Prabh Nair

Join us in this podcast as Shrutirupa Banerjiee shares practical approaches and demonstrations of ransomware investigations. Learn the secrets top experts use daily!Rupabanerjee explains how ransomware, such as the Malox variant, often initiates through obfuscated batch loaders that execute a series of steps, including PowerShell scripts and base64 decoding, to ultimately deliver and run the malicious payload. The interview also covers methods for identifying ransomware infections by examining file extensions, recovery notes, and process monitoring tools, offering a detailed, hands-on perspective on cybersecurity analysis.Linkedin Profile https://www.linkedin.com/in/shrutirupa-banerjiee/Youtube Channel https://youtube.com/@CryptoWareCISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvStudy with MeTelegram Grouphttps://t.me/Infoseclearning#ransomware #ransomwareattacks #cybersecurity #infosec #cyberattack

Are you preparing for the CISSP exam and struggling with the (ISC)² Code of Ethics Canons? 🚀In this video, Prabh Nair breaks down the 4 ISC² Canons into simple, practical, and exam-focused insights with real-world case studies and Coffee Shot examples.You’ll learn:✅ Canon 1 – Protect society, the common good, and critical infrastructure.✅ Canon 2 – Act honorably, honestly, justly, responsibly, and legally.✅ Canon 3 – Provide diligent and competent service to principals.✅ Canon 4 – Advance and protect the profession.Domain wise coffee shothttps://docs.google.com/spreadsheets/d/1CcyKOrlKgTdwVUR0lsGjww1uIrxKyr7C/pubhtmlHappy to Release CISSP Domain 1 to Domain 4 podcast out in Spotify , Amazon , Apple and Google;Domain 1 : https://open.spotify.com/episode/6fggB2lwYA5kzmdmz7BsCh?si=ff488838799b4baeDomain 2 = https://open.spotify.com/episode/4RkQIHgpTUC87TR3UqmkHd?si=ca4f12aea1dc473aDomain 3 = https://open.spotify.com/episode/1b59qRq9vk0hvfa0UiqRm1?si=5f9da0b4cf6545d6Domain 3 Part 2 = https://open.spotify.com/episode/4ncdZBhZEtPCZQYzbLi03m?si=041114030f904c21Domain 3 Part 3 = https://open.spotify.com/episode/3F1S1M8PzVdWMt4egBKFR2?si=dfcdb502cc8049afDomain 4 Part 1 = https://open.spotify.com/episode/6yRGRfpK51II7Od438imNA?si=f94c058f77854f5eDomain 4 Part 2 = https://open.spotify.com/episode/2b3Z8hFII1ypWcVMjqBQlC?si=a16dfb96da6a4addDomain 5 : https://open.spotify.com/episode/1ouhqFPycKwBqMYAF9v4rO?si=u-I7VHQ7Q0CjGmOPfelnSwDomain 6 https://open.spotify.com/episode/0SjIzz6eWO1YKvMg5MVpVK?si=b6980db1afce41a2Domain 7 : https://open.spotify.com/episode/2Ov3RXtw8XMq5R1jJL3o5X?si=2e1bb4ce50fa4516#cisspexam #cissptraining #cissp

Dr. Eric Cole is one of the world’s leading cybersecurity experts, a former CIA cyber operative, CTO of McAfee, and founder of Secure Anchor. He has advised Fortune 500 companies, governments, and high-profile CISOs worldwide.https://www.youtube.com/watch?v=NlNsJzB7Lt8&list=PLXBue4eLfnFQDt-B4hyb7iivc7920DPSD&index=1CISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvStudy with MeTelegram Grouphttps://t.me/Infoseclearning#CISO #cisorole #cisoseries #cisos

Confused about where to start in cybersecurity—or how to move from beginner to your first role? In this episode, I and Chintan break down a practical, human-first roadmap: how to choose the right domain, whether a master’s is worth it, how to make internships count, set SMART goals and OKRs, build a weekly learning plan, and prepare for real interviews.

