English Cybersecurity - Cybersecurity in Plain English

English Cybersecurity - Cybersecurity in Plain English

By Eric EnglishTechnology
Download on the App Store

English Cybersecurity - Cybersecurity in Plain English episodes

  • English Cybersecurity – Episode 10
    Identity, Access & Authentication
    • Authentication protocols (LDAP, Kerberos, SAML, OAuth2)
    • Identity and Access Management (IAM)
    • Least privilege, role-based access control (RBAC)
    • Federation and Single Sign-On (SSO)

      • 30 min
    • English Cybersecurity – Episode 9
      Network Security – Deeper Dive
      • Deeper look at ports, protocols, and services
      • Intro to Wireshark for packet analysis
      • Firewalls: rule sets, NAT, and deep packet inspection
      • IDS/IPS vs. SIEM tools – what they do and how they differ

        • 33 min
      • English Cybersecurity – Episode 8
        Vulnerabilities, Exploits & Patch Management
        • CVE, CVSS, and vulnerability scoring
        • Exploit techniques (buffer overflows, privilege escalation)
        • Patch management process in enterprise environments
        • Virtual patching & compensating controls

          • 25 min
        • English Cybersecurity – Episode 7
          Threat Actor Evolution
          • Threat Actor Types:
            • Script kiddies, criminal organizations, hacktivists, insiders
            • Nation-state actors (APT groups) – motivations and tactics
            • Case studies of evolving threats:
              • From basic phishing → sophisticated spear phishing
              • From simple ransomware → double extortion models
              • Emerging threat vectors:
                • Deepfakes for social engineering
                • Supply chain attacks (e.g., SolarWinds)
                • AI-powered malware and automation
                  • Cyber Kill Chain Framework (Lockheed Martin model)
                  • 7 stages of an attack:
                    1. Reconnaissance
                    2. Weaponization
                    3. Delivery
                    4. Exploitation
                    5. Installation
                    6. Command & Control (C2)
                    7. Actions on Objectives
                    8. How defenders can “break the chain” at each stage
                      9. MITRE ATT&CK Overview
                      • What is ATT&CK and why it’s useful
                      • Tactics vs. Techniques vs. Procedures (TTPs)
                      • Brief demo (or screenshots) of MITRE ATT&CK Navigator
                      • How blue teams use it for threat detection
                      • Mapping common attacks to ATT&CK
                        • 27 min
                      • English Cybersecurity – Episode 6
                        Incident Response and Reporting
                        • Recognizing signs of compromise
                        • Steps in incident response (identify, contain, eradicate, recover)
                        • Role of users in reporting
                        • Legal and compliance considerations
                          • 22 min
                        • English Cybersecurity – Episode 5
                          Security in the Workplace
                          • Acceptable Use Policies (AUP), InfoSec Program and sub policies
                          • Device management (BYOD vs. corporate devices)
                          • Physical security (access control, secure areas)
                          • Security awareness culture

                            • 33 min

                          About English Cybersecurity - Cybersecurity in Plain English

                          From the publisher's feed

                          This show is all about cybersecurity and helping everyone understand the “why” when it comes to cybersecurity controls. We will break down cybersecurity 101 and slowly advance to more difficult and…