CYBR.SEC.CAST

Sam and Michael are joined by Offensive Security Advisor, Darin Fredde! They discuss the need to move beyond compliance checkboxes, the importance of continuous pen testing, and the disconnect between marketing claims and real-world security implementations. 

Things Mentioned:

• Having trouble with your OT.SEC.CON. or EXEC.SEC.CON. ticket? Reach out to us at [email protected]
• Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems - https://thehackernews.com/2025/01/expired-domains-allowed-control-over.html
• Watch Darin’s Talk: https://youtu.be/SAW0qdTgcWY?si=Z_Dc-gNWcPtjdVgi

Do you have a question for the hosts? Reach out to us at [email protected]  

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Darin Fredde

·      Production and editing: Lauren Andrus

·      Music by: August Honey

Michael and Sam are joined by Field CTO, Steven Schmidt! They discuss the early days of application security, the evolution of AppSec tools and processes, and challenges in balancing developer speed with security requirements.

Thank you to Snyk for sponsoring this episode! Learn more about building secure applications at https://snyk.io and chat with their team at EXEC.SEC.CON. on April 22nd!

Things Mentioned:

• Learn more about Snyk at https://snyk.io
• Meet with Snyk at EXEC.SEC.CON. - https://www.accelevents.com/e/execseccon
• Having trouble with your OT.SEC.CON. or EXEC.SEC.CON. ticket? Reach out to us at [email protected]
• Managing security in the AI age - https://www.computerweekly.com/news/366620437/Managing-security-in-the-AI-age

 Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Steven Schmidt

·      Production and editing: Lauren Andrus

·      Music by: August Honey

In today’s episode Michael and Sam are catching up with Security Consulting Manager, ICS/OT at Accenture, Stuart Bailey! Stuart shares his journey from a career in social work to cybersecurity, the challenges of working on OT environments, and the importance of network monitoring for critical infrastructure. 

Things Mentioned:

·      Romanian energy supplier Electrica hit by ransomware attack - https://www.bleepingcomputer.com/news/security/romanian-energy-supplier-electrica-hit-by-ransomware-attack/

·      Stuart’s talk - https://youtu.be/wI-7q1RSVZU?si=CaKziboHBHtyberh

Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

 In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Stuart Bailey

·      Production and editing: Lauren Andrus

·      Music by: August Honey

This week Michael and Sam are catching up with Bugcrowd CISO, Trey Ford. They chat about his evolution from consulting to the C-Suite, how to know if the CISO role is right for you, and what alignment between security leadership and the board should look like.

Things Mentioned:

·      Key strategies to Enhance Cyber Resilience - https://www.csoonline.com/article/3618501/key-strategies-to-enhance-cyber-resilience.html

·      Antifragile  - https://www.amazon.com/Antifragile-Things-That-Disorder-Incerto/dp/0812979680/ref=asc_df_0812979680?mcid=974641d08a3c3d7989da94238b95532d&tag=hyprod-20&linkCode=df0&hvadid=693465227026&hvpos=&hvnetw=g&hvrand=4969104965665577900&hvpone=&hvptwo=&hvqmt=&hvdev=c&hvdvcmdl=&hvlocint=&hvlocphy=9027586&hvtargid=pla-435487045883&psc=1

·      Trey’s HOU.SEC.CON. 2024 Talk -  https://youtu.be/Of__3JR3NWM?si=wShMhnbXw6d2tS7w

Do you have a question for the hosts? Reach out to us at [email protected]  

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

 Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Trey Ford

·      Production and editing: Lauren Andrus

·      Music by: August Honey

Michael and Sam are gearing up for OT.SEC.CON. with keynote speaker, Marco Ayala! Marco is an ISA Fellow, and President of InfraGard Houston with over 30 years of experience in industrial automation controls and OT/IT security. They chat about some exciting OT Cybersecurity initiatives in Texas, the incident that led him to cybersecurity, and what to expect at his talk in April. 

Things Mentioned:

·      Governor Abbott Announces Texas Cyber Command An Emergency Item - https://gov.texas.gov/news/post/governor-abbott-announces-texas-cyber-command-an-emergency-item

·      Marco’s Talk at S4: Normalization of Deviance - https://youtu.be/u1xmyJmGsS0?si=UrSlqVVfvyasvz68

·      Marco’s panel at OTCEP in Singapore - https://www.linkedin.com/pulse/2023-otcep-embracing-new-perspectives-strengthening-ayala/?trackingId=OyeuSlWZQBSNUKgxBl%2BZmQ%3D%3D

Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

 Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

 In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Marco Ayala

·      Production and editing: Lauren Andrus

·      Music by: August Honey

Hosts Michael and Sam are covering another HOU.SEC.CON. 2024 presentation, this time with Security Architect Stephen Alexander! They discuss how audits, while annoying, can provide significant value by offering insights for organizational improvement, help ensure compliance, and educate companies on how to strengthen their security operations. 