Chintan Profile https://www.linkedin.com/in/chintangurjar/https://chintangurjar.com/kickstartcareer/Here are all the files for your YouTube video details...Entry-Level Job Roles - Overview of entry-level cybersecurity roles, duties, and job titles.https://chintangurjar.com/files/entry-level-job-roles.pdfWeekly Learning Resources - Curated weekly resources to support structured cybersecurity learning.https://chintangurjar.com/files/weekly-learning-resources.xlsxWeekly Learning Timetable- A practical timetable to organize and track weekly study sessions.https://chintangurjar.com/files/weekly-learning-timetable.xlsxGoal Setting - SMART goals and OKRs tailored for entry-level pentesters and SOC analysts.https://chintangurjar.com/files/goal-setting-sample-document.pdfResume Sample- Professional resume showcasing 13+ years of offensive security expertise.https://chintangurjar.com/files/resume-sample.pdfEffective Communication - Visual guide on improving communication skills for cybersecurity roles.https://chintangurjar.com/files/effective-communication.pngWhat you’ll learnCybersecurity pathways: key disciplines, entry roles, and progressionMaster’s vs skills: when degrees help and when hands-on winsInternships that matter: commercial tools, people, process, soft skillsSMART goals + OKRs: templates for interns and entry-level rolesPortfolio + LinkedIn basics: what to show before you applyWeekly learning system: threat intel, vuln mgmt, detections, notesCommunication for beginners: reduce fear, speak with clarityInterview prep: JD analysis, role-specific topics (SOC, AppSec, Red Team)Company research: legit checks, culture signals, application strategyKey takeawaysUse the 10-question framework to pick your domain before buying coursesClarify internship scope, duration, outcomes, and reporting rhythmTrack goals weekly; log risks; publish progress to build credibilityDon’t rely on generic roadmaps—align study to real JDs you’ll apply forBuild a minimal portfolio: 2–3 proof projects tied to the role you wantPractice communication: concise updates, STAR stories, clear stakeholder languageWho this is forStudents, freshers, and career-switchers targeting cyber rolesInterns and entry-level analysts who want structure and momentumAnyone stuck between “more certs” vs “build real proof of skill”Suggested action itemsDownload or recreate a one-pager map of domains and target rolesDraft 3 SMART goals and 1 OKR for the next 30 daysBuild a weekly learning calendar and stick to it for 4 weeksPick one role (e.g., SOC Analyst) and tailor your CV to 3 live JDsShip one portfolio proof (lab, detection, or write-up) this weekSOC ANALYST LEARNING VIDEOhttps://www.youtube.com/watch?v=KxVEJ1GPgss&t=364sCISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzStudy with MeTelegram Grouphttps://t.me/Infoseclearning#CybersecurityCareer #CyberJobs #CyberSecurityRoadmap #Internships #SMARTGoals #OKR #InterviewPrep #SOC #AppSec #ThreatIntel #VulnerabilityManagement #CyberLearning #Portfolio #LinkedInTips #CoffeeWithPrabh

In this episode, Prabh Nair and Ross dive deep into the security implications of Generative AI in software development. As AI tools like ChatGPT transform developers into prompt engineers, new cybersecurity, compliance, and data privacy risks emerge.Ross Yonghttps://www.linkedin.com/in/mrrossyoung/https://owasp.org/www-project-threat-and-safeguard-matrix/

We discuss:https://owasp.org/www-project-threat-and-safeguard-matrix/AI code security challenges – vulnerabilities in unvalidated AI-generated codeDefense-in-depth strategies for secure AI adoptionOWASP Threat & Safeguard Matrix (TSM/TASM) and its role in threat modelingBalancing productivity vs security in AI-enabled DevSecOps pipelinesCISO challenges – shadow AI, data security posture management, and data loss preventionAI governance frameworks – NIST AI RMF, EU AI Act, security-by-design and privacy-by-design practices💡 Key Takeaways:✔ Why organizations must scan and validate AI-generated code for vulnerabilities✔ How CISOs can embed AI security controls into CI/CD pipelines✔ The role of KPIs and business impact analysis in proving AI risk reduction to executive leadership✔ Best practices for integrating TASM into enterprise-wide threat modeling✔ Emerging tools like Encrypt AI for compliance scanningThis is a must-watch for CISOs, security architects, developers, and AI governance professionals preparing for the next wave of AI-powered cybersecurity risks.AI Governance https://www.youtube.com/watch?v=LgFBi5XD-Ow&pp=ygUNYWkgZ292ZXJuYW5jZdIHCQmyCQGHKiGM7w%3D%3DPractical ai governancehttps://www.youtube.com/watch?v=dQUML9vnlY4&t=542s&pp=ygUTYWkgZ292ZXJuYW5jZSBwcmFiaA%3D%3DAI Securityhttps://www.youtube.com/watch?v=JtkDwE_s178&pp=ygUVYWkgZ2VuIHNlY3VyaXR5IHByYWJo#genai #genaisecurity #infosec #cybersecurity

