Security Nation

By Jen Ellis and Tod Beardsley

Security Nation is a podcast dedicated to celebrating the champions in the cybersecurity community who are advancing security in their own ways. We also cover the latest developments in infosec that y... more

Download on the App Store

Download on the App Store

Get it on Google Play

FAQs about Security Nation:

How many episodes does Security Nation have?

The podcast currently has 105 episodes available.

Security Nation episodes:

February 02, 2022John Rouffas on Building a Security Function
Interview Links
Take up John on the offer to spam him on LinkedIn.
Learn more about what intelliflo is up to.
Rapid Rundown Links
Check out CISA’s KEV list.
Read up on the 8 vulnerabilities recently added to KEV.
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
...more
30min
January 19, 2022Mike Hanley of GitHub on the Log4j Vulnerability
Interview Links
Read GitHub’s blog on the Log4j vulnerability, and the follow-up.
Check out GitHub’s Dependabot.
Find out Why Johnny Can’t Encrypt.
Learn about GitHub’s Sponsor Program.
Read about the work going on at OpenSSF.
Delve into Mike’s blog post on GitHub’s exploit code policy.
Rapid Rundown Links
Get the info on Microsoft’s emergency fixes for Windows Server and VPN bugs.
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
...more
46min
November 24, 2021Chris John Riley on Minimum Viable Secure Product (MVSP)
Interview Links
Listen to Chris’s podcast, First Impressions.
Check out the other, Jane Austen-themed First Impressions podcast.
Learn more about MVSP at the official site and in this blog post from Google.
Read up on the ETSI standard Jen mentioned.
Revisit our previous episode on Disclose.io with Casey Ellis.
Rapid Rundown Links
Read about the Sky router vulnerability.
If you just can’t wait till January to hear from us again, revisit Season 4.
...more
49min
November 10, 2021Michael Powell on Being a Cyber Envoy
Interview links
Learn more about the UK’s Department for International Trade.
Rapid Rundown links
Check out inTheWild, and follow them on Twitter.
Grab our 2022 planning resource. (Note! This is a direct PPTX link — don't be alarmed by the sudden download.)
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
...more
37min
November 04, 2021 Pete Cooper and Irene Pontisso of the UK Cabinet Office on Their Cybersecurity Culture Competition
Apply to phase one of the UK Cabinet Office's Small Business Research Initiative (SBRI): Reducing Public Sector Risk through Culture Change. Want to tell a friend? Feel free to use this friendlier, human-readable and -speakable link:

https://r-7.co/cabinet-office-culture-competition
Note the deadline is fast approaching: Monday, November 8, 2021, 17:00 London UK time, and the research initiative is open to all small businesses with strong ties to the United Kingdom.
...more
22min
October 27, 2021Jack Cable on Ransomwhere
Interview Links
Check out the Ransomwhere site.
Listen to our previous episode with Jack on election security.
Rapid Rundown Links
Read the CISA notification on the critical RCE vulnerability in Discourse.
See Discourse’s announcement of the vulnerability on GitHub.
Peruse Discourse’s technical blog post about it.
Check out Discourse’s security program and policies.
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
...more
39min
October 13, 2021 Michael Daniel on the Cyber Threat Alliance
Interview links
Follow Michael on Twitter @CyAlliancePrez
Learn more about the Cyber Threat Alliance
Check out the Ransomware Task Force, which Michael co-chairs
Read Jen's position piece on hack back
Rapid Rundown links
Read the full text of the Cyber Incident Reporting Act
Refresh your memory on the SolarWinds data breach
See who's on the House Homeland Security Committee
...more
49min
September 29, 2021Rob Graham on Mike Lindell's Cyber Symposium
Interview Notes
Rob's live Tweet thread
Rob's archive of the provided RTFs (hex decoded)
Rob's BLX Container Extractor
All about Dennis Montgomery. Warning: this is a WIki rabbit hole.
A Torrent of several gigs of data from the Cyber-Symposium is available at:
magnet:?xt=urn:btih:39a9590de21e77687fdf7eacee4dd743f2683d72&dn=cyber-symposium&tr=udp://9.rarbg.me:2780/announce
Rapid Rundown Notes
The original Bleeping Computer story on Microsoft shutting off Basic Auth
The related story about Amit's Autodiscover bug finding that may have prompted the above
A somewhat early reference to some WPAD bugs
The earliest reference Tod could find about WPAD exploits... which happened to be written by the very same Tod back in 2009.
...more
52min
September 15, 2021Craig Williams of Cisco Talos on Proxyware
Interview Links
Craig is on Twitter, but his OpSec is pretty tight so good luck getting that follow back.
You can read up on Cisco Talos, and check their most recent on proxyware here.
Rapid Rundown Links
Check out the Bleeping Computer story on the ATM robbers.
Back in 2016, Rapid7's Weston Hecker demonstrated some EMV attacks.
But that doesn't matter because about half of all U.S. gas stations still don't operate with EMV payment.
Like the show? Want to keep Jen and Tod in the podcasting business? Feel free to rate and review with your favorite podcast purveyor, like Apple Podcasts.
...more
43min
September 01, 2021Jill Fraser and Deborah Blyth on Securing Colorado
Interview Links
National Cyber Security Center
Colorado Cyber Resource Center
Cybersecurity HSAC Subcommittee
Rapid Rundown Links
Firefox follows Chrome and prepares to block insecure downloads by Catalin Cimpanu
hxxp://smart4alarm.com/ is the website Tod ran into that plops an APK right in your Downloads with no clicks. Is this okay?
...more
37min

FAQs about Security Nation:

How many episodes does Security Nation have?

The podcast currently has 105 episodes available.