The four Empirical Trainers and joined by the biggest and best Empirical member, the Community! For another live podcast discussion and Q+A.

This week we dive into the topics that have gotten our community talking most. First we explore the potential security implications of the OpenAI and Apple partnership, how the free-market succeeds and fails to regulate security and whether the uproar has been justified. We then look into the related topic of shadow engineering, the new shadow IT, which creates challenges for the most basic of security principles: you can't secure what you can't see.

Support the show

Josh is joined by Robbie, Vaughan and AJ from Empirical Training with extra special guest, the Skool community! In this episode, we recorded live with our community to take their security questions, using our combined experience to give insights into what it is like working as a security analyst, big wins from our careers, our favourite analysis tools, which capture the flag do we like best for offensive security training? Find the answer to all these questions, and more, by listening in.

Support the show

All 4 former cyber security colleagues and now friends join for a community podcast, where we pick out the key news stories, discussions and knowledge that has been shared in our Skool community. We field live questions on SOC processes, dive into the morality of the threat actor and share experiences on incident response exercises we conducted with IT teams to make sure they were prepared for a real life incident, when they get breached.

Support the show

In our second ever live edition of the podcast, We have all four members of Empirical Training, Robbie - Security Consultant and former SOC leader, AJ - Incident Response Specialist, Vaughan - SOC Leader and Automation Specialist and your usual host, Josh - Security Product Strategist.

We bring the key discussions from within our Skool community to the podcast, discussing the latest flurries of breaches and connecting linked ones to an attack on AWS Snowflake instances, while sharing insights into the mind of security analysts and a live example of how we collaborate on the fly to rapidly develop hypothesis for hunting, containment and remediation plans. Join the discussion and feature on our next live pod by joining: https://www.skool.com/cybersec 

Support the show

Josh is alone and on the road supporting security teams in south east Asia with incident response exercises. In our first solo episode, Josh dives into the Play ransomware group who recently overtook LockBit as the most prevent ransomware family reported in breaches. Find out more about their tactics, why they are called Play, and suspected links to other ransomware families.

Support the show

The Verizon Data Breaches and Incidents Report (DBIR) is our hosts favourite cyber security report. The 2024 edition compiles insights from over 10,000 real world breaches with insights that help security novices to experts. Josh talks Robbie, SOC consultant and leader, through the key findings to see how his lived experience matches up with the key findings in the data.

Support the show

Incident response specialist Andrew Jones dives deeper into the attack sequence of the Rhysida Ransomware family on the British Library, where sensitive data was exfiltrated and leaked on the dark web with countless machines encrypted or destroyed. Host Josh Davies shares details, and fills gaps, in the British Library breach report for an in depth analysis of exactly what happened and how future organisations and security professionals can apply the lessons learned from this breach.

Support the show

Josh is joined by Incident Response specialist Andrew Jones, to go through the British Library's cyber incident and lessons learned review. Josh shares the impact of the attack, key timelines, and incident response process while AJ reacts with insights into the realities of real world cyber security incidents, and the lessons business and individuals can take away from this ransomware compromise.

Support the show

Since the start of Empirical Training, we've been building a course to equip anyone for success in a junior SOC analyst role. Drawing on our own experiences, we wanted to answer the questions:

1. What did we actually need to know to be an effective security analyst?
2. How can we equip others to be better junior security analysts than we were when we started?

Interested? You can find the course here and get access to Josh, Robbie, AJ and Vaughan to guide you on your journey: https://www.skool.com/empirical-training-gold-6585

Support the show

AJ, Josh, Robbie and Vaughan of Empirical Training get together to share some personal experiences of getting targeted by scams, and sometimes even fallen for them.

We'll analyse why certain scams are successful, how sophisticated we think each are, and share lessons that can keep individuals and organisations safe from social engineering attacks.

If you have any scam stories you'd like us to talk about, get in contact with us via our social media accounts.

Support the show