POPULARITY
30 episodes with Socs
8 episodes with Socs
42 episodes with Socs
7 episodes with Socs
4 episodes with Socs
4 episodes with Socs
4 episodes with Socs
5 episodes with Socs
4 episodes with Socs
Can you just use Claude Code or another LLM to "vibe code" your way into building an AI SOC? In this episode, Ariful Huq, Co-Founder and Head of Product at Exaforce spoke about the reality being far more complex than the hype suggests. He explains why a simple "bolt-on" approach to AI in the SOC is insufficient if you're looking for real security outcomes.We speak about foundational elements required to build a true AI SOC, starting with the data. It's "well more than just logs and event data," requiring the integration of config, code, and business context to remove guesswork and provide LLMs with the necessary information to function accurately . The discussion covers the evolution beyond traditional SIEM capabilities, the challenges of data lake architectures for real-time security processing, and the critical need for domain-specific knowledge to build effective detections, especially for SaaS platforms like GitHub that lack native threat detection .This is for SOC leaders and CISOs feeling the pressure to integrate AI. Learn what it really takes to build an AI SOC, the unspoken complexities, and how the role of the security professional is evolving towards the "full-stack security engineer".Guest Socials - Ariful's LinkedinPodcast Twitter - @CloudSecPod If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-Cloud Security Podcast- Youtube- Cloud Security Newsletter - Cloud Security BootCampIf you are interested in AI Cybersecurity, you can check out our sister podcast - AI Security PodcastQuestions asked:(00:00) Introduction(02:30) Who is Ariful Huq?(03:40) Can You Just Use Claude Code to Build an AI SOC?(06:50) Why a "Bolt-On" AI Approach is Tough for SOCs(08:15) The Importance of Data: Beyond Logs to Config, Code & Context(09:10) Building AI Native Capabilities for Every SOC Task (Detection, Triage, Investigation, Response)(12:40) The Impact of Cloud & SaaS Data Volume on Traditional SIEMs(14:15) Building AI Capabilities on AWS Bedrock: Best Practices & Challenges(17:20) Why SIEM Might Not Be Good Enough Anymore(19:10) The Critical Role of Diverse Data (Config, Code, Context) for AI Accuracy(22:15) Data Lake Challenges (e.g., Snowflake) for Real-Time Security Processing(26:50) Detection Coverage Blind Spots, Especially for SaaS (e.g., GitHub)(31:40) Building Trust & Transparency in AI SOCs(35:40) Rethinking the SOC Team Structure: The Rise of the Full-Stack Security Engineer(42:15) Final Questions: Running, Family, and Turkish Food
Got a question or comment? Message us here!Ransomware is evolving faster than ever, from double extortion tactics to lightning-fast attack chains. In this episode, we break down how these threats work, why every organization is a target, and the layered defenses SOCs can use to detect and stop attacks early. Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.
Hoy con todo este percal: Salduie, Victoria metal, Revealbandofficial, State of crime & science - SOCS, Cuenta Pendiente, Factoría de Payasos, Sun of the Dying, Deklibe, God's Funeral, Trueno Culebra, INYOURFACE, Ars Amandi, Paradise Lost, Dream Theater, Aerosmith, Agnostic Front, EDEN - Metal Band, Tim Ripper Owens "Official Page", Declinare, Karolina Reaper y Jerry Lee lewis
On today's Heavy Networking: the Security Operations Center, or SOC. When I think of a SOC, I picture a miniature version of NASA's mission control: lots of computers, lots of people, some big boards with lines and arrows and telemetry scrolling across the screens. I also think of SOCs as requiring a lot of gear,... Read more »
On today's Heavy Networking: the Security Operations Center, or SOC. When I think of a SOC, I picture a miniature version of NASA's mission control: lots of computers, lots of people, some big boards with lines and arrows and telemetry scrolling across the screens. I also think of SOCs as requiring a lot of gear,... Read more »
On today's Heavy Networking: the Security Operations Center, or SOC. When I think of a SOC, I picture a miniature version of NASA's mission control: lots of computers, lots of people, some big boards with lines and arrows and telemetry scrolling across the screens. I also think of SOCs as requiring a lot of gear,... Read more »
Is the new iPhone 17 Pro and Pro Max susceptible to scratches? iFixit tears down the new iPhone Air! New immersive films are coming to the Apple Vision Pro. And is TechWoven better than its predecessor, FineWoven? iPhone 17 Pro, iPhone 17 Pro Max units cited as readily susceptible to scratches and scuffs. The wafer-thin iPhone Air is surprisingly strong. iPhone Air teardown reveals that Apple's thinnest iPhone is still very repairable. Apple announces a new set of immersive film releases. Apple's new Vision Pro films among first shot on Blackmagic Ursa Cine Immersive Cameras. Apple spotted filming in 3D at iPhone 17 launch. Two years after the FineWoven fiasco, is TechWoven better? New iPhone 17 unveiled in Moscow, as pre-orders jump despite slowing economy. Worried about phone searches? 1Password's (a sponsor of the TWiT network) Travel Mode can clean up your data. Tap to Pay on iPhone comes to yet more European countries. Apple to fix camera glitch affecting iPhone Air and iPhone 17 Pro. Inside the Apple audio lab where AirPods are tested and tuned. I went inside Apple's Labs to see how Apple Watch connectivity is tested. A19 Pro's Geekbench 6 'Performance Per Watt' analysis; achieves highest multi-core score against all SoCs with 34% better efficiency. Memory Integrity Enforcement changes the game on iOS. Liquid Glass is causing a disorienting optical illusion for some iPhone users. $599 MacBook with iPhone chip expected to enter production this year. Apple steps up war of words with European regulators. Here's everything Trump is changing with H-1B visas. Picks of the Week Jason's Picks: Final Cut Camera & Final Cut Pro for iPad. Alex's Pick: Revopoint MetroX Andy's Pick: Epson MX-80 Fonts by Micahel Walden. Hosts: Leo Laporte, Alex Lindsay, Andy Ihnatko, and Jason Snell Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com
Rate cut - rates up? Diet Stocks - losing weight Good news/bad news - all good for markets Bessent for Fed Chair and Treasury Secretary? PLUS we are now on Spotify and Amazon Music/Podcasts! Click HERE for Show Notes and Links DHUnplugged is now streaming live - with listener chat. Click on link on the right sidebar. Love the Show? Then how about a Donation? Follow John C. Dvorak on Twitter Follow Andrew Horowitz on Twitter Warm-Up - BRAND New server - all provisioned - Much faster DH Site - Need a new CTP stock! - New Clear Stocks! - To the Sky - Money Tree Market - Tik Tok news Markets - Rate cut - rates up - Diet Stocks - losing weight - Good news/bad news - all good for markets - StubHub IPO Update SELL Rosh Hashanah - Buy Yom Kippur? Vanguard Issues? Got a call this morning..Gent in NY... NEW CLEAR - On Fire! - Have you seen the returns on some of these stocks? - YTD - - URA (Uranium ETF) Up 75% -- SMR (NuScale) Up 164% - - OKLO (OKL) up 518% - - CCJ (Cameco) up 65% TikTok Nonsense - President Donald Trump said in an interview that aired Sunday that conservative media baron Rupert Murdoch and his son Lachlan are likely to be involved in the proposal to save TikTok in the United States. -Trump also said that Oracle executive chairman Larry Ellison and Dell Technologies CEO Michael Dell are also likely to be involved in the TikTok deal. More TikTok - White House Press Secretary Karoline Leavitt says TikTok's algorithm will be secured, retrained, and operated in the U.S. outside of Bytedance's control; Oracle (ORCL) will serve as Tiktok's security provider; President Trump will sign TikTok deal later this week - What does that mean and will it be the same TikTok. - Who is doing the retraining??????? SO MANY QUESTIONS MEME ALERT! - Eric Jackson, a hedge fund manager who partly contributed to the trading explosion in Opendoor, unveiled his new pick Monday — Better Home & Finance Holding Co. - Jackson said his firm holds a position in Better Home but didn't disclose its size. - Shares of Better Home soared 46.6% on Monday after Jackson touted the stock on X. At one point during the session, the stock more than doubled in price. - The New York-based mortgage lender jumped more