Podcasts about Blast radius

What if AI stopped being the assistant to cybercriminals and became the attacker itself? That's no longer hypothetical. JADEPUFFER is the first documented case of ransomware run entirely by an AI agent: it broke into a production database, hit a wall mid-attack, then found another way in within 31 seconds, faster than most human penetration testers can react. Rob Maas, Field CTO at ON2IT, sits down with Yuri Wit, SOC DevOps Engineer at ON2IT, to trace how agentic malware evolved out of AI-assisted attacks into a threat that plans, executes, and pivots entirely on its own.

Former Republican state Sen. Jeff Brandes says the real devastation caused by a proposed property tax cut will be the loss of local control.

The skills you build and the tools you master matter, but they aren't your most important asset when things go wrong — and something eventually will. In this episode, I work through why our careers and lives are governed more by avoiding catastrophic downside than by chasing upside, and why the single best tool for surviving a bad event isn't testing, insurance, or money — it's genuine trust with the people around you. Here's a question to sit with: what is the most important tool you have as a software engineer and as a leader? Most of us reach for something technical, but the answer runs deeper than that. In this episode, I start with the humble premortem — the practice of assuming something has already gone wrong so we can pressure-test our plans — and use it to explore why so much of our work is really about predicting and mitigating risk. From there, I make the case that because we're all exposed to a far larger downside than upside on any given day, the tool that matters most is the one that helps you survive the bad event you couldn't prevent: your relationships with other people, built on real trust. The Premortem as a Risk Lens: Learn why assuming failure ahead of time is such a useful counter to our natural optimism. Our plans quietly assume everything will go right, and a premortem forces us to inspect the gaps our best-laid plans never covered. Life Is Already About Predicting Risk: Nearly every action we take — stepping forward, eating the sushi, merging into traffic — is a small bet on an outcome we can't prove in advance. Much of what we're managing isn't even our own behavior, but the risk other people put us through. Why the Downside Dwarfs the Upside: On a typical Monday, your potential gain is limited, but your potential loss is not. A single catastrophic event — a breached customer, untested code shipped, an injury for an athlete — can undo far more than any single good action could ever build. This is why avoiding failure, not chasing brilliance, quietly shapes most successful careers. Likelihood Times Impact: Even a one-in-a-hundred-days negative event can cost you your job or your company a fortune, while very few actions could produce a commensurate gain like doubling your salary. Our behavioral aversion to risk turns out to be rational. Mitigate the Blast Radius, Not Just the Incidence: You can never be 100% certain a bad event won't happen. Good people who show up, stay reliable, and grow their skills still get laid off. So beyond reducing the likelihood of harm, you have to reduce its impact when it lands. Relationships Are the Real Safety Net: The most important tool in your belt isn't technical — it's your relationships with other human beings. Invested in honestly, they pay you back forever, and they're the thing you fall back on when the negative event you tried to prevent happens anyway. Trust Is the Core Currency: Genuine relationships require reality — real curiosity and care, not performed name-remembering, which people can see through. Trust compounds like an asset, while money spent to buy loyalty is gone the moment it's paid. When you hit a hard deadline or discover something's broken, a reservoir of trust is what lets people extend their best effort without you having to throw more money on the table. Episode Homework: Go invest in your relationships regardless of your current risk profile. Spend extra time in your one-on-ones, with your team, and in your retros — and get curious about what the people around you actually want, instead of assuming you already know.

Attackers reached full data exfiltration in just 72 minutes—four times faster than the year before. Learn the three critical AI workflow guardrails every CISO needs to scale securely without expanding blast radius. ITRADE Innovations City: Fort Lauderdale Address: 501 E Las Olas Blvd Website: https://www.itradeinnovations.com/

Send us Fan MailThe Architecture of Empire: Walter L. Hixson on the Israel Lobby and the Machinery of Endless WarPart Two: The Nakba's Blast Radius and the Capture of U.S. Foreign PolicyEpisode DescriptionSeventy-eight years ago, the Nakba dismantled Palestinian society. Today, we are living inside its blast radius.What began in 1948 with the violent mass displacement of over 700,000 people has metastasized into a sprawling, multi-front geopolitical fire. We are now watching the Middle East get swallowed by a disastrous and widely rejected regional war with Iran—a conflict fueled by corrupt demagogues desperate to trade human lives for their own political survival.How does a republic repeatedly bankrupt its moral standing and its treasury to underwrite conflicts its citizens actively despise? It doesn't happen by accident. It is engineered.In Part Two of our historical deep-dive into the U.S.-Israel Special Relationship, host Jeremy Rothe-Kushel reaches back to a profoundly relevant late-2021 conversation with diplomatic and cultural historian Walter L. Hixson.Stripping away the polite fictions of Washington double-speak, Hixson exposes the actual plumbing of imperial power. We break down the modern Israel lobby in plain daylight: the massive flow of capital, the ruthless political coercion, and the organized infrastructure of silence that captures U.S. foreign policy and locks the American public into a perpetual cycle of militarism and repression.If we are ever going to extinguish the fire, we must first understand exactly who built the furnace. Step beyond the walls with us.Guest Bio: Walter L. Hixson is a diplomatic and cultural historian, a contributing editor of the Washington Report on Middle East Affairs, and the author of numerous vital books, including Architects of Repression: How Israel and Its Lobby Put Racism, Violence and Injustice at the Center of US Middle East Policy and Imperialism and War: The History Americans Need to Own.Listen & Explore Further:Walter Hixson's Bio & Work: University of AkronExplore the Show Archives: Listen to past episodes, including Part 1 with Grant Smith, at the KKFI Understanding Israel Palestine archive: kkfi.org/program/understanding-israel-palestine/Beyond the Walls Substack: beyondthewalls.substack.com

Thomas Massie lost his congressional seat. This is 3 races in a few weeks where the Trump endorsed candidates beat the incumbents. What does this mean for MAGA moving forward? And, why libertarianism isn't the same as being conservative.

Thomas Massie lost his congressional seat. This is 3 races in a few weeks where the Trump endorsed candidates beat the incumbents. What does this mean for MAGA moving forward? And, why libertarianism isn't the same as being conservative.

