: Write about cybersecurity topics to demonstrate your knowledge and passion for the field.
7. Additional Training: Use platforms like Cybrary, Udemy, and Coursera to take courses in cybersecurity and further develop your skills.
8. Soft Skills: Highlight your analytical, problem-solving abilities, and other vital soft skills that are in demand in cybersecurity roles.
9. Transferrable Skills: Emphasize skills from previous roles or experiences that can be applied to a cybersecurity position.
10. Stay Updated: Regularly update your knowledge on the latest trends, news, and threats in the cybersecurity domain.
11. Further Education: Depending on your aspirations, consider pursuing degrees in cybersecurity or related disciplines.
12. Seek Mentorship: Connect with industry professionals who can provide guidance, insights, and potential introductions.
13. Volunteer Opportunities:

• Contribute to local non-profits, schools, or community centers by offering cybersecurity services or training.
• Use the experience to develop practical skills and expand your professional network.
• Highlight your dedication to the industry and community on your resume.

Starting Your Own Business:

• Demonstrate your entrepreneurial spirit, initiative, and proactive approach.
• Gain hands-on experience by tackling real-world cybersecurity challenges for clients.
• Develop and hone both technical and business skills, such as client relations and project management.
• Establish credibility through success stories, case studies, or client testimonials.

With a combination of these strategies, you can build a robust resume and gain valuable experience, positioning yourself effectively for a career in cybersecurity, even if you're starting without direct experience in the field.

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

Episode Overview:

In this episode, I had the pleasure of sitting down with Dr. Lillian Hartfield to discuss the transformative approach to authentication: Passkeys. We delved deep into what passkeys are, how they differ from traditional passwords, and the reasons behind their rising popularity.

Key Discussion Points:

1. Introduction to Passkeys
2. Dr. Hartfield provided a comprehensive overview of passkeys and their advantages over traditional passwords.
3. The Problem with Current Password Systems
4. We discussed the challenges users face with complex passwords and the security risks associated with password reuse.
5. Enhanced Security with Passkeys
6. Dr. Hartfield shed light on how passkeys leverage public-key cryptography to offer a more secure authentication method.
7. The Process of Creating and Using Passkeys
8. We walked through the user-friendly process of setting up and using passkeys for online authentication.
9. Device and Platform Support for Passkeys
10. Dr. Hartfield highlighted the widespread adoption of passkeys across various devices and platforms.
11. Password Managers and Passkeys
12. We touched upon the integration of passkeys in password managers, with a special mention of 1Password.
13. The Future of Passkeys
14. Dr. Hartfield shared her insights on the potential of passkeys to replace traditional passwords in the near future.

Episode Highlights:

• "Passkeys offer a more secure and user-friendly alternative to passwords." - Dr. Lillian Hartfield
• "Password managers like 1Password are evolving to support passkeys, ensuring users have a centralized, secure location for authentication." - Dr. Lillian Hartfield

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

Sites Mentioned in this Episode

• What are passkeys? Everything you need to know about the death of passwords

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

Episode Overview:

In this extended episode, host Marc David and cybersecurity expert Savvy Sharma delve deep into the recent cyberattack on MGM Resorts International. They discuss the tactics used by the attackers, the vulnerabilities exploited, and the cascading impact of the breach on MGM's operations.

Key Discussion Points:

Introduction to the MGM Resorts Attack

• Overview of the attack and its significance in the cybersecurity landscape.

The Attackers and Their Tactics

• The role of Scattered Spider and their use of social engineering.
• The exploitation of password reuse and the significance of multi-factor authentication.

The Impact and Aftermath

• The deployment of BlackCat/ALPHV ransomware and its consequences.
• The financial and operational repercussions for MGM Resorts.

Lessons Learned and Mitigation Strategies

• The importance of privileged access management (PAM) solutions.
• Strategies for improving multi-factor authentication (MFA) control.
• The significance of protecting Tier 0 assets and adopting best Identity Provider (IdP) practices.

CyberArk Labs' Takeaways

• The commonality of attacking IAM platforms.
• The role of BlackCat/ALPHV in the attack.
• The importance of monitoring trust changes and staying updated on evolving cyber threats.