than 36% last week. Intel - INTC getting even more money. - Now, NVDA pouring in $5B - Nvidia and Intel announced a partnership to jointly develop multiple generations of custom data center and PC products. Intel will manufacture new x86 CPUs customized for Nvidia's AI infrastructure, and also build system-on-chips (SoCs) for PCs that integrate Nvidia's RTX GPU chiplets. - Both the US Government and NVDA got BELOW market pricing on their shares. NVDA $$ - Nvidia is investing in OpenAI. On September 22, 2025, Nvidia announced a strategic partnership with OpenAI, which includes an investment of up to $100 billion - The agreement will help deploy at least 10 gigawatts of Nvidia systems, which will include millions of its GPUs. The first phase is scheduled to launch in the second half of 2026, using Nvidia's Vera Rubin platform. Autism Link - Shares of Kenvue (KVUE) are trading lower largely due to reports from the White House and HHS suggesting a forthcoming warning linking prenatal use of acetaminophen (Tylenol's active ingredient) to autism risk. - Investors are concerned that such a warning could lead to regulatory action, changes in labeling requirements, litigation risk, or reduced demand for one of KVUE's key products. It's estimated that Tylenol accounts for approximately 7-9% of KVUE's total revenue. - The company has strongly denied any scientific basis for the link, but the uncertainty itself is hurting sentiment. - Finally, this also comes on top of recent weak financial performance: KVUE posted a Q2 revenue decline of 4% and cut its full-year guidance on August 7. - - Lawsuits to follow... Pfizer
Is the new iPhone 17 Pro and Pro Max susceptible to scratches? iFixit tears down the new iPhone Air! New immersive films are coming to the Apple Vision Pro. And is TechWoven better than its predecessor, FineWoven? iPhone 17 Pro, iPhone 17 Pro Max units cited as readily susceptible to scratches and scuffs. The wafer-thin iPhone Air is surprisingly strong. iPhone Air teardown reveals that Apple's thinnest iPhone is still very repairable. Apple announces a new set of immersive film releases. Apple's new Vision Pro films among first shot on Blackmagic Ursa Cine Immersive Cameras. Apple spotted filming in 3D at iPhone 17 launch. Two years after the FineWoven fiasco, is TechWoven better? New iPhone 17 unveiled in Moscow, as pre-orders jump despite slowing economy. Worried about phone searches? 1Password's (a sponsor of the TWiT network) Travel Mode can clean up your data. Tap to Pay on iPhone comes to yet more European countries. Apple to fix camera glitch affecting iPhone Air and iPhone 17 Pro. Inside the Apple audio lab where AirPods are tested and tuned. I went inside Apple's Labs to see how Apple Watch connectivity is tested. A19 Pro's Geekbench 6 'Performance Per Watt' analysis; achieves highest multi-core score against all SoCs with 34% better efficiency. Memory Integrity Enforcement changes the game on iOS. Liquid Glass is causing a disorienting optical illusion for some iPhone users. $599 MacBook with iPhone chip expected to enter production this year. Apple steps up war of words with European regulators. Here's everything Trump is changing with H-1B visas. Picks of the Week Jason's Picks: Final Cut Camera & Final Cut Pro for iPad. Alex's Pick: Revopoint MetroX Andy's Pick: Epson MX-80 Fonts by Micahel Walden. Hosts: Leo Laporte, Alex Lindsay, Andy Ihnatko, and Jason Snell Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com
Is the new iPhone 17 Pro and Pro Max susceptible to scratches? iFixit tears down the new iPhone Air! New immersive films are coming to the Apple Vision Pro. And is TechWoven better than its predecessor, FineWoven? iPhone 17 Pro, iPhone 17 Pro Max units cited as readily susceptible to scratches and scuffs. The wafer-thin iPhone Air is surprisingly strong. iPhone Air teardown reveals that Apple's thinnest iPhone is still very repairable. Apple announces a new set of immersive film releases. Apple's new Vision Pro films among first shot on Blackmagic Ursa Cine Immersive Cameras. Apple spotted filming in 3D at iPhone 17 launch. Two years after the FineWoven fiasco, is TechWoven better? New iPhone 17 unveiled in Moscow, as pre-orders jump despite slowing economy. Worried about phone searches? 1Password's (a sponsor of the TWiT network) Travel Mode can clean up your data. Tap to Pay on iPhone comes to yet more European countries. Apple to fix camera glitch affecting iPhone Air and iPhone 17 Pro. Inside the Apple audio lab where AirPods are tested and tuned. I went inside Apple's Labs to see how Apple Watch connectivity is tested. A19 Pro's Geekbench 6 'Performance Per Watt' analysis; achieves highest multi-core score against all SoCs with 34% better efficiency. Memory Integrity Enforcement changes the game on iOS. Liquid Glass is causing a disorienting optical illusion for some iPhone users. $599 MacBook with iPhone chip expected to enter production this year. Apple steps up war of words with European regulators. Here's everything Trump is changing with H-1B visas. Picks of the Week Jason's Picks: Final Cut Camera & Final Cut Pro for iPad. Alex's Pick: Revopoint MetroX Andy's Pick: Epson MX-80 Fonts by Micahel Walden. Hosts: Leo Laporte, Alex Lindsay, Andy Ihnatko, and Jason Snell Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com
Is the new iPhone 17 Pro and Pro Max susceptible to scratches? iFixit tears down the new iPhone Air! New immersive films are coming to the Apple Vision Pro. And is TechWoven better than its predecessor, FineWoven? iPhone 17 Pro, iPhone 17 Pro Max units cited as readily susceptible to scratches and scuffs. The wafer-thin iPhone Air is surprisingly strong. iPhone Air teardown reveals that Apple's thinnest iPhone is still very repairable. Apple announces a new set of immersive film releases. Apple's new Vision Pro films among first shot on Blackmagic Ursa Cine Immersive Cameras. Apple spotted filming in 3D at iPhone 17 launch. Two years after the FineWoven fiasco, is TechWoven better? New iPhone 17 unveiled in Moscow, as pre-orders jump despite slowing economy. Worried about phone searches? 1Password's (a sponsor of the TWiT network) Travel Mode can clean up your data. Tap to Pay on iPhone comes to yet more European countries. Apple to fix camera glitch affecting iPhone Air and iPhone 17 Pro. Inside the Apple audio lab where AirPods are tested and tuned. I went inside Apple's Labs to see how Apple Watch connectivity is tested. A19 Pro's Geekbench 6 'Performance Per Watt' analysis; achieves highest multi-core score against all SoCs with 34% better efficiency. Memory Integrity Enforcement changes the game on iOS. Liquid Glass is causing a disorienting optical illusion for some iPhone users. $599 MacBook with iPhone chip expected to enter production this year. Apple steps up war of words with European regulators. Here's everything Trump is changing with H-1B visas. Picks of the Week Jason's Picks: Final Cut Camera & Final Cut Pro for iPad. Alex's Pick: Revopoint MetroX Andy's Pick: Epson MX-80 Fonts by Micahel Walden. Hosts: Leo Laporte, Alex Lindsay, Andy Ihnatko, and Jason Snell Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com
Join Film Seizure as we jump into the rumble between the Socs and the Greasers in the Francis Ford Coppola-directed, S.E. Hinton adaptation of The Outsiders. Episodes release on Wednesday at www.filmseizure.com "Beyond My Years" by Matt LaBarber LaBarber The Album Available at https://mattlabarber.bandcamp.com/album/labarber-the-album Copyright 2020 Like what we do? Buy us a coffee! www.ko-fi.com/filmseizure Follow us on Facebook: www.facebook.com/filmseizure/ Follow us on BlueSky: https://bsky.app/profile/filmseizure.bsky.social Follow us on Mastodon: https://universeodon.com/@filmseizure Follow us on Instagram: www.instagram.com/filmseizure/ You can now find us on YouTube as well! The Film Seizure Channel can be found here: https://www.youtube.com/c/FilmSeizure
Got a question or comment? Message us here!In this episode of The #SOCBrief, we break down the rising FileFix attack, a new social engineering technique using steganography to deliver info-stealing malware. Learn how attackers disguise malicious PowerShell commands, the risks this poses for browsers, messengers, and crypto wallets, and the proactive defenses SOCs can use to detect and contain these threats before they escalate into larger breaches.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.