You still need DBAs (that know how to back up systems and test restores). If you think you don't, or if you manager does, then perhaps they ought to read this piece on how an AI agent deleted a production database. This wasn't the case of an agent just running around with sysadmin access to all resources, or a lack of tests that allowed bad code to flow through a CI/CD process. This was a system design that had a hole in it. An API call to change infrastructure that could change both staging and production. Not something an AI set up, but humans did. A hole from both PocketOS and the API vendor that allowed the AI agent to make the same type of mistake we've seen humans make. A mistake of not double checking, not verifying, not following the rules of getting a second set of eyes, even a second set of virtual eyes, on the code that could drop resources. Read the rest of Limit the Blast Radius

The handling of Jeffrey Epstein's criminal enterprise appeared narrow from the very beginning, not because investigators lacked awareness of the broader network surrounding him, but because expanding the scope would have risked exposing powerful institutions and influential figures across politics, finance, academia, royalty, and international elite circles. Rather than pursuing a sweeping enterprise case under statutes like RICO, prosecutors repeatedly confined the investigations to smaller, more manageable prosecutions focused primarily on Epstein and later Ghislaine Maxwell. A true racketeering case would have required investigators to map the full structure of the operation, including recruiters, facilitators, financial systems, social gatekeepers, and institutional enablers. That kind of investigation would have inevitably widened the blast radius and forced public scrutiny onto banks, universities, charities, political figures, and global power networks connected to Epstein's world. Instead, authorities consistently appeared to prioritize containment, reputational management, and institutional stability over fully exposing the entire ecosystem surrounding Epstein's activities.For years, that containment strategy largely worked because the public only saw fragments of the story through isolated headlines, civil lawsuits, and limited criminal proceedings. But the release of large volumes of court filings, emails, depositions, and investigative records fundamentally changed the landscape by allowing independent journalists, researchers, and the public to connect patterns that had previously remained compartmentalized. As more information surfaced, the narrative stopped looking like a scandal centered on one wealthy predator and increasingly resembled a broader story about institutional protection, selective accountability, and elite networks operating behind layers of influence and plausible deniability. The government's reluctance to aggressively pursue co-conspirators, combined with its repeated use of tightly controlled prosecutions, fueled growing public skepticism that authorities were intentionally limiting exposure to avoid destabilizing powerful institutions and damaging politically sensitive relationships. What officials long feared—a scandal too large to effectively manage—has now become reality as the Epstein story continues expanding far beyond the narrow scope authorities originally attempted to impose upon it.to contact me:bobbycapucci@protonmail.com

The handling of Jeffrey Epstein's criminal enterprise appeared narrow from the very beginning, not because investigators lacked awareness of the broader network surrounding him, but because expanding the scope would have risked exposing powerful institutions and influential figures across politics, finance, academia, royalty, and international elite circles. Rather than pursuing a sweeping enterprise case under statutes like RICO, prosecutors repeatedly confined the investigations to smaller, more manageable prosecutions focused primarily on Epstein and later Ghislaine Maxwell. A true racketeering case would have required investigators to map the full structure of the operation, including recruiters, facilitators, financial systems, social gatekeepers, and institutional enablers. That kind of investigation would have inevitably widened the blast radius and forced public scrutiny onto banks, universities, charities, political figures, and global power networks connected to Epstein's world. Instead, authorities consistently appeared to prioritize containment, reputational management, and institutional stability over fully exposing the entire ecosystem surrounding Epstein's activities.For years, that containment strategy largely worked because the public only saw fragments of the story through isolated headlines, civil lawsuits, and limited criminal proceedings. But the release of large volumes of court filings, emails, depositions, and investigative records fundamentally changed the landscape by allowing independent journalists, researchers, and the public to connect patterns that had previously remained compartmentalized. As more information surfaced, the narrative stopped looking like a scandal centered on one wealthy predator and increasingly resembled a broader story about institutional protection, selective accountability, and elite networks operating behind layers of influence and plausible deniability. The government's reluctance to aggressively pursue co-conspirators, combined with its repeated use of tightly controlled prosecutions, fueled growing public skepticism that authorities were intentionally limiting exposure to avoid destabilizing powerful institutions and damaging politically sensitive relationships. What officials long feared—a scandal too large to effectively manage—has now become reality as the Epstein story continues expanding far beyond the narrow scope authorities originally attempted to impose upon it.to contact me:bobbycapucci@protonmail.comBecome a supporter of this podcast: https://www.spreaker.com/podcast/the-moscow-murders-and-more--5852883/support.

The handling of Jeffrey Epstein's criminal enterprise appeared narrow from the very beginning, not because investigators lacked awareness of the broader network surrounding him, but because expanding the scope would have risked exposing powerful institutions and influential figures across politics, finance, academia, royalty, and international elite circles. Rather than pursuing a sweeping enterprise case under statutes like RICO, prosecutors repeatedly confined the investigations to smaller, more manageable prosecutions focused primarily on Epstein and later Ghislaine Maxwell. A true racketeering case would have required investigators to map the full structure of the operation, including recruiters, facilitators, financial systems, social gatekeepers, and institutional enablers. That kind of investigation would have inevitably widened the blast radius and forced public scrutiny onto banks, universities, charities, political figures, and global power networks connected to Epstein's world. Instead, authorities consistently appeared to prioritize containment, reputational management, and institutional stability over fully exposing the entire ecosystem surrounding Epstein's activities.For years, that containment strategy largely worked because the public only saw fragments of the story through isolated headlines, civil lawsuits, and limited criminal proceedings. But the release of large volumes of court filings, emails, depositions, and investigative records fundamentally changed the landscape by allowing independent journalists, researchers, and the public to connect patterns that had previously remained compartmentalized. As more information surfaced, the narrative stopped looking like a scandal centered on one wealthy predator and increasingly resembled a broader story about institutional protection, selective accountability, and elite networks operating behind layers of influence and plausible deniability. The government's reluctance to aggressively pursue co-conspirators, combined with its repeated use of tightly controlled prosecutions, fueled growing public skepticism that authorities were intentionally limiting exposure to avoid destabilizing powerful institutions and damaging politically sensitive relationships. What officials long feared—a scandal too large to effectively manage—has now become reality as the Epstein story continues expanding far beyond the narrow scope authorities originally attempted to impose upon it.to contact me:bobbycapucci@protonmail.comBecome a supporter of this podcast: https://www.spreaker.com/podcast/the-epstein-chronicles--5003294/support.

