Enjoying the content? Let us know your feedback!

In this week's episode, we talk through the technical details of CI/CD (Continuous Integration/Continuous Development) pipelines: what they are, how they work, the jargon around them, and the potential security risks organizations need to be aware of. Finally, we’ll bust a persistent myth in software development that you might find surprising.

- https://www.cisco.com: What is CI/CD?

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

Today’s episode takes you through three intersecting stories revealing how technology shapes both our vulnerabilities and our digital identity—from the sprawling and adaptable threat of AsyncRAT malware, to critical Bluetooth vulnerabilities threatening millions of vehicles globally, and finally to a thought-provoking glimpse into how AI models create intimate profiles of their users. 

- https://simonwillison.net/2025: Simon's ChatGPT dossier

- https://blog.talosintelligence.com/AsyncRAT

- https://www.bankinfosecurity.com: PerfektBlue Bug

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

Today, we’re focusing on the critical lessons from one of the most disruptive IT failures in recent memory: the global outage triggered by a CrowdStrike software update on July 19, 2024. While the headlines focused on grounded flights and downed systems, the real story lies in what this incident revealed about the way we build, secure, and rely on digital infrastructure.

This episode isn’t just about a faulty update—it’s about the cascading impact of vendor trust, software architecture, and system design decisions made long before disaster strikes. We’ll explore how over-reliance on a single vendor can introduce hidden points of failure, why resilience must be baked into every layer of our IT stack, and how incident response can make or break reputations in a hyperconnected world. We’ll also look at Microsoft’s rapid response and how this moment might reshape the rules for how security software integrates with Windows. The takeaway? In cybersecurity, it’s not enough to be secure—you also have to be prepared for when your most trusted systems fail.

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

This week on YusufOnSecurity, we’re diving into a topic that’s become increasingly critical as our world grows more connected: the security of the Internet of Things, or IoT. From smart thermostats and wearable fitness trackers to industrial sensors and connected cars, IoT devices are now woven into the fabric of our daily lives and business operations. They promise greater convenience, efficiency, and innovation—but they also introduce new risks and vulnerabilities that many organizations and individuals are just beginning to understand.

Securing IoT isn’t just about protecting gadgets; it’s about safeguarding the data they collect, the networks they connect to, and ultimately, the people and processes that rely on them. As the number of IoT devices skyrockets, attackers are finding new ways to exploit weak points—sometimes with far-reaching consequences. In this episode, we’ll explore why IoT security matters, the unique challenges it presents, and practical steps you can take to protect your connected world.

- https://www.cisco.com: What is iOT?

- https://www.iiconsortium.org: Security Maturity Model

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In today’s interconnected world, the security of our digital infrastructure relies heavily on cryptography—the science of protecting information by transforming it into unreadable formats for unauthorized users. But how do we know the cryptographic solutions we use are truly secure? That’s where standards like FIPS 140-3 come in.

- https://csrc.nist.gov: FIPS-140-40-3

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In today’s episode is about a seismic shift in the world of cyber threats. The emergence of AI-powered malware. We’ll unpack how this new breed of malware works, the science behind it, real-world incidents, and what the latest academic research reveals. 

We will also look at the latest news that some are calling "The mother of all breaches".

We have all that coming up next, in this week's podcast!

- https://www.bleepingcomputer.com: No, the 16 billion credentials leak is not a new data breach

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

Today, we’ll answer a pressing question in cybersecurity: Is UTM still relevant in 2025? We’ll trace the origins of UTM, explain why it was created, break down its core features, compare it to newer technologies, and finish by busting a common cybersecurity myth.

Before we dive into our main topic, let’s take a quick look at a major tech update making headlines: 

• The emergence of AI powered malware is becoming more real

- https://en.wikipedia.org: UTM

- https://perception-point.io: AI Malware: Types, Real Life Examples, and Defensive Measures

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In this week's episode, we get into some detailed exploration of an up and coming  malware. Looking at it closer, it is one of the most advanced post-exploitation code families shaping the cybersecurity landscape in 2025. Over the time we have together, we’ll unravel what this malware is, how it works, why it’s so dangerous, and most importantly what businesses can do to defend themselves. Along the way, we’ll break down technical terms and processes, to make the topic less complex as I need it to be accessible and engaging to everyone.

Before we dive into our main topic, let’s take a quick look at a major tech update making headlines: 

• Microsoft Authenticator Now Warns To Export Passwords Before July Cut Off

-https://www.bleepingcomputer.com: Ransomware gangs increasingly use Skitnet post-exploitation malware

- https://otx.alienvault.com: Skitnet IOCs

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

This week we are exploring what Content Delivery Networks —commonly known as CDNs— are and whether they protect modern businesses. We’ll dive deep into the mechanics of how CDNs work, the technologies behind them, and whether they defend organizations from  threats or just deliver content at blazing speeds. Along the way, we’ll highlight two of the world’s leading CDN providers.

- https://en.wikipedia.org: Content Delivery Network

- https://www.cloudflare.com: What Is CDN?

- https://www.akamai.com: What Is CDN?

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.

Enjoying the content? Let us know your feedback!

In this week's episode, we are looking at the latest Cisco Talos’ 2024 report.  
In this comprehensive report, we will delve into the major cybersecurity trends and threats observed over the past year. Cisco Talos team, has compiled this report to provide valuable insights and guidance for organizations to enhance their security postures.

But before we get in to the main topic, I have one security news for you and that is:

- The European Union launches a new vulnerability Database - EUVD

- https://euvd.enisa.europa.eu: EUVD

- https://euvd.enisa.europa.eu/faq: EUVD FAQ

- https://blog.talosintelligence.com: 2024 Year In Review Report

- https://www.forbes.com: Why Quantum Computers Will Work Alongside Classical Systems

Be sure to subscribe!
You can also stream from https://yusufonsecurity.com
In there, you will find a list of all previous episodes in there too.