The Empirical Training gang dive into a sophisticated attack where a state sponsored actor managed to compromise a Wifi network from the other side of the world, before they take a closer look at some reports on the similarities and shared capabilities of Ransomware actors.

Support the show

Join Robbie, AJ and Josh as they take questions from the community on what it takes to be a SOC analyst, the moment they felt like they made it! And the moment's they are humbled...

We then dive into the T-Mobile breach, reported to be compromised by Chinese state-sponsored actors and wonder if this is a sign of things to come in a geo-political world with increased tensions? Or if this was just business as usual. 

Support the show

All four of the Empirical Trainers sit down to discuss the latest threats they've been facing in their SOCs. 

Securing S3 buckets has been an issue since they existed, and new developments have seen an increase in success for S3 bucket sniping and namesquatting, stealing data or uploading malicious files. 

A new zombie botnet is on the lose, thousands of TPlink devices being compromised by a new remote code execution attack.

Support the show

There's a lot to be scared about in cyber security, ransomware actors, payment of ransoms, 23 and me genome mapping company breach, and critical incidents coming in at 5:25pm.

Josh and Robbie, former SOC analyst together and present day builder of SOCs, and strategist of security products, to try and scare each other with real stories about cyber security in the news, and from the frontlines.

Support the show

Price's Law, also known as Price's Square Root Law, is a rule of thumb that states that the square root of the total number of people in a group will achieve 50% of the results - but how does this play out in cyber security? 

Join the Empirical Trainers as they discuss the reality of life as a good SOC analyst and how to make yourself stand out without burning out.

Support the show

Josh and Robbie are joined by James Gallen, Tech and Cyber Security recruiter for this part two of a recruiter ask me anything. Our community ask James for tips and tricks to success in getting security roles, while he shares some wins from people he has helped place and lifts a lid on the reality of what hiring managers are looking for in a candidate.

Support the show

Josh has been deep in the emerging Linux CUPS threat, with four mysterious CVEs touted to drop in October, all of a sudden the researcher made proof of concept exploits public, forcing developers hands to release advisories on the fixes and security teams to create detection and prevention content before the threat actors exploit it. Is it that big a deal though? Then Robbie takes us through another interview masterclass from his SOC leader days.

Support the show

Kaspersky customers woke up this week to find that their anti-virus had been uninstalled and replaced with UltraAV. This caused panic that threat actors has uninstalled endpoint protection controls as part of an attack, and although this wasn't the case, it has raised a lot of questions around how security companies should operate.

Join Josh, Vaughan, AJ and Robbie to discuss the implications of the switcheroo and also take questions from the audience to support those on their cyber security journey.

Support the show

Robbie has been working on creating insider threat detections for suspicious employees that may be taking competitive sensitive data from their employer just before some mass lay offs. The boys discuss the challenges of insider threat detection, using the example of the North Koreans who impersonated employees to get hired and steal trade secrets from western organisations. Finally, we discuss what you should do if you find an unlocked screen in your work place to teach that person a lesson they won't forget...

Support the show

Kyree GRC Joins us again! Lifting the lid further on governance risk and compliance, as Robbie and Josh get to know Kyree better, how he thinks and what fruit he would be...

Kyree shares the realities of what it takes to succeed in a GRC role, while the SOC analysts surprise themselves as they start to warm up to the risk analysts role - at least when it's done well by someone like Kyree.

Support the show