Send us Fan MailJeff Collins, CEO of WanAware, explored the shift toward Visibility-as-a-Service (VaaS), a model designed to help MSPs manage the increasing complexity of AI-accelerated infrastructure. He defined their core value proposition as “actionable observability”—a method that moves beyond simple data collection to map the complex relationships and “blast radius” of dependencies across cloud, on-premises, IoT, and OT environments. By establishing a real-time knowledge graph, the platform can auto-discover ephemeral or developer-deployed resources that traditional scanners often miss, effectively reducing the noise of false positives that plague modern security operations.He also addressed the telemetry trap, where organizations collect massive amounts of data in silos but fail to derive automated context. WanAware's solution uses a lightweight, no-code integrator to ingest disparate APIs and correlate them into a unified view. This architectural approach allows MSPs to capture tribal knowledge from their senior engineers and convert it into automated playbooks. These playbooks are then executed with strict AI grounding and per-action verification, ensuring that incident responses are consistent, documented, and free from the risks of manual, spreadsheet-driven workflows.

Mark recently posted a poll on LinkedIn, asking if people use the phrase "blast radius". Some of you said yes, you use it, but most said no. And others expressed concern about the phrase itself. Let's dig into it.   Hello everyone and welcome to episode 228 of the Resilient Journey Podcast, presented by Anesis Consulting Group!   This week Mark takes a few minutes to share the concept of 'blast radius' and its use in terms of business resilience strategies.   He starts by addressing the thoughtful comments of our colleagues regarding the phrase and how it may not be received well in some settings. But whether you use the term blast radius or impact radius, the concepts are worth noting. Mark talks about Concentration risk,  and says that “Resilience isn't about preventing failure—it's about preventing failure from becoming catastrophic.”   Be sure to follow The Resilient Journey!  We sure do appreciate it! Check out the Resilient Journey Hub! Want to learn more about Mark? Click here or on LinkedIn. Special thanks to Bensound for the music.

Yuval Avrahami from Wiz joins to share their work on "CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild." Wiz Research uncovered “CodeBreach,” a critical supply chain vulnerability caused by a subtle misconfiguration in AWS CodeBuild pipelines that allowed attackers to take over key GitHub repositories, including the widely used AWS JavaScript SDK that powers the AWS Console. By exploiting an unanchored regex filter, unauthenticated attackers could trigger privileged builds, steal credentials, and potentially inject malicious code into software used across a majority of cloud environments. AWS has since remediated the issue and introduced stronger safeguards, but the incident highlights a growing trend of attackers targeting CI/CD pipelines where small misconfigurations can lead to massive downstream impact. The research can be found here: CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild Learn more about your ad choices. Visit megaphone.fm/adchoices

Yuval Avrahami from Wiz joins to share their work on "CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild." Wiz Research uncovered “CodeBreach,” a critical supply chain vulnerability caused by a subtle misconfiguration in AWS CodeBuild pipelines that allowed attackers to take over key GitHub repositories, including the widely used AWS JavaScript SDK that powers the AWS Console. By exploiting an unanchored regex filter, unauthenticated attackers could trigger privileged builds, steal credentials, and potentially inject malicious code into software used across a majority of cloud environments. AWS has since remediated the issue and introduced stronger safeguards, but the incident highlights a growing trend of attackers targeting CI/CD pipelines where small misconfigurations can lead to massive downstream impact. The research can be found here: CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild Learn more about your ad choices. Visit megaphone.fm/adchoices

Podcast: Safe Mode Podcast (LS 25 · TOP 10% what is this?)Episode: Opportunistic by Default: How OT gets pulled into the blast radiusPub date: 2026-01-29Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationIn this episode of Safe Mode, we look at how opportunistic campaigns—often starting as loud disruption like DDoS—can probe for weak points and, in some cases, move closer to operational technology and industrial control systems. Using a recent Justice Department case tied to pro‑Russia hacktivist groups as a jumping-off point, we discuss what this pattern says about the OT threat landscape in 2025, from remote access and trust boundaries to engineering workflows and data integrity risk. Chris Grove, Director of Cybersecurity Strategy at Nozomi Networks, joins to explain what defenders should prioritize now to keep “noise” from becoming real-world operational impact.The podcast and artwork embedded on this page are from Safe Mode Podcast, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.

Parce que… c'est l'épisode 0x626! Shameless plug 10 et 11 septembre 2025 - GoSec 2025 Code rabais de 15% - GSPOL25 13 septembre 2025 - BSides Montreal 2025 12 au 17 octobre 2025 - Objective by the sea v8 14 et 15 octobre 2025 - ATT&CKcon 6.0 14 et 15 octobre 2025 - Forum inCyber Canada Code rabais de 30% - CA25KDUX92 10 au 12 novembre 2025 - IAQ - Le Rendez-vous IA Québec 17 au 20 novembre 2025 - European Cyber Week 25 et 26 février 2026 - SéQCure 2026 Description Notes Divers How Has IoT Security Changed Over the Past 5 Years? Hackers Leverage Raw Disk Reads to Bypass EDR Solutions and Access Highly Sensitive Files Qantas penalizes executives for July cyberattack CVE-2025-6785 - Tesla Model 3 Physical CAN Bus Injection Android drops mega patch bomb - 120 fixes, two already exploited Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn SIM Swapping Attacks on the Rise – How eSIM can Make SIM Swapping Harder Europe Putin the blame on Russia after GPS jamming disrupts president's plane Almost Every State Has Its Own Deepfakes Law Now No, Google did not warn 2.5 billion Gmail users to reset passwords IA Hackers Use AI Platforms to Steal Microsoft 365 Credentials in Phishing Campaign AI code assistants make developers more efficient at creating security problems Comment manipuler psychologiquement une IA ? Les techniques qui marchent vraiment LegalPWN - Pour piéger les IA avec les petites lignes Indirect Prompt Injection Attacks Against LLM Assistants BruteForceAI - L'IA qui cracke vos mots de passe Hackers Leverage Hexstrike-AI Tool to Exploit Zero Day Vulnerabilities Within 10 Minutes Ollama - 14 000 serveurs IA laissés en libre-service sur Internet Europe et souveraineté EUVD: first step toward Europe's cybersecurity sovereignty? Switzerland Launches Apertus: A Public, Open-Source AI Model Built for Privacy EU court's dismissal of US data transfer challenge raises privacy advocates' ire SAP to invest over 20 billion euros in ‘sovereign cloud' in boost to Europe's AI ambitions Chaine d'approchées Blast Radius of Salesloft Drift Attacks Remains Uncertain Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1 How big will this Drift get? Cloudflare cops to Salesloft Drift breach The impact of the Salesloft Drift breach on Cloudflare and our customers Zscaler Confirms Data Breach – Hackers Compromised Salesforce Instance and Stole Customer Data Collaborateurs Nicolas-Loïc Fortin Crédits Montage par Intrasecure inc Locaux réels par Intrasecure inc

