InfoSec Bites

This podcast collectively offers a comprehensive overview of quantum computing, explaining its fundamental principles and future implications. They clarify how quantum bits (qubits), utilising superposition and entanglement, enable quantum computers to tackle problems beyond the reach of traditional machines, such as drug discovery and optimisation. We also highlight the dual nature of quantum computing for cybersecurity, noting its potential to both break existing encryption with algorithms like Shor's and offer unbreakable communication through quantum key distribution (QKD). Furthermore, we discuss the current challenges in developing these systems, particularly decoherence and the need for error-corrected logical qubits, while showcasing real-world applications and the global race among nations to lead in this transformative technology.

In this podcast we discuss the "Harvest Now, Decrypt Later" (HNDL) threat, a critical and immediate cyber security risk where adversaries, primarily nation-states and sophisticated cybercrime groups, are actively stockpiling encrypted data today, anticipating future decryption by quantum computers. This data, particularly long-lived sensitive information like medical records, intellectual property, and government secrets, will become vulnerable when cryptographically relevant quantum computers (CRQCs) capable of breaking current encryption (like RSA and ECC) become available. Organisations are urged to immediately begin migrating to post-quantum cryptography (PQC), a complex and phased process requiring crypto-agility and re-encryption for critical data, as highlighted by efforts from cloud providers like AWS in preparing their infrastructure and offering tools for customers. The urgency stems from the silent nature of HNDL and the compressed timeline for securing data against a future threat that is being actively enabled now.

This podcast about "Risk and Information Systems Control ," provides a comprehensive overview of risk management and information system controls, primarily designed as a study aid. It explores key concepts such as identifying threats and vulnerabilities, developing risk scenarios, and understanding information security goals like confidentiality, integrity, and availability. The guide details various risk management frameworks and methodologies, including the NIST Risk Management Framework and ISACA's Risk IT Framework, along with different types of controls (administrative, technical, physical) and their assessment. Furthermore, it covers legal and regulatory requirements influencing risk management, such as HIPAA and FISMA, and outlines methods for measuring risk and control effectiveness using key performance and risk indicators.

In this guide we examine Broken Access Control, identified by OWASP as the number one security risk in 2021, due to its widespread occurrence and severe impact. It details how applications fail to adequately restrict user actions or access, enabling attackers to view private data or perform unauthorised tasks. It explains various types of access control (such as Role-Based Access Control) and common vulnerabilities, including Insecure Direct Object References (IDOR) and missing function-level access control. Furthermore, it outlines attack scenarios, illustrates prevention techniques through secure coding practices and architectural best practices, and highlights the real-world implications with a case study of the 2019 Facebook API breach. The guide concludes by emphasising the importance of robust testing methodologies and ongoing vigilance in mitigating this pervasive security threat across modern, complex systems like microservices and cloud environments.

In this podcast we outline four major cybersecurity incidents from 2025, highlighting the diverse and evolving threat landscape. It details attacks ranging from sophisticated social engineering campaigns like the attempted infiltration of SentinelOne by PurpleHaze, to large-scale ransomware breaches such as the Coinbase password leak. We also discuss critical software vulnerabilities exemplified by CitrixBleed 2 and the phishing-led heist against UK retailers. For each incident, it explains the vulnerability exploited, detection methods, remediation steps, and controls applied, offering a comprehensive overview of how these significant cyber threats unfolded and were addressed.

In this podcast we provide a comprehensive overview of AWS WAF, a web application firewall that helps protect web applications from common web exploits. It explains how to set up and configure WAF accounts, including user creation and tool downloads, and details the creation and management of protection packs, web ACLs, and rules, including different rule actions like allow, block, count, CAPTCHA, and challenge. The text further explores intelligent threat mitigation features like AWS WAF Fraud Control (ACFP and ATP) and Bot Control, along with the use of tokens for client session tracking and validation. Additionally, it covers monitoring and logging capabilities, data protection mechanisms, and the integration of AWS WAF with other services like AWS Shield Advanced for DDoS protection, as well as providing guidance on migration from AWS WAF Classic.

In this podcast we collectively outline the Australian Signals Directorate's (ASD) Essential Eight cybersecurity mitigation strategies, designed to protect organisations from various cyber threats. The Essential Eight maturity model details four levels, from zero to three, indicating increasing sophistication in mitigating cyber attacks and targeting. The Essential Eight assessment process guide provides instructions for evaluating an organisation's adherence to these maturity levels, including guidance on evidence quality and assessment outcomes. Furthermore, the Essential Eight maturity model and ISM mapping document correlates the Essential Eight requirements with the Information Security Manual (ISM), offering a framework for implementing and assessing cyber defences.

In this episode we are discussing a fundamental shift in cybersecurity from "How the Browser Became the Main Cyber Battleground", where attackers increasingly target web browsers rather than traditional local network endpoints. This change is driven by the "SaaS-ification" of enterprise IT, meaning core business systems are now accessed online via browsers, making user identities and their associated credentials the primary target. The discussion highlights phishing as the most impactful weapon for identity-driven breaches and points out that while attackers have adapted, security measures have not kept pace. Finally, it proposes that the browser itself offers the ideal platform for security teams to detect, intercept, and prevent these modern identity-based attacks due to its unique visibility into user actions and application interactions.

In this podcast lets discuss the intersection of quantum computing and artificial intelligence, exploring their individual capabilities and combined impact, particularly on cybersecurity and data protection. This podcast highlights the fundamental differences between classical and quantum AI, with quantum systems utilising qubits for parallel processing, offering significant speed advantages for specific problems. A major theme is the threat quantum computers pose to current cryptographic methods, such as RSA, and the urgent need for quantum-resistant solutions, including post-quantum cryptography like lattice-based and code-based systems, and quantum key distribution. We also touch on the practical integration of these emerging technologies into existing infrastructure, the environmental considerations of quantum computing, and the potential of Quantum Machine Learning to enhance cybersecurity defence mechanisms.

This podcast collectively explore the profound impact of quantum computing on information security, examining both threats and solutions. They consistently highlight Shor's and Grover's algorithms as significant dangers to current public-key and symmetric cryptography, respectively. We also universally present Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC) as crucial countermeasures, with a particular focus on NIST's PQC standardisation efforts. Across the summaries, there is a strong emphasis on the "harvest now, decrypt later" threat and the urgent need for organisations to adopt crypto-agile strategies and hybrid security models to prepare for a quantum-resilient future. They discuss the practical applications and implementation challenges of these quantum-safe technologies, stressing the importance of global collaboration and standardisation.