In this week’s Source Code podcast we discuss ongoing developments by NIST in updating its Cybersecurity Framework, Apple and Google’s draft framework that aims to fight against unwanted Bluetooth trackers and new malware that was discovered stealing Gmail, Outlook and Facebook credentials.

Decipher talks to Dawn Cappelli, director of OT-CERT at Dragos, about the challenges of securing operational technology, particularly for organizations with limited budget and resources. 

This week at the RSA Conference, software supply-chain security, CISO liabilities and public-private sector partnerships were some of the key topics.

Chris Wysopal and Cris Thomas of the L0pht join Dennis Fisher to talk about the 25-year-anniversary of the group's landmark Senate testimony, what's changed since then, and Cris's new book, How the Hackers Known as L0pht Changed the World. 

In this week's Source Code news wrap podcast, Decipher editor Lindsey O'Donnell-Welch discusses a malware family called Domino,  the increasing use of custom tools by ransomware groups  and new findings around the 3CX supply chain attack.

Casey Ellis, founder and CTO of Bugcrowd, joins Dennis Fisher to discuss the newly formed Hacking Policy Council, the challenges of influencing security research policy and legislation, and what the council hopes to achieve.

Mike Hanley, CSO and SVP of engineering at GitHub, joins Dennis Fisher to talk about the company's move to enforce 2FA for all developers, the changing role of the CISO, and what's ahead for software supply chain security. 

Chris Wysopal, CTO and founder of Veracode, joins Dennis Fisher to dive into the new White House National Cybersecurity Strategy and discuss what's missing, how practical the pillars are, and when these ideas may be implemented. 

Courtney Nash joins Dennis Fisher to talk about the 2022 VOID Report on incidents, why mean time to resolve is no longer a meaningful metric, whether the duration of an incident matters, and how organizations can get better at responding to an analyzing incidents. 

Andrew Morris, the founder and CEO of GreyNoise, joins Dennis Fisher to talk about software liability, the evolution of the security industry, and why we're not getting better at securing our systems.