Is the new iPhone 17 Pro and Pro Max susceptible to scratches? iFixit tears down the new iPhone Air! New immersive films are coming to the Apple Vision Pro. And is TechWoven better than its predecessor, FineWoven? iPhone 17 Pro, iPhone 17 Pro Max units cited as readily susceptible to scratches and scuffs. The wafer-thin iPhone Air is surprisingly strong. iPhone Air teardown reveals that Apple's thinnest iPhone is still very repairable. Apple announces a new set of immersive film releases. Apple's new Vision Pro films among first shot on Blackmagic Ursa Cine Immersive Cameras. Apple spotted filming in 3D at iPhone 17 launch. Two years after the FineWoven fiasco, is TechWoven better? New iPhone 17 unveiled in Moscow, as pre-orders jump despite slowing economy. Worried about phone searches? 1Password's (a sponsor of the TWiT network) Travel Mode can clean up your data. Tap to Pay on iPhone comes to yet more European countries. Apple to fix camera glitch affecting iPhone Air and iPhone 17 Pro. Inside the Apple audio lab where AirPods are tested and tuned. I went inside Apple's Labs to see how Apple Watch connectivity is tested. A19 Pro's Geekbench 6 'Performance Per Watt' analysis; achieves highest multi-core score against all SoCs with 34% better efficiency. Memory Integrity Enforcement changes the game on iOS. Liquid Glass is causing a disorienting optical illusion for some iPhone users. $599 MacBook with iPhone chip expected to enter production this year. Apple steps up war of words with European regulators. Here's everything Trump is changing with H-1B visas. Picks of the Week Jason's Picks: Final Cut Camera & Final Cut Pro for iPad. Alex's Pick: Revopoint MetroX Andy's Pick: Epson MX-80 Fonts by Micahel Walden. Hosts: Leo Laporte, Alex Lindsay, Andy Ihnatko, and Jason Snell Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
Is the new iPhone 17 Pro and Pro Max susceptible to scratches? iFixit tears down the new iPhone Air! New immersive films are coming to the Apple Vision Pro. And is TechWoven better than its predecessor, FineWoven? iPhone 17 Pro, iPhone 17 Pro Max units cited as readily susceptible to scratches and scuffs. The wafer-thin iPhone Air is surprisingly strong. iPhone Air teardown reveals that Apple's thinnest iPhone is still very repairable. Apple announces a new set of immersive film releases. Apple's new Vision Pro films among first shot on Blackmagic Ursa Cine Immersive Cameras. Apple spotted filming in 3D at iPhone 17 launch. Two years after the FineWoven fiasco, is TechWoven better? New iPhone 17 unveiled in Moscow, as pre-orders jump despite slowing economy. Worried about phone searches? 1Password's (a sponsor of the TWiT network) Travel Mode can clean up your data. Tap to Pay on iPhone comes to yet more European countries. Apple to fix camera glitch affecting iPhone Air and iPhone 17 Pro. Inside the Apple audio lab where AirPods are tested and tuned. I went inside Apple's Labs to see how Apple Watch connectivity is tested. A19 Pro's Geekbench 6 'Performance Per Watt' analysis; achieves highest multi-core score against all SoCs with 34% better efficiency. Memory Integrity Enforcement changes the game on iOS. Liquid Glass is causing a disorienting optical illusion for some iPhone users. $599 MacBook with iPhone chip expected to enter production this year. Apple steps up war of words with European regulators. Here's everything Trump is changing with H-1B visas. Picks of the Week Jason's Picks: Final Cut Camera & Final Cut Pro for iPad. Alex's Pick: Revopoint MetroX Andy's Pick: Epson MX-80 Fonts by Micahel Walden. Hosts: Leo Laporte, Alex Lindsay, Andy Ihnatko, and Jason Snell Download or subscribe to MacBreak Weekly at https://twit.tv/shows/macbreak-weekly. Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free shows, a members-only Discord, and behind-the-scenes access. Join today: https://twit.tv/clubtwit Sponsor: threatlocker.com/twit
I know that we're constantly talking about artificial intelligence - the best ways to use it, the ways hackers are using it, and the overall good, bad and ugly of implementing AI into your security infrastructure.But what if we took a little different route.In this episode we're going to explore how AI can help make your people better at managing cybersecurity. We know there's a huge talent pool shortage, and the challenges of keeping employees vigilant against repeated attacks continues to grow.So, watch/listen as I explore these dynamics, well as many others, with Grant Oviatt - Head of Security Operations for Prophet Security – a company that recently unveiled their State of AI in SecOps 2025 research report. A lot of the data from the report was rather shocking, especially when the survey repeatedly uncovered how many SOCs, inundated with constant intrusion alerts, have experienced numerous breaches simply because the volume of critical alert notifications has made them easier to ignore.It was a great conversation, with numerous takeaways, including:Why 60 percent of security teams have experienced critical breaches stemming from overlooked alerts.How security leaders anticipate AI solutions handling more tasks within the SOC over the next 3 years.Reasons for 57 percent of organizations deliberately suppressing detection rules and accepting higher risks to keep operations moving.How hackers are using AI beyond just phishing campaigns to get access to critical assets and networks.How the industrial sector can better implement AI without yielding to internal pressures.As a go-to podcast for our listeners, we want to help you align your brand with our expertise. By sponsoring our podcast, your brand will build trust, and your message will stand out to an audience searching for tools to assist their cybersecurity efforts. Click Here to Become a Sponsor.To catch up on past episodes, you can go to Manufacturing.net, IEN.com or MBTmag.com. You can also check Security Breach out wherever you get your podcasts, including Apple, Amazon and Overcast. If you have a cybersecurity story or topic that you'd like to have us explore on Security Breach, you can reach me at jeff@ien.com.
Thinking about starting a career in a Security Operations Center (SOC)? This InfosecTrain session is your complete introduction to SOC fundamentals—from analyst roles to the tools and frameworks that drive modern cyber defense.
In this episode of Lock It Down with Security Magazine, Simon Morgan, Chief Product Officer at SureView Systems, discusses the evolution of security operations and the rise of artificial intelligence in modern SOCs.
