Episode604

From Paul's Security Weekly
Revision as of 15:48, 10 May 2019 by Wheat Loaf (talk | contribs) (Tech Segment: Federico Simonetti, Xiid Corporation - 6:30 - 7:30PM)
Jump to: navigation, search

Recorded May 16, 2019 at G-Unit Studios in Rhode Island!

Episode Audio

Hosts

  • Paul Asadoorian
    Embedded device security researcher, security podcaster, and CEO of Active Countermeasures .
  • Larry Pesce
    Senior Managing Consultant and Director of Research at InGuardians, SANS Instructor.
  • Lee Neely
    is a Sr. Cyber Analyst at LLNL,SANS Analyst, SANS NewsBites Editor


  • Announcements

    • We just released our 2019 Security Weekly 25 Index Survey. Please go to securityweekly.com and click the Survey link to help us understand who's evaluating, using, or formerly used any of the Security Weekly 25 companies. The results will be summarized and presented back to all responders in a private webcast.

    Interview: Julian Zottl, Raytheon - 6:00-6:30PM

    Julian Zottlis the Cyber and Information Operations SME at Raytheon
    Julian Zottl is a Cyber and Information Operations Subject Matter Expert (SME) for Raytheon Intelligence, Information and Services (IIS) business. IIS is a leader in intelligence, surveillance reconnaissance; advanced cyber solutions; weather and environmental solutions and information-based solutions for homeland security. It also provides training, logistics, engineering, product support, and operational support services and solutions for the mission support, homeland security, space, civil aviation, counter-proliferation and counterterrorism markets.


    Tech Segment: How to fix Identity and Access Management, Federico Simonetti - 6:30 - 7:30PM

    - Former ethical hacker (DDT)
    - Former professor of operating systems security at the University of Milan
    - Developed software for the Italian anti-terrorism and anti-pedophile police
    - Serial entrepreneur with several successful exits in his past
    - Hardcore software designer, with award-winning software titles on his resume

    Topic: How to fix Identity and Access Management
    All IAM solutions are logically flawed from a security standpoint, they either ask for a synchronized copy of the identity database or for open inbound ports on the firewall. But there is a design that fixes all those issues, making IAM much safer.


    Security News - 7:30PM-8:30PM

    Paul's Stories

    1. Microsoft plugs wormable RDP flaw, new speculative execution side channel vulnerabilities - Help Net Security
    2. Passwords Are Dead, Long Live The Password
    3. A flaw in Google Titan Security Keys expose users to Bluetooth Attacks
    4. Severe Linux kernel flaw found in RDS
    5. Microsoft Releases Security Updates to Address Remote Code Execution Vulnerability | US-CERT
    6. More Attacks against Computer Automatic Update Systems - Schneier on Security
    7. Google 0Day In the Wild project tracks zero-days exploited in the Wild

    Lee's Stories