Referências do Episódio2025-07 Security Bulletin: Junos OS and Junos OS Evolved: Vulnerability in the RADIUS protocol for Subscriber Management (Blast-RADIUS) (CVE-2024-3596)Blast-RADIUS2025-07 Security Bulletin: Juniper Security Director: Insufficient authorization for multiple endpoints in web interface (CVE-2025-52950)ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLsFrom Click to Compromise: Unveiling the Sophisticated Attack of DoNot APT Group on Southern European Government EntitiesIranian group Pay2Key.I2P ramps Up ransomware attacks against Israel and US with incentives for affiliatesRoteiro e apresentação: Carlos Cabral e Bianca OliveiraEdição de áudio: Paulo ArruzzoNarração de encerramento: Bianca Garcia

AI is reshaping cybersecurity as we know it. From sophisticated AI-driven phishing attacks to the amplified risk of insider threats using tools like Copilot, the landscape is shifting at an unprecedented pace. How can security leaders and practitioners adapt?Join Ashish Rajan and Matthew Radolec (Varonis) as they explore the critical challenges and opportunities AI presents. Learn why 86% of attacks involve credential misuse and how AI agents are making it easier than ever for non-technical insiders to exfiltrate data.In this episode, you'll learn about:The "Blast Radius": How AI tools can dramatically increase data exposure.From "Breaking In" to "Logging In": The dominance of credential-based attacks.AI-Powered Social Engineering: The rise of "conversational bait".Copilot Use Cases & "Aha!" MomentsData Integrity in AI: The critical, overlooked pillar of AI security.The Enduring Importance of Access Management in an AI World.Transforming Security Operations: AI for incident response, playbooks, and forensics.Guest Socials - ⁠Matt's Linkedin Podcast Twitter - ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠@CloudSecPod⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Podcast- Youtube⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security Newsletter ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠- ⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Cloud Security BootCamp⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠If you are interested in AI Cybersecurity, you can check out our sister podcast -⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ AI Cybersecurity PodcastQuestions asked:(00:00) Introduction(01:57) New Threat Landscape in Cloud & AI(08:08) Use cases for regulated industries(10:03) Impact of Agentic AI in the cybersecurity space(12:22) Blind spots of going into AI(18:06) Shared responsibility for LLM providers(20:56) Lifting up security programs for AI(27:82) How is incident response changing with AI?(29:30) Cybersecurity areas that will be most impacted by AI(34:43) The Fun SectionThank you to our episode sponsor Varonis

In this engaging episode of "Shark Theory," host Baylor Barbee delves into the complexities of personal struggles and their impact on those around us. The central theme revolves around his thought-provoking quote: "Don't let others get caught in the crossfire of you battling your own demons." Through personal anecdotes and a reflective analysis of human behavior, Baylor navigates the challenges of maintaining personal integrity and empathy when facing life's inevitable hurdles. Baylor emphasizes the importance of recognizing personal and professional "blast radii" — the zones within which negative emotions can inadvertently affect others. By understanding these emotional boundaries, individuals can mitigate unintended harm to others during difficult times. The episode underscores the universal truth that everyone carries hidden battles, urging listeners to practice compassion and self-awareness. Baylor prods listeners to confront their adversities head-on to prevent ongoing cycles of harm and to fully step into their strengths. Key Takeaways: Empathy in Relationships: Our personal struggles often affect those close to us, making empathy and understanding crucial in maintaining strong relationships. Awareness of Impact: Recognizing one's "blast radius" can help limit the adverse effects of our struggles on others. Battle Recognition: Understanding that everyone faces their own battles highlights the need for grace and compassion. Facing Fears: Confronting personal demons is vital to breaking cycles that harm ourselves and those around us. Communication is Key: Notifying others about personal boundaries can help protect relationships and prevent miscommunication. Notable Quotes: "Don't let others get caught in the crossfire of you battling your own demons." "Nobody has it all together. Nobody is as carefree as they may lead out to believe." "If you're standing in this perimeter of where this thing lands, you're going to get hurt." "You have to realize the gravity of what you have and knowing how big your blast radius is." "It's time to stand up. It's time to fight. It's time to step into who you are."

Target acquired. Locked On. And… Bullseye!

Forecast: Breach storms surge with Chinese actors, Ivanti spreads wider, and malware disguises itself—stay alert and patched! ‍ This episode of Storm⚡️Watch features exciting developments in security tooling and concerning breaches in critical infrastructure. We're thrilled to finally talk about Censeye on the pod! It's Censys's powerful new automated hunting platform that's revolutionizing how security teams conduct threat hunting. This innovative tool combines automation with Censys's comprehensive internet scanning capabilities, complete with new gadgets that enhance threat detection and analysis capabilities. In major security news, a significant breach at the US Treasury's Committee on Foreign Investment (CFIUS) has been attributed to Chinese state-sponsored actors. This concerning development potentially exposed sensitive data about national security reviews of foreign investments in American companies. The Ivanti vulnerability situation continues to evolve, with UK domain registry giant Nominet now confirming they've been impacted by the recent Ivanti VPN exploits. This development highlights the expanding blast radius of this critical security issue. 2025 has already seen sophisticated threat actors weaponizing exploits, with researchers uncovering an information stealer disguised as a proof-of-concept exploit for the LDAPNightmare vulnerability (CVE-2024-49113). We'll explore how Censys Search is strengthening phishing prevention through advanced SSL/TLS certificate monitoring, providing organizations with crucial tools to identify and prevent potential phishing campaigns. The episode concludes with an in-depth look at GreyNoise classifications, particularly focusing on suspicious activity patterns identified in the last 24 hours. We'll break down what these classifications mean for security teams and how to leverage this intelligence effectively. Storm Watch Homepage >> Learn more about GreyNoise >>  