Dave Herrald, Global Head of Cybersecurity GTM at Databricks, tells Jack about transforming security operations through modern data lake architectures and strategic AI implementation. He discusses the practical benefits of separating storage from compute, giving security teams direct control over data retention while maintaining operational flexibility. The conversation explores how organizations can move beyond traditional SIEM limitations by leveraging cost-effective data lake storage with advanced analytics capabilities. They touch on AI agents in security, where Dave advocates for focused agents over broad analyst replacement approaches. He also addresses common concerns about hallucinations, framing them as engineering challenges rather than insurmountable obstacles, and shares real-world examples of successful agent implementations. Topics discussed: Moving from traditional SIEM architectures to modern data lake approaches for cost-effective security analytics and data control. Implementing focused AI agents for specific security tasks like context gathering rather than attempting broad analyst replacement. Leveraging graph analytics for security operations including CMDB visualization, breach scoping, and vulnerability prioritization across enterprise environments. Addressing AI hallucinations through prompt engineering and proper context management rather than avoiding AI implementation entirely. Building detection capabilities using SQL and Python for analytics that provide supersets of traditional SIEM query languages. Creating normalization frameworks using standards like OCSF to enable consistent data analytics across diverse security data sources. Developing career resilience in security through mission-focused thinking, continuous AI learning, and building practical skills. Comparing modern AI agents to traditional SOAR platforms for automation effectiveness and maintenance requirements. Establishing data governance and access controls in security data lakes while maintaining operational flexibility and cost effectiveness. Listen to more episodes: Apple Spotify YouTube Website
Gagan Singh of Elastic discuses how agentic AI systems reduce analyst burnout by automatically triaging security alerts, resulting in measurable ROI for organizationsTopics Include:AI breaks security silos between teams, data, and tools in SOCsAttackers gain system access; SOC teams have only 40 minutes to detect/containAlert overload causes analyst burnout; thousands of low-value alerts overwhelm teams dailyAI inevitable for SOCs to process data, separate false positives from real threatsAgentic systems understand environment, reason through problems, take action without hand-holdingAttack discovery capability reduces hundreds of alerts to 3-4 prioritized threat discoveriesAI provides ROI metrics: processed alerts, filtered noise, hours saved for organizationsRAG (Retrieval Augmented Generation) prevents hallucination by adding enterprise context to LLMsAWS integration uses SageMaker, Bedrock, Anthropic models with Elasticsearch vector database capabilitiesEnd-to-end LLM observability tracks costs, tokens, invocations, errors, and performance bottlenecksJunior analysts detect nation-state attacks; teams shift from reactive to proactive securityFuture requires balancing costs, data richness, sovereignty, model choice, human-machine collaborationParticipants:Gagan Singh – Vice President Product Marketing, ElasticAdditional Links:Elastic – LinkedIn - Website – AWS Marketplace See how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon.com/isv/
Got a question or comment? Message us here!In this episode, we break down the emerging Crypto24 ransomware attacks that use living-off-the-land techniques to bypass EDR. We'll explore how these attacks unfold and the defensive strategies SOCs and organizations can use, like layered security, enhanced monitoring, and rapid response, to stay ahead of evolving threats.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.
Stellar Cyber Revolutionizes SOC Cybersecurity Operations with Human-Augmented Autonomous Platform at Black Hat 2025 A Stellar Cyber Event Coverage of Black Hat USA 2025 Las VegasAn ITSPmagazine Brand Story with Subo Guha, Senior Vice President Product, Stellar Cyber____________________________Security operations centers face an unprecedented challenge: thousands of daily alerts overwhelming analyst teams while sophisticated threats demand immediate response. At Black Hat USA 2025 in Las Vegas, Stellar Cyber presented a revolutionary approach that fundamentally reimagines how SOCs operate in the age of AI-driven threats.Speaking with ITSPmagazine's Sean Martin, Subo Guha, Senior Vice President of Products at Stellar Cyber, outlined the company's vision for transforming security operations through their human-augmented autonomous SOC platform. Unlike traditional approaches that simply pile on more automation, Stellar Cyber recognizes that effective security requires intelligent collaboration between AI and human expertise.The platform's three-layer architecture ingests data from any source – network devices, applications, identities, and endpoints – while maintaining vendor neutrality through open EDR integration. Organizations can seamlessly work with CrowdStrike, SentinelOne, Sophos, or other preferred solutions without vendor lock-in. This flexibility proves crucial for enterprises navigating complex security ecosystems where different departments may have invested in various endpoint protection solutions.What sets Stellar Cyber apart is their autonomous SOC concept, which dramatically reduces alert volume from hundreds of thousands to manageable numbers within days rather than weeks. The platform's AI-driven auto-triage capability identifies true positives among thousands of false alarms, presenting analysts with prioritized "verdicts" that demand attention. This transformation addresses one of security operations' most persistent challenges: alert fatigue that leads to missed threats and burned-out analysts.The revolutionary AI Investigator copilot enables natural language interaction, allowing analysts to query the system conversationally. An analyst can simply ask, "Show me all impossible travel incidents between midnight and 4 AM," and receive actionable intelligence immediately. This democratization of security operations means junior analysts can perform at senior levels without extensive coding knowledge or years of experience navigating complex query languages.Identity threat detection and response (ITDR) emerged as another critical focus area during the Black Hat presentation. With identity becoming the new perimeter, Stellar Cyber integrated sophisticated user and entity behavior analytics (UEBA) directly into the platform. The system detects impossible travel scenarios, credential attacks, and lateral movement patterns that indicate compromise. For instance, when a user logs in from Portland at 11 PM and then appears in Moscow 30 minutes later, the platform immediately flags this physical impossibility.The identity protection extends beyond human users to encompass non-human identities, addressing the growing threat of automated attacks powered by large language models. Hackers now leverage generative AI to create credential attacks at unprecedented scale and sophistication, making robust identity security more critical than ever.Guha emphasized that AI augmentation doesn't displace security professionals but elevates them. By automating mundane tasks, analysts focus on strategic decision-making and complex threat hunting. MSSPs report dramatic efficiency gains, scaling operations without proportionally increasing headcount. Where previously a hundred thousand alerts might take weeks to process, requiring extensive junior analyst teams, the platform now delivers actionable insights within days with smaller, more focused teams.The platform's unified approach eliminates tool sprawl, providing CISOs with real-time visualization of their security posture. Executive reporting becomes instantaneous, with high-priority verdicts clearly displayed for rapid decision-making. This visualization capability transforms how security teams communicate with leadership, replacing lengthy reports with dynamic dashboards that convey risk and response status at a glance.Real-world deployments demonstrate significant operational improvements. Organizations report faster mean time to detection and response, reduced false positive rates, and improved analyst satisfaction. The platform's learning capabilities mean it becomes more intelligent over time, adapting to each organization's unique threat landscape and operational patterns.As organizations face increasingly sophisticated threats powered by generative AI, Stellar Cyber's human-augmented approach represents a paradigm shift. By combining AI intelligence with human intuition, the platform delivers faster threat detection, reduced false positives, and empowered security teams ready for tomorrow's challenges. The company's commitment to continuous innovation, evidenced by rapid feature releases between RSA and Black Hat, positions them at the forefront of next-generation security operations. Learn more about Stellar Cyber: https://itspm.ag/stellar-cyber--inc--357947Note: This story contains promotional content. Learn more.Guest: Subo Guha, Senior Vice President Product, Stellar Cyber | https://www.linkedin.com/in/suboguha/ResourcesLearn more and catch more stories from Stellar Cyber: https://www.itspmagazine.com/directory/stellarcyberLearn more and catch more stories from our Black Hat USA 2025 coverage: https://www.itspmagazine.com/bhusa25Learn more about ITSPmagazine Brand Story Podcasts: https://www.itspmagazine.com/purchase-programsNewsletter Archive: https://www.linkedin.com/newsletters/tune-into-the-latest-podcasts-7109347022809309184/Business Newsletter Signup: https://www.itspmagazine.com/itspmagazine-business-updates-sign-upAre you interested in telling your story?https://www.itspmagazine.com/telling-your-story
The nature of Security Operations is changing. As cloud environments grow in complexity and data volumes explode, traditional approaches to detection and response are proving insufficient. This episode features an in-depth conversation with Kyle Polley, who leads the AI security team at Perplexity, about a modern blueprint for the Security Operations Center (SOC).The discussion centers on a necessary architectural shift away from traditional SIEMs, which were not built for today's scale, toward a "data lake infrastructure built for detection and response". Kyle explains how this model provides the scalability needed to handle modern data loads and enables a more effective incident response process.A cornerstone of this new model is the use of centralized AI agents. The conversation explores how these agents can be tasked with performing in-depth alert investigations, helping to reduce analyst burnout and allowing security teams to focus on more proactive, high-impact work. This approach moves beyond simple automation to create a system where AI augments and enhances the capabilities of the human team.Guest Socials - Kyle's Linkedin Podcast Twitter - @CloudSecPod If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:-Cloud Security Podcast- Youtube- Cloud Security Newsletter - Cloud Security BootCampIf you are interested in AI Cybersecurity, you can check out our sister podcast - AI Cybersecurity PodcastQuestions asked:(00:00) Introduction to Kyle Polley & The Future of SOCs(01:03) The Core Argument: Why You Must Build Your SOC Before Compliance(03:34) Beyond the Certificate: The Difference Between Being Compliant vs. Secure(04:20) Today's #1 AI Threat: The Challenge of Prompt Injection(06:00) The Architectural Flaw: Handling Untrusted Data in AI Systems(08:20) The "Security Data Lake": Moving Beyond the Traditional SIEM(15:00) The Future is Now: A Centralized AI Agent for Automated Investigations(20:06) Will AI Take My Job? How AI Elevates, Not Replaces, the Security Analyst(25:20) Redefining "Shifting Left" with Personal AI Security Agents(31:00) Can AI Reason? How Modern AI Agents Intelligently Query Logs(37:05) Rethinking Incident Response Playbooks in the Age of AI(41:00) The MVP SOC: A Practical Roadmap for Small & Medium Companies(46:08) Final Questions: Maintaining Optimism, Woodworking, and Tex-Mex(50:08) Where to Connect with Kyle PolleyResources spoken about during the episode:Easy Agents: an open-source frameworkHow to give every department their own AI Agent
Got a question or comment? Message us here!On this episode of the #SOCBrief, we break down attacks on SonicWall firewalls. A wave of ransomware, possibly exploiting zero-day vulnerabilities, is compromising even fully patched systems. Learn how SOCs can respond fast and stay ahead.Support the showWatch full episodes at youtube.com/@aliascybersecurity.Listen on Apple Podcasts, Spotify and anywhere you get your podcasts.
