Summary

This episode explores the recent security breach involving Lite LLM, a popular open-source Python library, and discusses the implications for cybersecurity in AI development. Learn how a trusted tool was exploited, the attack's mechanics, and essential security lessons for organizations.

Key Topics

Supply chain attack on Lite LLM
Multi-stage compromise via CI/CD pipeline
Malicious package injection and persistence
Lessons on dependency pinning and credential rotation
The AI tool chain as a new attack surface

Chapters

00:00 The Importance of Speed and Convenience in AI Development
04:16 The Attack Methodology
10:08 Key Lessons Learned from the Incident

Keywords

cybersecurity, AI security, supply chain attack, open source, LiteLLM, credential theft, DevSecOps, dependency management, zero trust, threat intelligence

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary

This episode explores the critical importance of Identity Threat Detection and Response (ITDR) in modern cybersecurity. Hosted by Santosh, it covers how identity infrastructure is the most targeted layer in enterprises, the rise of identity-based attacks, and practical strategies to enhance security posture.

Key Topics

The rise of identity-based attacks and their impact
The three pillars of ITDR: visibility, detection, response
Real-world examples: SolarWinds, MGM, Striker attack
How AI is transforming cyber threats and defenses
Practical steps to assess and improve your identity security

Chapters

00:00 The Reality of Data Breaches
02:29 Understanding Identity Threat Detection and Response (ITDR)
06:58 The Urgency of ITDR in Today's Landscape
10:33 Case Study: Learning from the Striker Attack
13:18 Key Takeaways for Organizations
16:09 Identity as the New Perimeter

Keywords

cybersecurity, ITDR, identity security, data breaches, identity attacks, zero trust, cloud security, breach prevention, cybersecurity strategy

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary

This episode explores the March 2026 cyber attack on Stryker Corporation, a leading medical technology company, highlighting the attack's mechanics, motives, and lessons for organizations worldwide. Learn how nation-state actors target critical infrastructure and how to defend against such destructive threats.

Key Topics

• The timeline and impact of the Stryker cyber attack
• The role of nation-state actors and geopolitical motives
• Technical mechanics of the Wiper malware attack
• Lessons learned: privilege management, network segmentation, and threat intelligence
• Practical cybersecurity measures for organizations

Chapters

00:00 The Calm Before the Storm
02:28 Who are Stryker Corporation
04:07 What really happened?
08:36 Understanding the Attacker: Handala
10:15 How did they do it? Technical breakdown
14:15 Lessons Learned from the Stryker Incident
17:51 Some practical best practices
22:47 Closing thoughts

Keywords

cybersecurity, critical infrastructure, nation-state attack, Wiper malware, privilege management, zero trust, threat intelligence, healthcare cybersecurity

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary

In this episode of 'Secured by Design', we discuss the root cause for significant Cloudflare outage that occurred on November 18, 2025, which disrupted major internet services and highlighted the fragility of digital infrastructure. The conversation delves into the causes of the outage, its financial impact on businesses, and the lessons learned regarding cybersecurity and infrastructure reliance.

Chapters

00:00 The Financial Impact of the Cloudflare Outage
03:40 The Role of Cloudflare in Internet Infrastructure
07:16 The Technical Failure Behind the Outage
09:54 Security Implications of the Outage
12:00 Learnings and Conclusions

Cloudflare's official explaination of the outage:

https://blog.cloudflare.com/18-november-2025-outage/

#Cloudflare #outage #cybersecurity #digitalinfrastructure #security #internetreliability #digitalreliance

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary

In this episode of 'Secured by Design', we delve into Customer Identity and Access Management (CIAM), exploring its significance in enhancing customer experiences while ensuring security and privacy. The discussion highlights the digital experience gap, the differences between CIAM and traditional IAM, and the core concepts that underpin effective CIAM systems. We emphasizes the importance of a seamless customer journey and the future growth potential of CIAM in the digital landscape.

Chapters

00:00 Introduction to Customer Identity Management
05:22 Understanding Customer Identity and Access Management (CIAM)
12:17 Core Concepts of CIAM
17:29 Enhancing Customer Journey with CIAM

#CIAM, #CustomerIdentity #AccessManagement #DigitalExperience #Cybersecurity #Identity Management #BusinessGrowth #security #privacy

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary

In this episode of Secured by Design, we discuss the growing prevalence of non-human identities (NHIs) in organisations, which outnumber human identities significantly. We highlight the security risks associated with NHIs, including their lack of oversight and the potential for exploitation by attackers. The conversation emphasises the need for organisations to adopt a modern playbook for managing NHIs, especially in light of the increasing integration of AI technologies. We also outline the steps necessary for effective NHI governance, including discovery, classification, and monitoring, to mitigate risks and protect sensitive data.

Chapters

00:00 The Rise of Non-Human Identities
05:13 The Security Blind Spot of NHIs
09:54 The Business Impact of NHI Compromises

#Non-Human Identities #NHI #Cybersecurity #Identity Management #Digital Security #AI Risks  #NHIGovernance #ZeroTrust

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary

In this episode of 'Secured by Design', we discusses the critical shift from traditional passwords to passkeys in the realm of cybersecurity. We also highlight the alarming statistics surrounding password breaches and the vulnerabilities they present. The conversation delves into the mechanics of passkeys, their advantages over passwords, and the growing adoption of this technology across various industries. The episode emphasize the importance of transitioning to a passwordless future for enhanced security and user experience, while also addressing the challenges organizations face during this transition.

Chapters

00:00 The Password Crisis
10:33 Introduction to Passkeys
16:58 The Rise of Passkeys
25:53 Real-World Adoption and Success Stories

#CyberSecurity #DataBreach #Passkeys #DigitalSecurity #TechTalk #SecureYourData #IdentitySecurity #Passwordless 

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary 

In this episode of Secured by Design, we delve into the complexities of modern identity governance and administration (IGA). We discuss the challenges organizations face in managing access for a multitude of identities and applications, and how IGA solutions can streamline this process. 

To explain how a modern IGA solution does this, we follow the journey of an employee, James, from onboarding to offboarding, highlighting the importance of automated workflows, access certification, and risk management through segregation of duties. 

Chapters

00:00 Introduction to Identity Governance
04:51 The Employee Lifecycle in IGA
09:47 Managing Access and Permissions
15:20 Automating Deprovisioning and Security

Keywords

identity security, cybersecurity, secured by design, identity governance, IAM, access requests, birthright provisioning, access certification, access creep, segregation of duties, sod, iga, converged iga platform

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh

Summary

In this (First) episode of Secured by Design, we explore the critical role of identity in cybersecurity. We emphasise that identity should be the foundation of security, rather than an afterthought. Through real-world examples, we illustrate the risks associated with poor identity management and the benefits of adopting an identity-first approach. The conversation also highlights the cultural shift needed within organisations to prioritise identity governance and security as a means to enable business velocity and innovation.

Chapters

00:00 Introduction to Secured by Design
01:00 Understanding 'Secured by Design'
07:43 Real-World Examples of Identity Security
09:36 Cultural Shift in Security Mindset
11:44 The Future of Identity Security

Keywords

identity security, cybersecurity, secured by design, insider threats, access management, identity governance, IAM, security best practices, business velocity, digital transformation

Let’s Stay Connected

📧 Email: [email protected]

🔗 LinkedIn: linkedin.com/in/kssantosh