In this eye-opening episode of The Backup Wrap-up, we delve into the critical concept of minimizing the cyberattack blast radius. Joined by cybersecurity expert Dr. Mike Saylor, we explore practical strategies to significantly reduce the impact of a breach on your organization.We start by discussing the principle of least privilege access and its role in containing a cyberattack's blast radius. Next, we examine the importance of network segmentation in limiting the spread of an attack. The conversation then shifts to the often-overlooked aspect of controlling outbound traffic to prevent data exfiltration.Throughout the episode, we provide actionable insights and best practices that IT professionals and business owners can implement to enhance their cybersecurity posture. By focusing on minimizing the cyberattack blast radius, organizations can better protect their digital assets and mitigate potential damages in the event of a breach.

Sit a spell and listen in as our team talks about another Patch Tuesday! Also, did you know that RADIUS is still in use? There's a new attack for it dubbed "Blast-RADIUS," and we're just as surprised as you are about it. We cover the "new" RockYou 2024 password list, and our guest, Brian Gittinger tells us about his journey into information security. All that, and other topics on Episode 6! Hosts: Ryan Hamrick & Chris DeBrunner Editor & Producer: Lance Hart Executive Producers: Gabby Scott & Jana Korfhagen Contact email: nmspod@protonmail.com

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.Blast-RADIUS is a vulnerability in the RADIUS protocol that allows a man-in-the-middle attacker to forge valid protocol accept messages in response to failed authentication requests.The blog post on Syntax-Err0r details a technique for silently installing a Chrome extension to maintain persistence, bypassing typical detection methods.American telecom service provider AT&T has confirmed that threat actors managed to access data belonging to "nearly all" of its wireless customers as well as customers of mobile virtual network operators using AT&T's wireless network.The U.S. Department of Commerce added Kaspersky to its Entity List, barring U.S. businesses from engaging with the company due to national security concerns related to the Russian government's influence over Kaspersky's operations.On July 19th Crowdstrike distributed a faulty update to its Falcon sensors that caused widespread problems with computers running Microsoft Windows. As a result, roughly 8.5 million systems crashed, bringing up the feared blue screen of death, in what is being called the largest IT outage in history (+outage 1-month ago, +outage 3-months ago).

The conversation discusses a recent article about a new attack on a 30-year-old protocol called RADIUS. The protocol is widely used in networks for client-server interactions, including VPN access, DSL and fiber connections, and 5G authentication. The attack, called Blast Radius, exploits vulnerabilities in the MD5 hash used in the protocol. The attack allows adversaries to elicit a response from the Radius server and gain unauthorized access to the network. The conversation highlights the importance of identifying and mitigating the vulnerabilities in the protocol to protect networks. Article: New Blast-RADIUS attack breaks 30-year-old protocol used in networks everywhere https://arstechnica.com/security/2024/07/new-blast-radius-attack-breaks-30-year-old-protocol-used-in-networks-everywhere/?fbclid=IwZXh0bgNhZW0CMTAAAR24e6Catk5kfoECwbCrkcWDlpHdNmajX4dWBn5rw1ZIq4tfFw1nkXFY_4g_aem_EMmWxbRvyOaRTCMQchyQiQ Please LISTEN

https://youtu.be/wozYlHlPPmE This week on the podcast we discover the newly-disclosed protocol vulnerability in certain RADIUS implementations. Before that, we give an update on the continued fallout from the Snowflake customer databreaches including a new disclosure from AT&T. We also discuss a blog post from JFrog that details how they saved the world from what could have been the worst supply chain attack in history.

Bats in your headset, Windows Wifi driver vulnerabilities, Logitech's dongles, lighthttpd is heavy with vulnerabilities, node-ip's not vulnerability, New Intel CPU non-attacks, Blast Radius, Flipper Zero alternatives, will OpenSSH be exploited, emergency Juniper patches, and the D-Link botnet grows. Show Notes: https://securityweekly.com/psw-834

Bats in your headset, Windows Wifi driver vulnerabilities, Logitech's dongles, lighthttpd is heavy with vulnerabilities, node-ip's not vulnerability, New Intel CPU non-attacks, Blast Radius, Flipper Zero alternatives, will OpenSSH be exploited, emergency Juniper patches, and the D-Link botnet grows. Show Notes: https://securityweekly.com/psw-834

Bats in your headset, Windows Wifi driver vulnerabilities, Logitech's dongles, lighthttpd is heavy with vulnerabilities, node-ip's not vulnerability, New Intel CPU non-attacks, Blast Radius, Flipper Zero alternatives, will OpenSSH be exploited, emergency Juniper patches, and the D-Link botnet grows. Iceman comes on the show to talk about RFID and NFC hacking including the tools, techniques, and hardware. We'll also talk about the ethics behind the disclosure of vulnerabilities and weaknesses in these systems that are used in everything from building access to cars. Segment Resources: Youtube channel - https://www.youtube.com/@iceman1001 Proxmark3 forums - http://www.proxmark.org/forum/index.php Proxmark3 Repository - https://github.com/rfidresearchgroup/proxmark3 Awesome RFID talks - https://github.com/doegox/awesome-rfid-talks Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-834

Bats in your headset, Windows Wifi driver vulnerabilities, Logitech's dongles, lighthttpd is heavy with vulnerabilities, node-ip's not vulnerability, New Intel CPU non-attacks, Blast Radius, Flipper Zero alternatives, will OpenSSH be exploited, emergency Juniper patches, and the D-Link botnet grows. Iceman comes on the show to talk about RFID and NFC hacking including the tools, techniques, and hardware. We'll also talk about the ethics behind the disclosure of vulnerabilities and weaknesses in these systems that are used in everything from building access to cars. Segment Resources: Youtube channel - https://www.youtube.com/@iceman1001 Proxmark3 forums - http://www.proxmark.org/forum/index.php Proxmark3 Repository - https://github.com/rfidresearchgroup/proxmark3 Awesome RFID talks - https://github.com/doegox/awesome-rfid-talks Visit https://www.securityweekly.com/psw for all the latest episodes! Show Notes: https://securityweekly.com/psw-834