NATM network breached and attacked through 4G Raspberry Pi Easterly's appointment to West Point rescinded Report links Chinese companies to tools used by state-sponsored hackers Huge thanks to our sponsor, Dropzone AI Security teams everywhere are drowning in alerts. That's why companies like Zapier and CBTS turned to Dropzone AI—the leader in autonomous alert investigation. Their AI investigates everything, giving your analysts time back for real security work. No more 40-minute rabbit holes. If you're at BlackHat, find them in Startup City. Otherwise, check out their self-guided demo at dropzone.ai. This is how modern SOCs are scaling without burning out. Find the stories behind the headlines at CISOseries.com.
Link to episode page This week's Cyber Security Headlines – Week in Review is hosted by Rich Stroffolino with guest Derek Fisher, Director of the Cyber Defense and Information Assurance Program, Temple University – also check out Derek's substack. Thanks to our show sponsor, Dropzone AI Security teams everywhere are drowning in alerts. That's why companies like Zapier and CBTS turned to Dropzone AI—the leader in autonomous alert investigation. Their AI investigates everything, giving your analysts time back for real security work. No more 40-minute rabbit holes. If you're at BlackHat, find them in Startup City. Otherwise, check out their self-guided demo at dropzone.ai. This is how modern SOCs are scaling without burning out. All links and the video of this episode can be found on CISO Series.com
Oh No! Lenovo You sunk my battleship! Or did you? Russians unable to get a taste of their own medicine Huge thanks to our sponsor, Dropzone AI Security teams everywhere are drowning in alerts. That's why companies like Zapier and CBTS turned to Dropzone AI—the leader in autonomous alert investigation. Their AI investigates everything, giving your analysts time back for real security work. No more 40-minute rabbit holes. If you're at BlackHat, find them in Startup City. Otherwise, check out their self-guided demo at dropzone.ai. This is how modern SOCs are scaling without burning out. Find the stories behind the headlines at CISOseries.com.
In 2025, Asia's cybersecurity landscape is shaped by rapid digitalisation, AI adoption, and evolving regulatory frameworks. Regional authorities, such as Singapore's MAS and South Korea's National AI Committee, are intensifying enforcement and introducing robust regulations for data privacy, AI governance, and cyber risk management. Businesses face mounting threats from ransomware, advanced persistent threats, and supply chain vulnerabilities, driving demand for Cybersecurity-as-a-Service and managed SOCs. Industry reports highlight a widening gap in cyber resilience and stress the need for urgent action to address cyber inequity and enhance recovery capabilities.1. How will evolving AI, cloud security, and data privacy regulations across Asia-Pacific affect CISO's multi-cloud governance and compliance frameworks?2. What strategies can CISOs/organisations adopt to defend against increasingly sophisticated ransomware, supply chain attacks, and network-based intrusions?3. How do CISOs/CIOs secure hybrid and multi-cloud environments effectively, leveraging generative AI tools to automate identity and access management while reducing manual overhead?4. Some say quantum computing is still years away. That said, people are talking about post-quantum cryptography today. Can you share any best practice for implementing quantum-resistant encryption and network security protocols to mitigate emerging quantum computing threats?5. How can CISOs ensure robust security and compliance for AI-powered cloud applications and edge computing infrastructure under diverse data sovereignty laws? How should the CISO work with the CIO and the risk/compliance officers of the organization?6. Recapping what we've covered so far: our topic is Developing a Resilient Cybersecurity Roadmap. Can you offer some recommendations for CISOs and CIOs in developing their resilient cybersecurity roadmap?