Generative AI is reshaping industries in 2025 — but with this power comes unprecedented security risks. We’ll break down:✅ What is Gen AI Security — and why it matters in 2025✅ Core Pillars: Protecting models, securing data pipelines, and governing outputs✅ Major Risks: From prompt injection, hallucinations, and data leakage to deepfakes, supply chain attacks, bias, and compliance challenges✅ Enterprise Controls: Input/output filters, tool permission frameworks, retrieval allowlists, zero-trust agents, and kill switches✅ Human-in-the-Loop: Defining autonomy tiers and ensuring AI augments, not replaces, decision-makingAI Governance https://www.youtube.com/watch?v=LgFBi5XD-Ow&pp=ygUNYWkgZ292ZXJuYW5jZdIHCQmyCQGHKiGM7w%3D%3DPractical ai governancehttps://www.youtube.com/watch?v=dQUML9vnlY4&t=542s&pp=ygUTYWkgZ292ZXJuYW5jZSBwcmFiaA%3D%3Dhttps://youtube.com/playlist?list=PL0hT6hgexlYwHLdZR_oHvEKN_8IiAMBcU&si=yvT3Dhb_C_2G-e-6#genai #genaisecurity #artificialintelligence #machinelearning #cybersecurity

Data Processing Agreements (DPAs) & GDPR Explained | Privacy Masterclass with VasanthkumarIn this episode, I joined by Vasanthkumar, Privacy Lead at Darwinbox, to dive deep into Data Processing Agreements (DPAs), GDPR compliance, and data protection best practices.They explore how organizations can structure DPAs, manage data retention, handle cross-border transfers, and meet GDPR obligations while ensuring contractual safeguards with vendors and processors.Link Download All Fileshttps://drive.google.com/drive/folders/1fvgBUHZMrRiJVVnziaa8hlxNkSNMgd3I?usp=sharingVasanth Linkedin https://www.linkedin.com/in/vasanth-kumar-9b1360257/What You’ll Learn in this Episode✅ What is a Data Processing Agreement (DPA) and why it matters✅ Key roles: controller, processor, sub-processor, and DPO✅ GDPR requirements for data processing, retention, and deletion✅ Best practices for vendor exit, data minimization, and proof of deletion✅ Standard Contractual Clauses (SCCs) vs Binding Corporate Rules (BCRs)✅ How to handle cross-border data transfers (EU ↔ India and beyond)✅ Rights of data subjects: consent, portability, correction, and deletion✅ Contract law essentials for SaaS vendors (jurisdiction, liability, breach notifications)✅ Annual security assessments, DPIAs, and privacy by design practices✅ Roles of CISO vs DPO in governance and compliance💡 Whether you’re a privacy officer, CISO, compliance lead, or startup founder, this episode gives you a practical roadmap to build, implement, and audit Data Processing Agreements that meet GDPR and global data protection laws.CISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWv#GDPR #DPA #DataPrivacy #Compliance #PrivacyLaws #DataProtection #PrabhNair #Vasanthkumar #CISO #DPO #PrivacyCompliance #CrossBorderData

In this episode, Prabh Nair and Dr. Anton (Security Advisor at Google Cloud) explore the future of cloud-native detection and cybersecurity, discussing how modern detection platforms are evolving beyond traditional on-premise SIEM and EDR.From the rise of AI in security operations to industry shifts in EDR, SIM, and ADR, this conversation highlights practical challenges security teams face—budget constraints, log collection strategies, and balancing detection methods.