Blast-RADIUS targets a network authentication protocol. The US disrupts a Russian disinformation campaign. Anonymous messaging app NGL is slapped with fines and user restrictions. The NEA addresses AI use in classrooms. Gay Furry Hackers release data from a conservative think tank. Microsoft and Apple change course on OpenAI board seats. Australia initiates a nationwide technology security review. A Patch Tuesday rundown. Guest Jack Cable, Senior Technical Advisor at CISA, with the latest from CISA's Secure by Design Alert series. Our friend Graham Cluley ties the knot.  Miss an episode? Sign-up for our daily intelligence roundup, Daily Briefing, and you'll never miss a beat. And be sure to follow CyberWire Daily on LinkedIn. CyberWire Guest Guest Jack Cable, Senior Technical Advisor at CISA, joins us to share an update on CISA's Secure by Design Alert series. For some background, you can find CISA's Secure by Design whitepaper here. Details on today's update can be found here.  Selected Reading New Blast-RADIUS attack breaks 30-year-old protocol used in networks everywhere (Ars Technica) US Disrupts AI-Powered Russian Bot Farm on X (SecurityWeek) FTC says anonymous messaging app failed to stop ‘rampant cyberbullying' (The Verge) NEA Approves AI Guidance, But It's Vital for Educators to Tread Carefully (EducationWeek) Hackvists release two gigabytes of Heritage Foundation data (CyberScoop) Microsoft and Apple ditch OpenAI board seats amid regulatory scrutiny (The Verge) Australia instructs government entities to check for tech exposed to foreign control (The Record) Microsoft July 2024 Patch Tuesday fixes 142 flaws, 4 zero-days (BleepingComputer) Graham Cluley ties the knot (Mastodon)  Share your feedback. We want to ensure that you are getting the most out of the podcast. Please take a few minutes to share your thoughts with us by completing our brief listener survey as we continually work to improve the show.  Want to hear your company in the show? You too can reach the most influential leaders and operators in the industry. Here's our media kit. Contact us at cyberwire@n2k.com to request more info. The CyberWire is a production of N2K Networks, your source for strategic workforce intelligence. © N2K Networks, Inc. Learn more about your ad choices. Visit megaphone.fm/adchoices

In Episode 49 of “EC&M On Air,” Ellen Parson, editor-in-chief of EC&M, is highlighting some of the most popular technical content we've been running recently, but this time brought to you in audio-only form. In case you missed it, this content was originally brought to you in our EC&M Asks Q&A video series. This week, we're featuring subject matter expert Tommy Northcott, who addresses some of our readers' most pressing questions about arc flash hazards, including why calculating the blast radius for debris during an arc flash event can be more complicated than you might think, the difference between arc flash versus arc blast hazards, the consequences for not performing regular maintenance on electrical equipment, how circuit breakers work to clear a fault to minimize potential damage, and safety best practices when conducting thermography or infrared scans on energized electrical equipment.  

Sommerurlaubszeit. Es ist heiß und auch die Computer striken. Felix und Ingo begleiten euch durch die kaputte IT. Blast from the Past Japan ist die Floppy Disk (fast) los Floppy Disks für die Marine Toter der Woche Nike Self-Tying Sneakers Amazon Astro Roboter Ring Drohne noch nicht in Deutschland Shapeways Untoter der Woche AI der Woche Fotograf gewinnt in AI Art Contest News alles kaputt Cellebrite und die Smartphones… crowdstrike Maus Radio MausZoom: “Großes Chaos weltweit wegen Computer-Problem” WP: Stuxnet regresshion Atlassian verliert 15 Millionen E-Mail Adressen von Trello Nutzern Rockyou2024 Linux Kernel Privilege Escalation gitlab wird vielleicht gekauft von datadog Tesla hat nicht mehr alle Tassen im Schrank SAPwned BLAST RADIUS Firefox Mastodon: Gabriele Svelto Nvida Kernelmodule Butter aus Luft Rechtschreibrat: Geliked, geliket oder gelikt Lesefoo What you need to know about laziness 1% der Bevölkerung Brother Labelmaker Picks Pipes NixCon2024

As the provincial political campaign begins a slow burn toward the fall election in British Columbia, the governing B.C. NDP are heading into the summer with a comfortable lead in the polls ahead of their two rival, centre-right parties. But momentum is suddenly building for the B.C. Conservatives, with the party snatching candidates from the opposition B.C. United (formerly known as the British Columbia Liberal Party). What matters more to B.C. United, according to one of West of Centre's guests, is how that "blast radius" affects the party's ability to ready itself to fight in October's election. Are we seeing the "end of the B.C. Liberal era," as another of our guests suggests? Joining West of Centre host Kathleen Petty this week to break down why politics in British Columbia is never boring are Shachi Kurl, president of the Angus Reid Institute; Les Leyne, legislature columnist with the Victoria Times Colonist; and Mike McDonald, political strategist and co-host of Hotel Pacifico, a West Coast political podcast.

The Black Rasslin' Podcast returns to discuss The Rock's latest comments about WWE, Jinder Mahal and HOOK getting world title shots next week, Oba Femi winning the NXT North American title, B Fab linking with Bobby Lashley and the Street Profits, early Royal Rumble predictions, and much more! Watch this episode on YouTube: https://youtube.com/live/3ChHkwc0kso Become a BRPatreon member: www.patreon.com/blackrasslin The Black Rasslin' Podcast Theme is produced by Anikan & Vader. www.instagram.com/anikanandvader Subscribe to The Black Rasslin' Podcast: YouTube: youtube.com/c/blackrasslin Apple Podcasts: bit.ly/blackrasslinIT Spotify: bit.ly/blackrasslinSP Google Podcasts: bit.ly/blackrasslinGP SoundCloud: @black-rasslin-podcast

Iran attacks, Palestinian exit applications, Steamboat Mickey horror, Hershey chocolate lawsuit, Star Trek fan ashes and more

The fallout from the revelation about Amina — and others like her — continue to ripple across the world. A furious Sandra wants closure. Danny, living in Damascus, faces a life-threatening decision. And the blog's loyal readers are left with one persistent question — why?