Things Mentioned:

·      US govt says Cisco gear often targeted in China's Salt Typhoon attacks on 8 telecommunications providers — issues Cisco-specific advice to patch networks to fend off attacks - https://www.tomshardware.com/tech-industry/cyber-security/us-govt-says-cisco-gear-often-targeted-in-chinas-salt-typhoon-attacks-on-8-telecommunications-providers-issues-cisco-specific-advice-to-patch-networks-to-fend-off-attacks

·      Wireless Wars Book: https://www.amazon.com/Wireless-Wars-Dangerous-Domination-Fighting/dp/1953295614

Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

 Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Stephen Alexander

·      Production and editing: Lauren Andrus

·      Music by: August Honey

We’re kicking off season 3 with our good friend Len Noe! Len wears many hats, including whitehat hacker, technical evangelist, international speaker, podcast host, and most recently, author. In this episode, Michael and Sam chat with him about his new book, transhumanism, and his upcoming projects.

Things Mentioned:

·      Cyber Cognition Podcast - https://cyber-cognition.simplecast.com

·      The Language of Deception: Weaponizing Next Generation AI - https://www.amazon.com/Language-Deception-Weaponizing-Next-Generation-ebook/dp/B0CNV8T9J2?ref_=ast_author_mpb

·      The Art & Science of Metawar: How to Coexist With AI-Driven Reality Distortion, Disinformation, & Addiction in the Metaverse - https://www.amazon.com/Art-Science-Metawar-Distortion-Disinformation/dp/0996401946

·      Human Hacked: My Life and Lessons as the World's First Augmented Ethical Hacker - https://www.amazon.com/Human-Hacked-Lessons-Augmented-Ethical/dp/1394269161

·      Len’s HOU.SEC.CON. 2024 talk: https://youtu.be/paE7AQTrgss?si=56zakgkTgitjJV4a

Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

Check out our other show:

·      CyberSunday

 Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

 Support or apply to our Scholarship Program:

·      TAB Cyber Foundation 

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Len Noe

·      Production and editing: Lauren Andrus

·      Music by: August Honey

Michael and Sam are on their own for our last episode of the year. They chat about all of the growth HOU.SEC.CON. saw over 2024, highlight the countless sponsors, volunteers, and speakers that make all of our initiatives happen, and discuss what to expect in 2025!

Things Mentioned:

·     Submit an abstract for our monthly user group: https://www.hscusergroup.com/call-for-speakers

·      Cidercade Holiday Party: https://www.linkedin.com/feed/update/urn:li:activity:7275906872774115329

·      OT.SEC.CON. Tickets – https://www.accelevents.com/e/otseccon

·      EXEC.SEC.CON. Tickets – https://www.accelevents.com/e/execseccon

·      OT.SEC.CON. Sponsor Prospectus – https://www.otseccon.com/_files/ugd/965746_29abbedf01cb414eb99389af98e68db3.pdf

·      EXEC.SEC.CON. Sponsor Prospectus - https://www.execseccon.com/_files/ugd/965746_8769c61f80cd485ca91b6e9a1560b30a.pdf 

Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      Bluesky

·      YouTube

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Production and editing: Lauren Andrus

·      Music by: August Honey

On our latest episode Michael and Sam are talking to the Security Fairy Godmother herself, Dawn Cappelli! They discuss her transition from programming to security, her passion helping SMB’s, and how that passion pulled her out of retirement to create free resources for the OT community. 

Things Mentioned:

·      OT Cert Link - https://www.dragos.com/community/ot-cert/

·      Dragos Community Defense Program - https://www.dragos.com/community/community-defense-program/

·      Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online - https://thehackernews.com/2024/11/over-145000-industrial-control-systems.html

·      The CERT Guide to Inside Threats - https://www.amazon.com/Dawn-Cappelli-Guide-Insider-Threats/dp/B00RWPOQ4M

Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube

·      Bluesky

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Dawn Cappelli

·      Production and editing: Lauren Andrus

·      Music by: August Honey

In this episode, Jason Haddix, CEO & Hacker & Trainer at Arcanum Information Security, joins the podcast to discuss his HOU.SEC.CON. 2024 talk, “Tales from the Breach.” In his conversation with Michael and Sam, Jason shares his unconventional introduction to hacking, his journey from CISO to Founder, and how companies can apply what he learned from his organization’s LAPSUS$ attack. 

Things Mentioned:

·      Jason’s Talk: https://youtu.be/v407QBrkNfc?si=s3RQFmdO3DjQ1Bj6

·      Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials - https://thehackernews.com/2024/10/cybercriminals-use-webflow-to-deceive.html

·      Mobile Top Ten - https://owasp.org/www-project-mobile-top-10/

Do you have a question for the hosts? Reach out to us at [email protected] 

Keep up with HOU.SEC.CON.:

·      LinkedIn

·      Twitter

·      Facebook

·      Instagram

·      YouTube 

Check out our other show:

·      CyberSunday

Check out our Conferences and Events:

·      HOU.SEC.CON.

·      OT.SEC.CON.

·      EXEC.SEC.CON.

·      HSC User Group

Support or apply to our Scholarship Program:

·      TAB Cyber Foundation

In this episode:

·      Host: Michael Farnum

·      Host: Sam Van Ryder

·      Guest: Jason Haddix

·      Production and editing: Lauren Andrus

·      Music by: August Honey