In this episode of The New CISO, host Steve Moore speaks with Marius Poskus, Chief Information Security Officer at Glow Financial Services and creator of the Cyber Diaries podcast. Marius shares his journey from physical security into cybersecurity leadership—and how he did it without relying on traditional certifications.Marius reflects on how self-directed learning, mentorship, and a strong personal brand helped him pivot careers and thrive in the FinTech space. He explains why the security industry needs to stop glorifying certifications, how to break in through SOC roles, and what truly makes a candidate stand out in interviews. From coaching new talent to advising startups on go-to-market strategies, Marius emphasizes that attitude and aptitude matter far more than credentials.Key Topics Covered:Why Marius walked away from a career in physical security—and how that experience shaped his cyber pathThe critical difference between certification collecting and real-world skill developmentWhy most entry-level cybersecurity roles are in SOCs—and how to leverage thatHow sharing your learning journey online builds credibility and unlocks job opportunitiesThe two A's that matter most when hiring: attitude and aptitudeCommon mistakes startups make when targeting CISOs and building security toolsThe growing risks of “AI-washing” and what real AI innovation should look likeWhy mentorship only works when mentees are willing to put in the workHow to shift from security awareness “stick” tactics to culture-based collaborationWhat it means to build a personal brand that outlasts your job titleMarius' story proves that cybersecurity success doesn't come from certificates—it comes from curiosity, consistency, and community. Whether you're just starting your career or leading a security team, this episode will inspire you to focus on what really moves the needle.Marius Poskus Podcast - Cyber Diaries Podcast
As Black Hat USA 2025 approaches, the cybersecurity world is buzzing with innovation—and Dropzone AI is right at the center of it. With roots in Seattle and a mission to bring true intelligence into the security operations center (SOC), the Dropzone AI team is gearing up for a packed week in Las Vegas, from BSides to the AI Summit, and finally at Startup City (booth #6427).Founded by Edward Wu, former Head of AI/ML at ExtraHop Networks, Dropzone AI was built on a key realization: the last thing SOCs need is another flood of alerts. Instead, they need help processing and acting on them. That's where Dropzone comes in—offering an AI-powered security analyst that doesn't just detect threats, but investigates, correlates, and takes action.During a recent pre-event chat with ITSPmagazine's Sean Martin and Marco Ciappelli, Edward explained the core philosophy behind the platform. Unlike hype-driven claims of “fully autonomous SOCs,” Dropzone takes a practical, tiered approach to automation. Their agentic AI system performs full investigations, determines the nature of alerts (true vs. false positives), and recommends or executes containment actions depending on risk tolerance and policy.The tech has found particular traction with lean security teams, or those expanding toward 24/7 coverage without adding headcount. Rather than replacing humans, the platform augments them—freeing analysts from the drudgery of low-priority alert triage and giving them space to focus on strategic work. As Edward put it, “Nobody wants to be a tier-one analyst forever.” Dropzone helps make sure they don't have to be.The platform integrates across existing security stacks and data sources, drawing from threat intel, logs, and endpoint signals to build a full picture of every alert. Security teams retain full control, with human-in-the-loop decision-making remaining the standard in most use cases. However, for low-risk assets and off-hours scenarios, some customers are already authorizing autonomous action.With conversations at Black Hat expected to revolve around the reality of AI in production—not just the vision—Dropzone is entering the perfect arena. From demonstrating real-world impact to sharing insights on agentic design and trust boundaries, their presence will resonate with everyone from analysts to CISOs.Whether you're building out your SOC, questioning your MDR provider, or simply overwhelmed with alert fatigue, this may be your signal. Dropzone AI isn't selling buzzwords. They're delivering results. Visit them at Startup City, booth #6427, and see for yourself what the future of alert triage and SOC efficiency looks like—one investigation at a time. Note: This story contains promotional content. Learn more.Guests:Edward Wu, Founder/CEO at Dropzone AI On LinkedIn: https://www.linkedin.com/in/edwardxwu/DROPZONE AI: https://itspm.ag/dropzoneai-641Hosts:Sean Martin, Co-Founder at ITSPmagazine | Website: https://www.seanmartin.comMarco Ciappelli, Co-Founder at ITSPmagazine | Website: https://www.marcociappelli.com______________________ResourcesVisit the DROPZONE Website to learn more: https://itspm.ag/dropzoneai-641Learn more and catch more stories from Dropzone on ITSPmagazine: https://www.itspmagazine.com/directory/dropzoneaiLearn more about ITSPmagazine Brand Story Podcasts: https://www.itspmagazine.com/purchase-programsNewsletter Archive: https://www.linkedin.com/newsletters/tune-into-the-latest-podcasts-7109347022809309184/Business Newsletter Signup: https://www.itspmagazine.com/itspmagazine-business-updates-sign-upAre you interested in telling your story?https://www.itspmagazine.com/telling-your-story
Got a question or comment? Message us here!In this week's #SOCBrief, we break down why offboarding policies are ABSOLUTELY critical for security teams. Overlooked items from abandoned accounts to old VPN access can leave backdoors wide open. Learn how SOCs monitor, contain, and shut down lingering access, and why communication between HR, IT, and cybersecurity is essential.
In this episode, we welcome Vineet Ganju, VP of Wireless Connectivity at Synaptics, to the show to discuss Wi-Fi 7 and AI. Vineet talks about how Wi-Fi 7's low latency and high throughput enables applications like immersive AR/VR, factory automation, and next-generation smart home applications. We explore how AI is reshaping connectivity, from efficient network management and enhanced security to local troubleshooting that simplifies setup. We also discuss the integration of Wi-Fi, Bluetooth, Thread, and Zigbee into compact chipsets and the evolution of SoCs that unlock a new level of connectivity. Tune in to learn how Wi-Fi 7 and AI are fueling the future of connected experiences.For Wi-Fi AllianceFor Membership InfoGeneral Contact
David Greenwood, Product at Sekoia, joins host Charlie Osborne to discuss SOC leadership in the age of AI agents, including how they differ from traditional automation practices, best management practices, and more. This episode was brought to you by Sekoia. Leading the way in detection and response solutions for modern SOCs, Sekoia offers businesses and public organizations the best protection technologies against cyber threats. Learn more at https://sekoia.io.
Drawing from his experience building enterprise SOCs and teaching thousands of security professionals, John Hubbard, Cyber Defense Curriculum Lead at SANS Institute and host of the Blueprint podcast, tells Jack about how AI is revolutionizing security operations centers, including balancing AI automation with fundamental analyst skills. They also explore practical AI applications in alert contextualization, team performance analysis, and the future vision of natural language interfaces for complex security tasks. John emphasizes the importance of teaching both traditional methods and AI-enhanced approaches, ensuring security teams can leverage technology while maintaining critical thinking capabilities. He also discusses considerations around local versus cloud-based AI models and offers actionable advice for security professionals looking to future-proof their careers in an increasingly automated landscape. Topics discussed: How AI transforms alert contextualization by dynamically incorporating business context and asset information for better triage decisions. The educational challenge of teaching both foundational security methods and AI-enhanced approaches to maintain analyst skills. Practical applications of AI in SOC operations, including automated phishing triage and mass analysis of analyst performance data. The evolution toward natural language interfaces that could enable complex security tasks like packet analysis through conversational commands. Custom agent development versus relying on vendor-provided AI solutions, including the technical challenges and coding requirements involved. Future SOC architecture predictions featuring interconnected agents, MCP protocols, and the abstraction of traditional security analyst tasks. Local versus cloud-based AI model considerations, including data privacy concerns, computational requirements, and trust implications. The critical question of oversight in automated security operations and who monitors AI agents in increasingly autonomous systems. Performance analysis capabilities enabled by AI's ability to process written text and logs at scale for team improvement insights. Practical advice for security professionals to embrace discomfort, invite AI into problem-solving, and establish mentoring relationships for career growth. Listen to more episodes: Apple Spotify YouTube Website
Join G Mark Hardy and Carson Zimmerman, the author of '11 Strategies of a World-Class Cybersecurity Operations Center,' in this insightful episode of CISO Tradecraft. Carson shares his career journey, the evolution from the 10 to 11 strategies, and delves into the future needs of Security Operations Centers (SOCs). They discuss critical topics such as the importance of continuous improvement, AI's impact on SOCs, and the value of embracing neurodiversity in cybersecurity teams. Whether you're a seasoned cybersecurity leader or an aspiring professional, get actionable advice on how to enhance and revolutionize your SOC operations. 11 Strategies of a World Class Cybersecurity Operations Center https://www.mitre.org/sites/default/files/2022-04/11-strategies-of-a-world-class-cybersecurity-operations-center.pdf 14 Questions are all you need - https://www.first.org/resources/papers/conf2024/1445-14-Questions-Carson-Zimmerman.pdf Transcripts - https://docs.google.com/document/d/1WVJi9WkxOG7yedQYWSooiqRFjBERd9kV Chapters 00:00 Introduction and Guest Welcome 00:53 Background and Book Discussion 03:33 SOC Challenges and Stagnation 06:10 Managing SOC Alerts and Burnout 09:26 SOC Evolution and Neurodiversity 23:50 Career Progression in Cybersecurity 30:28 Impact of AI on SOC Operations 40:07 Final Thoughts and Conclusion