🔑 Key Topics CoveredWhat makes cloud-native detection different from traditional security toolsWhy logs + context matter more in cloud than ever beforeEDR, SIEM, and ADR — what to prioritize in budget-limited environmentsHow AI and machine learning are shaping detection (and where humans are still critical)Modern EDR acquisition trends and log-centric approachesCloud logging challenges — deciding what to collect, how long, and at what costSIM’s evolution in the age of microservices and containersProtecting the “crown jewels” of your business in a cloud-first worldBalancing platform-based vs best-of-breed security solutions🌍 Why Watch?If you’re a CISO, SOC lead, security architect, or cloud engineer, this episode gives you practical insights on building scalable, modern detection strategies that balance cost, compliance, and performance.CISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvStudy with MeTelegram Grouphttps://t.me/Infoseclearning#CloudSecurity #ThreatDetection #CloudNative #SIEM #EDR #ADR #CyberSecurity #SOC #GoogleCloud #AIDetection #CyberDefense #PrabhNair

In this podcast, Prabh Nair sits down with Richa to explore the power of communication skills in cybersecurity—from non-verbal cues to storytelling frameworks that help technical professionals communicate complex risks to non-technical audiences.https://www.linkedin.com/in/richawahi/Too often, infosec leaders lose their audience because they speak in jargon. This conversation breaks down how to use body language, voice modulation, empathy, and storytelling to connect with executives, boards, and even LinkedIn followers.🔑 What You’ll Learn in this VideoWhy 93% of communication is non-verbal and how to master itStorytelling techniques to make cybersecurity risks relatableFrameworks: STAR for interviews & HEART for empathetic leadershipPractical tips for body language, pauses, and voice modulationHow to use LinkedIn personal branding to stand out authenticallyBuilding story banks from real cyber incidents for presentationsRole of storytelling in security awareness and board meetingsDaily exercises to polish communication and public speaking💡 Richa shares her 3-step storytelling framework and how leaders can use authentic stories to inspire trust. From KBC-style pauses (Amitabh Bachchan) to LinkedIn story branding, this masterclass blends cybersecurity and leadership communication like never before.#StorytellingInCybersecurity#CybersecurityCommunication#NonVerbalCommunication#CybersecurityStorytelling#StorytellingForLeaders#EmpatheticLeadership#CybersecurityProfessionals#ExplainCybersecuritySimply#STARFramework#HEARTFramework#PersonalBranding#LinkedInBranding#CommunicationSkills#CybersecurityAwareness#CybersecurityLeadership#CybersecurityPresentation#BodyLanguageTips#VoiceModulation#InterviewStorytelling#CareerGrowthInCybersecurity

In this video, you'll learn how to effectively govern an AI agent to ensure it operates ethically and responsibly. Whether you're a tech professional or just curious about AI, this guide will help you navigate the complexities of AI governance.

GEN AI Securityhttps://www.youtube.com/watch?v=aTJPKifa1VMAI Governancehttps://www.youtube.com/watch?v=LgFBi5XD-Ow&t=5668s&pp=ygUNYWkgZ292ZXJuYW5jZQ%3D%3DCISO talkshttps://www.youtube.com/playlist?list=PL0hT6hgexlYwPTD-wC3oFBe27VGEiizg1NIST Serieshttps://www.youtube.com/watch?v=VcC_KabV_Ho&list=PL0hT6hgexlYy0vBwMv0eteiyAxB48RQzy&pp=gAQBiAQBGRC Serieshttps://www.youtube.com/watch?v=mq_vSLHm4r0&list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28&pp=gAQBISO 27001 Videohttps://www.youtube.com/watch?v=sQqJH2naU6I&t=1454s&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzISO 27001 Implementation Guidehttps://www.youtube.com/watch?v=GBfwk10Hh-o&pp=ygUeaXNvIDI3MDAxIGltcGxlbWVudGF0aW9uIHN0ZXBzGRC Practical Serieshttps://www.youtube.com/playlist?list=PL0hT6hgexlYztA41j1bceTfVagP9mtq28GRC Interviewhttps://www.youtube.com/playlist?list=PL0hT6hgexlYz1Usn1Nrnur6OzVoz59zylInternal Audithttps://www.youtube.com/playlist?list=PL0hT6hgexlYyNWBcGYfabwumCr0GKmLWvStudy with MeTelegram Grouphttps://t.me/Infoseclearning#aigovernance