This episode we focus solely on extreme metal releases issued in June and July 2023. Hear the best thrash, death and black metal releases issued over the past two months. Let the mayhem begin! (0:00) "Blast Radius" CHAINGUN - Under Lucifer's Command Under Lucifer's Command | Chaingün (bandcamp.com) (3:02) "Pancerna Piesc" CRIPPLING MADNESS - Wladcy Nocy Władcy Nocy | Crippling Madness (bandcamp.com) (7:05) "Uuden Ajan Tuhoon" VICTIMARUM - Demo 2023 Demo 2023 | Victimarum (bandcamp.com) (11:55) "Bang Your Head For Satan" SLAUGHTERED PRIEST - Bang Your Head For Satan BE PROUD TO BE A ... SINNER ! (webs.com) (16:10) "Billardry of Volcanic Sulphur" DEMONIZED - Abyss Vanguard Abyss Vanguard | DEMONIZED | Osmose Productions (bandcamp.com) (20:06) "End of Light" KVLT OF ODIUM - End of Light End Of Light- Full Length 2023 | Kvlt Of Odium (bandcamp.com) (24:25) "On Black Wings of Savagery" GRIMSEVER - Grimsever Grimsever | GRIMSEVER (bandcamp.com) (28:20) "Ov Void and Horror" NIGRUM VORTEX - Across Nigrum Vortex Across the Nigrum Vortex | Nigrum Vortex (bandcamp.com) (31:51) "Prurient Flamboyance Chant" PASSEISME - Alternance Alternance | Passéisme (bandcamp.com)

You can rebuild infrastructure. But you can't un-breach data – Data sits at the core of an organization and is often the most open and vulnerable. This is why data security is the most important and urgent security problem to solve right now. We're joined by Matt Radolec, Senior Director of Incident Response and Cloud Operations at Varonis, to walk through the blast radius concept – from what it is and how to use it to understand your organization's risk, to how it can serve as a guide to securing data from insiders and external attackers. Segment Resources: The Great SaaS Data Risk Exposure report: https://info.varonis.com/hubfs/Files/docs/research_reports/Varonis-The-Great-SaaS-Data-Exposure.pdf The Forrester Wave™: Data Security Platforms, Q1 2023 https://reprints2.forrester.com/#/assets/2/1646/RES178465/report Learn more about the Varonis Data Security Platform https://www.varonis.com/products/data-security-platform   This segment is sponsored by Varonis. Visit https://securityweekly.com/varonis to learn more about them!   Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw307 

You can rebuild infrastructure. But you can't un-breach data – Data sits at the core of an organization and is often the most open and vulnerable. This is why data security is the most important and urgent security problem to solve right now. We're joined by Matt Radolec, Senior Director of Incident Response and Cloud Operations at Varonis, to walk through the blast radius concept – from what it is and how to use it to understand your organization's risk, to how it can serve as a guide to securing data from insiders and external attackers. Segment Resources: The Great SaaS Data Risk Exposure report: https://info.varonis.com/hubfs/Files/docs/research_reports/Varonis-The-Great-SaaS-Data-Exposure.pdf The Forrester Wave™: Data Security Platforms, Q1 2023 https://reprints2.forrester.com/#/assets/2/1646/RES178465/report Learn more about the Varonis Data Security Platform https://www.varonis.com/products/data-security-platform   This segment is sponsored by Varonis. Visit https://securityweekly.com/varonis to learn more about them!   Visit https://www.securityweekly.com/bsw for all the latest episodes! Show Notes: https://securityweekly.com/bsw307 

Data Mesh Radio Patreon - get access to interviews well before they are releasedEpisode list and links to all available episode transcripts (most interviews from #32 on) hereProvided as a free resource by DataStax AstraDB; George Trujillo's contact info: email (george.trujillo@datastax.com) and LinkedInTranscript for this episode (link) provided by Starburst. See their Data Mesh Summit recordings here and their great data mesh resource center here. You can download their Data Mesh for Dummies e-book (info gated) here.Vanya's LinkedIn: https://www.linkedin.com/in/vanyaseth1809/In this episode, Scott interviewed Vanya Seth, Head of Technology for Thoughtworks India and Global 'Data Mesh Guild' Lead for Thoughtworks. To be clear, Vanya was only representing her own views on the episode.Some key takeaways/thoughts from Vanya's point of view:Data mesh is at a similar inflection point to where microservices was a decade ago. Let's not relearn all the hard lessons they already learned. We should adapt/contextualize to data of course but we can skip a lot of the anti-patterns. Similarly, many people are stuck thinking "there's no way that could work" regarding data mesh like they were when people suggested development and operations be combined in DevOps. It's understandable - it's hard to imagine a post monolithic world when all you've known is monoliths.?Controversial?: We should try hard to prevent creating the fear of missing out (FOMO) for those not doing data mesh. If data mesh isn't right for your org, especially if it isn't right at this time, that's perfectly okay. Don't take on the overhead cost of data mesh if it won't bring more value than cost. Scott note: PREACH!?Controversial?: Some CDOs or CAOs, their organizations don't really get the value of data so they are implementing data mesh to try to prove out value and make their mark. That can obviously create issues if their organizations aren't ready.A few indicators an org is ready for data mesh (see below for expanded context): A) data/AI investments are not delivering the promised/expected returns and/or it's hard to point to the value delivered in general from data/AI investments; B) the organization is attempting to throw more people at centralized data management and it's not working (platform included); and C) there's extremely...

The Alan Cox Show

Russia: Dugina Killing, NL Hydrogen Deal, Andrew Tate Ban, Fruit Art Copyright, Imran Khan Charges, Italy Rice Farmer and more.

