Price's Law, also known as Price's Square Root Law, is a rule of thumb that states that the square root of the total number of people in a group will achieve 50% of the results - but how does this play out in cyber security? 

Join the Empirical Trainers as they discuss the reality of life as a good SOC analyst and how to make yourself stand out without burning out.

Support the show

Josh and Robbie are joined by James Gallen, Tech and Cyber Security recruiter for this part two of a recruiter ask me anything. Our community ask James for tips and tricks to success in getting security roles, while he shares some wins from people he has helped place and lifts a lid on the reality of what hiring managers are looking for in a candidate.

Support the show

Josh has been deep in the emerging Linux CUPS threat, with four mysterious CVEs touted to drop in October, all of a sudden the researcher made proof of concept exploits public, forcing developers hands to release advisories on the fixes and security teams to create detection and prevention content before the threat actors exploit it. Is it that big a deal though? Then Robbie takes us through another interview masterclass from his SOC leader days.

Support the show

Kaspersky customers woke up this week to find that their anti-virus had been uninstalled and replaced with UltraAV. This caused panic that threat actors has uninstalled endpoint protection controls as part of an attack, and although this wasn't the case, it has raised a lot of questions around how security companies should operate.

Join Josh, Vaughan, AJ and Robbie to discuss the implications of the switcheroo and also take questions from the audience to support those on their cyber security journey.

Support the show

Robbie has been working on creating insider threat detections for suspicious employees that may be taking competitive sensitive data from their employer just before some mass lay offs. The boys discuss the challenges of insider threat detection, using the example of the North Koreans who impersonated employees to get hired and steal trade secrets from western organisations. Finally, we discuss what you should do if you find an unlocked screen in your work place to teach that person a lesson they won't forget...

Support the show

Kyree GRC Joins us again! Lifting the lid further on governance risk and compliance, as Robbie and Josh get to know Kyree better, how he thinks and what fruit he would be...

Kyree shares the realities of what it takes to succeed in a GRC role, while the SOC analysts surprise themselves as they start to warm up to the risk analysts role - at least when it's done well by someone like Kyree.

Support the show

Josh and Robbie are joined with a special guest, Kyree GRC, who tells us how some key mentors, numerous internships and personal tenacity helped him find his pathway into governance risk compliance.

Today Kyree is a risk analyst, who passes the favour on by mentoring people for GRC roles in his spare time. Listen in and find out the realities of working in GRC and how GRC can either clash, or better yet, compliment security operations.

Support the show

We all face procrastination in some form, but in the high paced and high stakes world of cyber security, dealing with procrastination can be even more challenging. AJ, Rob and Vaughan share their experience of getting into cyber security and how they face, and deal with procrastination throughout their careers to the present day.

Support the show

Josh is joined by all four of the Empirical Trainers, combining their decades of experience in the field to discuss how the CrowdStrike outage has changed security buyers and customers, a fun update on AJ's wedding celebrations where AJ and Vaughan met for the first time IRL, before ending with some ransomware questions from our Skool community.

Support the show

Josh takes Robbie back to school, and a 2000 year old computer to explain the compute evolution from analogue to digital and the impending quantum revolution. We'll discuss the security implication of quantum computers, the 'steal now, crack later' issue, how NIST are progressing with post-quantum cryptography and a brief discussion on privacy vs convenience as the NFL look to roll out facial recognition technology.

Support the show