Join G Mark Hardy and Carson Zimmerman, the author of '11 Strategies of a World-Class Cybersecurity Operations Center,' in this insightful episode of CISO Tradecraft. Carson shares his career journey, the evolution from the 10 to 11 strategies, and delves into the future needs of Security Operations Centers (SOCs). They discuss critical topics such as the importance of continuous improvement, AI's impact on SOCs, and the value of embracing neurodiversity in cybersecurity teams. Whether you're a seasoned cybersecurity leader or an aspiring professional, get actionable advice on how to enhance and revolutionize your SOC operations. 11 Strategies of a World Class Cybersecurity Operations Center https://www.mitre.org/sites/default/files/2022-04/11-strategies-of-a-world-class-cybersecurity-operations-center.pdf 14 Questions are all you need - https://www.first.org/resources/papers/conf2024/1445-14-Questions-Carson-Zimmerman.pdf Transcripts - https://docs.google.com/document/d/1WVJi9WkxOG7yedQYWSooiqRFjBERd9kV Chapters 00:00 Introduction and Guest Welcome 00:53 Background and Book Discussion 03:33 SOC Challenges and Stagnation 06:10 Managing SOC Alerts and Burnout 09:26 SOC Evolution and Neurodiversity 23:50 Career Progression in Cybersecurity 30:28 Impact of AI on SOC Operations 40:07 Final Thoughts and Conclusion
Click here to send us your ideas and feedback on Blueprint!In this episode of Blueprint, host John Hubbard sits down with James Spiteri from Elastic to explore the transformative power of AI on the SOC. They delve into how advanced AI technologies, such as agentic AI models, MCP protocol, and automation, are reshaping the SOC landscape. Discover how AI enhances SOC efficiency, reduces mundane tasks, and integrates context-aware capabilities. Learn about the real-world applications, from automation in cybersecurity operations to the challenges and promises of large language models. This discussion covers the ethical considerations, potential risks, and the promising future of SOCs powered by AI. Tune in to get inspired and see how AI might revolutionize your cyber defense strategies.Check out John's SOC Training Courses for SOC Analysts and Leaders: SEC450: Blue Team Fundamentals - Security Operations and Analysis LDR551: Building and Leader Security Operations Centers Follow and Connect with John: LinkedIn
In this episode of the Semiconductor Insiders video series, Dan is joined by Chouki Aktouf, CEO and Founder of Defacto Technologies. Dan explores the challenges of building complex SoCs with Chouki, who describes challenges around managing complexity at the front end of the process while staying within PPA requirements and … Read More
Chris and Elecia talk about Murderbot, LLMs (AI), bikes, control algorithms, and fancy math. The website with the ecology jobs is wildlabs.net from 501: inside the Armpit of Giraffe with Meredith Palmer and Akiba.. The algorithm Elecia mentioned was from Patent US7370713B1. The Control Bootcamp YouTube series is a great introduction to control systems beyond PIDs There is also a book from the same folks (with matlab and some python code): Data-Driven Science and Engineering: Machine Learning, Dynamical Systems, and Control. Finding bad AI interactions is too easy. Copilot PR mess that was discussed. Lawyers letting ChatGPT hallucinate precedents. Fake (hallucinated) citations in a high-profile report on children's health. Transcript Nordic Semiconductor has been the driving force for Bluetooth Low Energy MCUs and wireless SoCs since the early 2010s, and they offer solutions for low-power Wi-Fi and global Cellular IoT as well. If you plan on developing robust and battery-operated applications, check out their hardware, software, tools, and services. On academy.nordicsemi.com, you'll find Bluetooth, Wi-Fi, and cellular IoT courses, and the Nordic DevZone community covers technical questions: devzone.nordicsemi.com. Congratulations to the giveaway winners!
Erik Bloch, security operations expert and longtime infosec leader, joins the show to talk about the real problems plaguing SOCs and why the industry keeps missing the mark!George K and George A talk to Erik about:- The massive disconnect between what vendors think SOCs do vs. reality - spoiler alert: most founders have never worked in the trenches- Why we're still fighting the same problems from 20 years ago - false positives aren't even 10% of the actual work, so why do we keep obsessing over them?- The real burnout formula: high responsibility + low control + endless busywork that has nothing to do with catching bad guys- Business alignment that actually works: Stop talking about theoretical $48 bazillion losses and start tying security outcomes to actual business growthWhether you're a vendor or an executive leader, there's gold -- and data! -- in this episode. The "AI will solve everything" narrative is misleading, hear what actually works in security operations!------------
Komathi Sundaram spoke with us about her enthusiasm for tests and test automation. We talked about the different joys of testing vs. development, setting up CI servers, and different kinds of tests including unit, hardware-in-the-loop, and simulation. It may sound dry but we had a lot of fun. Komathi's site is TheKomSea.com which hosts her blog as well as contact info. She will be speaking on automated hardware in the loop test processes at the Embedded Online Conference. Transcript Nordic Semiconductor has been the driving force for Bluetooth Low Energy MCUs and wireless SoCs since the early 2010s, and they offer solutions for low-power Wi-Fi and global Cellular IoT as well. If you plan on developing robust and battery-operated applications, check out their hardware, software, tools, and services. On academy.nordicsemi.com, you'll find Bluetooth, Wi-Fi, and cellular IoT courses, and the Nordic DevZone community covers technical questions: devzone.nordicsemi.com. Oh, and don't forget to enter Nordic Semiconductor's giveaway contest! Just fill out the entrance form, and you're in the running. Good luck!
Today on the Social-Engineer Podcast: The Security Awareness Series, Chris is joined by Travis Farral. Travis has been working in information security since the 90s at places such as Nokia, ExxonMobil, and XTO Energy. He is currently VP & CISO at Archaea Energy, a bp owned, renewable natural gas company based in Houston, Texas. He has spoken at events around world on topics such as Cyber Threat Intelligence, MITRE ATT&CK, and Incident Response. Notable activities during his career include everything from programming logic controllers, building and leading SOCs, driving forklifts, standing up cybersecurity teams, developing threat intelligence programs, and handling responses to incidents, among many other things over the last few decades. [April 21, 2025] 00:00 - Intro 00:18 - Intro Links: - Social-Engineer.com - http://www.social-engineer.com/ - Managed Voice Phishing - https://www.social-engineer.com/services/vishing-service/ - Managed Email Phishing - https://www.social-engineer.com/services/se-phishing-service/ - Adversarial Simulations - https://www.social-engineer.com/services/social-engineering-penetration-test/ - Social-Engineer channel on SLACK - https://social-engineering-hq.slack.com/ssb - CLUTCH - http://www.pro-rock.com/ - innocentlivesfoundation.org - http://www.innocentlivesfoundation.org/ 02:08 - Travis Farral Intro 02:58 - A Different Path than Today 05:25 - Healthy Hacking 08:08 - Anything Can Be Weaponized 10:54 - Questionable Behavior 14:31 - Smash That Report Button!!! 18:58 - Improving Our Odds 21:00 - You Have to Keep It Simple 22:25 - Letters to a Young CISO 24:20 - Find Travis Farral online - LinkedIn: linkedin.com/in/travisfarral 25:01 - Mentors - Shawn Edwards - Jay Leek 27:02 - Book Recommendations - R. E. Lee: A Biography - Douglas Southall Freeman 29:34 - Wrap Up & Outro - www.social-engineer.com - www.innocentlivesfoundation.org
Dan is joined by Marc Evans, director of business development and technology at Andes. Marc has over twenty years of experience in the use of CPU, DSP, and Specialized IP in SoCs from his prior positions at Lattice Semiconductor, Ceva, and Tensilica. During his early career, Marc was a processor architect, making significant contributions… Read More
At the end of this week's show, Elecia reads a Winnie the Pooh poem as Cookie Monster death metal. Before that, Chris and Elecia chat about mental health, journaling, personal projects, and listener questions. Please sign up for the Nordic Giveaway! You can also sign up for the Embedded newsletter. Maybe now with job postings? Elecia's journaling notebook is this one on JetPens (which is where she gets her nice pens and some of her stickers and washi tape). From discussing some listener messages, we mentioned: Matt Keeter's talk on debuggability in production where you don't have access to the system that is faulting (video and slides) Letter boards (in the Adirondacks), see those in action here Wokwi simulator is a great place to get more embedded experience without buying all the kits. Christopher has said that there will not, definitely not, under any circumstances, be a whole death metal album of Winnie the Pooh poems. Elecia is practicing anyway. Transcript Nordic Semiconductor has been the driving force for Bluetooth Low Energy MCUs and wireless SoCs since the early 2010s, and they offer solutions for low-power Wi-Fi and global Cellular IoT as well. If you plan on developing robust and battery-operated applications, check out their hardware, software, tools, and services. On academy.nordicsemi.com, you'll find Bluetooth, Wi-Fi, and cellular IoT courses, and the Nordic DevZone community covers technical questions: devzone.nordicsemi.com. Oh, and don't forget to enter Nordic Semiconductor's giveaway contest! Just fill out the entrance form, and you're in the running. Good luck!
