Josh is alone and on the road supporting security teams in south east Asia with incident response exercises. In our first solo episode, Josh dives into the Play ransomware group who recently overtook LockBit as the most prevent ransomware family reported in breaches. Find out more about their tactics, why they are called Play, and suspected links to other ransomware families.

Support the show

The Verizon Data Breaches and Incidents Report (DBIR) is our hosts favourite cyber security report. The 2024 edition compiles insights from over 10,000 real world breaches with insights that help security novices to experts. Josh talks Robbie, SOC consultant and leader, through the key findings to see how his lived experience matches up with the key findings in the data.

Support the show

Incident response specialist Andrew Jones dives deeper into the attack sequence of the Rhysida Ransomware family on the British Library, where sensitive data was exfiltrated and leaked on the dark web with countless machines encrypted or destroyed. Host Josh Davies shares details, and fills gaps, in the British Library breach report for an in depth analysis of exactly what happened and how future organisations and security professionals can apply the lessons learned from this breach.

Support the show

Josh is joined by Incident Response specialist Andrew Jones, to go through the British Library's cyber incident and lessons learned review. Josh shares the impact of the attack, key timelines, and incident response process while AJ reacts with insights into the realities of real world cyber security incidents, and the lessons business and individuals can take away from this ransomware compromise.

Support the show

Since the start of Empirical Training, we've been building a course to equip anyone for success in a junior SOC analyst role. Drawing on our own experiences, we wanted to answer the questions:

1. What did we actually need to know to be an effective security analyst?
2. How can we equip others to be better junior security analysts than we were when we started?

Interested? You can find the course here and get access to Josh, Robbie, AJ and Vaughan to guide you on your journey: https://www.skool.com/empirical-training-gold-6585

Support the show

AJ, Josh, Robbie and Vaughan of Empirical Training get together to share some personal experiences of getting targeted by scams, and sometimes even fallen for them.

We'll analyse why certain scams are successful, how sophisticated we think each are, and share lessons that can keep individuals and organisations safe from social engineering attacks.

If you have any scam stories you'd like us to talk about, get in contact with us via our social media accounts.

Support the show

Josh and Rob continue their conversation with CyberCharlie, DevSecOps expert and trainer, to explore the fundamental principals of Development Security Operations. Listen in to find out how DevSecOps shifts the focus on security to the beginning of the build cycle, how Charlie gets buy in from developers to bake security in from the start and how you could kick start a career into DevSecOps.

Support the show

Josh and Rob from Empirical Training sit down with CyberCharlie, a leading figure in the DevSecOps space who has helped numerous people transition into cyber security roles, specifically around secure development operations. Charlie shares his journey and how he got into cybersecurity, seeing the opportunities in an emerging field not long after finishing a degree in politics, Charlie carved out a role for himself helping developers shift security to the left with secure build practices.

Support the show

Robbie and Vaughan sit down with Morgan Demboski - cyber threat intelligence analyst who shares her journey into cybersecurity from counter terrorism, her passion for threat hunting and her top tips for those wanting to break into the industry

Support the show

AJ and Josh are back on the couch, sharing their experiences working in incident response and security operation centers to discuss how defenders can use AI to get better cyber security outcomes. Will AI replace level 1 security analyst roles? How can security analysts work with AI? And what should be considered by security leaders as the look to adopt more automation and machine learning? All will be answered in this weeks edition of CyberSpace by Empirical Training.

Support the show