Just like Pigen (from Charlie Brown)

What's up, everyone! In this episode, Ryan, Shannon, and LeVon discuss the inevitability of a cyber-attack and ways to mitigate the damage. Please LISTEN

Episode 333... All 3s but nothing special. Some tunes that were sent in and some 2022 Bandcampers including one hot off the presses from DJINN (Hammond, IN). Absolutely raging band! Enjoy!Stream from your smart device and download here (iTunes and Google Podcasts as well):BROS GRIM ALL 333333333333'sAiring Wednesdays 7pm PST on PUNK ROCK DEMONSTRATION & Fridays 7pm PST on RIPPER RADIO.Send us stuff  to brothersgrimpunk@gmail.com.Punkapse...Relapse 0:56 DJINN RELAPSE3 from 1 - 2 - 3 - 4 1:23 Guttermouth Teri YakimotoNUKE FEAR 0:50 DEADBEAT L.A. Self Titled 7"We Don't Want 1:30 Unamused Haven't You Been DeceivedOne of Us (bkgrd) 3:36 Fever 333 STRENGTH IN NUMB333RSHKFY- Hong Gong Fuck You 1:32 HKFY Another Fucking Day In ParadiseWaht Makes The Different 0:52 ABORTION THE TRUTH HURTSHATED SPECIES 0:28 Depraved SCUM HUMAN SPLITThat's Enough Frickin' Wax 0:41 Weel Byte Split w/ Blast RadiusDesecrate 1:13 ABSOLUT 2019 DemonstrationArmageddon Raw Dogs 3:35 Bandcamp SingleProduct of Society 1:58 Urban Assault s/t EPJust Drop It 2:40 Dick Politic American WayGene Simmons 1:20 Launcher Bone SawEmpty Threat 1:10 Violent Reaction s/t EPNo More Ideas 1:22 Union 13 Why Are We Destroying Ourselves?L.A. DISHONESTY 2:53 DIMEBAG LIVEROOM OVERDOSEAtlanta Religious System 0:58 Mercenary Demos CollectionFlint MI MONOTONY 0:55 STUNNER STUNNER DEMOSnake 2:12 Peace Decay Death Is Only...Fairfield Will Power 1:12 RUKUS RUKUSSCRS - Kaos Oi!_HD 1:41 South Central Riot SquadBetween Two Death 1:28 NO WAR A VARNING FROM MONTREAL COMPILATION VOL 1 (2018)In Order To Rebuild 1:42 Vicious Circle Born To DestroyFatal Apariencia 1:38 Destruye y Destruye Epifanía de un Mundo en RuinasWaste My Time 1:55 PMS 84 Demo 2014No Way 1:15 Video Prick DEMO 2019Attack 1:27 POR100 Nosferatu - Solution ATides of Shit 1:55 WACKO demoRALIZATIONConcede 1:03 Richter Scale Sunk - SunkPESTEN "The Rats Are Back In Town" 4:26 Raw War Tapes PESTEN "The Rats Are Back In Town" DemoSee Right Thru You 1:01 Nobodys Hugh

Pulling a quote from my good friend Shawn Kaplan, we talk about how those we love most are the most likely recipients of the fallout from our pain, shame, trauma and baggage.While those past hurts are valid and real, they can also become excuses that we lean on instead of choosing to grow toward the results we want--namely, being loving, patient, compassionate and emotionally mature husbands and fathers.What can we do to help keep our wife and children out of our emotional blast radius?Head over to www.themarriedman.co--home of the Warrior Husband--to subscribe to the weekly Married Man newsletter and be challenged and inspired each week in the most important area of your life.Be sure to sign up for The Married Man email list to receive weekly content about building a powerful and fulfilling marriage (and snag your free digital copy of the "Fortify Your Marriage" handbook).Twitter: @brianbandasFB: facebook.com/brian.bandasInsta: @brianbandasCheck out my other podcast, the NEVER EVER QUIT SHOW wherever you listen to podcasts, or visit www.BrianBandas.com!

In this episode, we cover the following topics: Pillars in depth Security "Ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies" Design principles Implement strong identity foundation Enable traceability Security at all layers Automate security best practices Protect data in transit and at rest Keep people away from data Prepare for security events Key service: AWS IAM Focus areas Identity and access managementServices: IAM, AWS Organizations, MFA Detective controlsServices: CloudTrail, CloudWatch, AWS Config, GuardDuty Infrastructure protectionServices: VPC, Shield, WAF Data protectionServices: KMS, ELB (encryption), Macie (detect sensitive data) Incident responseServices: IAM, CloudFormation Best practices Identity and access managementAWS Cognito Act as broker between login providers Securely access any AWS service from mobile device Data protection Encrypt Encryption at rest Encryption in transit Encrypted backups Versioning Storage resiliency Detailed logging Incident responseEmploy strategy of templated "clean rooms" Create new trusted environment to conduct investigation Use CloudFormation to easily create the "clean room" environment Reliability "Ability to recover from failures, dynamically acquire resources to meet demand and mitigate disruptions such as network issues" Design principles Test recovery procedures Auto recover from failures Scale horizontally to increase availability Stop guessing capacity Manage change with automation Key service: CloudWatch Focus areas FoundationsServices: IAM, VPC, Trusted Advisor (visibility into service limits), Shield (protect from DDoS) Change managementServices: CloudTrail, AWS Config, CloudWatch, Auto Scaling Failure managementServices: CloudFormation, S3, Glacier, KMS Best practices Foundations Take into account physical and service limits High availability No single points of failure (SPOF) Multi-AZ design Load balancing Auto scaling Redundant connectivity Software resilience Failure management Backup and disaster recoveryRPO, RTO Inject failures to test resiliency Key points Plan network topology Manage your AWS service and rate limits Monitor your system Automate responses to demand Backup In the next episode, we'll cover the remaining 2 pillars and discuss how to perform a Well-Architected Review. Links AWS Well-Architected AWS Well-Architected Framework - Online/HTML versionincludes drill down pages for each review question, with recommended action items to address that issue AWS re:Invent 2018: How AWS Minimizes the Blast Radius of Failures - ARC338 Shuffle Sharding: Massive and Magical Fault Isolation Whitepapers AWS Well-Architected Framework Operational Excellence Pillar Security Pillar Reliability Pillar Performance-Efficiency Pillar Cost Optimization Pillar End song:The Runner (David Last Remix) - FaxFor a full transcription of this episode, please visit the episode webpage.We'd love to hear from you! You can reach us at: Web: https://mobycast.fm Voicemail: 844-818-0993 Email: ask@mobycast.fm Twitter: https://twitter.com/hashtag/mobycast