In this videocast, KuppingerCole Analysts' Senior Analyst Warwick Ashford is joined by Prakash Sinha, Senior Director and Technology Evangelist at Radware, to explore how security teams can drive Mean Time To Resolution (MTTR) close to zero. As AI-powered attacks increase in sophistication and frequency, security operations centers (SOCs) must evolve by leveraging automation and AI-driven incident response. Prakash shares insights on how AI can enhance threat detection, automate remediation, and reduce analyst workloads while maintaining governance and accountability. Discover practical steps for implementing AI-assisted security and the key success factors for modernizing SOCs in the face of an ever-changing threat landscape.
Professor Cindy Harnett spoke to us about new and different sensors and actuators, primarily designed for soft robotics and fabricated with relatively low cost materials. Cindy is a professor of electrical and computer engineering at the University of Louisville where she runs the Harnett Lab. The papers we discussed are here. You can find a longer list of Cindy's papers on Google Scholar. The video of the SESAME actuator is especially interesting. Transcript Nordic Semiconductor has been the driving force for Bluetooth Low Energy MCUs and wireless SoCs since the early 2010s, and they offer solutions for low-power Wi-Fi and global Cellular IoT as well. If you plan on developing robust and battery-operated applications, check out their hardware, software, tools, and services. On academy.nordicsemi.com, you'll find Bluetooth, Wi-Fi, and cellular IoT courses, and the Nordic DevZone community covers technical questions: devzone.nordicsemi.com. Oh, and don't forget to enter Nordic Semiconductor's giveaway contest! Just fill out the entrance form, and you're in the running. Good luck!
Suresh Vasudevan, CEO of Sysdig, discusses the evolving challenges of cloud security incident response and the need for new approaches to mitigate organizational risk.Topics Include:Cybersecurity regulations mandate incident response reporting.Challenges of cloud breach detection and response.Complex cloud attack patterns: reconnaissance, lateral movement, exploit.Rapid exploitation - minutes vs. days for on-prem.Importance of runtime, identity, and control plane monitoring.Limitations of EDR and SIEM tools for cloud.Coordinated incident response across security, DevOps, executives.Criticality of pre-defined incident response plans.Increased CISO personal liability risk and mitigation.Documenting security team's diligence to demonstrate due care.Establishing strong partnerships with legal and audit teams.Covering defensive steps in internal communications.Sysdig's cloud-native security approach and Falco project.Balancing prevention, detection, and response capabilities.Integrating security tooling with customer workflows and SOCs.Providing 24/7 monitoring and rapid response services.Correlating workload, identity, and control plane activities.Detecting unusual reconnaissance and lateral movement behaviors.Daisy-chaining events to identify potential compromise chains.Tracking historical identity activity patterns for anomaly detection.Aligning security with business impact assessment and reporting.Adapting SOC team skills for cloud-native environments.Resource and disruption cost concerns for cloud agents.Importance of "do no harm" philosophy for response.Enhancing existing security data sources with cloud context.Challenges of post-incident forensics vs. real-time response.Bridging security, DevOps, and executive domains.Establishing pre-approved incident response stakeholder roles.Maintaining documentation to demonstrate proper investigation.Evolving CISO role and personal liability considerations.Proactive management of cyber risk at board level.Developing strong general counsel and audit relationships.Transparency in internal communications to avoid discovery risks.Security teams as business partners, not just technicians.Sysdig's cloud security expertise and open-source contributions.Participants:· Suresh Vasudevan – CEO, SysdigSee how Amazon Web Services gives you the freedom to migrate, innovate, and scale your software company at https://aws.amazon/isv/
Elecia and Chris talk with each other about the state of Chris' mind, what makes an embedded developer stand out, “LEGO block” based design, unit tests, and astronomy. Whew! Elecia was recently on the Changelog podcast, talking about the world of embedded systems. Chris has been working with Micropython (we talked with Damien George about Micropython on episode 456). He's using a Pyboard to start, but is looking to move on to this board from Sparkfun. Wikipedia has a nice reference on what the pulse-per-second signal is all about. Elecia talked about her experience using CFFI to drive unit tests. She also talked about some facts from Information is Beautiful. Chris' telescope is the ZWO Seestar S50. There's also a smaller Seestar S30 now which has a wider field-of-view. Title reference (Chris and Elecia both thoroughly enjoyed The Good Place, the TV show this is taken from.) Transcript Nordic Semiconductor has been the driving force for Bluetooth Low Energy MCUs and wireless SoCs since the early 2010s, and they offer solutions for low-power Wi-Fi and global Cellular IoT as well. If you plan on developing robust and battery-operated applications, check out their hardware, software, tools, and services. On academy.nordicsemi.com, you'll find Bluetooth, Wi-Fi, and cellular IoT courses, and the Nordic DevZone community covers technical questions: devzone.nordicsemi.com. Oh, and don't forget to enter Nordic Semiconductor's giveaway contest! Just fill out the entrance form, and you're in the running. Good luck! Here's one of the astrophotos Chris has taken: The Horsehead and Flame nebulae in Orion taken from a Seestar S50
The cast & creatives from the Tony Award winning musical “The Outsiders” join us to perform a song and discuss the beloved story that defined a generation, reimagined as a groundbreaking new musical. In Tulsa, Oklahoma, 1967, Ponyboy Curtis, his best friend Johnny Cade, and their greaser family of ‘Outsiders' battle with their affluent rivals, the Socs. “The Outsiders” navigates the complexities of self-discovery as the Greasers dream about who they want to become in a world that may never accept them. With a dynamic original score, “The Outsiders” is a story of friendship, family, belonging, and the realization that there is still “lots of good in the world.” Visit http://youtube.com/TalksAtGoogle/ to watch the video.
Nikolaus Correll spoke with us about robots, teaching robotics, and writing books about robots. Nikolaus is a Professor of Computer Science at the University of Colorado, see his lab website (or his Wikipedia page). We discussed Nikolaus' Introduction to Robotics with Webots Specialization Coursera course (or YouTube Playlist). These go along with his Introduction to Autonomous Robots (which can be compiled from source from github). Masters of Computer Science online via University of Colorado and Georgia Tech. While the Arcbotics Sparki is no longer in production, Nikolaus also mentioned the Amazon Racer. Transcript Nordic Semiconductor has been the driving force for Bluetooth Low Energy MCUs and wireless SoCs since the early 2010s, and they offer solutions for low-power Wi-Fi and global Cellular IoT as well. If you plan on developing robust and battery-operated applications, check out their hardware, software, tools, and services. On academy.nordicsemi.com, you'll find Bluetooth, Wi-Fi, and cellular IoT courses, and the Nordic DevZone community covers technical questions: devzone.nordicsemi.com. Oh, and don't forget to enter Nordic Semiconductor's giveaway contest! Just fill out the entrance form, and you're in the running. Good luck!
© 2020-2025 Ivy Podcast Discovery LLC