Episode Highlights:

• "A series of mistakes ultimately led to one of the most visible and brand-damaging attacks in years." - Savvy Sharma
• "It’s crucial for organizations to continuously improve their security measures and follow best practices to protect themselves in today’s digital landscape." - Savvy Sharma

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

Sites Mentioned in this Episode

• The MGM Resorts Attack: Initial Analysis

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

In this episode, Marc David speaks with social media expert Nia Jordan about best practices for staying safe on social platforms including:

• Tightening up default privacy settings to restrict who can see profile info
• Using strong unique passwords and enabling two-factor authentication
• Avoiding scams involving money transfers, malware links or fake prizes
• Not linking accounts across platforms or via third party apps
• Vetting friend requests and connections to avoid impersonation risks
• Monitoring children’s accounts and guiding them on security practices
• Having ongoing conversations about oversharing and permanent content
• Applying thoughtful precautions when interacting with strangers digitally

For more bite-sized cybersecurity tips, visit bytesizedsecurity.show or subscribe to the podcast. See you next time!

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

In this episode, Marc David speaks with expert Amelia Thompson about staying cyber secure while traveling including:

• Using VPNs and avoiding sensitive logins on public WiFi to prevent eavesdropping
• Enabling device tracking in case items are lost or stolen during transit
• Strengthening account login protections with multi-factor authentication
• Setting travel notices on financial accounts to prevent fraudulent transactions
• Avoiding phishing attempts by strangers when distracted in public spaces
• Updating devices and backing up data in case of damage or theft
• Carrying temporary “burner” phones devoid of personal data
• Using mobile device management for securely configured company phones
• Remaining vigilant about security while recognizing travel poses added risks

For more bite-sized cybersecurity tips, visit bytesizedsecurity.show or subscribe to the podcast. See you next time!

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

Sites Mentioned in this Episode

• EFF Border Search Pocket Guide | Electronic Frontier Foundation
• Cyber-Safe Travel
• 5 Cyber Safety Tips for Travelers and Digital Nomads
• Cybersecurity Tips for International Travelers | Federal Communications Commission
• Cybersecurity While Traveling Tip Card
• 8 cybersecurity tips to keep you safe when travelling
• How To Keep Your Data Secure While Traveling | 1Password

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security

Attention iPhone users! Apple has just released an emergency update, iOS 16.6.1, which addresses two critical vulnerabilities that have been actively exploited in real-world scenarios. Here's what you need to know:

1. The Flaws: The first vulnerability is associated with ImageIO, identified as CVE-2023-41064. This flaw could let attackers execute malicious code through a specially crafted image. The second vulnerability is linked to Apple's Wallet, labeled as CVE-2023-41061. This could allow attackers to execute code via a malicious attachment. Apple has confirmed that both these issues have been actively exploited.
2. Real-Life Implications: These vulnerabilities aren't just theoretical. They've been used in real-life attacks to deploy spyware without any user interaction. Notably, the infamous Pegasus spyware, which grants attackers full access to iPhones, has been linked to these flaws. Citizen Lab, a security research group, discovered an exploit named "BLASTPASS" that compromised iPhones running iOS 16.6 without any user interaction.
3. Why Update Now: Given the severity of these vulnerabilities, it's crucial to update to iOS 16.6.1 immediately. Even if you believe you're not a direct target, the more these flaws are known, the higher the risk of them being used maliciously. Independent security researcher, Sean Wright, emphasizes the importance of updating promptly. For those concerned about potential compromises, tools like iVerify can be used to check device security. Additionally, Apple's Lockdown Mode can be activated for those at higher risk, though it does limit device functionality.
4. Broader Impacts: It's not just iPhones. The Wallet vulnerability is also present in Apple Watch, and the ImageIO issue has been addressed in a new Mac update. Ensure all your Apple devices are updated for maximum security.
5. How to Update: Even if you've set your iPhone for automatic updates, it's recommended to manually check and update to ensure you have the latest protection. Navigate to iPhone Settings > General > Software Update and install iOS 16.6.1.

Listeners, in the ever-evolving world of technology, staying updated is not just about getting the latest features; it's about ensuring your personal security. Always prioritize updates, especially those addressing security concerns.

---

I do hope you enjoyed this episode of the podcast. Here's some helpful resources including any sites that were mentioned in this episode.

--

Sites Mentioned in this Episode

• iOS 16.6.1—Update Now Warning Issued To All iPhone Users

--

Find subscriber links on my site, add to your podcast player, or listen on the web players on my site:

Listen to Byte Sized Security

--

Support this Podcast with a Tip:

Support Byte Sized Security