Technado

This week on Technado, Adi Dar from Cyberbit came on to talk about the importance of real-world cybersecurity training and shared how his company’s cyber ranges can help. He also led a discussion about the effect Covid-19 has had on the cybersecurity workforce. Then, in the news, the team looked at an overhauled interface and CarPlay integration for Microsoft Teams, AWS targeting Microsoft’s SQL, the Salesforce acquisition of Slack, security issues facing devs in Docker, and a breathtaking zero-click exploit for iPhones.

On this week’s Technado, the team was joined by Microsoft Cloud Solutions Architect Jeff Mitchell. After learning about his career path, Jeff shared some cool innovations with Azure enterprise-scale landing zones for cloud migrations. In the news, the crew covered a prolonged AWS outage, Microsoft’s Pluton security chip, Linus Torvalds’ thoughts on the Apple M1 hardware, a 2FA bypass flaw in cPanel, and a hacker selling credentials for C-level executives.

Dan Cornell from Denim Group joined Technado with Don Pezet this week to talk about their ThreadFix platform for security program management. He also vented about the misnomer that developers don’t care about security. Then, in the news, the crew discussed the FCC taking spectrum from the auto industry and giving it to Wi-Fi, a ChromeOS alternative called Ubuntu Web Remix, the worst passwords of 2020, a security hole and sketchy patch for TCL TVs, and a spearphishing attack on GoDaddy employees.

TProTV’s newest Edutainer and resident ITIL whiz Chris Ward joined Technado to talk about his upcoming courses like HVIT. He also shared his worst IT nightmare where an exploding transformer taught him a lesson about redundancy. In the news, the team looked at the new M1 processor-equipped computers from Apple, some issues related to Big Sur and Mac apps, Yubico’s first foray into biometrics, a bug in Ubuntu Gnome that gave users root access, and a former Microsoft engineer’s sentencing after a $10mm gift card heist. Finally, in the WTF segment, they unraveled the strange story of a deceased neo-nazi Canadian spam king.

Sticking with the CertNexus theme, Director of Certifications Lindsay Bachman joined Technado to talk about what goes into making a brand new certification. She also spoke about the power of adding certs and degrees for job seekers. Then, in the brand new segment ‘News from Captain Obvious,’ the team was shocked to hear Ransomware gangs don’t always delete your data like they promise. In the news, they covered an Arm CPU monster targeting Intel and AMD, Windows updates clocked by Thunderbolt issues, Fedora’s discussion about retiring NTP and deprecating SCP, a Hotels.com provider exposing travelers’ data, and the impact of AI on security careers.

It’s CertNexus month at Technado, so we went right to the source with an interview from CertNexus CEO Jeff Felice. After talking about what new certifications are on their roadmap, Jeff and the team discussed the pros and cons of degrees and certifications for IT workers. In other news, the team talked about a new AWS computing region in Europe, Brave Browser stopping CNAME deception, the public beta of SpaceX Starlink, Windows 10 removing Flash, and WordPress patching a 3-year-old RCE bug.

Salt Security’s Roey Eliyahu joined Technado to discuss one of the most vulnerable things security teams often overlook: APIs. They dissected an API issue at Uber that left accounts open to attack. Then, in the news, the guys covered Vint Cerf’s plan for Internet in space, Microsoft throttling availability of their October 2020 Windows 10 update, Ubuntu’s Groovy Gorilla, and a group of hackers stealing from the rich and giving just a little to the poor. Finally, in the run-up to the US elections, they discussed a largely unsuccessful hack from China masquerading as McAfee Antivirus as well as a successful ransomware attack that affected a Georgia county’s election database.

This week on Technado, Dr. Tirthankar Ghosh from the University of West Florida Center for Cybersecurity joined the panel to share many of the amazing things their center is doing. He also helped the team understand the implications of the IoT Cybersecurity Improvement Act of 2020. In the news, the guys discussed the Raspberry Pi Compute Module 4, Microsoft ending Office 2010 support, a warning from the US Cyber Command to patch a TCP/IP bug, a for-profit botnet proxy service, and the hacking charges filed against Russian military officers.

Symmetry Systems’ Mohit Tiwari joined Technado this week to talk about his journey from university professor to start-up CEO. He explained the company’s focus on data store and object security before sharing his worst IT nightmare with the group. In the news, the team looked at a cyberattack that affected online classes in Massachusetts, Microsoft’s role in taking down the TrickBot botnet, VS Code coming to Raspberry Pi and Chromebook, VMWare’s ESXi Arm edition, and Apple paying out more than a quarter-million-dollar bug bounty. Finally, in the WTF segment, they dissected the story of a library employee’s $1.3M toner theft.

The new CISO at NetEnrich, Brandon Hoffman, was this week’s guest on Technado, where he discussed the role of the SOC in a company’s security strategy. He also shared his take on a new worm phishing campaign in the segment “Who Got Pwned.” After the break, Don and Daniel dissected Microsoft’s explanation for their Azure AD outage in “Deja News.” Finally, they talked about new x64 emulation that will help Windows on ARM, AT&T shelving DSL, OWC’s new Thunderbolt 4 hub, and leaked Windows XP code that could impact current Windows versions.